Wide Two-Layer Networks can Learn from Adversarial Perturbations