Function at 0x44798e
Capabilities:
Delete directory
Move file

Disassembly:
push 0xe90
mov eax, 0x4b4dc6
call fcn.00461a91
mov ebx, ecx
push 0x250
lea eax, [ebp - 0x278]
push 0
push eax
call fcn.00464590
add esp, 0xc
lea ecx, [ebp - 0xe9c]
call fcn.0040a6f3
and dword [ebp - 4], 0
lea eax, [ebp - 0xe9c]
push 0x4cf7b0
push ebx
push eax
call fcn.00405abb
pop ecx
pop ecx
push eax
call fcn.0040a68b
pop ecx
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0xe9c]
call fcn.0040a840
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x447c38
mov esi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x684]
call fcn.0040a6f3
lea eax, [ebp - 0x24c]
mov byte [ebp - 4], 1
push eax
push 0x4cf78c
lea eax, [ebp - 0x684]
push ebx
push eax
call fcn.00405abb
pop ecx
pop ecx
push eax
call fcn.0040a68b
pop ecx
pop ecx
push eax
call fcn.0040a68b
test byte [ebp - 0x278], 0x10
pop ecx
pop ecx
je 0x447bdb
lea eax, [ebp - 0x24c]
push 0x4cf7dc
push eax
call fcn.004736f3
pop ecx
pop ecx
test eax, eax
je 0x447c03
lea eax, [ebp - 0x24c]
push 0x4cf7d8
push eax
call fcn.004736f3
pop ecx
pop ecx
test eax, eax
je 0x447c03
lea ecx, [ebp - 0x684]
call fcn.0040a840
push eax
lea ecx, [ebp - 0x28]
call fcn.00404d2c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.0044798e
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00405118
lea ecx, [ebp - 0x684]
call fcn.0040a840
mov ecx, eax
call fcn.0044b531
lea ecx, [ebp - 0x684]
call fcn.0040a840
push eax
call esi
test eax, eax
jne 0x447c03
lea eax, [ebp - 0x24c]
push 0x4d2c1c
push eax
call fcn.004642d8
pop ecx
pop ecx
test eax, eax
jne 0x447af6
xor al, al
jmp 0x447afd
mov ecx, eax
call fcn.004474ac
test al, al
jne 0x447bb1
lea ecx, [ebp - 0xa90]
call fcn.0040a6f3
lea ecx, [ebp - 0x28]
call fcn.00404dc9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00449472
lea eax, [ebp - 0x28]
push eax
push 0x4cf7d8
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.00405a8f
pop ecx
pop ecx
push eax
call fcn.0040a68b
pop ecx
pop ecx
push eax
call fcn.00405abb
pop ecx
pop ecx
lea ecx, [ebp - 0xa90]
call fcn.0040a840
push eax
lea ecx, [ebp - 0x684]
call fcn.0040a840
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x447b9c
lea ecx, [ebp - 0xa90]
call fcn.0040a840
push eax
call esi
test eax, eax
jne 0x447b9c
push 4
lea ecx, [ebp - 0xa90]
call fcn.0040a840
xor edx, edx
mov ecx, eax
call fcn.0044b4fa
lea ecx, [ebp - 0x28]
call fcn.00405118
lea ecx, [ebp - 0xa90]
call fcn.0040a6d0
jmp 0x447c03
lea ecx, [ebp - 0x684]
call fcn.0040a840
push eax
call esi
test eax, eax
jne 0x447c03
push 4
lea ecx, [ebp - 0x684]
call fcn.0040a840
xor edx, edx
mov ecx, eax
call fcn.0044b4fa
jmp 0x447c03
lea ecx, [ebp - 0x684]
call fcn.0040a840
push eax
lea ecx, [ebp - 0x28]
call fcn.00404d2c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.004474d2
lea ecx, [ebp - 0x28]
call fcn.00405118
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 0
call fcn.0040a6d0
lea edx, [ebp - 0x278]
mov ecx, edi
call fcn.0044b4af
test eax, eax
jne 0x447a0a
mov ecx, edi
call fcn.0044b4d4
mov ecx, ebx
call fcn.00404e0f
push eax
call esi
lea ecx, [ebp - 0xe9c]
call fcn.0040a6d0
call fcn.00461a3b
ret