Function at 0x1003a97
Capabilities:
Copy file
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x7c4]
sub esp, 0x844
mov eax, dword [0x100a028]
push ebx
push esi
push edi
mov esi, 0x10022d4
push esi
push dword [ebp + 0x7cc]
mov dword [ebp + 0x7c0], eax
mov dword [ebp - 0x80], 1
call fcn.01005030
xor ebx, ebx
jmp 0x1003c20
push 0x3e8
lea eax, [ebp + 0x1d0]
push eax
push ebx
push edi
mov dword [ebp - 0x7c], ebx
call fcn.01004f68
test eax, eax
je 0x1003c13
cmp dword [0x100a074], ebx
jne 0x1003b10
lea eax, [ebp + 0x1d0]
push eax
push ebx
push 0xc
push 0x68
push dword [0x100a7a4]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
lea eax, [ebp + 0x6bc]
push eax
lea eax, [ebp + 0x1d0]
push eax
push 0x100a900
call fcn.0100259f
push 0x3e8
lea eax, [ebp + 0x1d0]
push eax
push 1
push edi
call fcn.01004f68
test eax, eax
je 0x1003c13
lea eax, [ebp + 0xcc]
push eax
lea eax, [ebp + 0x1d0]
push eax
push 0x100a900
call fcn.0100259f
push 0x3e8
lea eax, [ebp + 0x1d0]
push eax
push 2
push edi
call fcn.01004f68
test eax, eax
je 0x1003b8e
lea eax, [ebp + 0x5b8]
push eax
lea eax, [ebp + 0x1d0]
push eax
push 0x100a900
call fcn.0100259f
jmp 0x1003b94
mov byte [ebp + 0x5b8], bl
lea eax, [ebp + 0x6bc]
push 0x10022cc
push eax
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
jne 0x1003c13
push ebx
push ebx
lea eax, [ebp + 0x6bc]
push eax
call fcn.0100397f
lea eax, [ebp + 0x6bc]
push eax
push 0x100a008
call fcn.0100395a
push 0x80
lea eax, [ebp + 0x6bc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push dword [ebp + 0x7cc]
call fcn.01002de1
push ebx
lea eax, [ebp + 0x6bc]
push eax
mov al, byte [ebp + 0x5b8]
neg al
lea ecx, [ebp + 0x5b8]
sbb eax, eax
and eax, ecx
push eax
lea eax, [ebp + 0xcc]
push eax
call dword [0x100a040]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
and dword [ebp - 0x80], eax
push esi
push edi
call fcn.01004f42
mov edi, eax
cmp edi, ebx
jne 0x1003ad2
push 0x10022c4
push dword [ebp + 0x7cc]
call fcn.01005030
jmp 0x1003d48
mov edi, 0x3e8
push edi
lea eax, [ebp + 0x1d0]
push eax
push ebx
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], ebx
call fcn.01004f68
test eax, eax
je 0x1003d35
cmp dword [0x100a074], ebx
jne 0x1003c80
lea eax, [ebp + 0x1d0]
push eax
push ebx
push 0xc
push 0x68
push dword [0x100a7a4]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
lea eax, [ebp + 0x6bc]
push eax
lea eax, [ebp + 0x1d0]
push eax
mov esi, 0x100a900
push esi
call fcn.0100259f
push edi
lea eax, [ebp + 0x1d0]
push eax
push 1
push dword [ebp - 0x78]
call fcn.01004f68
test eax, eax
je 0x1003d35
lea eax, [ebp + 0x5b8]
push eax
lea eax, [ebp + 0x1d0]
push eax
push esi
call fcn.0100259f
lea eax, [ebp + 0x6bc]
push 0x10022cc
push eax
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
jne 0x1003d35
push ebx
push ebx
lea eax, [ebp + 0x6bc]
push eax
call fcn.0100397f
lea eax, [ebp + 0x6bc]
push eax
push 0x100a008
call fcn.0100395a
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov edi, 0x80
push edi
lea eax, [ebp + 0x6bc]
push eax
call esi
push ebx
lea eax, [ebp + 0x6bc]
push eax
lea eax, [ebp + 0x5b8]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 0x7c], eax
push edi
lea eax, [ebp + 0x6bc]
push eax
call esi
mov eax, dword [ebp - 0x7c]
and dword [ebp - 0x80], eax
push 0x10022c4
push dword [ebp - 0x78]
call fcn.01004f42
cmp eax, ebx
mov dword [ebp - 0x78], eax
jne 0x1003c3f
push 0x10022bc
push dword [ebp + 0x7cc]
call fcn.01005030
jmp 0x1003e77
push 0x3e8
lea eax, [ebp + 0x1d0]
push eax
push ebx
push dword [ebp - 0x78]
mov dword [ebp - 0x7c], ebx
call fcn.01004f68
test eax, eax
je 0x1003e64
cmp dword [0x100a074], ebx
jne 0x1003da8
lea eax, [ebp + 0x1d0]
push eax
push ebx
push 0xc
push 0x68
push dword [0x100a7a4]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
