Function at 0x40f320
Capabilities:
Create directory
Enumerate files on windows
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x458
mov eax, dword [0x455670]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x454], eax
mov dword [eax], 0
call fcn.00401924
add esp, 4
test eax, eax
jne 0x40f375
mov eax, dword [ebp - 0x454]
pop edi
mov dword [eax], 1
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b411
mov esp, ebp
pop ebp
ret
push edi
call fcn.00401924
add esp, 4
test eax, eax
jne 0x40f3aa
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x40f3aa
mov ecx, dword [ebp - 0x454]
pop edi
mov dword [ecx], 2
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b411
mov esp, ebp
pop ebp
ret
push edi
push esi
call fcn.0043570b
add esp, 8
test eax, eax
jne 0x40f3d4
mov edx, dword [ebp - 0x454]
pop edi
mov dword [edx], 3
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b411
mov esp, ebp
pop ebp
ret
push 0x103
lea eax, [ebp - 0x30f]
push 0
push eax
mov byte [ebp - 0x310], 0
call fcn.0041bb50
push esi
lea ecx, [ebp - 0x310]
push str._s.
push ecx
call fcn.0041b420
add esp, 0x18
lea edx, [ebp - 0x450]
push edx
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x458], eax
cmp eax, 0xffffffff
jne 0x40f440
mov ecx, dword [ebp - 0x454]
pop edi
mov dword [ecx], 5
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b411
mov esp, ebp
pop ebp
ret
push 0x103
lea edx, [ebp - 0x107]
push 0
push edx
mov byte [ebp - 0x108], 0
call fcn.0041bb50
push 0x103
lea eax, [ebp - 0x20b]
push 0
push eax
mov byte [ebp - 0x20c], 0
call fcn.0041bb50
add esp, 0x18
jmp 0x40f480
test byte [ebp - 0x450], 0x10
jne 0x40f520
push 0
lea ecx, [ebp - 0x108]
push ecx
push str.UtlFile
call fcn.00401875
lea edx, [ebp - 0x424]
push edx
push esi
lea eax, [ebp - 0x108]
push str._s_s
push eax
call fcn.0041b420
lea ecx, [ebp - 0x424]
push ecx
push edi
lea edx, [ebp - 0x20c]
push str._s_s
push edx
call fcn.0041b420
mov eax, dword [ebp + 0x10]
add esp, 0x2c
push eax
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
test eax, eax
jne 0x40f5e4
mov edx, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x454]
push edx
mov dword [ecx], 4
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b411
mov esp, ebp
pop ebp
ret
mov ecx, 0x44c218
lea eax, [ebp - 0x424]
jmp 0x40f530
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f550
test dl, dl
je 0x40f54c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f550
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f530
xor eax, eax
jmp 0x40f555
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40f5e4
mov ecx, 0x44cc84
lea eax, [ebp - 0x424]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f588
test dl, dl
je 0x40f584
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f588
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f568
xor eax, eax
jmp 0x40f58d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40f5e4
lea eax, [ebp - 0x424]
push eax
push esi
lea ecx, [ebp - 0x108]
push str._s_s
push ecx
call fcn.0041b420
lea edx, [ebp - 0x424]
push edx
push edi
lea eax, [ebp - 0x20c]
push str._s_s
push eax
call fcn.0041b420
mov ecx, dword [ebp - 0x454]
mov edx, dword [ebp + 0x10]
push ecx
push edx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x108]
push ecx
call fcn.004011ea
add esp, 0x30
mov eax, dword [ebp - 0x458]
lea edx, [ebp - 0x450]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40f480
mov eax, dword [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov eax, 1
pop esi
call fcn.0041b411
mov esp, ebp
pop ebp
ret