Function at 0x4ca7ec
Capabilities:
Enumerate files on windows

Disassembly:
mov eax, 0x6c3ece
call fcn.00692bd4
sub esp, 0x464
mov eax, dword [0x721bb0]
push ebx
push esi
push edi
push 0x71c9b0
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x464], ecx
call fcn.004328b7
xor ebx, ebx
pop ecx
xor eax, eax
mov cl, byte [eax + 0x71c9b0]
mov byte [ebp + eax - 0x254], cl
inc eax
cmp cl, bl
jne 0x4ca81c
lea edi, [ebp - 0x254]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x4ca835
mov esi, str.GuildBMP.BMP
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x150]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x254]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x468], eax
jne 0x4ca8bf
push 0x66c
call fcn.006918d6
pop ecx
mov ecx, eax
mov dword [ebp - 0x46c], ecx
cmp ecx, ebx
mov dword [ebp - 4], ebx
je 0x4ca886
call fcn.004316c5
jmp 0x4ca888
xor eax, eax
fld dword [0x6d05b4]
or dword [ebp - 4], 0xffffffff
push ecx
push ecx
fstp dword [esp + 4]
mov ecx, eax
fld dword [0x6d05b0]
fstp dword [esp]
push ebx
push 0x858968
call fcn.004321e3
mov ecx, dword [ebp - 0x464]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x5c]
jmp 0x4cab5a
xor eax, eax
mov cl, byte [eax + 0x71c9b0]
mov byte [ebp + eax - 0x254], cl
inc eax
cmp cl, bl
jne 0x4ca8c1
test byte [ebp - 0x150], 0x10
lea eax, [ebp - 0x124]
push eax
je 0x4ca92d
lea eax, [ebp - 0x358]
push str.___s__
push eax
call dword [sym.imp.user32.dll_wsprintfA]
lea eax, [ebp - 0x358]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4ca900
lea edi, [ebp - 0x254]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x4ca910
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4cab1c
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x358]
push str._sGuildBMP_s
push eax
call dword [sym.imp.user32.dll_wsprintfA]
push 0x110
mov dword [ebp - 0x470], ebx
call fcn.006918d6
add esp, 0x14
cmp eax, ebx
je 0x4ca968
mov ecx, eax
call fcn.004c9c25
mov esi, eax
jmp 0x4ca96a
xor esi, esi
push 0x18
mov dword [ebp - 0x46c], esi
call fcn.006918d6
pop ecx
mov ecx, eax
mov dword [ebp - 0x460], ecx
cmp ecx, ebx
mov dword [ebp - 4], 1
je 0x4ca992
call fcn.004c9962
jmp 0x4ca994
xor eax, eax
or edi, 0xffffffff
push 0x28
mov dword [ebp - 4], edi
mov dword [esi + 0x10c], eax
call fcn.006918d6
pop ecx
mov ecx, eax
mov dword [ebp - 0x460], ecx
cmp ecx, ebx
mov dword [ebp - 4], 2
je 0x4ca9c2
call fcn.00529062
jmp 0x4ca9c4
xor eax, eax
push 0x118
mov dword [ebp - 4], edi
mov dword [esi + 0x104], eax
call fcn.006918d6
pop ecx
mov ecx, eax
mov dword [ebp - 0x460], ecx
cmp ecx, ebx
mov dword [ebp - 4], 3
je 0x4ca9f2
call fcn.005c1bc1
jmp 0x4ca9f4
xor eax, eax
mov dword [esi + 0x108], eax
lea eax, [ebp - 0x124]
mov edx, esi
mov ecx, eax
mov dword [ebp - 4], edi
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x4caa09
mov ecx, dword [esi + 0x10c]
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x358]
push eax
call fcn.004c9981
test eax, eax
jne 0x4caaa8
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x45c]
push 0x858d68
push eax
call fcn.006935d4
push 0x66c
call fcn.006918d6
mov ecx, eax
add esp, 0x10
mov dword [ebp - 0x460], ecx
cmp ecx, ebx
mov dword [ebp - 4], 4
je 0x4caa6f
call fcn.004316c5
jmp 0x4caa71
xor eax, eax
fld dword [0x6d05b4]
push ecx
push ecx
fstp dword [esp + 4]
lea ecx, [ebp - 0x45c]
fld dword [0x6d05b0]
mov dword [ebp - 4], edi
fstp dword [esp]
push ebx
push ecx
mov ecx, eax
call fcn.004321e3
mov ecx, esi
call fcn.004c9d01
push esi
call fcn.00692701
pop ecx
jmp 0x4cab1c
mov edi, dword [ebp - 0x464]
mov ecx, dword [edi + 0x150]
mov eax, dword [ecx]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push esi
call dword [eax + 0x12c]
mov ecx, dword [esi + 0x108]
push 1
push 0x17
push ebx
push 0x10
push 0x20
call fcn.005c1d97
push dword [ebp - 0x470]
mov ecx, dword [esi + 0x108]
push 0xc
push 0x12
call fcn.005c1e1f
push dword [esi + 0x108]
mov ecx, dword [esi + 0x104]
push 0xc
push 0x12
push ebx
push ebx
push 0x41
push 0xc5
call fcn.00529086
lea eax, [ebp - 0x46c]
push eax
lea ecx, [edi + 0x164]
call fcn.004cadd6
lea eax, [ebp - 0x150]
push eax
push dword [ebp - 0x468]
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4ca8d3
push dword [ebp - 0x468]
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov esi, dword [ebp - 0x464]
lea ecx, [esi + 0x164]
call fcn.005770db
mov dword [esi + 0x160], eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.00692fc7
leave
ret