Function at 0x43aa40
Capabilities:
Enumerate files on windows
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x20b4
call fcn.004a5d20
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x20b0], eax
push ebx
push esi
push edi
push 0x28c8
push dword [0x4def88]
call dword [sym.imp.user32.dll_GetDlgItem]
mov ebx, dword [sym.imp.user32.dll_SendMessageW]
mov edi, eax
push 0
push 0
push 0x1009
push edi
call ebx
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x10c0], ax
lea eax, [esp + 0x10c2]
push eax
call fcn.0048e770
add esp, 0xc
xor eax, eax
mov word [esp + 0x18b8], ax
push 0x7fe
push eax
lea eax, [esp + 0x18c2]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x10b8]
push 0x400
push eax
call dword [sym.imp.kernel32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x10b8]
push 0x4b1174
push eax
call esi
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
push 0x4b1180
lea eax, [esp + 0x18bc]
push eax
call esi
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x8c0], ax
lea eax, [esp + 0x8c2]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.kernel32.dll_FindFirstFileW]
lea ecx, [esp + 0x50]
mov dword [esp + 0x10], eax
push ecx
push eax
call dword [sym.imp.kernel32.dll_FindNextFileW]
mov esi, dword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x43aea9
nop dword [eax]
nop dword [eax + eax]
push 0x4b118c
lea eax, [esp + 0x80]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x43ae92
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 0
push 0
push 0x1004
push edi
call ebx
push 0x4d2cc0
push 0
mov dword [0x4d2cc4], eax
lea eax, [esp + 0x84]
push 0x104d
push edi
mov dword [0x4d2cdc], 0
mov dword [0x4d2cd4], eax
call ebx
xor eax, eax
push 0x206
push eax
mov word [esp + 0x4b0], ax
lea eax, [esp + 0x4b2]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x4b0]
push eax
push 0x4b1194
push 0x4b11a8
push 0x4b11b4
call esi
lea eax, [esp + 0x4a8]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
xor eax, eax
push 0x206
push eax
mov word [esp + 0x2a8], ax
lea eax, [esp + 0x2aa]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push 0x4b1194
push 0x4b11c4
push 0x4b11b4
call esi
lea eax, [esp + 0x2a0]
push eax
lea eax, [esp + 0x4ac]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x4a8]
push eax
call dword [sym.imp.kernel32.dll_lstrlenW]
test eax, eax
jle 0x43ace0
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43b292
xor ecx, ecx
mov word [esp + eax + 0x4a8], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push eax
lea eax, [esp + 0x4ba]
push eax
push 0x4b11d8
call esi
lea eax, [esp + 0x2a0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x4b0]
push eax
push 0x4b1194
push 0x4b11e8
push 0x4b11b4
call esi
push 0x2c
push 0
lea eax, [esp + 0x4b0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
test esi, esi
je 0x43ae66
lea eax, [esp + 0x4a8]
sub esi, eax
and esi, 0xfffffffe
cmp esi, 0x208
jae 0x43b292
xor eax, eax
mov dword [esp + 0x1c], 3
mov word [esp + esi + 0x4a8], ax
lea eax, [esp + 0x4a8]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x4aa]
add eax, esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
lea eax, [esp + 0x2a4]
push eax
call esi
lea eax, [esp + 0x2a0]
push eax
lea eax, [esp + 0x4ac]
push eax
call esi
cmp word [esp + 0x2a0], 0x25
jne 0x43ae40
lea eax, [esp + 0x4a8]
push eax
call dword [sym.imp.kernel32.dll_lstrlenW]
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43b292
xor ecx, ecx
mov word [esp + eax + 0x4a8], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push eax
lea eax, [esp + 0x4ba]
push eax
mov eax, dword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
push 0x4b11d8
call eax
lea eax, [esp + 0x2a0]
mov dword [esp + 0x1c], 4
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x8b8]
mov dword [esp + 0x1c], 5
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
mov esi, dword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x14]
call dword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
jne 0x43ab70
push dword [esp + 0x10]
call dword [sym.imp.kernel32.dll_FindClose]
push 0x4b11fc
lea eax, [esp + 0x10bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
push 0x4b1180
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea ecx, [esp + 0x10b8]
call fcn.004785b0
test eax, eax
jne 0x43b259
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.kernel32.dll_FindFirstFileW]
lea ecx, [esp + 0x50]
mov dword [esp + 0x10], eax
push ecx
push eax
call dword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
je 0x43b24f
nop
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 0
push 0
push 0x1004
push edi
call ebx
push 0x4d2cc0
push 0
mov dword [0x4d2cc4], eax
lea eax, [esp + 0x84]
push 0x104d
push edi
mov dword [0x4d2cdc], 0
mov dword [0x4d2cd4], eax
call ebx
xor eax, eax
push 0x206
push eax
mov word [esp + 0x6b8], ax
lea eax, [esp + 0x6ba]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push 0x4b1194
push 0x4b11a8
push 0x4b11b4
call esi
lea eax, [esp + 0x6b0]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
xor eax, eax
push 0x206
push eax
mov word [esp + 0x2a8], ax
lea eax, [esp + 0x2aa]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push 0x4b1194
push 0x4b11c4
push 0x4b11b4
call esi
lea eax, [esp + 0x2a0]
push eax
lea eax, [esp + 0x6b4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x6b0]
push eax
call dword [sym.imp.kernel32.dll_lstrlenW]
test eax, eax
jle 0x43b085
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43b292
xor ecx, ecx
mov word [esp + eax + 0x6b0], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push eax
lea eax, [esp + 0x6c2]
push eax
push 0x4b11d8
call esi
lea eax, [esp + 0x2a0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push 0x4b1194
push 0x4b11e8
push 0x4b11b4
call esi
push 0x2c
push 0
lea eax, [esp + 0x6b8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
test esi, esi
je 0x43b20b
lea eax, [esp + 0x6b0]
sub esi, eax
and esi, 0xfffffffe
cmp esi, 0x208
jae 0x43b292
xor eax, eax
mov dword [esp + 0x1c], 3
mov word [esp + esi + 0x6b0], ax
lea eax, [esp + 0x6b0]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x6b2]
add eax, esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
lea eax, [esp + 0x2a4]
push eax
call esi
lea eax, [esp + 0x2a0]
push eax
lea eax, [esp + 0x6b4]
push eax
call esi
cmp word [esp + 0x2a0], 0x25
jne 0x43b1e5
lea eax, [esp + 0x6b0]
push eax
call dword [sym.imp.kernel32.dll_lstrlenW]
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43b292
xor ecx, ecx
mov word [esp + eax + 0x6b0], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push eax
lea eax, [esp + 0x6c2]
push eax
mov eax, dword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
push 0x4b11d8
call eax
lea eax, [esp + 0x2a0]
mov dword [esp + 0x1c], 4
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x8b8]
mov dword [esp + 0x1c], 5
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d2cc4]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x14]
call dword [sym.imp.kernel32.dll_FindNextFileW]
test eax, eax
je 0x43b24f
mov esi, dword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
jmp 0x43af30
push dword [esp + 0x10]
call dword [sym.imp.kernel32.dll_FindClose]
push 0x4770b0
push 1
push 0x1051
push edi
mov dword [0x4deb70], 1
mov dword [0x4deb6c], edi
call ebx
call fcn.0046b870
mov ecx, dword [esp + 0x20bc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0048d815
mov esp, ebp
pop ebp
ret
call fcn.0048d945
int3