Function at 0x47ec90
Capabilities:
Copy file
Create directory
Enumerate files on windows
Get common file path
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53f62b
mov eax, dword fs:[0]
push eax
sub esp, 0x764
mov eax, dword [0x5bc684]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x104
lea ecx, [ebp - 0x218]
push ecx
mov dword [ebp - 0x76c], eax
call ebx
lea edx, [ebp - 0x218]
push edx
call fcn.004bf2e0
mov eax, str._34_.__.
add esp, 4
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x47ecf1
lea edi, [ebp - 0x218]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47ed03
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp dword [ebp + 0xc], 0
rep movsb byte es:[edi], byte [esi]
je 0x47ed48
mov ebx, dword [ebp - 0x76c]
mov ecx, dword [ebx + 0x60]
lea eax, [ebp - 0x218]
push eax
add ecx, 0xf24
push ecx
call fcn.004ff027
add esp, 8
test eax, eax
je 0x47f29f
jmp 0x47edbf
mov edx, dword [ebp - 0x76c]
mov eax, dword [edx + 0x60]
add eax, 0xf24
cmp byte [eax], 0
je 0x47ed73
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.004ff027
add esp, 8
test eax, eax
jne 0x47f29f
push 0x104
lea edx, [ebp - 0x218]
push edx
call ebx
lea eax, [ebp - 0x218]
push eax
call fcn.004bf2e0
lea eax, [ebp - 0x218]
add esp, 4
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47eda0
sub eax, edx
lea ecx, [ebp + eax - 0x218]
push ecx
call fcn.004da960
mov ebx, dword [ebp - 0x76c]
add esp, 4
mov eax, dword [ebx + 0x60]
add eax, 0xf24
cmp byte [eax], 0
je 0x47f287
lea edx, [ebp - 0x218]
push edx
push eax
call fcn.004ff027
add esp, 8
test eax, eax
je 0x47f287
push ebx
call fcn.0047ead0
lea eax, [ebp - 0x218]
push eax
call fcn.004c4aa0
add esp, 8
test eax, eax
jne 0x47ee0f
push eax
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [ebp - 0x218]
push edx
call fcn.004c4aa0
add esp, 4
test eax, eax
je 0x47ee31
lea eax, [ebp - 0x218]
push eax
call fcn.004c8e00
add esp, 4
mov eax, dword [ebx + 0x60]
add eax, 0xf24
lea edx, [ebp - 0x420]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x47ee41
lea ecx, [ebp - 0x420]
push ecx
call fcn.004bf2e0
lea edi, [ebp - 0x420]
add esp, 4
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47ee61
mov edx, dword [0x550fc0]
lea eax, [ebp - 0x768]
push eax
lea ecx, [ebp - 0x420]
push ecx
mov dword [edi], edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x76c], eax
cmp eax, 0xffffffff
je 0x47f24a
mov edx, dword [ebx + 0x60]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
add edx, 0x1230
push edx
lea eax, [ebp - 0x524]
push 0x56e7d0
push eax
call esi
mov ecx, dword [ebx + 0x60]
add ecx, 0x1334
push ecx
lea edx, [ebp - 0x628]
push 0x56e7d0
push edx
call esi
add esp, 0x18
lea ecx, [ecx]
test byte [ebp - 0x768], 0x10
jne 0x47f22e
mov eax, dword [ebx + 0x60]
add eax, 0xf24
lea edx, [ebp - 0x31c]
sub edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x47eef0
lea eax, [ebp - 0x31c]
push eax
call fcn.004bf2e0
lea eax, [ebp - 0x73c]
add esp, 4
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47ef11
lea edi, [ebp - 0x31c]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47ef21
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
jmp 0x47ef40
mov cl, byte [ebp + eax - 0x218]
mov byte [ebp + eax - 0x114], cl
inc eax
test cl, cl
jne 0x47ef40
lea ecx, [ebp - 0x114]
push ecx
call fcn.004bf2e0
mov edx, dword [ebx + 0x60]
add edx, 0x95c0
push edx
lea eax, [ebp - 0x31c]
push eax
call fcn.004bef70
add esp, 0xc
test eax, eax
je 0x47f01a
mov eax, str.__923__
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47ef87
lea edi, [ebp - 0x114]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47ef97
