Function at 0x100051e0
Capabilities:
Copy file
Get disk information
Move file
Read file on windows
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push 0
push 0
call dword [sym.imp.USER32.dll_SetSystemCursor]
push 0
push 0
push 0x100cd664
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsEx]
push 0
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RtlUnwind]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DnsHostnameToComputerNameW]
push 0
call dword [sym.imp.USER32.dll_IsIconic]
mov esi, dword [sym.imp.KERNEL32.dll_IsWow64Process]
push 0
push 0
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ScrollWindowEx]
push 0
push 0
call esi
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitCommEvent]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
push 0
call dword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePrivateNamespaceW]
push 0
call dword [sym.imp.USER32.dll_RemoveClipboardFormatListener]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDesktopW]
push 0
call dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_MapVirtualKeyExW]
call dword [sym.imp.USER32.dll_GetInputState]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64SetThreadContext]
call dword [sym.imp.USER32.dll_IsWow64Message]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CopyFileTransactedW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
push 0
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalGetAtomNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
call dword [sym.imp.USER32.dll_WaitMessage]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
push 0
push 0
call dword [sym.imp.USER32.dll_ShowWindowAsync]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConvertThreadToFiberEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessMitigationPolicy]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTapePosition]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdeCreateDataHandle]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
push 0
call dword [sym.imp.USER32.dll_CloseWindow]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
call dword [sym.imp.USER32.dll_GetOpenClipboardWindow]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenPrivateNamespaceW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor eax, eax
xor edx, edx
xor esi, esi
xor ebx, ebx
xor ecx, ecx
lock cmpxchg8b qword [esi]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalSize]
push 0x100cd690
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadDescription]
push ebx
push ebx
push ebx
push ebx
push 0x100cd6bc
call dword [sym.imp.KERNEL32.dll_FindFirstStreamTransactedW]
push ebx
call dword [sym.imp.USER32.dll_ShowCaret]
push ebx
call dword [sym.imp.USER32.dll_DdeGetLastError]
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetClipboardData]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolTimer]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
push ebx
push dword [ebp - 4]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputAttribute]
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadGroupAffinity]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret