Function at 0x1001ad90
Capabilities:
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100eea0c
mov eax, dword fs:[0]
push eax
sub esp, 0x990
mov eax, dword [0x1011b040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 8]
call fcn.1000a260
mov dword [ebp - 0x94c], eax
mov ecx, dword [ebp + 0xc]
call fcn.1000a260
mov dword [ebp - 0x950], eax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x93c], eax
lea ecx, [ebp - 0x610]
mov dword [ebp - 0x910], ecx
mov edx, dword [ebp - 0x910]
mov dword [ebp - 0x994], edx
mov eax, dword [ebp - 0x93c]
mov cx, word [eax]
mov word [ebp - 0x8de], cx
mov edx, dword [ebp - 0x910]
mov ax, word [ebp - 0x8de]
mov word [edx], ax
mov ecx, dword [ebp - 0x93c]
add ecx, 2
mov dword [ebp - 0x93c], ecx
mov edx, dword [ebp - 0x910]
add edx, 2
mov dword [ebp - 0x910], edx
cmp word [ebp - 0x8de], 0
jne 0x1001adfd
lea eax, [ebp - 0x610]
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x8dc]
add ecx, 2
mov dword [ebp - 0x988], ecx
mov edx, dword [ebp - 0x8dc]
mov ax, word [edx]
mov word [ebp - 0x934], ax
add dword [ebp - 0x8dc], 2
cmp word [ebp - 0x934], 0
jne 0x1001ae60
mov ecx, dword [ebp - 0x8dc]
sub ecx, dword [ebp - 0x988]
sar ecx, 1
mov dword [ebp - 0x990], ecx
mov edx, dword [ebp - 0x990]
movzx eax, word [ebp + edx*2 - 0x610]
cmp eax, 0x5c
je 0x1001aee7
lea ecx, [ebp - 0x610]
add ecx, 0xfffffffe
mov dword [ebp - 0x8f8], ecx
mov edx, dword [ebp - 0x8f8]
mov ax, word [edx + 2]
mov word [ebp - 0x922], ax
add dword [ebp - 0x8f8], 2
cmp word [ebp - 0x922], 0
jne 0x1001aeb7
mov edi, dword [ebp - 0x8f8]
mov ecx, dword [0x100f85b4]
mov dword [edi], ecx
lea edx, [ebp - 0x610]
add edx, 0xfffffffe
mov dword [ebp - 0x908], edx
mov eax, dword [ebp - 0x908]
mov cx, word [eax + 2]
mov word [ebp - 0x926], cx
add dword [ebp - 0x908], 2
cmp word [ebp - 0x926], 0
jne 0x1001aef6
mov edi, dword [ebp - 0x908]
mov edx, dword [0x100f85b8]
mov dword [edi], edx
mov eax, dword [str..]
mov dword [edi + 4], eax
lea ecx, [ebp - 0x8c0]
push ecx
lea edx, [ebp - 0x610]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 0xffffffff
jne 0x1001af58
xor al, al
jmp 0x1001b519
push 0
mov eax, dword [ebp - 0x950]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ecx, dword [ebp - 0x950]
mov dword [ebp - 0x930], ecx
lea edx, [ebp - 0x210]
mov dword [ebp - 0x900], edx
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x930]
mov dx, word [ecx]
mov word [ebp - 0x8d6], dx
mov eax, dword [ebp - 0x900]
mov cx, word [ebp - 0x8d6]
mov word [eax], cx
mov edx, dword [ebp - 0x930]
add edx, 2
mov dword [ebp - 0x930], edx
mov eax, dword [ebp - 0x900]
add eax, 2
mov dword [ebp - 0x900], eax
cmp word [ebp - 0x8d6], 0
jne 0x1001af8b
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x8d4], ecx
mov edx, dword [ebp - 0x8d4]
add edx, 2
mov dword [ebp - 0x974], edx
mov eax, dword [ebp - 0x8d4]
mov cx, word [eax]
mov word [ebp - 0x92a], cx
add dword [ebp - 0x8d4], 2
cmp word [ebp - 0x92a], 0
jne 0x1001afee
mov edx, dword [ebp - 0x8d4]
