Function at 0x4cad90
Capabilities:
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x52e579
push eax
mov eax, dword [0x57226c]
mov dword fs:[0], esp
sub esp, 0x1ac
push ebp
xor ebp, ebp
push esi
cmp eax, ebp
push edi
jne 0x4cadc0
xor eax, eax
jmp 0x4cb29d
mov edi, dword [esp + 0x1c8]
lea eax, [esp + 0xc]
push eax
mov ecx, edi
call fcn.004a5480
mov ecx, dword [0x572acc]
mov dword [esp + 0x1c0], ebp
push ecx
lea ecx, [esp + 0x10]
call fcn.00505156
cmp eax, ebp
jge 0x4cae09
lea ecx, [esp + 0xc]
mov dword [esp + 0x1c0], 0xffffffff
call fcn.00507d3a
xor eax, eax
jmp 0x4cb29d
mov edx, dword [0x572acc]
mov ecx, dword [edx - 8]
add ecx, eax
push ecx
push ebp
lea ecx, [esp + 0x14]
call fcn.00504bda
lea eax, [esp + 0x14]
push eax
call fcn.00499680
add esp, 4
push 0x55e7ac
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c4], 1
call fcn.00505538
push 0x55e7ac
lea ecx, [esp + 0x10]
call fcn.00505619
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
push ecx
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.00424830
add esp, 0xc
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1c4], 2
call fcn.00507e73
lea ecx, [esp + 0x18]
mov byte [esp + 0x1c0], 1
call fcn.00507d3a
push 0x1000
lea ecx, [esp + 0x54]
call fcn.00511eb1
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x1c0], 3
push ecx
call fcn.00422860
add esp, 4
test eax, eax
je 0x4cb01d
mov edx, dword [0x569c90]
mov dword [esp + 0x10], edx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1c0], 4
call fcn.00506564
lea eax, [esp + 0x14]
push 0x55e520
lea ecx, [esp + 0x1c]
push eax
push ecx
mov byte [esp + 0x1cc], 5
call fcn.00507fcf
lea edx, [esp + 0x14]
lea ecx, [esp + 0x1c]
push edx
mov byte [esp + 0x1c4], 6
call fcn.00507aaf
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x78]
push eax
push ecx
mov byte [esp + 0x1c8], 7
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x4cafac
mov edi, dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea edx, [esp + 0xa4]
push 0x55e51c
push edx
call fcn.004f27d5
add esp, 8
test eax, eax
je 0x4caf92
lea eax, [esp + 0xa4]
push 0x55e518
push eax
call fcn.004f27d5
add esp, 8
test eax, eax
je 0x4caf92
mov edx, dword [esp + 0x98]
lea ecx, [esp + 0xa4]
push ecx
push edx
lea eax, [esp + 0x18]
push str.drwxr_xr_x___8_1015__1015___d_Oct_12_07:47__s_r_n
push eax
call fcn.005054dc
mov edx, dword [esp + 0x54]
add esp, 0x10
lea ecx, [esp + 0x10]
push ecx
push edx
lea ecx, [esp + 0x44]
call fcn.005067be
lea eax, [esp + 0x78]
push eax
push esi
call edi
test eax, eax
jne 0x4caf2b
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [esp + 0x1c8]
mov eax, dword [esp + 0x44]
xor esi, esi
cmp eax, ebp
jle 0x4cafd4
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + esi*4]
mov ecx, dword [eax - 8]
push ecx
push eax
lea ecx, [esp + 0x58]
call fcn.005120d4
mov eax, dword [esp + 0x44]
inc esi
cmp esi, eax
jl 0x4cafb6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1c0], 6
call fcn.00507d3a
lea ecx, [esp + 0x18]
mov byte [esp + 0x1c0], 5
call fcn.00507d3a
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1c0], 4
call fcn.00506597
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 3
call fcn.00507d3a
jmp 0x4cb16d
lea ecx, [esp + 0x3c]
call fcn.00421ac0
mov edx, dword [esp + 0x14]
