Function at 0x43b3b0
Capabilities:
Enumerate files on windows
Get common file path
Hash data using djb2
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0xa0b4
call fcn.004ac5b0
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xa0b0], eax
push ebx
push esi
push edi
push 0x28c8
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
push 0
push 0
push 0x1009
push edi
call ebx
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x10c0], ax
lea eax, [esp + 0x10c2]
push eax
call fcn.0048fb10
add esp, 0xc
xor eax, eax
mov word [esp + 0x18b8], ax
push 0x7fe
push eax
lea eax, [esp + 0x18c2]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x10b8]
push 0x400
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x10b8]
push str.inf_
push eax
call esi
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
push str..inf
lea eax, [esp + 0x18bc]
push eax
call esi
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x8c0], ax
lea eax, [esp + 0x8c2]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea ecx, [esp + 0x50]
mov dword [esp + 0x10], eax
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je 0x43b97d
nop dword [eax]
nop dword [eax + eax]
push 0x4b746c
lea eax, [esp + 0x80]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x43b966
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
xor eax, eax
push 0x206
push eax
mov word [esp + 0x2a8], ax
lea eax, [esp + 0x2aa]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push str._Unknown_
push str.Class
push str.Version
call esi
movzx esi, word [esp + 0x2a0]
lea eax, [esp + 0x2a0]
mov dword [0x4d9cd0], eax
mov edx, eax
mov ecx, 0x1505
test esi, esi
je 0x43b5a3
nop dword [eax]
mov eax, ecx
lea edx, [edx + 2]
shl ecx, 5
add ecx, esi
movzx esi, word [edx]
add ecx, eax
test esi, esi
jne 0x43b590
push 0x4d9cc8
push 0xffffffffffffffff
push 0x1091
push edi
mov dword [0x4d9ce0], ecx
call ebx
push 0
push 0
push 0x1004
push edi
call ebx
movzx edx, word [esp + 0x2a0]
lea esi, [esp + 0x2a0]
mov dword [0x4d9d68], eax
lea eax, [esp + 0x7c]
mov dword [0x4d9d80], 0
mov ecx, 0x1505
mov dword [0x4d9d78], eax
test edx, edx
je 0x43b607
mov eax, ecx
lea esi, [esi + 2]
shl ecx, 5
add ecx, edx
movzx edx, word [esi]
add ecx, eax
test edx, edx
jne 0x43b5f4
push 0x4d9d64
push 0
push 0x104d
push edi
mov dword [0x4d9d8c], ecx
call ebx
lea eax, [esp + 0x2a0]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push str._Unknown_
push str.CatalogFile
push str.Version
call esi
lea eax, [esp + 0x2a0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
xor eax, eax
push 0x206
push eax
mov word [esp + 0x6b8], ax
lea eax, [esp + 0x6ba]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push str._Unknown_
push str.Provider
push str.Version
call esi
lea eax, [esp + 0x6b0]
push eax
lea eax, [esp + 0x2a4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x43b71e
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43becf
xor ecx, ecx
mov word [esp + eax + 0x2a0], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push eax
lea eax, [esp + 0x2b2]
push eax
push str.Strings
call esi
lea eax, [esp + 0x6b0]
mov dword [esp + 0x1c], 3
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push str._Unknown_
push str.DriverVer
push str.Version
call esi
push 0x2c
push 0
lea eax, [esp + 0x2a8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
test esi, esi
je 0x43b8af
lea eax, [esp + 0x2a0]
sub esi, eax
and esi, 0xfffffffe
cmp esi, 0x208
jae 0x43becf
xor eax, eax
mov dword [esp + 0x1c], 4
mov word [esp + esi + 0x2a0], ax
lea eax, [esp + 0x2a0]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x2a2]
add eax, esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
lea eax, [esp + 0x6b4]
push eax
call esi
lea eax, [esp + 0x6b0]
push eax
lea eax, [esp + 0x2a4]
push eax
call esi
cmp word [esp + 0x6b0], 0x25
jne 0x43b881
lea eax, [esp + 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43becf
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor ecx, ecx
mov word [esp + eax + 0x2a0], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push eax
lea eax, [esp + 0x2b2]
push eax
push str.Strings
call esi
jmp 0x43b887
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x6b0]
mov dword [esp + 0x1c], 5
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
jmp 0x43b8b5
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x8b8]
mov dword [esp + 0x1c], 6
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
xor eax, eax
push 0x7ffc
push eax
mov word [esp + 0x20c0], ax
lea eax, [esp + 0x20c2]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x2a8]
push eax
push str._Unknown_
push str.ClassGuid
push str.Version
call esi
push ecx
lea eax, [esp + 0x20bc]
push eax
lea edx, [esp + 0x84]
lea ecx, [esp + 0x2a8]
call fcn.0043b200
add esp, 8
mov dword [esp + 0x1c], 7
lea eax, [esp + 0x20b8]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43b4e0