sub edx, dword [ebp - 0x974]
sar edx, 1
mov dword [ebp - 0x984], edx
mov eax, dword [ebp - 0x984]
movzx ecx, word [ebp + eax*2 - 0x210]
cmp ecx, 0x5c
je 0x1001b075
lea edx, [ebp - 0x210]
add edx, 0xfffffffe
mov dword [ebp - 0x8ec], edx
mov eax, dword [ebp - 0x8ec]
mov cx, word [eax + 2]
mov word [ebp - 0x944], cx
add dword [ebp - 0x8ec], 2
cmp word [ebp - 0x944], 0
jne 0x1001b045
mov edi, dword [ebp - 0x8ec]
mov edx, dword [0x100f85c0]
mov dword [edi], edx
lea eax, [ebp - 0x894]
mov dword [ebp - 0x8c8], eax
mov ecx, dword [ebp - 0x8c8]
mov dword [ebp - 0x95c], ecx
mov edx, dword [ebp - 0x8c8]
mov ax, word [edx]
mov word [ebp - 0x940], ax
add dword [ebp - 0x8c8], 2
cmp word [ebp - 0x940], 0
jne 0x1001b08d
mov ecx, dword [ebp - 0x8c8]
sub ecx, dword [ebp - 0x95c]
mov edx, dword [ebp - 0x95c]
mov dword [ebp - 0x97c], edx
mov dword [ebp - 0x968], ecx
lea eax, [ebp - 0x210]
add eax, 0xfffffffe
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x8f4]
mov dx, word [ecx + 2]
mov word [ebp - 0x928], dx
add dword [ebp - 0x8f4], 2
cmp word [ebp - 0x928], 0
jne 0x1001b0db
mov edi, dword [ebp - 0x8f4]
mov esi, dword [ebp - 0x97c]
mov eax, dword [ebp - 0x968]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x94c]
mov dword [ebp - 0x91c], ecx
lea edx, [ebp - 0x410]
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x91c]
mov dx, word [ecx]
mov word [ebp - 0x8ca], dx
mov eax, dword [ebp - 0x8fc]
mov cx, word [ebp - 0x8ca]
mov word [eax], cx
mov edx, dword [ebp - 0x91c]
add edx, 2
mov dword [ebp - 0x91c], edx
mov eax, dword [ebp - 0x8fc]
add eax, 2
mov dword [ebp - 0x8fc], eax
cmp word [ebp - 0x8ca], 0
jne 0x1001b141
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x8d0], ecx
mov edx, dword [ebp - 0x8d0]
add edx, 2
mov dword [ebp - 0x970], edx
mov eax, dword [ebp - 0x8d0]
mov cx, word [eax]
mov word [ebp - 0x92c], cx
add dword [ebp - 0x8d0], 2
cmp word [ebp - 0x92c], 0
jne 0x1001b1a4
mov edx, dword [ebp - 0x8d0]
sub edx, dword [ebp - 0x970]
sar edx, 1
mov dword [ebp - 0x978], edx
mov eax, dword [ebp - 0x978]
movzx ecx, word [ebp + eax*2 - 0x410]
cmp ecx, 0x5c
je 0x1001b22b
lea edx, [ebp - 0x410]
add edx, 0xfffffffe
mov dword [ebp - 0x904], edx
mov eax, dword [ebp - 0x904]
mov cx, word [eax + 2]
mov word [ebp - 0x932], cx
add dword [ebp - 0x904], 2
cmp word [ebp - 0x932], 0
jne 0x1001b1fb
mov edi, dword [ebp - 0x904]
mov edx, dword [0x100f85c4]
mov dword [edi], edx
lea eax, [ebp - 0x894]
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
mov dword [ebp - 0x958], ecx
mov edx, dword [ebp - 0x8c4]
mov ax, word [edx]
mov word [ebp - 0x936], ax
add dword [ebp - 0x8c4], 2
cmp word [ebp - 0x936], 0
jne 0x1001b243
mov ecx, dword [ebp - 0x8c4]
sub ecx, dword [ebp - 0x958]
mov edx, dword [ebp - 0x958]
mov dword [ebp - 0x980], edx
mov dword [ebp - 0x96c], ecx
lea eax, [ebp - 0x410]
add eax, 0xfffffffe
mov dword [ebp - 0x90c], eax
mov ecx, dword [ebp - 0x90c]
mov dx, word [ecx + 2]
mov word [ebp - 0x93e], dx