mov esi, 0x8000
push esi
push edx
lea ecx, [esp + 0x44]
mov byte [esp + 0x1c8], 8
call fcn.00421b60
test eax, eax
jne 0x4cb099
mov eax, dword [0x569c90]
mov dword [esp + 0x10], eax
mov ecx, dword [0x572ac0]
lea edx, [esp + 0x10]
push ecx
push ebp
push str.drwxr_xr_x___8_1015__1015___d_Oct_12_07:47__s_r_n
push edx
mov byte [esp + 0x1d0], 9
call fcn.005054dc
mov eax, dword [esp + 0x20]
add esp, 0x10
mov ecx, dword [eax - 8]
push ecx
push eax
lea ecx, [esp + 0x58]
call fcn.005120d4
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c0], 8
call fcn.00507d3a
jmp 0x4cb15c
mov dword [esp + 0x24], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], 0x100
mov dword [esp + 0x30], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x20], 0x5343d0
xor ecx, ecx
mov byte [esp + 0x1c0], 0xa
xor eax, eax
add eax, 0x100
add ecx, 0x100
cmp eax, esi
jl 0x4cb0c9
push ecx
lea ecx, [esp + 0x24]
call fcn.00422710
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], esi
cmp eax, esi
jle 0x4cb0f2
mov dword [esp + 0x30], esi
mov eax, dword [esp + 0x24]
push esi
push eax
lea ecx, [esp + 0x44]
call fcn.00421c40
cmp eax, ebp
jle 0x4cb12b
mov ecx, dword [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x58]
call fcn.005120d4
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x24]
push edx
push eax
lea ecx, [esp + 0x44]
call fcn.00421c40
cmp eax, ebp
jg 0x4cb105
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x1c0], 8
cmp ecx, ebp
mov dword [esp + 0x20], 0x5343d4
je 0x4cb14f
mov eax, dword [esp + 0x24]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x4cb15c
mov ecx, dword [esp + 0x24]
push ecx
call fcn.0050c4cc
add esp, 4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1c0], 3
call fcn.00421b10
mov ecx, 0x571fb8
call fcn.00481cb0
test al, 1
je 0x4cb18b
push 1
push 1
push 0xe1d4
mov ecx, edi
call fcn.004d2030
lea ecx, [esp + 0x50]
call fcn.0050cb3a
test eax, eax
je 0x4cb1f8
push 8
call fcn.0050c4a3
add esp, 4
cmp eax, ebp
je 0x4cb1b3
mov dword [eax + 4], edi
mov dword [eax], 0x537270
mov esi, eax
jmp 0x4cb1b5
xor esi, esi
mov edx, dword [esp + 0x50]
push ebp
push ebp
lea ecx, [esp + 0x58]
mov dword [esp + 0x24], ebp
call dword [edx + 0x28]
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x56e1f4
call fcn.00507da8
lea eax, [esp + 0x24]
lea ecx, [esp + 0x58]
push eax
push ebp
push ecx
mov ecx, dword [esp + 0x1e0]
call fcn.00457cc0
push esi
call fcn.0050c4cc
add esp, 4
mov ecx, 0x571fb8
call fcn.00481cb0
test al, 1
je 0x4cb262
lea ecx, [esp + 0x50]
call fcn.0050cb3a
test eax, eax
je 0x4cb252
mov edx, dword [esp + 0x50]
push ebp
push ebp
lea ecx, [esp + 0x58]
call dword [edx + 0x28]
mov eax, dword [0x572ad0]
push 1
push 1
push eax
mov ecx, edi
call fcn.004d2190
push 1
lea ecx, [esp + 0x54]
push ebp
push ecx
mov ecx, edi
call fcn.004d22e0
mov edx, dword [0x572ad0]
push 1
push 1
push edx
mov ecx, edi
call fcn.004d2190
push 1
push 1
push 0xe206
mov ecx, edi
call fcn.004d2030
lea ecx, [esp + 0x50]
mov byte [esp + 0x1c0], 1
call fcn.00511f76
lea ecx, [esp + 0x14]
mov byte [esp + 0x1c0], 0
call fcn.00507d3a
lea ecx, [esp + 0xc]
mov dword [esp + 0x1c0], 0xffffffff
call fcn.00507d3a
mov eax, 1
mov ecx, dword [esp + 0x1b8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebp
add esp, 0x1b8
ret 8