Function at 0x444160
Capabilities:
Check if file exists
Delete file
Get file attributes
Move file
Set file attributes

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5f1e2b
push eax
mov dword fs:[0], esp
sub esp, 0x408
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x428]
xor ebx, ebx
test edi, edi
je 0x4444a4
mov esi, dword [esp + 0x42c]
test esi, esi
je 0x4444a4
mov ebp, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push esi
call ebp
mov ecx, dword [esp + 0x430]
mov dword [esp + 0x14], eax
test ecx, ecx
je 0x4441c0
cmp eax, 0xffffffff
jne 0x4444a4
push esi
lea ecx, [esp + 0x14]
call fcn.005df235
push str._2tmp
lea ecx, [esp + 0x14]
mov dword [esp + 0x424], 0
call fcn.005df5a3
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [esp + 0x10]
push 0
push ecx
push edi
call fcn.0040f1a0
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x444490
mov eax, dword [esp + 0x434]
test eax, eax
je 0x444228
mov edx, dword [esp + 0x10]
push edx
push edi
call eax
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x444485
mov ebx, dword [esp + 0x14]
or edi, 0xffffffff
cmp ebx, edi
je 0x444247
test bl, 1
je 0x444247
and ebx, 0xfffffffe
push ebx
push esi
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
cmp dword [esp + 0x438], 2
je 0x444364
mov eax, dword [esp + 0x10]
push 1
push esi
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
mov ebx, eax
test ebx, ebx
jne 0x44445f
cmp dword [esp + 0x14], edi
je 0x444471
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x19]
mov byte [esp + 0x18], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
lea ecx, [esp + 0x20]
push 0x649ac4
push ecx
call fcn.0044cdc2
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call ebp
xor edi, edi
cmp eax, 0xffffffff
je 0x4442eb
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
lea eax, [esp + 0x20]
push 0x649ac4
push eax
call fcn.0044cdc2
add esp, 0x10
lea ecx, [esp + 0x18]
push ecx
call ebp
inc edi
cmp edi, 0xa
jge 0x444485
cmp eax, 0xffffffff
jne 0x4442b3
mov ebp, dword [sym.imp.KERNEL32.dll_MoveFileA]
lea edx, [esp + 0x18]
push edx
push esi
call ebp
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_MoveFileExA]
push 1
push esi
push eax
call edi
mov ebx, eax
test ebx, ebx
je 0x44431a
push esi
call fcn.004110d0
add esp, 4
jmp 0x444335
mov eax, dword [esp + 0x438]
test eax, eax
jbe 0x444331
mov ecx, dword [esp + 0x10]
push 5
push esi
push ecx
call edi
mov ebx, eax
test ebx, ebx
je 0x444352
mov edx, dword [esp + 0x10]
push edx
call fcn.004110d0
add esp, 4
lea eax, [esp + 0x18]
push 4
push 0
push eax
call edi
jmp 0x444490
lea ecx, [esp + 0x18]
push esi
push ecx
call ebp
mov edx, dword [esp + 0x10]
push edx
jmp 0x44448a
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x219]
mov byte [esp + 0x218], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp ebx, 0xffffffff
stosb byte es:[edi], al
je 0x4443fe
test bl, 0x10
je 0x4443fe
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
push eax
push esi
lea ecx, [esp + 0x220]
push 0x649ac4
push ecx
call fcn.0044cdc2
add esp, 0x10
lea edx, [esp + 0x218]
push edx
call ebp
xor edi, edi
cmp eax, 0xffffffff
je 0x4443ef
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
call ebx
push eax
push esi
lea eax, [esp + 0x220]
push 0x649ac4
push eax
call fcn.0044cdc2
add esp, 0x10
lea ecx, [esp + 0x218]
push ecx
call ebp
inc edi
cmp edi, 0xa
jge 0x44442a
cmp eax, 0xffffffff
jne 0x4443b9
lea edx, [esp + 0x218]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_MoveFileExA]
push 5
push esi
push eax
call edi
mov ebx, eax
test ebx, ebx
jne 0x444442
lea ecx, [esp + 0x218]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov edx, dword [esp + 0x10]
push edx
jmp 0x44448a
lea ecx, [esp + 0x10]
mov dword [esp + 0x420], 0xffffffff
call fcn.005df1c7
xor eax, eax
jmp 0x4444a6
mov eax, dword [esp + 0x10]
push eax
call fcn.004110d0
add esp, 4
lea ecx, [esp + 0x218]
push 4
push 0
push ecx
call edi
jmp 0x444490
push esi
call fcn.004110d0
add esp, 4
mov dword [esp + 0x420], edi
jmp 0x44449b
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [esp + 0x420], edi
jmp 0x44449b
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [esp + 0x420], 0xffffffff
lea ecx, [esp + 0x10]
call fcn.005df1c7
mov eax, ebx
mov ecx, dword [esp + 0x418]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x414
ret