Function at 0x406ce0
Capabilities:
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
sub esp, 0xa6c
push ebx
push ebp
mov ebp, dword [esp + 0xa7c]
push esi
push edi
push 0
push 0
push ecx
mov esi, ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ebp
mov dword [esp + 0x24], esi
call fcn.004052e0
mov ecx, esi
call fcn.00406750
test eax, eax
je 0x406d1c
push ebp
call fcn.0040a1ff
add esp, 4
push 0
push ebp
mov ecx, esi
call fcn.00406220
lea edx, [esp + 0x770]
mov eax, ebp
sub edx, ebp
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406d31
mov esi, dword [esp + 0xa80]
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406d47
sub eax, edx
cmp eax, 0xffffffff
jle 0x406d64
cmp byte [eax + esi], 0x5c
je 0x406d61
dec eax
cmp eax, 0xffffffff
jg 0x406d55
cmp eax, 0xffffffff
jne 0x406d8c
lea edx, [esp + 0x66c]
mov byte [esp + 0x158], 0
mov eax, esi
sub edx, esi
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406d80
jmp 0x406dbf
lea edi, [esp + 0x158]
mov ecx, esi
sub edi, esi
mov dl, byte [ecx]
mov byte [edi + ecx], dl
inc ecx
test dl, dl
jne 0x406d97
mov byte [esp + eax + 0x158], dl
lea eax, [eax + esi + 1]
lea edx, [esp + 0x66c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406db5
lea edi, [esp + 0x158]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x406dc7
mov si, word [0x424ed8]
lea edx, [esp + 0x25c]
mov word [edi], si
mov eax, ebp
sub edx, ebp
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x406de4
lea edi, [esp + 0x25c]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x406df6
mov word [edi], si
xor eax, eax
jmp 0x406e10
mov cl, byte [esp + eax + 0x158]
mov byte [esp + eax + 0x464], cl
inc eax
test cl, cl
jne 0x406e10
lea eax, [esp + 0x66c]
mov esi, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406e30
lea edi, [esp + 0x464]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x406e41
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x18]
rep movsb byte es:[edi], byte [esi]
push eax
lea ecx, [esp + 0x468]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov ebx, dword [esp + 0xa8c]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x40702b
lea esp, [esp]
mov edi, 0x424ff8
lea esi, [esp + 0x44]
mov ecx, 2
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x407010
mov edi, 0x424ff4
lea esi, [esp + 0x44]
mov ecx, 3
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x407010
test byte [esp + 0x18], 0x10
jne 0x407000
xor eax, eax
lea ecx, [ecx]
mov cl, byte [esp + eax + 0x158]
mov byte [esp + eax + 0x360], cl
inc eax
test cl, cl
jne 0x406ec0
lea eax, [esp + 0x44]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406ee0
lea edi, [esp + 0x360]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x406ef1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
jmp 0x406f10
mov cl, byte [esp + eax + 0x25c]
mov byte [esp + eax + 0x978], cl
inc eax
test cl, cl
jne 0x406f10
lea eax, [esp + 0x44]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406f30
lea edi, [esp + 0x978]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x406f41
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea esi, [esp + 0x25c]
lea eax, [esp + 0x770]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x406f8b
test cl, cl
je 0x406f87
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x406f8b
add eax, 2
add esi, 2
test cl, cl
jne 0x406f67
xor eax, eax
jmp 0x406f90
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x406fc3
push 0
lea eax, [esp + 0x260]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor eax, eax
jmp 0x406fb0
mov cl, byte [esp + eax + 0x25c]
mov byte [esp + eax + 0x770], cl
inc eax
test cl, cl
jne 0x406fb0
mov ecx, dword [esp + 0xaa0]
mov edx, dword [esp + 0xa9c]
push ecx
push edx
push ebx
lea eax, [esp + 0x984]
push eax
lea ecx, [esp + 0x370]
push ecx
mov ecx, dword [esp + 0x28]
call fcn.004069b0
test al, al
je 0x40726c
mov eax, dword [esp + 0xa90]
inc dword [eax]
jmp 0x407010
push 0
lea edx, [esp + 0x260]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [esp + 0x18]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x406e80
push ebp
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0xa88]
test eax, eax
je 0x407256
xor eax, eax
lea esp, [esp]
mov cl, byte [esp + eax + 0x158]
mov byte [esp + eax + 0x464], cl
inc eax
test cl, cl
jne 0x407040
lea edi, [esp + 0x464]
dec edi
jmp 0x407060
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407060
mov ecx, dword [0x425964]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x468]
push eax
mov dword [edi], ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x407256
mov ebp, dword [esp + 0xa98]
mov ebx, dword [esp + 0xa94]
mov edi, edi
xor eax, eax
jmp 0x4070b0
mov cl, byte [esp + eax + 0x158]
mov byte [esp + eax + 0x360], cl
inc eax
test cl, cl
jne 0x4070b0
lea eax, [esp + 0x44]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4070d0
lea edi, [esp + 0x360]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4070e1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x424ff8
lea esi, [esp + 0x44]
mov ecx, 2
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x407237
mov edi, 0x424ff4
lea esi, [esp + 0x44]
mov ecx, 3
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x407237
test byte [esp + 0x18], 0x10
je 0x407237
xor eax, eax
jmp 0x407140
mov cl, byte [esp + eax + 0x25c]
mov byte [esp + eax + 0x874], cl
inc eax
test cl, cl
jne 0x407140
lea eax, [esp + 0x44]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407160
lea edi, [esp + 0x874]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x407171
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
jmp 0x407190
mov cl, byte [esp + eax + 0x360]
mov byte [esp + eax + 0x568], cl
inc eax
test cl, cl
jne 0x407190
lea edi, [esp + 0x568]
dec edi
jmp 0x4071b0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4071b0
mov cx, word [0x424ed8]
lea eax, [esp + 0x66c]
mov word [edi], cx
mov esi, eax
jmp 0x4071d0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4071d0
lea edi, [esp + 0x568]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4071e1
mov edx, dword [esp + 0xa90]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
push 0
push ebp
push ebx
mov ecx, eax
mov eax, dword [esp + 0xa9c]
push edx
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0xaa0]
push ecx
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x890]
push edx
lea eax, [esp + 0x588]
push eax
call fcn.00406ce0
mov ecx, dword [esp + 0xa90]
add dword [ecx], eax
mov esi, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4070a0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [esp + 0xa90]
mov eax, dword [edx]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xa6c
ret 0x24
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0xa6c
ret 0x24