Function at 0x544a8c
Capabilities:
Copy file
Create directory
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 5], cl
mov esi, edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x544fc0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x6723a0]
cmp byte [eax], 0
jne 0x544f91
mov eax, dword [0x672428]
test byte [eax + 0x208], 0x10
jne 0x544af1
mov al, byte [0x544fd4]
and al, byte [ebp - 5]
mov dl, byte [0x544fd8]
cmp dl, al
je 0x544f91
mov byte [ebp - 6], 0
test byte [ebp - 5], 8
jne 0x544b0a
push 0
mov eax, dword [0x672218]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_CreateDirectoryW
mov byte [ebp - 0x2d], 1
call fcn.006562d0
mov dword [ebp - 0xc], eax
call fcn.006562d0
mov ebx, eax
push 0
mov eax, dword [0x672218]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
mov edx, 0x544fe0
call fcn.0062b55c
mov eax, dword [0x672428]
test byte [eax + 0x209], 0x40
je 0x544bc9
call fcn.0065deb8
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00625e44
mov eax, dword [0x672428]
imul eax, dword [eax + 0x212], 0x3c
imul eax, eax, 0x3c
shl eax, 3
lea eax, [eax + eax*2]
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fsubp st(1)
fstp qword [ebp - 0x24]
wait
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
dec eax
cmp eax, 0
jl 0x544bc9
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 0x2c]
lea edi, [eax + edx*4]
mov eax, dword [edi]
call fcn.00625e30
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00625e44
fcomp qword [ebp - 0x24]
fnstsw ax
sahf
jae 0x544bc0
mov eax, dword [edi]
push eax
call sub.kernel32.dll_DeleteFileW
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x544b86
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x24]
dec eax
test eax, eax
jl 0x544c08
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x18]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [edx + ecx*4]
call fcn.004034e4
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x2c]
mov eax, ebx
call fcn.00657778
inc dword [ebp - 0x2c]
dec dword [ebp - 0x34]
jne 0x544bdf
mov eax, ebx
call fcn.004645bc
cmp dword [ebp - 4], 0
je 0x544ccb
test esi, esi
je 0x544c29
lea eax, [ebp - 0x14]
mov edx, dword [esi]
call fcn.004038bc
jmp 0x544c50
mov eax, dword [ebp - 4]
cmp byte [eax + 0x454], 0
je 0x544c3f
lea eax, [ebp - 0x14]
call fcn.0053595c
jmp 0x544c50
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x158]
call fcn.004038bc
test byte [ebp - 5], 0x10
je 0x544c63
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.004038bc
jmp 0x544cb5
mov eax, dword [ebp - 4]
cmp byte [eax + 0x454], 0
je 0x544c79
lea eax, [ebp - 0x10]
call fcn.0053595c
jmp 0x544cb5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x160]
sub eax, 3
je 0x544c8c
sub eax, 2
jne 0x544ca4
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x158]
mov edx, 0x544fec
call fcn.0065ced8
jmp 0x544cb5
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x158]
call fcn.004038bc
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x10]
call fcn.0065d088
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x10]
call fcn.004038bc
xor esi, esi
jmp 0x544e03
mov edi, 1
jmp 0x544cda
inc edi
lea eax, [edi + esi]
cmp eax, dword [ebx + 0x24]
jge 0x544cfa
lea eax, [edi + esi]
mov edx, dword [ebx + 0x18]
mov edx, dword [edx + eax*4]
mov eax, dword [ebx + 0x18]
mov eax, dword [eax + esi*4]
call fcn.0065ce24
test al, al
jne 0x544cd9
mov eax, dword [ebx + 0x18]
mov eax, dword [eax + esi*4]
mov edx, dword [ebp - 0x10]
call fcn.0065ce24
mov byte [ebp - 0x2e], al
cmp byte [ebp - 0x2e], 0
je 0x544d8f
test byte [ebp - 5], 1
jne 0x544d8f
lea edx, [edi + esi]
dec edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x18]
