Function at 0x435dcc
Capabilities:
Copy file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x274
mov eax, 0x567fb5
call fcn.0053da79
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov esi, dword [ebp + 0xc]
sub eax, 0x10
push eax
call fcn.00402431
lea ebx, [eax + 0x10]
pop ecx
mov dword [ebp - 0x270], ebx
and dword [ebp - 4], 0
mov eax, dword [esi]
sub eax, 0x10
push eax
call fcn.00402431
lea edi, [eax + 0x10]
pop ecx
mov dword [ebp - 0x278], edi
mov byte [ebp - 4], 1
cmp dword [edi - 0xc], 0
je 0x4360c4
cmp dword [ebx - 0xc], 0
je 0x4360c4
push dword [esi]
call fcn.00437d6e
pop ecx
test eax, eax
jne 0x435e3a
call fcn.00437d2a
jmp 0x435e3d
xor eax, eax
inc eax
test eax, eax
je 0x4360c4
push 1
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x270]
call fcn.0040f0c6
mov esi, 0x599b60
push esi
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00410e1f
test eax, eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x268]
setne byte [ebp - 0x261]
add ecx, 0xfffffff0
call fcn.00402722
cmp byte [ebp - 0x261], 0
je 0x435ea1
push 0x5c
lea ecx, [ebp - 0x270]
call fcn.004171f0
mov ebx, dword [ebp - 0x270]
push 1
lea eax, [ebp - 0x268]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040f0c6
push esi
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00410e1f
test eax, eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x268]
setne byte [ebp - 0x261]
add ecx, 0xfffffff0
call fcn.00402722
cmp byte [ebp - 0x261], 0
je 0x435ef8
push 0x5c
lea ecx, [ebp - 0x278]
call fcn.004171f0
mov edi, dword [ebp - 0x278]
call fcn.00438647
push eax
lea ecx, [ebp - 0x280]
call fcn.0042a80d
push 0x59b804
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x268]
push eax
mov byte [ebp - 4], 4
call fcn.0040193e
add esp, 0xc
push eax
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 5
call fcn.0040248f
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x268]
add ecx, 0xfffffff0
call fcn.00402722
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x268], eax
cmp eax, 0xffffffff
je 0x436095
lea esi, [edi - 0x10]
push esi
call fcn.00402431
add eax, 0x10
pop ecx
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 6
call fcn.00538bc9
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x274]
call fcn.0040b738
lea eax, [ebx - 0x10]
push eax
call fcn.00402431
add eax, 0x10
pop ecx
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 7
call fcn.00538bc9
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x26c]
call fcn.0040b738
test byte [ebp - 0x260], 0x10
je 0x436046
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x27c]
call fcn.0040235d
push 0x59dc88
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 8
call fcn.00410e1f
test eax, eax
je 0x436036
push 0x59ed14
lea ecx, [ebp - 0x27c]
call fcn.00410e1f
test eax, eax
je 0x436036
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.00435dcc
pop ecx
pop ecx
mov ecx, dword [ebp - 0x27c]
add ecx, 0xfffffff0
call fcn.00402722
jmp 0x43605a
push 0
push dword [ebp - 0x274]
push dword [ebp - 0x26c]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [ebp - 0x26c]
add ecx, 0xfffffff0
call fcn.00402722
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x274]
add ecx, 0xfffffff0
call fcn.00402722
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x435f6f
push dword [ebp - 0x268]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 0x280]
add ecx, 0xfffffff0
call fcn.00402722
lea ecx, [edi - 0x10]
call fcn.00402722
lea ecx, [ebx - 0x10]
call fcn.00402722
xor eax, eax
inc eax
jmp 0x4360d6
lea ecx, [edi - 0x10]
call fcn.00402722
lea ecx, [ebx - 0x10]
call fcn.00402722
xor eax, eax
call fcn.0053dafc
ret