Function at 0x420340
Capabilities:
Enumerate files on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x89c
mov eax, dword [0x46af24]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
push 0x206
xor esi, esi
lea ecx, [ebp - 0x412]
xor eax, eax
push esi
push ecx
mov dword [ebp - 0x88c], edi
mov word [ebp - 0x414], ax
call sub.MSVCR100.dll_memset
push 0x206
lea eax, [ebp - 0x20a]
xor edx, edx
push esi
push eax
mov word [ebp - 0x20c], dx
call sub.MSVCR100.dll_memset
add esp, 0x18
mov dword [ebp - 0x888], esi
mov dword [ebp - 0x890], esi
mov dword [ebp - 0x894], esi
cmp dword [ebp + 0x10], esi
jge 0x4203c7
cmp dword [ebp + 0x14], esi
jge 0x4203c7
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004534b8
mov esp, ebp
pop ebp
ret
push ebx
push 0x459e04
push edi
push str._s._s
lea ecx, [ebp - 0x414]
push 0x104
push ecx
call dword [sym.imp.MSVCR100.dll_swprintf_s]
add esp, 0x14
lea edx, [ebp - 0x674]
push edx
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ebx, eax
mov edi, edi
cmp ebx, 0xffffffff
je 0x420583
mov ecx, 0x460ed8
lea eax, [ebp - 0x648]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42043a
cmp dx, si
je 0x420436
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42043a
add eax, 4
add ecx, 4
cmp dx, si
jne 0x420414
xor eax, eax
jmp 0x42043f
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, esi
je 0x42056b
mov ecx, 0x461018
lea eax, [ebp - 0x648]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x420478
cmp dx, si
je 0x420474
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x420478
add eax, 4
add ecx, 4
cmp dx, si
jne 0x420452
xor eax, eax
jmp 0x42047d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, esi
je 0x42056b
test byte [ebp - 0x674], 0x10
je 0x42049a
lea ecx, [ebp - 0x674]
push ecx
jmp 0x420572
lea edx, [ebp - 0x648]
push edx
push edi
push str._s_s
lea eax, [ebp - 0x20c]
push 0x104
push eax
call dword [sym.imp.MSVCR100.dll_swprintf_s]
mov esi, dword [ebp + 0xc]
add esp, 0x14
test esi, esi
js 0x4204ec
lea ecx, [ebp - 0x20c]
push ecx
push 0xffffffffffffffff
push str.ReportType
push str.REPORT
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
cmp eax, esi
je 0x4204ec
lea edx, [ebp - 0x674]
push edx
jmp 0x420572
mov esi, dword [ebp - 0x660]
mov edi, dword [ebp - 0x65c]
push 0x210
lea eax, [ebp - 0x884]
push 0
push eax
call sub.MSVCR100.dll_memset
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x87c]
push 0x104
push edx
call dword [sym.imp.MSVCR100.dll_wcscpy_s]
push 0x210
lea eax, [ebp - 0x884]
push eax
lea ecx, [ebp - 0x888]
push ecx
mov dword [ebp - 0x884], esi
mov dword [ebp - 0x880], edi
call fcn.00421580
add esp, 0x24
test eax, eax
je 0x4205b9
inc dword [ebp - 0x894]
lea edx, [ebp - 0x674]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov edi, dword [ebp - 0x88c]
jmp 0x420579
lea eax, [ebp - 0x674]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
xor esi, esi
cmp eax, esi
jne 0x420400
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x41f800
lea ecx, [ebp - 0x888]
push 1
push ecx
mov dword [ebp - 0x88c], esi
call fcn.00421460
add esp, 0xc
test eax, eax
jne 0x4205c8
mov dword [ebp - 0x890], 0xfffffffc
jmp 0x420681
mov dword [ebp - 0x890], 0xfffffffd
jmp 0x420687
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp - 0x888]
test eax, eax
js 0x420606
cmp dword [ebp - 0x894], eax
jl 0x420681
test eax, eax
jle 0x4205eb
dec eax
mov esi, dword [esi + 4]
jne 0x4205e5
test esi, esi
je 0x420606
nop
mov edx, dword [esi + 8]
add edx, 8
push edx
call fcn.00420280
mov esi, dword [esi + 4]
add esp, 4
test esi, esi
jne 0x4205f0
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp - 0x888]
test edi, edi
jle 0x420681
lea eax, [ebp - 0x424]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea ecx, [ebp - 0x89c]
push ecx
lea edx, [ebp - 0x424]
push edx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push 0xc9
mov eax, edi
cdq
push 0x2a69c000
push edx
push eax
call fcn.004535e0
mov ebx, dword [ebp - 0x89c]
mov edi, dword [ebp - 0x898]
sub ebx, eax
sbb edi, edx
test esi, esi
je 0x420681
lea esp, [esp]
mov eax, dword [esi + 8]
cmp edi, dword [eax + 4]
jl 0x42067a
jg 0x42066e
cmp ebx, dword [eax]
jbe 0x42067a
add eax, 8
push eax
call fcn.00420280
add esp, 4
mov esi, dword [esi + 4]
test esi, esi
jne 0x420660
mov ebx, dword [ebp - 0x88c]
cmp dword [ebp - 0x888], 0
je 0x42069f
lea eax, [ebp - 0x888]
push eax
call fcn.00421400
add esp, 4
test ebx, ebx
je 0x4206aa
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x890]
pop ebx
pop edi
xor ecx, ebp
pop esi
call fcn.004534b8
mov esp, ebp
pop ebp
ret