Function at 0x410d11
Capabilities:
Copy file
Delete file
Enumerate files on windows
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x874
push ebx
push esi
push edi
mov esi, 0x206
xor ebx, ebx
push esi
lea eax, [ebp - 0x872]
push ebx
push eax
mov dword [ebp - 4], 1
mov word [ebp - 0x874], bx
call sub.MSVCRT.dll_memset
push esi
lea eax, [ebp - 0x41a]
push ebx
push eax
mov word [ebp - 0x41c], bx
call sub.MSVCRT.dll_memset
mov edi, dword [sym.imp.KERNEL32.DLL_lstrcpyW]
add esp, 0x18
push dword [ebp + 8]
lea eax, [ebp - 0x874]
push eax
call edi
lea eax, [ebp - 0x874]
push eax
call fcn.0040aca0
pop ecx
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x66c]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindFirstFileW]
cmp eax, ebx
mov dword [ebp - 8], eax
je 0x410fe0
cmp eax, 0xffffffff
je 0x410fe0
lea eax, [ebp - 0x640]
push eax
push dword [ebp - 0xc]
lea eax, [ebp - 0x41c]
push 0x4025f8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
test byte [ebp - 0x66c], 0x10
je 0x410e8e
lea eax, [ebp - 0x640]
push eax
call fcn.00409b9a
test eax, eax
pop ecx
jne 0x410fbf
mov eax, dword [ebp + 0x10]
cmp eax, ebx
jbe 0x410fbf
cmp eax, 2
jbe 0x410e00
cmp eax, 3
je 0x410e7c
cmp eax, 4
jmp 0x410eab
push esi
lea eax, [ebp - 0x212]
push ebx
push eax
mov word [ebp - 0x214], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push dword [ebp + 0xc]
lea eax, [ebp - 0x214]
push eax
call edi
cmp dword [ebp + 0x14], ebx
je 0x410e3d
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
lea eax, [ebp - 0x214]
push eax
call fcn.00403d25
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x41c]
push eax
call fcn.00410bb3
add esp, 0xc
test eax, eax
je 0x410e6f
cmp dword [ebp - 4], ebx
mov dword [ebp - 4], 1
jne 0x410e72
mov dword [ebp - 4], ebx
cmp dword [ebp + 0x10], 1
jne 0x410fbf
lea eax, [ebp - 0x41c]
push eax
call fcn.00410aa6
pop ecx
jmp 0x410fac
cmp dword [ebp + 0x10], ebx
jbe 0x410fbf
cmp dword [ebp + 0x10], 2
jbe 0x410f19
cmp dword [ebp + 0x10], 3
je 0x410f92
cmp dword [ebp + 0x10], 4
jne 0x410fbf
push esi
lea eax, [ebp - 0x212]
push ebx
push eax
mov word [ebp - 0x214], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push dword [ebp + 0xc]
lea eax, [ebp - 0x214]
push eax
call edi
cmp dword [ebp + 0x14], ebx
je 0x410eee
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
lea eax, [ebp - 0x214]
push eax
call fcn.00403d25
pop ecx
push 3
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.DLL_MoveFileExW]
mov dword [ebp - 4], eax
jmp 0x410fbf
push esi
lea eax, [ebp - 0x212]
push ebx
push eax
mov word [ebp - 0x214], bx
call sub.MSVCRT.dll_memset
add esp, 0xc
push dword [ebp + 0xc]
lea eax, [ebp - 0x214]
push eax
call edi
cmp dword [ebp + 0x14], ebx
je 0x410f56
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatW]
lea eax, [ebp - 0x214]
push eax
call fcn.00403d25
pop ecx
push 1
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.DLL_CopyFileW]
test eax, eax
je 0x410f89
cmp dword [ebp - 4], ebx
mov dword [ebp - 4], 1
jne 0x410f8c
mov dword [ebp - 4], ebx
cmp dword [ebp + 0x10], 1
jne 0x410fbf
lea eax, [ebp - 0x41c]
push eax
call fcn.00410a8e
pop ecx
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
test eax, eax
je 0x410fbc
cmp dword [ebp - 4], ebx
mov dword [ebp - 4], 1
jne 0x410fbf
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x66c]
push eax
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.DLL_FindNextFileW]
test eax, eax
jne 0x410d9e
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret