Function at 0x1001955e
Capabilities:
Copy file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x6cc
mov eax, 0x1006d107
call fcn.100521f6
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x698], ecx
mov dword [ebp - 0x69c], eax
test ecx, ecx
je 0x10019675
test eax, eax
je 0x10019675
xor edi, edi
inc edi
push eax
lea esi, [ebp - 0x6bc]
mov dword [ebp - 0x694], edi
call fcn.100040e3
and dword [ebp - 4], 0
mov eax, esi
push edi
push eax
call fcn.100277c7
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push edi
call fcn.1000457f
push 0x30
pop ebx
mov esi, 0x204
push esi
lea eax, [ebp - 0x41c]
push 0
push eax
mov dword [ebp - 0x420], ebx
call fcn.10051a60
add esp, 0xc
mov dword [ebp - 0x218], ebx
push esi
xor ebx, ebx
lea eax, [ebp - 0x214]
push ebx
push eax
call fcn.10051a60
add esp, 0xc
push dword [ebp - 0x698]
lea esi, [ebp - 0x43c]
call fcn.100040e3
push 0x10078b78
lea esi, [ebp - 0x6bc]
mov dword [ebp - 4], edi
call fcn.100040e3
lea eax, [ebp - 0x43c]
push eax
mov eax, esi
mov byte [ebp - 4], 2
call fcn.1002770a
pop ecx
push ebx
push edi
mov byte [ebp - 4], 1
call fcn.1000457f
cmp dword [ebp - 0x424], 8
mov eax, dword [ebp - 0x438]
jae 0x1001964f
lea eax, [ebp - 0x438]
lea ecx, [ebp - 0x690]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x6a0], eax
cmp eax, 0xffffffff
jne 0x1001967d
push ebx
push edi
lea esi, [ebp - 0x43c]
call fcn.1000457f
xor eax, eax
call fcn.10052279
ret
mov ebx, 0x10078b88
mov edi, 0x104
test byte [ebp - 0x690], 0x10
lea eax, [ebp - 0x664]
je 0x10019792
mov ecx, 0x10078b7c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100196c5
test dx, dx
je 0x100196c1
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100196c5
add eax, 4
add ecx, 4
test dx, dx
jne 0x1001969f
xor eax, eax
jmp 0x100196ca
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x100197e8
mov ecx, 0x10078b80
lea eax, [ebp - 0x664]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10019703
test dx, dx
je 0x100196ff
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10019703
add eax, 4
add ecx, 4
test dx, dx
jne 0x100196dd
xor eax, eax
jmp 0x10019708
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x100197e8
lea eax, [ebp - 0x664]
push eax
push dword [ebp - 0x698]
lea eax, [ebp - 0x420]
push ebx
push edi
push eax
call fcn.1004c98d
add esp, 0x14
lea eax, [ebp - 0x664]
push eax
push dword [ebp - 0x69c]
lea eax, [ebp - 0x218]
push ebx
push edi
push eax
call fcn.1004c98d
add esp, 0x14
lea eax, [ebp - 0x218]
push eax
lea esi, [ebp - 0x6d8]
call fcn.100040e3
mov eax, esi
push 1
push eax
mov byte [ebp - 4], 3
call fcn.100277c7
pop ecx
pop ecx
push 0
push 1
mov byte [ebp - 4], 1
call fcn.1000457f
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.1001955e
pop ecx
pop ecx
jmp 0x100197de
push eax
push dword [ebp - 0x698]
lea eax, [ebp - 0x420]
push ebx
push edi
push eax
call fcn.1004c98d
add esp, 0x14
lea eax, [ebp - 0x664]
push eax
push dword [ebp - 0x69c]
lea eax, [ebp - 0x218]
push ebx
push edi
push eax
call fcn.1004c98d
add esp, 0x14
push 0
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x100197e8
and dword [ebp - 0x694], eax
lea eax, [ebp - 0x690]
push eax
push dword [ebp - 0x6a0]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x10019687
push dword [ebp - 0x6a0]
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 1
lea esi, [ebp - 0x43c]
call fcn.1000457f
mov eax, dword [ebp - 0x694]
jmp 0x10019677