Function at 0x444f5c
Capabilities:
Delete directory
Move file

Disassembly:
push 0xe90
mov eax, 0x4ad12f
call fcn.0045edc9
mov ebx, ecx
push 0x250
lea eax, [ebp - 0x278]
push 0
push eax
call fcn.004628a0
add esp, 0xc
lea ecx, [ebp - 0xe9c]
call fcn.00408fc1
and dword [ebp - 4], 0
lea eax, [ebp - 0xe9c]
push 0x4c6ee4
push ebx
push eax
call fcn.00404457
pop ecx
pop ecx
push eax
call fcn.00408f55
pop ecx
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0xe9c]
call fcn.0040a274
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x44520b
mov esi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x684]
call fcn.00408fc1
lea eax, [ebp - 0x24c]
mov byte [ebp - 4], 1
push eax
push 0x4c6f34
lea eax, [ebp - 0x684]
push ebx
push eax
call fcn.00404457
pop ecx
pop ecx
push eax
call fcn.00408f55
pop ecx
pop ecx
push eax
call fcn.00408f55
test byte [ebp - 0x278], 0x10
pop ecx
pop ecx
je 0x4451ae
lea eax, [ebp - 0x24c]
push 0x4c6f10
push eax
call fcn.00470270
pop ecx
pop ecx
test eax, eax
je 0x4451d6
lea eax, [ebp - 0x24c]
push 0x4c6f0c
push eax
call fcn.00470270
pop ecx
pop ecx
test eax, eax
je 0x4451d6
lea ecx, [ebp - 0x684]
call fcn.0040a274
push eax
lea ecx, [ebp - 0x28]
call fcn.004097aa
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.00444f5c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.0040a301
lea ecx, [ebp - 0x684]
call fcn.0040a274
mov edx, 0x80
mov ecx, eax
call fcn.0044a428
lea ecx, [ebp - 0x684]
call fcn.0040a274
push eax
call esi
test eax, eax
jne 0x4451d6
lea eax, [ebp - 0x24c]
push 0x4c9ff0
push eax
call fcn.004625d4
pop ecx
pop ecx
test eax, eax
jne 0x4450c9
xor al, al
jmp 0x4450d0
mov ecx, eax
call fcn.00444a77
test al, al
jne 0x445184
lea ecx, [ebp - 0xa90]
call fcn.00408fc1
lea ecx, [ebp - 0x28]
call fcn.0040a557
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.004483e2
lea eax, [ebp - 0x28]
push eax
push 0x4c6f0c
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.00404429
pop ecx
pop ecx
push eax
call fcn.00408f55
pop ecx
pop ecx
push eax
call fcn.00404457
pop ecx
pop ecx
lea ecx, [ebp - 0xa90]
call fcn.0040a274
push eax
lea ecx, [ebp - 0x684]
call fcn.0040a274
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x44516f
lea ecx, [ebp - 0xa90]
call fcn.0040a274
push eax
call esi
test eax, eax
jne 0x44516f
push 4
lea ecx, [ebp - 0xa90]
call fcn.0040a274
xor edx, edx
mov ecx, eax
call fcn.0044a3f1
lea ecx, [ebp - 0x28]
call fcn.0040a301
lea ecx, [ebp - 0xa90]
call fcn.00408f9c
jmp 0x4451d6
lea ecx, [ebp - 0x684]
call fcn.0040a274
push eax
call esi
test eax, eax
jne 0x4451d6
push 4
lea ecx, [ebp - 0x684]
call fcn.0040a274
xor edx, edx
mov ecx, eax
call fcn.0044a3f1
jmp 0x4451d6
lea ecx, [ebp - 0x684]
call fcn.0040a274
push eax
lea ecx, [ebp - 0x28]
call fcn.004097aa
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00444aa7
lea ecx, [ebp - 0x28]
call fcn.0040a301
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 0
call fcn.00408f9c
lea edx, [ebp - 0x278]
mov ecx, edi
call fcn.0044a3a6
test eax, eax
jne 0x444fd8
mov ecx, edi
call fcn.0044a3cb
mov ecx, ebx
call fcn.0040a2c4
push eax
call esi
lea ecx, [ebp - 0xe9c]
call fcn.00408f9c
call fcn.0045ed73
ret