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x114]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47efb6
mov cx, word [0x5509cc]
lea edx, [ebp - 0x524]
push edx
lea eax, [ebp - 0x31c]
push eax
mov word [edi], cx
call fcn.004bef70
lea edi, [ebp - 0x114]
add esp, 8
dec edi
test eax, eax
je 0x47f005
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47eff0
mov ecx, dword [0x56e7cc]
mov dword [edi], ecx
jmp 0x47f1f0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47f005
mov edx, dword [0x56e7c8]
mov dword [edi], edx
jmp 0x47f1f0
mov eax, dword [ebx + 0x60]
add eax, 0x96c4
push eax
lea ecx, [ebp - 0x31c]
push ecx
call fcn.004bef70
add esp, 8
test eax, eax
je 0x47f0cc
mov eax, 0x5bba08
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47f041
lea edi, [ebp - 0x114]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47f051
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x114]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47f070
mov dx, word [0x5509cc]
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x31c]
push ecx
mov word [edi], dx
call fcn.004bef70
lea edi, [ebp - 0x114]
add esp, 8
dec edi
test eax, eax
je 0x47f0b8
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47f0a3
mov edx, dword [0x56e7cc]
mov dword [edi], edx
jmp 0x47f1f0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47f0b8
mov eax, dword [0x56e7c8]
mov dword [edi], eax
jmp 0x47f1f0
mov ecx, dword [ebx + 0x60]
add ecx, 0x97c8
push ecx
lea edx, [ebp - 0x31c]
push edx
call fcn.004bef70
add esp, 8
test eax, eax
je 0x47f182
mov eax, 0x5bb9e8
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47f0f4
lea edi, [ebp - 0x114]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47f104
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x114]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47f123
mov ax, word [0x5509cc]
lea ecx, [ebp - 0x524]
push ecx
lea edx, [ebp - 0x31c]
push edx
mov word [edi], ax
call fcn.004bef70
lea edi, [ebp - 0x114]
add esp, 8
dec edi
test eax, eax
je 0x47f170
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47f155
mov eax, dword [0x56e7cc]
mov dword [edi], eax
jmp 0x47f1f0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x47f170
mov ecx, dword [0x56e7c8]
mov dword [edi], ecx
jmp 0x47f1f0
mov edx, dword [ebx + 0x60]
add edx, 0x1d4
push edx
lea eax, [ebp - 0x31c]
push eax
call fcn.004ff027
add esp, 8
test eax, eax
jne 0x47f1c0
mov eax, str._34_.__.t65
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47f1a6
lea edi, [ebp - 0x114]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47f1b6
jmp 0x47f1e0
lea eax, [ebp - 0x73c]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x47f1c8
lea edi, [ebp - 0x114]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x47f1d8
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x31c]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x47f21d
push eax
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x31c]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea edx, [ebp - 0x31c]
push 0
push edx
call fcn.004cabd0
add esp, 8
mov ecx, dword [ebp - 0x76c]
lea eax, [ebp - 0x768]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x47eed0
mov edx, dword [ebp - 0x76c]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
lea ecx, [ebp - 0x770]
call fcn.0043f010
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x770]
call fcn.0043fab0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x770]
call fcn.0043f020
mov eax, dword [ebx + 0x60]
lea edx, [ebp - 0x218]
add eax, 0xf24
mov cl, byte [edx]
mov byte [eax], cl
inc edx
inc eax
test cl, cl
jne 0x47f295
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004fe1f5
mov esp, ebp
pop ebp
ret