Function at 0x497bba
Capabilities:
Check if file exists
Copy file
Enumerate files on windows
Enumerate files recursively
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x55fbfb
mov eax, dword fs:[0]
push eax
sub esp, 0x310
mov eax, dword [0x5afee0]
xor eax, esp
mov dword [esp + 0x308], eax
push ebx
push esi
push edi
mov eax, dword [0x5afee0]
xor eax, esp
push eax
lea eax, [esp + 0x320]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
push eax
lea ecx, [esp + 0x74]
call fcn.004051c1
and dword [esp + 0x328], 0
push esi
lea ecx, [esp + 0x90]
call fcn.004051c1
and dword [esp + 0x14], 0
xor ebx, ebx
inc ebx
push 8
mov byte [esp + 0x32c], bl
mov eax, dword [esp + 0x94]
pop edi
cmp dword [esp + 0xa4], edi
jae 0x497c48
lea eax, [esp + 0x90]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push eax
call esi
test eax, eax
jne 0x497c74
mov ebx, dword [esp + 0x90]
cmp dword [esp + 0xa4], edi
jae 0x497c6c
lea ebx, [esp + 0x90]
call fcn.0049699b
xor ebx, ebx
inc ebx
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x88], edi
jae 0x497c85
lea eax, [esp + 0x74]
push eax
call esi
test eax, eax
je 0x497f78
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xac]
call fcn.004051c1
push 0x588c88
lea ecx, [esp + 0xac]
mov byte [esp + 0x32c], 2
call fcn.0040a9e6
mov eax, dword [esp + 0xac]
cmp dword [esp + 0xc0], edi
jae 0x497cd1
lea eax, [esp + 0xac]
lea ecx, [esp + 0xc4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
jne 0x497d3a
xor esi, esi
push esi
push ebx
lea ecx, [esp + 0xb0]
call fcn.004053e5
push 0
push ebx
lea ecx, [esp + 0x94]
call fcn.004053e5
push 0
push ebx
lea ecx, [esp + 0x78]
call fcn.004053e5
mov eax, esi
mov ecx, dword [esp + 0x320]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x308]
xor ecx, esp
call fcn.0052f7d0
mov esp, ebp
pop ebp
ret
mov edi, 0x57c664
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x58]
call fcn.004051c1
push edi
lea ecx, [esp + 0x58]
mov byte [esp + 0x32c], 3
call fcn.0040a9e6
lea eax, [esp + 0xf0]
push eax
lea ecx, [esp + 0x58]
call fcn.0040a9e6
test byte [esp + 0xc4], 0x10
je 0x497e27
cmp word [esp + 0xf0], 0x2e
je 0x497f2b
cmp dword [esp + 0x6c], 8
mov eax, dword [esp + 0x58]
jae 0x497d9f
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x497dca
lea esi, [esp + 0x54]
call fcn.00497b38
cmp dword [esp + 0x6c], 8
mov ebx, dword [esp + 0x58]
jae 0x497dc2
lea ebx, [esp + 0x58]
call fcn.0049699b
xor ebx, ebx
inc ebx
push edi
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0040a99f
lea ecx, [esp + 0xfc]
push ecx
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x340], 4
call fcn.0040a99f
push dword [ebp + 0x10]
lea ecx, [esp + 0x70]
push ecx
push eax
mov byte [esp + 0x34c], 5
call fcn.00497bba
add esp, 0x24
push 0
push ebx
lea ecx, [esp + 0x40]
mov dword [esp + 0x1c], eax
call fcn.004053e5
lea ecx, [esp + 0x1c]
jmp 0x497f1b
xor esi, esi
cmp dword [ebp + 0x10], esi
je 0x497e99
push edi
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0040a99f
lea ecx, [esp + 0xfc]
push ecx
push eax
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x340], 6
call fcn.0040a99f
mov ecx, dword [esp + 0x70]
add esp, 0x18
cmp dword [esp + 0x6c], 8
jae 0x497e6b
lea ecx, [esp + 0x58]
cmp dword [eax + 0x18], 8
jb 0x497e76
mov eax, dword [eax + 4]
jmp 0x497e79
add eax, 4
push eax
call fcn.00496ba5
pop ecx
push esi
push ebx
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], eax
call fcn.004053e5
push esi
lea ecx, [esp + 0x3c]
jmp 0x497f1d
cmp dword [esp + 0x6c], 8
mov eax, dword [esp + 0x58]
jae 0x497ea8
lea eax, [esp + 0x58]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x497f2b
push edi
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.0040a99f
lea ecx, [esp + 0xfc]
push ecx
push eax
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x340], 7
call fcn.0040a99f
mov ecx, dword [esp + 0x70]
add esp, 0x18
cmp dword [esp + 0x6c], 8
jae 0x497ef0
lea ecx, [esp + 0x58]
cmp dword [eax + 0x18], 8
jb 0x497efb
mov eax, dword [eax + 4]
jmp 0x497efe
add eax, 4
push ebx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push ebx
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], eax
call fcn.004053e5
lea ecx, [esp + 0x38]
push 0
push ebx
mov byte [esp + 0x330], 3
call fcn.004053e5
lea eax, [esp + 0xc4]
push eax
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push 0
lea ecx, [esp + 0x58]
push ebx
test eax, eax
je 0x497f5a
mov byte [esp + 0x330], 2
call fcn.004053e5
jmp 0x497d3f
call fcn.004053e5
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push ebx
lea ecx, [esp + 0xb0]
call fcn.004053e5
mov esi, dword [esp + 0x14]
jmp 0x497cf9