Function at 0x44a300
Capabilities:
Move file

Disassembly:
push ebp
mov eax, 0x41cc
mov ebp, esp
push edi
push esi
push ebx
call fcn.005d34c0
sub esp, eax
mov edi, ecx
lea ecx, [ebp - 0x4018]
mov dword [esp], 0x8558a8
call fcn.0054e542
sub esp, 4
cmp dword [edi + 4], 0
mov eax, dword [ebp - 0x4018]
mov dword [0x8534b4], 1
mov dword [ebp - 0x41c0], eax
jle 0x44a970
xor ebx, ebx
lea esi, [eax + 8]
jmp 0x44a35a
mov eax, dword [edi + 4]
add ebx, 1
cmp eax, ebx
jle 0x44a3ba
mov dword [esp], ebx
mov ecx, 0x8558a8
call fcn.0054a7fe
sub esp, 4
test eax, eax
je 0x44a350
lea ecx, [ebp - 0x2018]
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.0050b07c
mov eax, dword [ebp - 0x2018]
sub esp, 8
mov dword [esp + 4], str.indexesSDI
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIA
lea ecx, [ebp - 0x2018]
sub esp, 8
mov dword [ebp - 0x41bc], eax
call fcn.0050aa0c
mov eax, dword [ebp - 0x41bc]
test eax, eax
je 0x44a350
mov eax, dword [edi + 4]
cmp eax, ebx
je 0x44a467
lea eax, [ebp - 0x2018]
lea edx, [ebp - 0x2006]
xor esi, esi
mov dword [esp + 8], 0x8411c0
mov dword [esp + 4], str._c_del__ws_.bin
mov dword [esp], eax
mov dword [ebp - 0x2014], 0
mov dword [ebp - 0x2010], edx
mov dword [ebp - 0x200c], pe_nt_image_headers32
mov byte [ebp - 0x2008], 0
mov dword [ebp - method.g.virtual_0], vtable.g.0
mov word [ebp - 0x2006], si
call fcn.00403910
mov eax, dword [ebp - 0x2010]
mov dword [esp + 0xc], 1
mov ecx, 0x8534b8
mov dword [esp + 8], 0
mov dword [esp], 0x730644
mov dword [esp + 4], eax
call fcn.004408c0
mov eax, dword [ebp - 0x2014]
sub esp, 0x10
mov dword [ebp - method.nInst.virtual_0], vtable.nInst.0
test eax, eax
je 0x44a464
mov dword [esp], eax
call fcn.006e9860
mov ebx, dword [edi + 4]
test ebx, ebx
jle 0x44a572
xor ebx, ebx
jmp 0x44a47f
add ebx, 1
cmp dword [edi + 4], ebx
jle 0x44a572
mov dword [esp], ebx
mov ecx, 0x8558a8
call fcn.0054a7fe
sub esp, 4
test eax, eax
je 0x44a473
mov eax, dword [ebp - 0x41c0]
lea ecx, [ebp - 0x4198]
mov dword [esp + 4], ebx
add eax, 8
mov dword [esp], eax
call fcn.0050b07c
lea eax, [ebp - 0x41a8]
mov esi, dword [ebp - 0x4194]
sub esp, 8
mov dword [ebp - 0x41b0], eax
mov eax, dword [ebp - 0x4198]
mov edx, eax
mov dword [ebp - 0x41bc], eax
add edx, esi
je 0x44a4e5
test eax, eax
jne 0x44a4e5
mov dword [esp], 0x73047c
call fcn.006de350
cmp esi, 0xf
mov dword [ebp - 0x412c], esi
ja 0x44a5d0
cmp esi, 1
je 0x44a680
test esi, esi
lea eax, [ebp - 0x41a8]
jne 0x44a601
mov dword [ebp - 0x41ac], esi
mov byte [eax + esi], 0
cmp dword [0x70dc64], 1
je 0x44a630
mov eax, dword [ebp - 0x41b0]
mov dword [esp + 4], 0x730674
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIA
sub esp, 8
test eax, eax
je 0x44a6a0
mov eax, dword [ebp - 0x41b0]
lea edx, [ebp - 0x41a8]
cmp eax, edx
je 0x44a55b
mov dword [esp], eax
call fcn.006e9880
lea ecx, [ebp - 0x4198]
add ebx, 1
call fcn.0050aa0c
cmp dword [edi + 4], ebx
jg 0x44a47f
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov ecx, 0x8534b8
mov dword [esp + 4], str.__c_rd__s__q_update
mov dword [esp], 0x730644
call fcn.004408c0
mov ebx, dword [ebp - 0x41c0]
sub esp, 0x10
test ebx, ebx
je 0x44a5c0
mov eax, 0xffffffff
mov edx, dword [ebp - 0x41c0]
lock xadd dword [edx], eax
cmp eax, 1
je 0x44a919
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [ebp - 0x412c]
lea ecx, [ebp - 0x41b0]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006bd570
mov edx, dword [ebp - 0x412c]
sub esp, 8
mov dword [ebp - 0x41b0], eax
mov dword [ebp - 0x41a8], edx
mov edx, dword [ebp - 0x41bc]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov esi, dword [ebp - 0x412c]
mov eax, dword [ebp - 0x41b0]
