Function at 0x4aa395
Capabilities:
Enumerate files on windows
Enumerate files recursively
Read .ini file

Disassembly:
push 0xaa0
mov eax, 0x562b78
call fcn.00539a44
mov esi, dword [ebp + 8]
xor eax, eax
mov edi, 0x206
push edi
push eax
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push eax
mov dword [ebp - 0xa8c], ecx
mov dword [ebp - 0xa88], esi
call fcn.00537010
add esp, 0xc
push esi
mov ebx, 0x103
lea eax, [ebp - 0x420]
push ebx
push eax
call fcn.00532a01
add esp, 0xc
push 0x588e08
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov eax, dword [ebp - 0xa8c]
push dword [eax + 4]
lea eax, [ebp - 0xa80]
push eax
call fcn.004a78a5
lea eax, [ebp - 0x878]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xaa4], eax
cmp eax, 0xffffffff
je 0x4aa7af
cmp dword [ebp - 0x878], 0x10
jne 0x4aa597
mov ecx, 0x583f04
lea eax, [ebp - 0x84c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4aa470
test dx, dx
je 0x4aa46c
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4aa470
add eax, 4
add ecx, 4
test dx, dx
jne 0x4aa44a
xor eax, eax
jmp 0x4aa475
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4aa788
mov ecx, 0x583f08
lea eax, [ebp - 0x84c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4aa4ae
test dx, dx
je 0x4aa4aa
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4aa4ae
add eax, 4
add ecx, 4
test dx, dx
jne 0x4aa488
xor eax, eax
jmp 0x4aa4b3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4aa788
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpIW]
push str.data
lea eax, [ebp - 0x84c]
push eax
call esi
test eax, eax
je 0x4aa788
push str.update
lea eax, [ebp - 0x84c]
push eax
call esi
test eax, eax
je 0x4aa788
push 0x57dd80
lea eax, [ebp - 0x84c]
push eax
call esi
test eax, eax
je 0x4aa788
push 0x583d20
lea eax, [ebp - 0x84c]
push eax
call esi
test eax, eax
je 0x4aa788
push str.newbrowser
lea eax, [ebp - 0x84c]
push eax
call esi
test eax, eax
je 0x4aa788
xor eax, eax
push edi
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00537010
add esp, 0xc
lea eax, [ebp - 0x84c]
push eax
push dword [ebp - 0xa88]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x4aa56c
sub eax, edx
sar eax, 1
je 0x4aa788
mov ecx, dword [ebp - 0xa8c]
lea eax, [ebp - 0x218]
push eax
call fcn.004aa395
jmp 0x4aa788
inc dword [0x5e0c98]
cmp dword [0x5e0c98], 0x1388
ja 0x4aa7a3
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0xaa0]
push eax
call fcn.00408273
and dword [ebp - 4], 0
lea eax, [ebp - 0xaa0]
call fcn.00429b8d
mov eax, dword [ebp - 0xa8c]
lea ecx, [ebp - 0xaa0]
push ecx
lea ecx, [ebp - 0xaac]
add eax, 8
push ecx
push eax
mov dword [ebp - 0xa94], eax
call fcn.0045462e
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.00408273
lea eax, [ebp - 0xa90]
mov byte [ebp - 4], 1
call fcn.00429b8d
mov dword [ebp - str..dll], 0x5bba18
mov eax, dword [ebp - 0xa84]
push dword [eax]
xor ecx, ecx
lea esi, [ebp - 0xa90]
call fcn.00429b5a
cmp eax, 0xffffffff
jne 0x4aa7b7
add dword [ebp - 0xa84], 4
cmp dword [ebp - 0xa84], 0x5bba20
jl 0x4aa61e
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xa90]
add eax, 0xfffffff0
call fcn.00407d09
xor eax, eax
push edi
push eax
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push eax
call fcn.00537010
add esp, 0xc
lea eax, [ebp - 0x84c]
push eax
push dword [ebp - 0xa88]
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov edi, 0x61a
push edi
call fcn.0052fe0a
pop ecx
push edi
mov esi, eax
push 0
push esi
mov dword [ebp - 0xa84], esi
call fcn.00537010
add esp, 0xc
lea eax, [ebp - 0x84c]
push eax
mov edi, 0x57cb68
push edi
push ebx
push esi
mov byte [esi + 0x618], 0
call fcn.00532a01
push dword [ebp - 0xa88]
lea eax, [esi + 0x208]
push edi
push ebx
push eax
call fcn.00532a01
add esp, 0x20
lea ecx, [ebp - 0xa80]
push ecx
push 0x102
lea eax, [esi + 0x410]
push eax
push 0x577458
push str.version
lea eax, [ebp - 0x84c]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0xa84]
push eax
mov eax, dword [ebp - 0xa8c]
add eax, 0x28
mov byte [esi + 0x618], 0
call fcn.004aa0e3
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0xa9c]
push eax
call fcn.00408273
lea eax, [ebp - 0xa9c]
mov byte [ebp - 4], 3
call fcn.00429b8d
lea eax, [ebp - 0xa9c]
push eax
push dword [ebp - 0xa94]
call fcn.00470376
mov dword [eax], esi
mov eax, dword [ebp - 0xa9c]
add eax, 0xfffffff0
call fcn.00407d09
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xaa0]
add eax, 0xfffffff0
call fcn.00407d09
mov edi, 0x206
lea eax, [ebp - 0x878]
push eax
push dword [ebp - 0xaa4]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4aa432
push dword [ebp - 0xaa4]
call dword [sym.imp.KERNEL32.dll_FindClose]
call fcn.00539ac7
ret 4
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xa90]
add eax, 0xfffffff0
call fcn.00407d09
xor eax, eax
push edi
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00537010
add esp, 0xc
lea eax, [ebp - 0x84c]
push eax
push dword [ebp - 0xa88]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov edi, 0x61a
push edi
call fcn.0052fe0a
pop ecx
push edi
mov esi, eax
push 0
push esi
mov dword [ebp - 0xa84], esi
call fcn.00537010
add esp, 0xc
lea eax, [ebp - 0x84c]
push eax
mov edi, 0x57cb68
push edi
push ebx
push esi
call fcn.00532a01
push dword [ebp - 0xa88]
lea eax, [esi + 0x208]
push edi
push ebx
push eax
call fcn.00532a01
add esp, 0x20
add esi, 0x410
lea edi, [ebp - 0x218]
call fcn.00496756
mov esi, dword [ebp - 0xa84]
lea eax, [ebp - 0xa84]
push eax
mov eax, dword [ebp - 0xa8c]
add eax, 0x28
mov byte [esi + 0x618], 1
call fcn.004aa0e3
mov eax, edi
push eax
lea eax, [ebp - 0xa98]
push eax
call fcn.00408273
lea eax, [ebp - 0xa98]
mov byte [ebp - 4], 2
call fcn.00429b8d
lea eax, [ebp - 0xa98]
push eax
push dword [ebp - 0xa94]
call fcn.00470376
mov dword [eax], esi
mov eax, dword [ebp - 0xa98]
jmp 0x4aa769