mov eax, dword [edx + eax*4]
call fcn.00625e30
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00625e44
fstp qword [ebp - 0x48]
wait
mov eax, dword [ebp - 0x14]
call fcn.00625e30
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.00625e44
fsub qword [ebp - 0x48]
mov eax, dword [0x672428]
mov eax, dword [eax + 0x20e]
mov edx, dword [0x672550]
imul eax, dword [edx + eax*4], 0x3c
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fcompp
fnstsw ax
sahf
jbe 0x544d8f
mov byte [ebp - 0x2d], 0
mov eax, dword [0x672428]
cmp dword [eax + 0x20a], 9
je 0x544e0f
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [0x672428]
cmp dword [eax + 0x20a], 9
jge 0x544dfe
mov al, byte [ebp - 0x2e]
xor al, 1
and eax, 0x7f
lea edx, [edi + esi]
sub edx, eax
mov eax, dword [0x672428]
mov eax, dword [eax + 0x20a]
mov ecx, dword [0x6723b0]
sub edx, dword [ecx + eax*4]
mov eax, esi
sub eax, edx
jg 0x544dfe
dec eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x2c]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x18]
mov eax, dword [edx + eax*4]
push eax
call sub.kernel32.dll_DeleteFileW
mov edx, dword [ebp - 0x2c]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x28]
dec dword [ebp - 0x2c]
inc dword [ebp - 0x34]
jne 0x544dd0
sub edi, dword [ebp - 0x28]
add esi, edi
mov eax, dword [ebx + 0x24]
dec eax
cmp esi, eax
jle 0x544cd2
mov eax, ebx
call fcn.004028c0
mov eax, dword [ebp - 0xc]
call fcn.004028c0
mov eax, dword [0x672218]
mov eax, dword [eax]
call fcn.0062b57c
cmp byte [ebp - 0x2d], 0
je 0x544f91
test byte [ebp - 5], 8
jne 0x544f91
lea eax, [ebp - 0x18]
mov edx, dword [0x672218]
mov edx, dword [edx]
call fcn.004038bc
lea eax, [ebp - 0x18]
call fcn.0062b120
mov eax, dword [0x672428]
test byte [eax + 0x208], 0x20
je 0x544e85
mov eax, dword [0x672428]
cmp dword [eax + 0x20a], 0
jle 0x544e85
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.00403ac4
lea eax, [ebp - 0x18]
call fcn.0062b120
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
call fcn.00464388
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x18]
call fcn.00403ac4
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
call fcn.0065cf64
jmp 0x544eb3
lea eax, [ebp - 0x1c]
call fcn.0065b928
mov eax, dword [ebp - 0x1c]
call fcn.0065b8e4
cmp ax, 0x2e
je 0x544eab
lea eax, [ebp - 0x1c]
call fcn.0065b928
push dword [ebp - 0x1c]
push 0x544ffc
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x10]
call fcn.0065d0b8
push dword [ebp - 0x40]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00403b88
mov eax, dword [ebp - 0x18]
call fcn.00403ab8
cmp eax, 0x100
jge 0x544e3e
push 0
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x18]
call fcn.0065cfe0
mov eax, dword [ebp - 0x40]
push eax
call sub.kernel32.dll_CreateDirectoryW
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4a8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x4b4], eax
call fcn.0065deb8
mov eax, dword [ebp - 4]
fstp qword [eax + 0x80c]
wait
test byte [ebp - 5], 2
jne 0x544f4f
push 0
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_CopyFileW
test eax, eax
jne 0x544f91
test byte [ebp - 5], 2
je 0x544f68
push 3
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_MoveFileExW
test eax, eax
jne 0x544f91
lea ecx, [ebp - 0x3c]
mov eax, 0x545004
mov edx, dword [ebp - 0x18]
call fcn.0065d968
mov eax, dword [ebp - 0x3c]
mov cx, word [0x5450a4]
mov dl, 1
call fcn.0062941c
cmp ax, 2
je 0x544f95
jmp 0x544f36
mov byte [ebp - 6], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x544fc7
lea eax, [ebp - 0x40]
call fcn.00403880
lea eax, [ebp - 0x3c]
call fcn.00403274
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.00403898
ret