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.Other_
lea eax, [esp + 0x10bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
push str..inf
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea ecx, [esp + 0x10b8]
call fcn.004797a0
test eax, eax
jne 0x43be96
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x18bc]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea ecx, [esp + 0x50]
mov dword [esp + 0x10], eax
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x43be8c
nop dword [eax]
nop word [eax + eax]
lea eax, [esp + 0x10b8]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x8bc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
xor eax, eax
push 0x206
push eax
mov word [esp + 0x4b0], ax
lea eax, [esp + 0x4b2]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x4b0]
push eax
push str._Unknown_
push str.Class
push str.Version
call esi
movzx edx, word [esp + 0x4a8]
lea eax, [esp + 0x4a8]
mov dword [0x4d9cd0], eax
mov esi, eax
mov eax, 0x1505
test edx, edx
je 0x43bab3
nop
mov ecx, eax
lea esi, [esi + 2]
shl eax, 5
add eax, edx
movzx edx, word [esi]
add eax, ecx
test edx, edx
jne 0x43baa0
push 0x4d9cc8
push 0xffffffffffffffff
push 0x1091
push edi
mov dword [0x4d9ce0], eax
call ebx
push 0
push 0
push 0x1004
push edi
call ebx
movzx edx, word [esp + 0x4a8]
lea esi, [esp + 0x4a8]
mov dword [0x4d9d68], eax
lea eax, [esp + 0x7c]
mov dword [0x4d9d80], 0
mov ecx, 0x1505
mov dword [0x4d9d78], eax
test edx, edx
je 0x43bb16
mov eax, ecx
lea esi, [esi + 2]
shl ecx, 5
add ecx, edx
movzx edx, word [esi]
add ecx, eax
test edx, edx
jne 0x43bb03
push 0x4d9d64
push 0
push 0x104d
push edi
mov dword [0x4d9d8c], ecx
call ebx
lea eax, [esp + 0x4a8]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x4b0]
push eax
push str._Unknown_
push str.CatalogFile
push str.Version
call esi
lea eax, [esp + 0x4a8]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
xor eax, eax
push 0x206
push eax
mov word [esp + 0x6b8], ax
lea eax, [esp + 0x6ba]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push str._Unknown_
push str.Provider
push str.Version
call esi
lea eax, [esp + 0x6b0]
push eax
lea eax, [esp + 0x4ac]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x4a8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x43bc2d
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43becf
xor ecx, ecx
mov word [esp + eax + 0x4a8], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push eax
lea eax, [esp + 0x4ba]
push eax
push str.Strings
call esi
lea eax, [esp + 0x6b0]
mov dword [esp + 0x1c], 3
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x4b0]
push eax
push str._Unknown_
push str.DriverVer
push str.Version
call esi
push 0x2c
push 0
lea eax, [esp + 0x4b0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
test esi, esi
je 0x43bdbe
lea eax, [esp + 0x4a8]
sub esi, eax
and esi, 0xfffffffe
cmp esi, 0x208
jae 0x43becf
xor eax, eax
mov dword [esp + 0x1c], 4
mov word [esp + esi + 0x4a8], ax
lea eax, [esp + 0x4a8]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x4aa]
add eax, esi
mov esi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
lea eax, [esp + 0x6b4]
push eax
call esi
lea eax, [esp + 0x6b0]
push eax
lea eax, [esp + 0x4ac]
push eax
call esi
cmp word [esp + 0x6b0], 0x25
jne 0x43bd90
lea eax, [esp + 0x4a8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*2 - 2]
cmp eax, 0x208
jae 0x43becf
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor ecx, ecx
mov word [esp + eax + 0x4a8], cx
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x6b8]
push eax
push eax
lea eax, [esp + 0x4ba]
push eax
push str.Strings
call esi
jmp 0x43bd96
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x6b0]
mov dword [esp + 0x1c], 5
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
jmp 0x43bdc4
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0x8b8]
mov dword [esp + 0x1c], 6
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
xor eax, eax
push 0x7ffc
push eax
mov word [esp + 0x20c0], ax
lea eax, [esp + 0x20c2]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x8b8]
push eax
push 0x104
lea eax, [esp + 0x4b0]
push eax
push str._Unknown_
push str.ClassGuid
push str.Version
call esi
push ecx
lea eax, [esp + 0x20bc]
push eax
lea edx, [esp + 0x84]
lea ecx, [esp + 0x4b0]
call fcn.0043b200
add esp, 8
mov dword [esp + 0x1c], 7
lea eax, [esp + 0x20b8]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push dword [0x4d9d68]
push 0x1074
push edi
call ebx
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43ba10
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x478350
push 1
push 0x1051
push edi
mov dword [0x4e5c18], 2
mov dword [0x4e5c14], edi
call ebx
call fcn.0046cb60
mov ecx, dword [esp + 0xa0bc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0048ea75
mov esp, ebp
pop ebp
ret
call fcn.0048eba6
int3