Function at 0x1005d960
Capabilities:
Check if file exists
Copy file
Delete file
Enumerate files on windows
Enumerate files recursively
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xaa4
mov eax, dword [0x103440b4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x824]
push ecx
call fcn.10071050
add esp, 8
push 0x102fc514
lea edx, [ebp - 0x824]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x1005d9b2
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.1005d450
add esp, 4
lea edx, [ebp - 0xa74]
push edx
lea eax, [ebp - 0x824]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0xa94], eax
cmp dword [ebp - 0xa94], 0xffffffff
jne 0x1005d9dc
xor al, al
jmp 0x1005dc8e
mov byte [ebp - 0xa75], 1
mov dword [ebp - 0xa80], 0x102fc51c
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0xa7c], ecx
mov edx, dword [ebp - 0xa7c]
mov ax, word [edx]
mov word [ebp - 0xa8a], ax
mov ecx, dword [ebp - 0xa80]
cmp ax, word [ecx]
jne 0x1005da5f
cmp word [ebp - 0xa8a], 0
je 0x1005da53
mov edx, dword [ebp - 0xa7c]
mov ax, word [edx + 2]
mov word [ebp - 0xa8c], ax
mov ecx, dword [ebp - 0xa80]
cmp ax, word [ecx + 2]
jne 0x1005da5f
add dword [ebp - 0xa7c], 4
add dword [ebp - 0xa80], 4
cmp word [ebp - 0xa8c], 0
jne 0x1005d9f9
mov dword [ebp - 0xa98], 0
jmp 0x1005da6a
sbb edx, edx
or edx, 1
mov dword [ebp - 0xa98], edx
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xaa0], eax
cmp dword [ebp - 0xaa0], 0
je 0x1005db1f
mov dword [ebp - 0xa88], 0x102fc520
lea ecx, [ebp - 0xa48]
mov dword [ebp - 0xa84], ecx
mov edx, dword [ebp - 0xa84]
mov ax, word [edx]
mov word [ebp - 0xa8e], ax
mov ecx, dword [ebp - 0xa88]
cmp ax, word [ecx]
jne 0x1005daff
cmp word [ebp - 0xa8e], 0
je 0x1005daf3
mov edx, dword [ebp - 0xa84]
mov ax, word [edx + 2]
mov word [ebp - 0xa90], ax
mov ecx, dword [ebp - 0xa88]
cmp ax, word [ecx + 2]
jne 0x1005daff
add dword [ebp - 0xa84], 4
add dword [ebp - 0xa88], 4
cmp word [ebp - 0xa90], 0
jne 0x1005da99
mov dword [ebp - 0xa9c], 0
jmp 0x1005db0a
sbb edx, edx
or edx, 1
mov dword [ebp - 0xa9c], edx
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0xaa4], eax
cmp dword [ebp - 0xaa4], 0
jne 0x1005db24
jmp 0x1005dc5f
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x61c]
push edx
call fcn.10071050
add esp, 8
lea eax, [ebp - 0xa48]
push eax
lea ecx, [ebp - 0x61c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x20c]
push eax
call fcn.10071050
add esp, 8
lea ecx, [ebp - 0xa48]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov eax, dword [ebp - 0xa74]
and eax, 0x10
je 0x1005db9e
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x61c]
push edx
call fcn.1005d960
add esp, 8
mov byte [ebp - 0xa75], al
jmp 0x1005dc5f
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1005dc29
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1005dc29
push 0x208
push 0
lea edx, [ebp - 0x414]
push edx
call fcn.10252510
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x414]
push ecx
call fcn.10071050
add esp, 8
push 0x102fc528
lea edx, [ebp - 0x414]
push edx
call fcn.10071070
add esp, 8
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x1005dc29
push 4
push 0
lea edx, [ebp - 0x414]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
push 1
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x61c]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1005dc4c
mov byte [ebp - 0xa76], 1
jmp 0x1005dc53
mov byte [ebp - 0xa76], 0
mov dl, byte [ebp - 0xa76]
mov byte [ebp - 0xa75], dl
lea eax, [ebp - 0xa74]
push eax
mov ecx, dword [ebp - 0xa94]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1005d9e3
mov edx, dword [ebp - 0xa94]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov al, byte [ebp - 0xa75]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e5dee
mov esp, ebp
pop ebp
ret