lea eax, [ebp + 0x5b8]
push eax
lea eax, [ebp + 0x1d0]
push eax
push 0x100a900
call fcn.0100259f
mov edi, 0x104
push edi
lea eax, [ebp + 0x6bc]
push eax
push 1
push dword [ebp - 0x78]
call fcn.01004f68
test eax, eax
je 0x1003e64
mov esi, dword [sym.imp.msvcrt.dll__strlwr]
lea eax, [ebp + 0x6bc]
push eax
call esi
pop ecx
push dword [ebp + 0x7cc]
call fcn.01002de1
lea eax, [ebp + 0xcc]
push eax
push edi
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x1470000
lea eax, [ebp + 0x5b8]
push eax
call dword [0x100a044]
cmp eax, ebx
mov dword [ebp - 0x7c], eax
je 0x1003e64
lea eax, [ebp + 0xcc]
push eax
call esi
pop ecx
lea edi, [ebp + 0xcc]
lea esi, [ebp + 0x6bc]
mov cl, byte [esi]
mov al, cl
cmp cl, byte [edi]
jne 0x1003e58
cmp al, bl
je 0x1003e54
mov cl, byte [esi + 1]
mov al, cl
cmp cl, byte [edi + 1]
jne 0x1003e58
inc esi
inc esi
inc edi
inc edi
cmp al, bl
jne 0x1003e36
xor eax, eax
jmp 0x1003e5d
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x1003e64
mov dword [ebp - 0x7c], ebx
mov eax, dword [ebp - 0x7c]
and dword [ebp - 0x80], eax
push 0x10022bc
push dword [ebp - 0x78]
call fcn.01004f42
cmp eax, ebx
mov dword [ebp - 0x78], eax
jne 0x1003d68
call fcn.01002ed8
mov edi, 0x10022b4
push edi
push dword [ebp + 0x7cc]
call fcn.01005030
jmp 0x1003fd1
push 0x3e8
lea eax, [ebp + 0x1d0]
push eax
push 1
push dword [ebp - 0x78]
call fcn.01004f68
test eax, eax
je 0x1003fc8
lea eax, [ebp + 0x6bc]
push eax
lea eax, [ebp + 0x1d0]
push eax
push 0x100a900
call fcn.0100259f
lea eax, [ebp + 0x6bc]
push 0x10022cc
push eax
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
jne 0x1003fc8
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp + 0x6bc]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x7c], eax
je 0x1003fc8
lea eax, [ebp + 0x6bc]
push 0x5c
push eax
call dword [sym.imp.msvcrt.dll_strrchr]
pop ecx
mov esi, eax
pop ecx
inc esi
test byte [ebp - 0x74], 0x10
jne 0x1003faa
cmp dword [0x100a074], ebx
jne 0x1003f47
lea eax, [ebp - 0x48]
push eax
push ebx
push 0xc
push 0x68
push dword [0x100a7a4]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
lea eax, [ebp - 0x48]
mov edx, esi
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x1003f50
lea eax, [ebp + 0x6bc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x1003faa
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x80
lea eax, [ebp + 0x6bc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp + 0x6bc]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x1003faa
lea eax, [ebp + 0x6bc]
push eax
push 0x100a008
call fcn.0100395a
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x1003f20
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_FindClose]
push edi
push dword [ebp - 0x78]
call fcn.01004f42
cmp eax, ebx
mov dword [ebp - 0x78], eax
jne 0x1003e9d
push 0x10022b0
push 0x1002220
push dword [ebp + 0x7cc]
call fcn.0100504e
cmp eax, ebx
je 0x100406b
push 0x3e8
lea ecx, [ebp + 0x1d0]
push ecx
push 1
push eax
call fcn.01004f68
test eax, eax
je 0x100406b
lea eax, [ebp + 0x1d0]
push eax
call fcn.0100345a
mov dword [0x100a7ac], eax
lea eax, [ebp + 0x6bc]
push eax
lea eax, [ebp + 0x1d0]
push eax
push 0x100a900
call fcn.0100259f
lea eax, [ebp + 0x6bc]
push eax
call fcn.0100345a
mov dword [0x100a8fc], eax
lea eax, [ebp + 0x6bc]
push 0x5c
push eax
call dword [sym.imp.msvcrt.dll_strrchr]
pop ecx
mov byte [eax], bl
pop ecx
lea eax, [ebp + 0x6bc]
push eax
call fcn.0100345a
mov dword [0x101ac64], eax
cmp dword [0x100a074], ebx
jne 0x1004089
push 0x10021e0
push ebx
push 0xc
push 0x68
push dword [0x100a7a4]
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov ecx, dword [ebp + 0x7c0]
mov eax, dword [ebp - 0x80]
pop edi
pop esi
pop ebx
call fcn.0100515e
add ebp, 0x7c4
leave
ret 4