Function at 0x1002aaa0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10035741
mov eax, dword fs:[0]
push eax
sub esp, 0x264
mov eax, dword [0x1003b010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1e8], 0
lea ecx, [ebp - 0x30]
call fcn.10015e00
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
push 0
push 0x80
push 1
push 0
push 0
push 0xc0000000
push str.._default.cfg
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0x100373a4
lea ecx, [ebp - 0x200]
call fcn.10007f70
mov dword [ebp - 4], 0
push 0x10036b68
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x228]
call fcn.10015390
add esp, 4
mov dword [ebp - 0x1b0], eax
lea ecx, [ebp - 0x188]
push ecx
mov ecx, dword [ebp - 0x1b0]
call fcn.10007f10
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xffffffff
jne 0x1002ab71
mov dword [ebp - 0x1ac], 1
jmp 0x1002ab7b
mov dword [ebp - 0x1ac], 0
mov dl, byte [ebp - 0x1ac]
mov byte [ebp - 0x19d], dl
lea ecx, [ebp - 0x228]
call fcn.10007f20
movzx eax, byte [ebp - 0x19d]
test eax, eax
je 0x1002aba2
jmp 0x1002ad80
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10007f70
mov byte [ebp - 4], 1
push 0x10036b6c
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x240]
call fcn.10015390
add esp, 4
mov dword [ebp - 0x1b4], eax
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], edx
mov byte [ebp - 4], 2
lea eax, [ebp - 0x28]
push eax
mov edx, dword [ebp - 0x1b8]
lea ecx, [ebp - 0x48]
call fcn.100154c0
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x240]
call fcn.10007f20
mov ecx, dword [ebp - 0x188]
and ecx, 0x10
je 0x1002ac1c
mov byte [ebp - 0x189], 1
jmp 0x1002ac23
mov byte [ebp - 0x189], 0
mov dl, byte [ebp - 0x189]
mov byte [ebp - 0x19e], dl
push 0
lea ecx, [ebp - 0x28]
call fcn.1002b490
movsx eax, byte [eax]
cmp eax, 0x2e
je 0x1002ac5c
push str..cfg
lea ecx, [ebp - 0x28]
call fcn.10007f10
push eax
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
jne 0x1002ac79
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.10007f20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.10007f20
jmp 0x1002ad57
movzx ecx, byte [ebp - 0x19e]
test ecx, ecx
je 0x1002aca1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.10007f20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.10007f20
jmp 0x1002ad57
push 0xffffffffffffffff
push 0x10036b78
lea ecx, [ebp - 0x48]
call fcn.1002b430
push eax
push 0
lea edx, [ebp - 0x270]
push edx
lea ecx, [ebp - 0x48]
call fcn.1002b390
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c4], ecx
push 0xffffffffffffffff
push 3
lea edx, [ebp - 0x258]
push edx
mov ecx, dword [ebp - 0x1c4]
call fcn.1002b2d0
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1e0], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1e0]
push ecx
mov ecx, 0x10044d9c
call fcn.1002b270
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x258]
call fcn.10007f20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x270]
call fcn.10007f20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.10007f20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.10007f20
lea edx, [ebp - 0x188]
push edx
mov eax, dword [ebp - 0x1a8]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1002aba2
mov ecx, dword [ebp - 0x1a8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.10007f20
mov byte [ebp - 0x19c], 0x22
movsx edx, byte [ebp - 0x19c]
mov eax, 1
imul ecx, eax, 0
movsx eax, byte [ecx + str.client.dll]
xor eax, edx
mov byte [ebp - 0x19b], al
movsx ecx, byte [ebp - 0x19c]
mov edx, 1
shl edx, 0
movsx eax, byte [edx + str.client.dll]
xor eax, ecx
mov byte [ebp - 0x19a], al
movsx ecx, byte [ebp - 0x19c]
mov edx, 1
shl edx, 1
movsx eax, byte [edx + str.client.dll]
xor eax, ecx
mov byte [ebp - 0x199], al
movsx ecx, byte [ebp - 0x19c]
mov edx, 1
imul eax, edx, 3
movsx edx, byte [eax + str.client.dll]
xor edx, ecx
mov byte [ebp - 0x198], dl
movsx eax, byte [ebp - 0x19c]
mov ecx, 1
shl ecx, 2
movsx edx, byte [ecx + str.client.dll]
xor edx, eax
mov byte [ebp - 0x197], dl
movsx eax, byte [ebp - 0x19c]
mov ecx, 1
imul edx, ecx, 5
movsx ecx, byte [edx + str.client.dll]
xor ecx, eax
mov byte [ebp - 0x196], cl
movsx edx, byte [ebp - 0x19c]
mov eax, 1
imul ecx, eax, 6
movsx eax, byte [ecx + str.client.dll]
xor eax, edx
mov byte [ebp - 0x195], al
movsx ecx, byte [ebp - 0x19c]
mov edx, 1
imul eax, edx, 7
movsx edx, byte [eax + str.client.dll]
xor edx, ecx
mov byte [ebp - 0x194], dl
movsx eax, byte [ebp - 0x19c]
mov ecx, 1
shl ecx, 3
movsx edx, byte [ecx + str.client.dll]
xor edx, eax
mov byte [ebp - 0x193], dl
movsx eax, byte [ebp - 0x19c]
mov ecx, 1
imul edx, ecx, 9
movsx ecx, byte [edx + str.client.dll]
xor ecx, eax
mov byte [ebp - 0x192], cl
xor edx, edx
mov byte [ebp - 0x191], dl
mov byte [ebp - 0x190], 0
movzx eax, byte [ebp - 0x190]
test eax, eax
jne 0x1002af86
mov dword [ebp - 0x1a4], 0
jmp 0x1002aefd
mov ecx, dword [ebp - 0x1a4]
add ecx, 1
mov dword [ebp - 0x1a4], ecx
cmp dword [ebp - 0x1a4], 0xa
jae 0x1002af63
lea edx, [ebp - 0x19b]
mov dword [ebp - 0x1dc], edx
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, dword [ebp - 0x1dc]
call fcn.100030c0
mov cl, byte [eax]
movzx edx, cl
push edx
lea ecx, [ebp - 0x19c]
call fcn.100030a0
mov byte [ebp - 0x19f], al
lea eax, [ebp - 0x19b]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x1a4]
push ecx
mov ecx, dword [ebp - 0x1d8]
call fcn.100030c0
mov dl, byte [ebp - 0x19f]
mov byte [eax], dl
jmp 0x1002aeee
lea eax, [ebp - 0x19b]
mov dword [ebp - 0x1e4], eax
push 0xa
mov ecx, dword [ebp - 0x1e4]
call fcn.100030c0
mov byte [eax], 0
mov byte [ebp - 0x190], 1
lea ecx, [ebp - 0x19b]
call fcn.100030b0
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x1cc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x1002afd0
mov dword [ebp - 0x1d0], 0x64
lea edx, [ebp - 0x1d0]
push edx
lea ecx, [ebp - 0x208]
call fcn.1002b690
mov ecx, eax
call fcn.1002b6b0
jmp 0x1002ad92
mov dword [ebp - 0x1d4], 0x7d0
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x210]
call fcn.1002b690
mov ecx, eax
call fcn.1002b6b0
push 0x100448f8
call fcn.10016490
add esp, 4
mov ecx, dword [0x10044908]
call fcn.10015df0
push eax
mov ecx, 0x10045df0
call fcn.1002de40
push 0x100448f8
call fcn.10029000
add esp, 4
push 0x1002b032
push 0x1002aad5
call fcn.10015ff0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10033b17
mov esp, ebp
pop ebp
ret