Function at 0x428c95
Capabilities:
Copy file
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x2e8
mov eax, 0x5e32f4
call fcn.0059bbd7
mov esi, edx
mov edi, ecx
call fcn.00428c78
test al, al
je 0x428f78
mov ecx, esi
call fcn.00428c78
xor ebx, ebx
test al, al
jne 0x428cd4
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x428ccc
mov eax, dword [esi]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
call fcn.0040b155
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push 0x2f
pop edx
push 0x5c
pop edi
cmp word [eax + ecx*2 - 2], di
mov edi, 0x633b6c
je 0x428d29
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
cmp word [eax + ecx*2 - 2], dx
je 0x428d29
push edi
call fcn.005c2f90
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.0040b220
mov edi, 0x633b64
push edi
call fcn.005c2f90
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.0040b220
push esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
call fcn.0040b155
push 8
mov byte [ebp - 4], 1
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x30]
pop edi
cmp dword [ebp - 0x2c], edi
push 0x5c
cmovae eax, dword [ebp - 0x40]
pop edx
cmp word [eax + ecx*2 - 2], dx
je 0x428d96
cmp dword [ebp - 0x2c], edi
lea eax, [ebp - 0x40]
push 0x2f
cmovae eax, dword [ebp - 0x40]
pop edx
cmp word [eax + ecx*2 - 2], dx
je 0x428d96
mov esi, 0x633b6c
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call fcn.0040b220
cmp dword [ebp - 0x14], edi
lea ecx, [ebp - 0x2f0]
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x428f66
xor eax, eax
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov byte [ebp - 4], 3
test byte [ebp - 0x2f0], 0x10
je 0x428e8e
cmp word [ebp - 0x2c4], 0x2e
je 0x428f33
lea eax, [ebp - 0x2f1]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
add eax, 0xfffffffd
push eax
push ebx
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x88]
call fcn.0041152a
pop ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.0040b67e
lea eax, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x88]
call fcn.00411559
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x70]
call fcn.00428c95
jmp 0x428f33
lea eax, [ebp - 0x2f2]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
add eax, 0xfffffffd
push eax
push ebx
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 5
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x88]
call fcn.0041152a
pop ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.0040b67e
lea eax, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x88]
call fcn.00411559
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
cmp dword [ebp - 0x44], edi
lea ecx, [ebp - 0x58]
push ebx
cmovae ecx, dword [ebp - 0x58]
lea eax, [ebp - 0x70]
cmp dword [ebp - 0x5c], edi
push ecx
cmovae eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 1
call fcn.0040b67e
lea eax, [ebp - 0x2f0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x428db9
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov bl, 1
lea ecx, [ebp - 0x40]
call fcn.0040b67e
lea ecx, [ebp - 0x28]
call fcn.0040b67e
mov al, bl
call fcn.0059bb81
ret