Function at 0x415cd0
Capabilities:
Check if file exists
Copy file
Create directory
Delete directory
Enumerate files on windows
Enumerate files recursively
Move file
Print debug messages
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5421b0
mov eax, dword fs:[0]
push eax
sub esp, 0x2c0
mov eax, dword [0x594ca8]
xor eax, esp
mov dword [esp + 0x2b8], eax
push ebx
push esi
push edi
mov eax, dword [0x594ca8]
xor eax, esp
push eax
lea eax, [esp + 0x2d0]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
push 0x570574
push eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x70]
mov ebx, ecx
push eax
mov dword [esp + 0x28], ebx
call fcn.00404260
mov eax, dword [eax]
add esp, 0xc
lea ecx, [esp + 0x74]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov dword [esp + 0x6c], esi
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x415d67
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, 0xffffffff
je 0x416409
jmp 0x415d84
mov ebx, dword [esp + 0x1c]
test byte [esp + 0x74], 0x10
je 0x416012
lea ecx, [esp + 0xa0]
push ecx
lea ecx, [esp + 0x14]
call fcn.004040f0
mov dword [esp + 0x2d8], 0
mov esi, dword [esp + 0x10]
mov ecx, 0x570580
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x415ddc
test dx, dx
je 0x415dd8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x415ddc
add eax, 4
add ecx, 4
test dx, dx
jne 0x415db6
xor eax, eax
jmp 0x415de1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
setne al
test al, al
je 0x415fee
mov ecx, 0x570584
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x415e1b
test dx, dx
je 0x415e17
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x415e1b
add eax, 4
add ecx, 4
test dx, dx
jne 0x415df5
xor eax, eax
jmp 0x415e20
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
setne al
test al, al
je 0x415fee
push 0x57058c
lea edx, [esp + 0x2c]
push edi
push edx
call fcn.00404260
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push eax
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x2e4], 1
call fcn.00403830
add esp, 0xc
mov byte [esp + 0x2d8], 3
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x415e83
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x415e9e
mov edx, dword [esp + 0x14]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov eax, dword [esp + 0x18]
push 0x57058c
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.00404260
add esp, 0xc
lea edx, [esp + 0x10]
push edx
push eax
lea eax, [esp + 0x58]
push eax
mov byte [esp + 0x2e4], 4
call fcn.00403830
add esp, 0xc
mov ebx, dword [ebp + 0x10]
push ebx
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x24]
push eax
mov byte [esp + 0x2e4], 5
call fcn.00415cd0
mov byte [esp + 0x2d8], 4
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x415f13
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 3
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x415f3b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
jne 0x415fc6
mov ecx, dword [esp + 0x18]
push 0x57058c
push ecx
lea edx, [esp + 0x40]
push edx
call fcn.00404260
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push eax
lea edx, [esp + 0x78]
push edx
mov byte [esp + 0x2e4], 6
call fcn.00403830
mov eax, dword [eax]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x415f9e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 3
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x415fc6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x415fee
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x2d8], 0xffffffff
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x4163de
cmp byte [ebp + 0x10], 0
push 0x57058c
push edi
je 0x4161fd
lea ecx, [esp + 0x50]
push ecx
call fcn.00404260
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push eax
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x2e4], 7
call fcn.00404260
add esp, 0xc
mov esi, eax
mov ecx, dword [esp + 0x18]
push 0x57058c
push ecx
lea edx, [esp + 0x48]
push edx
mov byte [esp + 0x2e4], 8
call fcn.00404260
add esp, 0xc
lea ecx, [esp + 0xa0]
push ecx
push eax
lea edx, [esp + 0x60]
push edx
mov byte [esp + 0x2e4], 9
call fcn.00404260
mov esi, dword [esi]
mov eax, dword [eax]
add esp, 0xc
push 0
push 0
push ebx
push 0x416430
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
mov eax, dword [esp + 0x58]
sete bl
add eax, 0xfffffff0
or esi, 0xffffffff
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4160cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 8
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4160f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 7
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41611a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x2d8], esi
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x416140
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x41614f
push 0x571860
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x57058c
lea ecx, [esp + 0x30]
push edi
push ecx
call fcn.00404260
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push eax
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x2e4], 0xa
call fcn.00404260
add esp, 0xc
push 0x5710ac
push eax
lea ecx, [esp + 0x68]
push ecx
mov byte [esp + 0x2e4], 0xb
call fcn.00404260
mov eax, dword [eax]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, esi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4161c6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 0xa
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4161ed
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x2d8], esi
mov eax, dword [esp + 0x2c]
jmp 0x4163d1
lea ecx, [esp + 0x54]
push ecx
call fcn.00404260
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push eax
lea eax, [esp + 0x4c]
push eax
mov dword [esp + 0x2e4], 0xc
call fcn.00404260
add esp, 0xc
mov esi, eax
mov ecx, dword [esp + 0x18]
push 0x57058c
push ecx
lea edx, [esp + 0x44]
push edx
mov byte [esp + 0x2e4], 0xd
call fcn.00404260
add esp, 0xc
lea ecx, [esp + 0xa0]
push ecx
push eax
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x2e4], 0xe
call fcn.00404260
mov esi, dword [esi]
mov eax, dword [eax]
add esp, 0xc
push 0xb
push ebx
push 0x416430
push esi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileWithProgressW]
test eax, eax
mov eax, dword [esp + 0x34]
sete bl
add eax, 0xfffffff0
or esi, 0xffffffff
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4162a5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 0xd
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4162cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 0xc
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4162f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x2d8], esi
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x416319
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x416328
push 0x5718c8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0x57058c
lea ecx, [esp + 0x68]
push edi
push ecx
call fcn.00404260
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push eax
lea eax, [esp + 0x64]
push eax
mov dword [esp + 0x2e4], 0xf
call fcn.00404260
add esp, 0xc
push 0x5710ac
push eax
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0x2e4], 0x10
call fcn.00404260
mov eax, dword [eax]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, esi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41639f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x2d8], 0xf
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4163c6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x2d8], esi
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
lock xadd dword [ecx], esi
dec esi
test esi, esi
jg 0x4163ea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x6c]
lea ecx, [esp + 0x74]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x415d80
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [esp + 0x2d0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2b8]
xor ecx, esp
call fcn.005155a4
mov esp, ebp
pop ebp
ret 0xc