Function at 0x40f0b0
Capabilities:
Create directory
Enumerate files on windows
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x458
mov eax, dword [0x454670]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x454], eax
mov dword [eax], 0
call fcn.00401924
add esp, 4
test eax, eax
jne 0x40f105
mov eax, dword [ebp - 0x454]
pop edi
mov dword [eax], 1
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b181
mov esp, ebp
pop ebp
ret
push edi
call fcn.00401924
add esp, 4
test eax, eax
jne 0x40f13a
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x40f13a
mov ecx, dword [ebp - 0x454]
pop edi
mov dword [ecx], 2
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b181
mov esp, ebp
pop ebp
ret
push edi
push esi
call fcn.0043547b
add esp, 8
test eax, eax
jne 0x40f164
mov edx, dword [ebp - 0x454]
pop edi
mov dword [edx], 3
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b181
mov esp, ebp
pop ebp
ret
push 0x103
lea eax, [ebp - 0x30f]
push 0
push eax
mov byte [ebp - 0x310], 0
call fcn.0041b8c0
push esi
lea ecx, [ebp - 0x310]
push str._s.
push ecx
call fcn.0041b190
add esp, 0x18
lea edx, [ebp - 0x450]
push edx
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x458], eax
cmp eax, 0xffffffff
jne 0x40f1d0
mov ecx, dword [ebp - 0x454]
pop edi
mov dword [ecx], 5
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b181
mov esp, ebp
pop ebp
ret
push 0x103
lea edx, [ebp - 0x107]
push 0
push edx
mov byte [ebp - 0x108], 0
call fcn.0041b8c0
push 0x103
lea eax, [ebp - 0x20b]
push 0
push eax
mov byte [ebp - 0x20c], 0
call fcn.0041b8c0
add esp, 0x18
jmp 0x40f210
test byte [ebp - 0x450], 0x10
jne 0x40f2b0
push 0
lea ecx, [ebp - 0x108]
push ecx
push str.UtlFile
call fcn.00401875
lea edx, [ebp - 0x424]
push edx
push esi
lea eax, [ebp - 0x108]
push str._s_s
push eax
call fcn.0041b190
lea ecx, [ebp - 0x424]
push ecx
push edi
lea edx, [ebp - 0x20c]
push str._s_s
push edx
call fcn.0041b190
mov eax, dword [ebp + 0x10]
add esp, 0x2c
push eax
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
test eax, eax
jne 0x40f374
mov edx, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x454]
push edx
mov dword [ecx], 4
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b181
mov esp, ebp
pop ebp
ret
mov ecx, 0x44b140
lea eax, [ebp - 0x424]
jmp 0x40f2c0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f2e0
test dl, dl
je 0x40f2dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f2e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f2c0
xor eax, eax
jmp 0x40f2e5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40f374
mov ecx, 0x44bbac
lea eax, [ebp - 0x424]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40f318
test dl, dl
je 0x40f314
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40f318
add eax, 2
add ecx, 2
test dl, dl
jne 0x40f2f8
xor eax, eax
jmp 0x40f31d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40f374
lea eax, [ebp - 0x424]
push eax
push esi
lea ecx, [ebp - 0x108]
push str._s_s
push ecx
call fcn.0041b190
lea edx, [ebp - 0x424]
push edx
push edi
lea eax, [ebp - 0x20c]
push str._s_s
push eax
call fcn.0041b190
mov ecx, dword [ebp - 0x454]
mov edx, dword [ebp + 0x10]
push ecx
push edx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x108]
push ecx
call fcn.004011ef
add esp, 0x30
mov eax, dword [ebp - 0x458]
lea edx, [ebp - 0x450]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40f210
mov eax, dword [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
mov eax, 1
pop esi
call fcn.0041b181
mov esp, ebp
pop ebp
ret