Function at 0x402f80
Capabilities:
Check if file exists
Copy file
Enumerate files on windows

Disassembly:
mov eax, 0x1298
call fcn.0040a300
mov eax, dword [0x40f020]
xor eax, esp
mov dword [esp + 0x1294], eax
mov eax, dword [esp + 0x129c]
push ebx
push ebp
push esi
push edi
mov esi, ecx
xor ebx, ebx
push 0x206
lea ecx, [esp + 0x27e]
push ebx
push ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], eax
mov word [esp + 0x284], bx
call fcn.00407250
push 0x206
lea edx, [esp + 0x10aa]
push ebx
push edx
lea ebp, [ebx + 1]
mov word [esp + 0x10b0], bx
call fcn.00407250
push 0x206
lea eax, [esp + 0x49e]
push ebx
push eax
mov word [esp + 0x4a4], bx
call fcn.00407250
push 0x206
lea ecx, [esp + 0x8b2]
push ebx
push ecx
mov word [esp + 0x8b8], bx
call fcn.00407250
push 0x206
lea edx, [esp + 0xcc6]
push ebx
push edx
mov word [esp + 0xccc], bx
call fcn.00407250
push 0x1fe
lea eax, [esp + 0x6ca]
push ebx
push eax
mov word [esp + 0x2b8], bx
mov dword [esp + 0x2ba], ebx
mov word [esp + 0x6d0], bx
call fcn.00407250
add esp, 0x48
push 0x1fe
lea ecx, [esp + 0xa96]
push ebx
push ecx
mov word [esp + 0xa9c], bx
call fcn.00407250
push 0x1fe
lea edx, [esp + 0xeaa]
push ebx
push edx
mov word [esp + 0xeb0], bx
call fcn.00407250
mov ecx, dword [esi + 0x10]
add esp, 0x18
push 0x104
lea eax, [esp + 0x27c]
push eax
call ecx
test eax, eax
jne 0x4030c1
mov dword [esi + 0xc], 0x102
jmp 0x4033d9
lea edi, [esp + 0x278]
add edi, 0xfffffffe
jmp 0x4030d0
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x4030d0
mov eax, dword [esp + 0x14]
mov ecx, 0x13
mov esi, str.System32DriverStoreFileRepository_
rep movsd dword es:[edi], dword [esi]
mov edx, eax
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4030f0
lea edi, [esp + 0x278]
sub eax, edx
add edi, 0xfffffffe
jmp 0x403110
mov cx, word [edi + 2]
add edi, 2
cmp cx, bx
jne 0x403110
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x278]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x403136
mov edx, dword [0x40dbd4]
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x27c]
push ecx
mov dword [edi], edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x1c], eax
je 0x4033d4
lea ebx, [ebx]
cmp ebp, ebx
je 0x4033d4
mov ebp, dword [esp + 0x18]
mov eax, dword [ebp + 0x10]
push 0x104
lea edx, [esp + 0x27c]
push edx
call eax
lea edi, [esp + 0x278]
add edi, 0xfffffffe
jmp 0x4031a0
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x4031a0
mov ecx, 0x13
mov esi, str.System32DriverStoreFileRepository_
lea eax, [esp + 0x4c]
rep movsd dword es:[edi], dword [esi]
mov edx, eax
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4031c0
lea edi, [esp + 0x278]
sub eax, edx
add edi, 0xfffffffe
jmp 0x4031e0
mov cx, word [edi + 2]
add edi, 2
cmp cx, bx
jne 0x4031e0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
mov edi, edi
movzx ecx, word [esp + eax + 0x278]
mov word [esp + eax + 0x480], cx
add eax, 2
cmp cx, bx
jne 0x403200
lea edi, [esp + 0x480]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x403222
mov ecx, dword [0x40da24]
mov eax, dword [esp + 0x14]
mov dword [edi], ecx
mov edx, eax
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x403240
lea edi, [esp + 0x480]
sub eax, edx
add edi, 0xfffffffe
jmp 0x403260
mov cx, word [edi + 2]
add edi, 2
cmp cx, bx
jne 0x403260
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
push ebx
push ebx
push 0x104
lea edx, [esp + 0x894]
push edx
mov edx, dword [ebp + 0x18]
mov ecx, eax
push 2
and ecx, 3
push 1
lea eax, [esp + 0x290]
rep movsb byte es:[edi], byte [esi]
push eax
lea ecx, [esp + 0x49c]
push ecx
call edx
test eax, eax
je 0x4033c9
lea eax, [esp + 0xe98]
push eax
lea ecx, [esp + 0xa94]
push ecx
lea edx, [esp + 0x690]
push edx
lea eax, [esp + 0x27c]
push eax
lea ecx, [esp + 0x898]
push ecx
call fcn.004037a3
push str..pnf
lea edx, [esp + 0xaa8]
push edx
lea eax, [esp + 0x6a4]
push eax
lea ecx, [esp + 0x290]
push ecx
lea edx, [esp + 0xcb4]
push edx
call fcn.004037ed
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
add esp, 0x28
lea eax, [esp + 0x888]
push eax
call esi
test eax, eax
je 0x40332c
lea ecx, [esp + 0xc90]
push ecx
call esi
test eax, eax
jne 0x4033b2
lea edx, [esp + 0xe98]
push edx
lea eax, [esp + 0xa94]
push eax
lea ecx, [esp + 0x690]
push ecx
lea edx, [esp + 0x27c]
push edx
lea eax, [esp + 0x490]
push eax
call fcn.004037a3
push str..pnf
lea ecx, [esp + 0xaa8]
push ecx
lea edx, [esp + 0x6a4]
push edx
lea eax, [esp + 0x290]
push eax
lea ecx, [esp + 0x10bc]
push ecx
call fcn.004037ed
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileW]
add esp, 0x28
push ebx
lea edx, [esp + 0x88c]
push edx
lea eax, [esp + 0x488]
push eax
call esi
push ebx
lea ecx, [esp + 0xc94]
push ecx
lea edx, [esp + 0x10a0]
push edx
call esi
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x20]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov ebp, eax
jmp 0x403170
mov dword [ebp + 0xc], 0x30a
xor eax, eax
jmp 0x4033d9
mov eax, 1
mov ecx, dword [esp + 0x12a4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004034bc
add esp, 0x1298
ret 4