Function at 0x40a150
Capabilities:
Copy file
Create directory
Enumerate files on windows
Enumerate files recursively
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x87c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
push edi
mov dword [ebp - 0x874], eax
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
mov dword [ebp - 0x87c], ecx
mov dword [ebp - 0x870], ebx
call fcn.00414430
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.00414430
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.00414430
add esp, 0x24
lea eax, [ebp - 0x61c]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push eax
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x61c]
push 0x4253d4
push eax
call edi
push 0
push 0
push 0
lea eax, [ebp - 0x86c]
push eax
push 0
lea eax, [ebp - 0x61c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
mov dword [ebp - 0x878], eax
cmp eax, 0xffffffff
je 0x40a402
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
jmp 0x40a230
test byte [ebp - 0x86c], 0x10
lea eax, [ebp - 0x840]
push 0x42bd20
push eax
jne 0x40a30c
call esi
test eax, eax
je 0x40a3da
push 0x4253d8
lea eax, [ebp - 0x840]
push eax
call esi
test eax, eax
je 0x40a3da
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.00414430
add esp, 0xc
lea eax, [ebp - 0x414]
push dword [ebp - 0x870]
push eax
call ebx
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x414]
push eax
call edi
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.00414430
add esp, 0xc
lea eax, [ebp - 0x20c]
push dword [ebp - 0x874]
push eax
call ebx
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x20c]
push eax
call edi
push 0
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x40a3da
push 4
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
jmp 0x40a3da
call esi
test eax, eax
je 0x40a3da
push 0x4253d8
lea eax, [ebp - 0x840]
push eax
call esi
test eax, eax
je 0x40a3da
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.00414430
add esp, 0xc
lea eax, [ebp - 0x414]
push dword [ebp - 0x870]
push eax
call ebx
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x414]
push eax
call edi
push 0x42b930
lea eax, [ebp - 0x414]
push eax
call edi
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.00414430
add esp, 0xc
lea eax, [ebp - 0x20c]
push dword [ebp - 0x874]
push eax
call ebx
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x20c]
push eax
call edi
push 0x42b930
lea eax, [ebp - 0x20c]
push eax
call edi
push 0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ecx, dword [ebp - 0x87c]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.0040a150
lea eax, [ebp - 0x86c]
push eax
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40a230
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_FindClose]
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.00413a55
mov esp, ebp
pop ebp
ret 8