jmp 0x44a50b
mov eax, dword [ebp - 0x4198]
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call sub.msvcrt.dll_strchr
lea esi, [eax + 1]
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x41ac]
lea ecx, [ebp - 0x41b0]
mov dword [esp + 8], esi
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006bb170
sub esp, 0x10
jmp 0x44a522
mov eax, dword [ebp - 0x41bc]
movzx eax, byte [eax]
mov byte [ebp - 0x41a8], al
lea eax, [ebp - 0x41a8]
jmp 0x44a50b
mov eax, dword [ebp - 0x41b0]
mov dword [esp + 4], str..bat
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIA
sub esp, 8
test eax, eax
jne 0x44a543
mov eax, dword [ebp - 0x4198]
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
mov dword [esp + 0xc], eax
mov eax, dword [edi + 0x1c]
mov eax, dword [eax]
mov dword [esp + 4], str._s_S
mov dword [esp + 8], eax
lea eax, [ebp - 0x4018]
mov dword [esp], eax
call esi
mov eax, dword [ebp - 0x41b0]
mov dword [esp + 4], 0x7304b6
mov dword [esp + 8], eax
lea eax, [ebp - 0x2018]
mov dword [esp], eax
call esi
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 0x8411c0
mov dword [esp + 4], 0x730566
mov dword [esp], eax
call fcn.00403e50
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 0x83b1c0
mov dword [esp + 4], str.drivers
mov dword [esp], eax
call fcn.00403e50
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 0x8431c0
mov dword [esp + 4], str.toolsSDI
mov dword [esp], eax
call fcn.00403e50
mov eax, dword [ebp - 0x41b0]
mov dword [esp + 4], 0x7304e1
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIA
sub esp, 8
test eax, eax
je 0x44a794
lea eax, [ebp - 0x2008]
mov ecx, edi
mov dword [esp], eax
call fcn.00446130
sub esp, 4
lea esi, [ebp - 0x2018]
jmp 0x44a7b3
mov dword [esp], esi
mov dword [esp + 4], 0x5c
call sub.msvcrt.dll_wcschr
lea esi, [eax + 2]
mov dword [esp + 4], 0x5c
mov dword [esp], esi
call sub.msvcrt.dll_wcschr
test eax, eax
jne 0x44a7a0
lea eax, [ebp - 0x4018]
mov dword [esp + 4], 0x7306aa
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x44a7ec
mov ecx, 0x5f
mov word [esi], cx
lea eax, [ebp - 0x411a]
lea ecx, [ebp - 0x412c]
xor edx, edx
mov dword [ebp - 0x4128], 0
mov dword [ebp - 0x4120], pe_nt_image_headers32
mov dword [ebp - 0x4124], eax
lea eax, [ebp - 0x2018]
mov byte [ebp - 0x411c], 0
mov dword [ebp - method.g.virtual_0], vtable.g.0
mov word [ebp - 0x411a], dx
mov dword [esp], eax
call fcn.00403cc0
sub esp, 4
mov esi, dword [ebp - 0x4124]
jmp 0x44a858
mov dword [esp], esi
mov dword [esp + 4], 0x5c
call sub.msvcrt.dll_wcschr
lea esi, [eax + 2]
mov dword [esp + 4], 0x5c
mov dword [esp], esi
call sub.msvcrt.dll_wcschr
test eax, eax
jne 0x44a845
cmp word [esi - 2], 0x5c
je 0x44a900
mov eax, dword [ebp - 0x4128]
mov dword [ebp - method.nInst.virtual_0], vtable.nInst.0
test eax, eax
je 0x44a893
mov dword [esp], eax
call fcn.006e9860
lea eax, [ebp - 0x2018]
mov dword [esp + 4], str.New_file:__S_n
mov dword [esp], 0x833180
mov dword [esp + 8], eax
call fcn.0041ee70
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 1
mov dword [esp + 4], eax
lea eax, [ebp - 0x4018]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
sub esp, 0xc
test eax, eax
jne 0x44a543
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], str.MoveFileEx__
mov dword [esp], eax
mov ecx, 0x833180
call fcn.0041f190
sub esp, 8
jmp 0x44a543
xor eax, eax
mov word [esi - 2], ax
mov eax, dword [ebp - 0x4124]
mov dword [esp], eax
call fcn.004406d0
jmp 0x44a877
mov edi, dword [ebp - 0x41c0]
mov ecx, edi
call fcn.00550c50
mov dword [esp], edi
call fcn.006e9880
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
jne 0x44a3c2
jmp 0x44a572