Function at 0x4017d0
Capabilities:
Copy file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc8
mov eax, dword [0x412004]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov dword [ebp - 0x85c], 1
mov byte [ebp - 0x408], 0
push 0x3ff
push 0
lea eax, [ebp - 0x407]
push eax
call fcn.004064d0
add esp, 0xc
mov byte [ebp - 0xc60], 0
push 0x3ff
push 0
lea ecx, [ebp - 0xc5f]
push ecx
call fcn.004064d0
add esp, 0xc
mov byte [ebp - 0x830], 0
push 0x3ff
push 0
lea edx, [ebp - 0x82f]
push edx
call fcn.004064d0
add esp, 0xc
mov dword [ebp - 0x430], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xdb4], eax
lea ecx, [ebp - 0x830]
mov dword [ebp - 0xdb8], ecx
mov edx, dword [ebp - 0xdb8]
mov dword [ebp - 0xdbc], edx
mov eax, dword [ebp - 0xdb4]
mov cl, byte [eax]
mov byte [ebp - 0xdbd], cl
mov edx, dword [ebp - 0xdb8]
mov al, byte [ebp - 0xdbd]
mov byte [edx], al
mov ecx, dword [ebp - 0xdb4]
add ecx, 1
mov dword [ebp - 0xdb4], ecx
mov edx, dword [ebp - 0xdb8]
add edx, 1
mov dword [ebp - 0xdb8], edx
cmp byte [ebp - 0xdbd], 0
jne 0x401870
lea eax, [ebp - 0x830]
add eax, 0xffffffff
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0xdc4]
mov dl, byte [ecx + 1]
mov byte [ebp - 0xdc5], dl
add dword [ebp - 0xdc4], 1
cmp byte [ebp - 0xdc5], 0
jne 0x4018c2
mov edi, dword [ebp - 0xdc4]
mov eax, dword [str..]
mov dword [edi], eax
mov cl, byte [0x410498]
mov byte [edi + 4], cl
lea edx, [ebp - 0xda0]
push edx
lea eax, [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 0xffffffff
jne 0x401921
xor al, al
jmp 0x401bfe
mov dword [ebp - 0x854], 0
xor ecx, ecx
mov dword [ebp - 0x850], ecx
mov dword [ebp - 0x84c], ecx
mov dword [ebp - 0x848], ecx
mov dword [ebp - 0x844], ecx
mov dword [ebp - 0x840], ecx
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x838], ecx
mov dword [ebp - 0x834], ecx
mov dword [ebp - 0x42c], 0
xor edx, edx
mov dword [ebp - 0x428], edx
mov dword [ebp - 0x424], edx
mov dword [ebp - 0x420], edx
mov dword [ebp - 0x41c], edx
mov dword [ebp - 0x418], edx
mov dword [ebp - 0x414], edx
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x40c], edx
mov dword [ebp - 0xda4], 0
jmp 0x4019b4
mov eax, dword [ebp - 0xda4]
add eax, 1
mov dword [ebp - 0xda4], eax
cmp dword [ebp - 0xda4], 0x64
jge 0x401bef
cmp dword [ebp - 0x85c], 0
je 0x401bef
lea ecx, [ebp - 0xd74]
push ecx
mov edx, dword [ebp + 8]
push edx
push 0x41049c
lea eax, [ebp - 0x408]
push eax
call fcn.0040274f
add esp, 0x10
lea ecx, [ebp - 0xd74]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0x4104a4
lea eax, [ebp - 0xc60]
push eax
call fcn.0040274f
add esp, 0x10
mov ecx, dword [ebp - 0xda0]
and ecx, 0x10
jne 0x401a2f
push str.New_Ver
lea edx, [ebp - 0x408]
push edx
call fcn.00401040
add esp, 8
test eax, eax
je 0x401a34
jmp 0x401bd0
lea eax, [ebp - 0x854]
push eax
push 0
lea ecx, [ebp - 0x408]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExA]
lea edx, [ebp - 0x42c]
push edx
push 0
lea eax, [ebp - 0xc60]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExA]
mov dword [ebp - 0xda8], 0
mov dword [ebp - 0xdac], 0
mov ecx, dword [ebp - 0x834]
cmp ecx, dword [ebp - 0x40c]
jne 0x401aac
lea edx, [ebp - 0x408]
push edx
call fcn.00401480
add esp, 4
mov dword [ebp - 0xda8], eax
lea eax, [ebp - 0xc60]
push eax
call fcn.00401480
add esp, 4
mov dword [ebp - 0xdac], eax
mov ecx, dword [ebp - 0x834]
cmp ecx, dword [ebp - 0x40c]
jne 0x401acc
mov edx, dword [ebp - 0xda8]
cmp edx, dword [ebp - 0xdac]
je 0x401bd0
mov eax, dword [ebp - 0xdac]
push eax
mov ecx, dword [ebp - 0x40c]
push ecx
lea edx, [ebp - 0xc60]
push edx
mov eax, dword [ebp - 0xda8]
push eax
mov ecx, dword [ebp - 0x834]
push ecx
lea edx, [ebp - 0x408]
push edx
push str.TC_Patch_CopyFile__s__d___d____s__d___d_
push 1
call fcn.004010a0
add esp, 0x20
mov dword [ebp - 0xdb0], 0
jmp 0x401b20
mov eax, dword [ebp - 0xdb0]
add eax, 1
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0xdb0], 5
jge 0x401bd0
push 0x4104e4
lea ecx, [ebp - 0x408]
push ecx
call fcn.00401760
add esp, 8
push str.af_sign.exe
lea edx, [ebp - 0x408]
push edx
call fcn.00401760
add esp, 8
push str.af_io32.exe
lea eax, [ebp - 0x408]
push eax
call fcn.00401760
add esp, 8
push str.af_kb32.exe
lea ecx, [ebp - 0x408]
push ecx
call fcn.00401760
add esp, 8
push 0
lea edx, [ebp - 0xc60]
push edx
lea eax, [ebp - 0x408]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x401b99
jmp 0x401bd0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xc60]
push ecx
lea edx, [ebp - 0x408]
push edx
mov eax, dword [ebp - 0xdb0]
add eax, 1
push eax
push str.TC_Patch_CopyFile_err__d___s___s_
push 1
call fcn.004010a0
add esp, 0x14
jmp 0x401b11
lea ecx, [ebp - 0xda0]
push ecx
mov edx, dword [ebp - 0x858]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x85c], eax
jmp 0x4019a5
mov eax, dword [ebp - 0x858]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor al, al
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00402740
mov esp, ebp
pop ebp
ret