add dword [ebp - 0x90c], 2
cmp word [ebp - 0x93e], 0
jne 0x1001b291
mov edi, dword [ebp - 0x90c]
mov esi, dword [ebp - 0x980]
mov eax, dword [ebp - 0x96c]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x8c0]
and ecx, 0x10
je 0x1001b486
mov dword [ebp - 0x914], 0x100f85c8
lea edx, [ebp - 0x894]
mov dword [ebp - 0x8e8], edx
mov eax, dword [ebp - 0x8e8]
mov cx, word [eax]
mov word [ebp - 0x942], cx
mov edx, dword [ebp - 0x914]
cmp cx, word [edx]
jne 0x1001b35e
cmp word [ebp - 0x942], 0
je 0x1001b352
mov eax, dword [ebp - 0x8e8]
mov cx, word [eax + 2]
mov word [ebp - 0x946], cx
mov edx, dword [ebp - 0x914]
cmp cx, word [edx + 2]
jne 0x1001b35e
add dword [ebp - 0x8e8], 4
add dword [ebp - 0x914], 4
cmp word [ebp - 0x946], 0
jne 0x1001b2f8
mov dword [ebp - 0x960], 0
jmp 0x1001b369
sbb eax, eax
or eax, 1
mov dword [ebp - 0x960], eax
mov ecx, dword [ebp - 0x960]
mov dword [ebp - 0x98c], ecx
cmp dword [ebp - 0x98c], 0
je 0x1001b484
mov dword [ebp - 0x8f0], 0x100f85cc
lea edx, [ebp - 0x894]
mov dword [ebp - 0x8e4], edx
mov eax, dword [ebp - 0x8e4]
mov cx, word [eax]
mov word [ebp - 0x916], cx
mov edx, dword [ebp - 0x8f0]
cmp cx, word [edx]
jne 0x1001b3fe
cmp word [ebp - 0x916], 0
je 0x1001b3f2
mov eax, dword [ebp - 0x8e4]
mov cx, word [eax + 2]
mov word [ebp - 0x924], cx
mov edx, dword [ebp - 0x8f0]
cmp cx, word [edx + 2]
jne 0x1001b3fe
add dword [ebp - 0x8e4], 4
add dword [ebp - 0x8f0], 4
cmp word [ebp - 0x924], 0
jne 0x1001b398
mov dword [ebp - 0x954], 0
jmp 0x1001b409
sbb eax, eax
or eax, 1
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
mov dword [ebp - 0x964], ecx
cmp dword [ebp - 0x964], 0
je 0x1001b484
lea edx, [ebp - 0x210]
push edx
lea ecx, [ebp - 0x628]
call fcn.10014010
mov dword [ebp - 4], 0
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x658]
call fcn.10014010
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x628]
push ecx
lea edx, [ebp - 0x658]
push edx
call sym.COMMON.dll_public:_static_bool___cdecl_CFileOperation::CopyDir_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x658]
call fcn.1000a1c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x628]
call fcn.1000a1c0
jmp 0x1001b4ee
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x640]
call fcn.10014010
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x410]
push ecx
lea ecx, [ebp - 0x670]
call fcn.10014010
mov byte [ebp - 4], 3
push 0
lea edx, [ebp - 0x640]
push edx
lea eax, [ebp - 0x670]
push eax
call sym.COMMON.dll_public:_static_bool___cdecl_CFileOperation::CopyFileW_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___bool_
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x670]
call fcn.1000a1c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x640]
call fcn.1000a1c0
lea ecx, [ebp - 0x8c0]
push ecx
mov edx, dword [ebp - 0x920]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1001af67
mov eax, dword [ebp - 0x920]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ec36e
mov esp, ebp
pop ebp
ret