Function at 0x44bd57
Capabilities:
Create directory
Delete file
Move file

Disassembly:
push 0x28
mov eax, 0x48a842
call fcn.004677c7
mov dword [ebp - 0x24], ecx
mov esi, 0x4c37f8
mov ecx, esi
call fcn.00428c26
test eax, eax
je 0x44bfcc
xor edi, edi
cmp dword [0x4c385c], edi
jne 0x44bfcc
mov ecx, esi
call fcn.00428c26
mov ecx, eax
call fcn.0044c72d
mov ecx, esi
mov ebx, eax
call fcn.00428c4d
mov dword [ebp - 0x34], eax
cmp ebx, edi
je 0x44bfcc
cmp eax, edi
je 0x44bfcc
mov eax, dword [ebx]
push ebx
call dword [eax + 0x50]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004029f9
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], edi
call fcn.00402ee2
push dword [ebp - 0x14]
mov byte [ebp - 4], 1
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea ecx, [ebp - 0x18]
call fcn.004029f9
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0040d8a7
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.00420322
lea ecx, [ebp - 0x14]
call fcn.0040d8a7
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.00420322
push 0x4a0ee8
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040d822
lea ecx, [ebp - 0x18]
push ecx
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 3
call fcn.00422c8d
add esp, 0x18
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.004023e9
push edi
push dword [ebp - 0x10]
push edi
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push 0x497d78
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040d822
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.00401d13
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.004023e9
push dword [ebp - 0x10]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4c3860
call fcn.00401d13
push dword [ebp - 0x10]
call fcn.0040d9f2
pop ecx
test eax, eax
je 0x44bfa0
mov ebx, 0x4c4f30
push ebx
lea ecx, [ebp - 0x28]
call fcn.00401ce4
mov ecx, dword [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.0044a074
push ebx
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x30], eax
call fcn.00401ce4
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 8
cmp ecx, edi
je 0x44befc
lea eax, [ebp - 0x20]
push eax
call fcn.0044d477
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
call fcn.00402ee2
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x2c]
push eax
call fcn.0044b6c3
mov byte [ebp - 4], 9
call fcn.0043dc3b
mov ebx, 0x497d70
test eax, eax
jne 0x44bf2e
mov ebx, str.high
lea eax, [ebp - 0x30]
push eax
call fcn.0042e9be
pop ecx
push dword [ebp - 0x2c]
mov ecx, esi
push ebx
push dword [eax]
mov byte [ebp - 4], 0xa
call fcn.00428bf0
push eax
lea eax, [ebp - 0x28]
push str._NOTIFYWND_d__WINDOWTEXT_s__PCTYPE_s__VIDEO_s
push eax
call fcn.00404c90
mov ecx, dword [ebp - 0x30]
add esp, 0x18
add ecx, 0xfffffff0
mov byte [ebp - 4], 9
call fcn.004023e9
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push 0xffffffffffffffff
push edi
push edi
push 1
push 5
push esi
push dword [ebp - 0x10]
push eax
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004023e9
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004023e9
lea ecx, [esi - 0x10]
call fcn.004023e9
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004023e9
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004023e9
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004023e9
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004023e9
call fcn.0046789f
ret