Function at 0x4287b3
Capabilities:
Copy file
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x2e8
mov eax, 0x5db224
call fcn.00593b07
mov esi, edx
mov edi, ecx
call fcn.00428796
test al, al
je 0x428a96
mov ecx, esi
call fcn.00428796
xor ebx, ebx
test al, al
jne 0x4287f2
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x4287ea
mov eax, dword [esi]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
call fcn.0040b155
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push 0x2f
pop edx
push 0x5c
pop edi
cmp word [eax + ecx*2 - 2], di
mov edi, 0x62aa1c
je 0x428847
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
cmp word [eax + ecx*2 - 2], dx
je 0x428847
push edi
call fcn.005baec0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.0040b220
mov edi, 0x62aa14
push edi
call fcn.005baec0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.0040b220
push esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
call fcn.0040b155
push 8
mov byte [ebp - 4], 1
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x30]
pop edi
cmp dword [ebp - 0x2c], edi
push 0x5c
cmovae eax, dword [ebp - 0x40]
pop edx
cmp word [eax + ecx*2 - 2], dx
je 0x4288b4
cmp dword [ebp - 0x2c], edi
lea eax, [ebp - 0x40]
push 0x2f
cmovae eax, dword [ebp - 0x40]
pop edx
cmp word [eax + ecx*2 - 2], dx
je 0x4288b4
mov esi, 0x62aa1c
push esi
call fcn.005baec0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call fcn.0040b220
cmp dword [ebp - 0x14], edi
lea ecx, [ebp - 0x2f0]
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x428a84
xor eax, eax
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov byte [ebp - 4], 3
test byte [ebp - 0x2f0], 0x10
je 0x4289ac
cmp word [ebp - 0x2c4], 0x2e
je 0x428a51
lea eax, [ebp - 0x2f1]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
add eax, 0xfffffffd
push eax
push ebx
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x88]
call fcn.0041151f
pop ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.0040b67e
lea eax, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x88]
call fcn.0041154e
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x70]
call fcn.004287b3
jmp 0x428a51
lea eax, [ebp - 0x2f2]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
add eax, 0xfffffffd
push eax
push ebx
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 5
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x88]
call fcn.0041151f
pop ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.0040b67e
lea eax, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x88]
call fcn.0041154e
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67e
cmp dword [ebp - 0x44], edi
lea ecx, [ebp - 0x58]
push ebx
cmovae ecx, dword [ebp - 0x58]
lea eax, [ebp - 0x70]
cmp dword [ebp - 0x5c], edi
push ecx
cmovae eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 1
call fcn.0040b67e
lea eax, [ebp - 0x2f0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4288d7
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov bl, 1
lea ecx, [ebp - 0x40]
call fcn.0040b67e
lea ecx, [ebp - 0x28]
call fcn.0040b67e
mov al, bl
call fcn.00593ab1
ret