Function at 0x4287b0
Capabilities:
Copy file
Create directory
Enumerate files on windows
Enumerate files recursively

Disassembly:
push 0x2e8
mov eax, 0x5d9734
call fcn.00592017
mov esi, edx
mov edi, ecx
call fcn.00428793
test al, al
je 0x428a93
mov ecx, esi
call fcn.00428793
xor ebx, ebx
test al, al
jne 0x4287ef
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x4287e7
mov eax, dword [esi]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
call fcn.0040b155
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
push 0x2f
pop edx
push 0x5c
pop edi
cmp word [eax + ecx*2 - 2], di
mov edi, 0x628a24
je 0x428844
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
cmp word [eax + ecx*2 - 2], dx
je 0x428844
push edi
call fcn.005b93d0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.0040b220
mov edi, 0x628a1c
push edi
call fcn.005b93d0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.0040b220
push esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
call fcn.0040b155
push 8
mov byte [ebp - 4], 1
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x30]
pop edi
cmp dword [ebp - 0x2c], edi
push 0x5c
cmovae eax, dword [ebp - 0x40]
pop edx
cmp word [eax + ecx*2 - 2], dx
je 0x4288b1
cmp dword [ebp - 0x2c], edi
lea eax, [ebp - 0x40]
push 0x2f
cmovae eax, dword [ebp - 0x40]
pop edx
cmp word [eax + ecx*2 - 2], dx
je 0x4288b1
mov esi, 0x628a24
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call fcn.0040b220
cmp dword [ebp - 0x14], edi
lea ecx, [ebp - 0x2f0]
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x428a81
xor eax, eax
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov byte [ebp - 4], 3
test byte [ebp - 0x2f0], 0x10
je 0x4289a9
cmp word [ebp - 0x2c4], 0x2e
je 0x428a4e
lea eax, [ebp - 0x2f1]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
add eax, 0xfffffffd
push eax
push ebx
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 4
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x88]
call fcn.0041151c
pop ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67b
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.0040b67b
lea eax, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x88]
call fcn.0041154b
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67b
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x70]
call fcn.004287b0
jmp 0x428a4e
lea eax, [ebp - 0x2f2]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xa0]
add eax, 0xfffffffd
push eax
push ebx
lea eax, [ebp - 0x28]
push eax
call fcn.0040b1d0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 5
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x88]
call fcn.0041151c
pop ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67b
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.0040b67b
lea eax, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x88]
call fcn.0041154b
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.0040b0ac
lea ecx, [ebp - 0x88]
call fcn.0040b67b
cmp dword [ebp - 0x44], edi
lea ecx, [ebp - 0x58]
push ebx
cmovae ecx, dword [ebp - 0x58]
lea eax, [ebp - 0x70]
cmp dword [ebp - 0x5c], edi
push ecx
cmovae eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [ebp - 0x58]
call fcn.0040b67b
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 1
call fcn.0040b67b
lea eax, [ebp - 0x2f0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4288d4
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov bl, 1
lea ecx, [ebp - 0x40]
call fcn.0040b67b
lea ecx, [ebp - 0x28]
call fcn.0040b67b
mov al, bl
call fcn.00591fc1
ret