Function at 0x41585f
Capabilities:
Enumerate files on windows
Read .ini file

Disassembly:
mov eax, 0x467620
call fcn.00466f40
push ecx
mov eax, 0x252c
call fcn.00466f70
push ebx
push esi
push edi
mov ebx, 0x103
mov dword [ebp - 0x10], esp
push 0
lea eax, [ebp - 0x880]
push ebx
push eax
mov esi, ecx
push dword [0x49a558]
mov dword [ebp - 0x18], esi
call fcn.0044ddca
add esp, 0x10
lea eax, [ebp - 0x880]
push 0x40b488
push eax
push 0x40b294
lea eax, [ebp - 0xa88]
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
mov eax, dword [esi + 0x8ac]
mov edx, dword [esi + 0x8a8]
and word [ebp - 0x882], 0
lea ecx, [esi + 0x8a4]
add esp, 0x14
push eax
push edx
call fcn.004163fe
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
mov ecx, 0x62b
xor eax, eax
lea edi, [ebp - 0x2334]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2334]
push 0x40b460
push eax
call esi
lea eax, [ebp - 0x1f24]
push 0x40b41c
push eax
call esi
lea eax, [ebp - 0x212c]
push 0x40b3fc
push eax
call esi
lea eax, [ebp - 0xedc]
push 0x40b3f4
push eax
call esi
add esp, 0x20
lea eax, [ebp - 0x253c]
push 0x104
push eax
push dword [0x49a558]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x253c]
push eax
push 0x40b3c8
lea eax, [ebp - 0xc94]
push ebx
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
lea eax, [ebp - 0x2334]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x8a4]
call fcn.004163ed
and dword [ebp - 4], 0
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0xa88]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x14], eax
je 0x415c4e
mov edi, dword [sym.imp.MSVCRT.dll_wcscmp]
lea eax, [ebp - 0x444]
push 0x40b3c4
push eax
call edi
pop ecx
test eax, eax
pop ecx
je 0x415c2d
lea eax, [ebp - 0x444]
push 0x40b3bc
push eax
call edi
pop ecx
test eax, eax
pop ecx
je 0x415c2d
test byte [ebp - 0x470], 0x10
je 0x415c2d
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x880]
push eax
push 0x40b394
lea eax, [ebp - 0x678]
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
mov ax, word [0x469bb8]
mov ecx, 0x81
mov word [ebp - 0x220], ax
xor eax, eax
lea edi, [ebp - 0x21e]
and word [ebp - 0x472], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x62b
xor eax, eax
lea edi, [ebp - 0x2334]
add esp, 0x14
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x444]
push eax
push 0x40b0c0
lea eax, [ebp - 0xe9c]
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
and word [ebp - 0xc96], 0
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x220]
push eax
call esi
add esp, 0x18
lea eax, [ebp - 0x220]
push ebx
push eax
lea eax, [ebp - 0x678]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.0044dd66
pop ecx
test eax, eax
pop ecx
je 0x415c2d
lea eax, [ebp - 0x220]
push eax
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea eax, [ebp - 0x220]
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push eax
lea eax, [ebp - 0x2334]
push ebx
push eax
lea eax, [ebp - 0x2334]
push eax
push 0x40b388
push 0x40b378
call edi
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x212c]
push ebx
push eax
push 0x469bb8
push 0x40b368
push 0x40b378
call edi
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x1f24]
push 0x823
push eax
push 0x469bb8
push 0x40b358
push 0x40b378
call edi
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0xedc]
push 0x1f
push eax
push 0x469bb8
push 0x40b348
push 0x40b378
call edi
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x880]
push eax
push 0x40b31c
lea eax, [ebp - 0xc94]
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
and word [ebp - 0xa8e], 0
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x678]
push eax
call esi
add esp, 0x1c
lea eax, [ebp - 0xc94]
push ebx
push eax
lea eax, [ebp - 0x678]
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov edi, dword [sym.imp.MSVCRT.dll_wcslen]
lea eax, [ebp - 0x2334]
push eax
call edi
test eax, eax
pop ecx
jne 0x415bc1
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x2334]
push eax
call esi
pop ecx
pop ecx
lea eax, [ebp - 0x212c]
push eax
call edi
test eax, eax
pop ecx
jne 0x415bdf
lea eax, [ebp - 0x212c]
push 0x40b2d8
push eax
call esi
pop ecx
pop ecx
lea eax, [ebp - 0xedc]
push eax
call edi
test eax, eax
pop ecx
jne 0x415bfd
lea eax, [ebp - 0xedc]
push 0x40b2d8
push eax
call esi
pop ecx
pop ecx
lea eax, [ebp - 0xc94]
push 0
push eax
call fcn.0044dd66
pop ecx
test eax, eax
pop ecx
jne 0x415c18
and word [ebp - 0xc94], ax
lea eax, [ebp - 0x2334]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x8a4]
call fcn.004163ed
lea eax, [ebp - 0x470]
push eax
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4159a1
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret