Function at 0x44d170
Capabilities:
Copy file
Delete file
Move file

Disassembly:
push ebp
mov eax, 0x41dc
mov ebp, esp
push edi
push esi
push ebx
call fcn.005e3260
sub esp, eax
mov esi, ecx
lea ecx, [ebp - 0x2018]
mov dword [esp], 0x86b848
call fcn.0055bfb0
sub esp, 4
cmp dword [esi + 4], 0
mov eax, dword [ebp - 0x2018]
mov dword [0x869454], 1
mov dword [ebp - 0x41c0], eax
jle 0x44d480
xor ebx, ebx
lea edi, [eax + 8]
jmp 0x44d1ca
mov eax, dword [esi + 4]
add ebx, 1
cmp eax, ebx
jle 0x44d222
mov dword [esp], ebx
mov ecx, 0x86b848
call fcn.00558074
sub esp, 4
test eax, eax
je 0x44d1c0
lea ecx, [ebp - 0x2018]
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.0051994e
mov eax, dword [ebp - 0x2018]
sub esp, 8
mov dword [esp + 4], str.indexesSDIO
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIA
sub esp, 8
test eax, eax
je 0x44d3e0
lea ecx, [ebp - 0x2018]
call fcn.0051930e
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x44d490
test ebx, ebx
jle 0x44d340
mov eax, dword [ebp - 0x41c0]
xor ebx, ebx
add eax, 8
mov dword [ebp - 0x41c4], eax
jmp 0x44d251
add ebx, 1
cmp dword [esi + 4], ebx
jle 0x44d340
mov dword [esp], ebx
mov ecx, 0x86b848
call fcn.00558074
sub esp, 4
test eax, eax
je 0x44d245
mov eax, dword [ebp - 0x41c4]
lea ecx, [ebp - 0x4198]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0051994e
lea eax, [ebp - 0x41a8]
mov edi, dword [ebp - 0x4194]
sub esp, 8
mov dword [ebp - 0x41b0], eax
mov eax, dword [ebp - 0x4198]
mov edx, eax
mov dword [ebp - 0x41bc], eax
add edx, edi
je 0x44d2ac
test eax, eax
je 0x44da30
cmp edi, 0xf
mov dword [ebp - 0x412c], edi
ja 0x44d3f0
cmp edi, 1
jne 0x44d540
mov eax, dword [ebp - 0x41bc]
movzx eax, byte [eax]
mov byte [ebp - 0x41a8], al
lea eax, [ebp - 0x41a8]
mov dword [ebp - 0x41ac], edi
mov byte [eax + edi], 0
cmp dword [0x722ac4], 1
je 0x44d390
mov eax, dword [ebp - 0x41b0]
mov dword [esp + 4], 0x745184
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIA
sub esp, 8
test eax, eax
mov edx, dword [ebp - 0x41b0]
je 0x44d450
lea eax, [ebp - 0x41a8]
cmp edx, eax
je 0x44d329
mov dword [esp], edx
call fcn.006febf0
lea ecx, [ebp - 0x4198]
add ebx, 1
call fcn.0051930e
cmp dword [esi + 4], ebx
jg 0x44d251
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov ecx, 0x869458
mov dword [esp + 4], str.__c_rd__s__q_update
mov dword [esp], 0x74517c
call fcn.00442260
mov eax, dword [ebp - 0x41c0]
sub esp, 0x10
test eax, eax
je 0x44d380
lock sub dword [eax], 1
je 0x44d553
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x4198]
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call sub.msvcrt.dll_strchr
lea edi, [eax + 1]
mov dword [esp], edi
call sub.msvcrt.dll_strlen
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x41ac]
lea ecx, [ebp - 0x41b0]
mov dword [esp + 8], edi
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.006c0fb0
sub esp, 0x10
jmp 0x44d2f0
lea ecx, [ebp - 0x2018]
call fcn.0051930e
jmp 0x44d1c0
lea eax, [ebp - 0x412c]
lea ecx, [ebp - 0x41b0]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006c3380
mov edx, dword [ebp - 0x412c]
sub esp, 8
mov dword [ebp - 0x41b0], eax
mov dword [ebp - 0x41a8], edx
mov edx, dword [ebp - 0x41bc]
mov dword [esp + 8], edi
mov dword [esp], eax
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov edi, dword [ebp - 0x412c]
mov eax, dword [ebp - 0x41b0]
jmp 0x44d2d9
mov dword [esp + 4], str..bat
mov dword [esp], edx
call sub.SHELL32.dll_StrStrIA
sub esp, 8
test eax, eax
je 0x44d570
mov edx, dword [ebp - 0x41b0]
jmp 0x44d317
je 0x44d340
lea esi, [esi]
lea edi, [edi]
lea eax, [ebp - 0x2006]
xor ebx, ebx
mov dword [esp + 8], 0x8571a0
mov dword [esp + 4], str._c_del__ws_.bin
mov dword [ebp - 0x2014], 0
mov dword [ebp - 0x2010], eax
lea eax, [ebp - 0x2018]
mov dword [ebp - 0x200c], pe_nt_image_headers32
mov byte [ebp - 0x2008], 0
mov dword [ebp - method.Pg.virtual_0], vtable.Pg.0
mov dword [esp], eax
mov word [ebp - 0x2006], bx
call fcn.00403a60
mov eax, dword [ebp - 0x2010]
mov dword [esp + 0xc], 1
mov ecx, 0x869458
mov dword [esp + 8], 0
mov dword [esp], 0x74517c
mov dword [esp + 4], eax
call fcn.00442260
mov eax, dword [ebp - 0x2014]
sub esp, 0x10
mov dword [ebp - method.nInst.virtual_0], vtable.nInst.0
test eax, eax
je 0x44d532
mov dword [esp], eax
call fcn.006febd0
mov ebx, dword [esi + 4]
jmp 0x44d22a
test edi, edi
lea eax, [ebp - 0x41a8]
je 0x44d2d9
jmp 0x44d421
mov esi, dword [ebp - 0x41c0]
mov ecx, esi
call fcn.0055e7c8
mov dword [esp], esi
call fcn.006febf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x4198]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov dword [esp + 0xc], eax
mov eax, dword [esi + 0x1c]
mov eax, dword [eax]
mov dword [esp + 4], str._s_S
mov dword [esp + 8], eax
lea eax, [ebp - 0x4018]
mov dword [esp], eax
call edi
mov eax, dword [ebp - 0x41b0]
mov dword [esp + 4], 0x744e40
mov dword [esp + 8], eax
lea eax, [ebp - 0x2018]
mov dword [esp], eax
call edi
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 0x8571a0
mov dword [esp + 4], 0x744eee
mov dword [esp], eax
call fcn.00403fa0
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 0x8511a0
mov dword [esp + 4], str.drivers
mov dword [esp], eax
call fcn.00403fa0
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 0x8591a0
mov dword [esp + 4], str.toolsSDIO
mov dword [esp], eax
call fcn.00403fa0
mov eax, dword [ebp - 0x41b0]
mov dword [esp + 4], 0x744e6b
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIA
sub esp, 8
test eax, eax
je 0x44d643
lea eax, [ebp - 0x2008]
mov ecx, esi
mov dword [esp], eax
call fcn.00447f20
sub esp, 4
lea edi, [ebp - 0x2018]
jmp 0x44d663
mov dword [esp], edi
mov dword [esp + 4], 0x5c
call sub.msvcrt.dll_wcschr
lea edi, [eax + 2]
mov dword [esp + 4], 0x5c
mov dword [esp], edi
call sub.msvcrt.dll_wcschr
test eax, eax
jne 0x44d650
lea eax, [ebp - 0x4018]
mov dword [esp + 4], 0x7451c8
mov dword [esp], eax
call sub.SHELL32.dll_StrStrIW
sub esp, 8
test eax, eax
je 0x44d69c
mov ecx, 0x5f
mov word [edi], cx
lea eax, [ebp - 0x411a]
lea ecx, [ebp - 0x412c]
xor edx, edx
mov dword [ebp - 0x4128], 0
mov dword [ebp - 0x4120], pe_nt_image_headers32
mov dword [ebp - 0x4124], eax
lea eax, [ebp - 0x2018]
mov byte [ebp - 0x411c], 0
mov dword [ebp - method.Pg.virtual_0], vtable.Pg.0
mov word [ebp - 0x411a], dx
mov dword [esp], eax
call fcn.00403e10
sub esp, 4
mov edi, dword [ebp - 0x4124]
jmp 0x44d708
mov dword [esp], edi
mov dword [esp + 4], 0x5c
call sub.msvcrt.dll_wcschr
lea edi, [eax + 2]
mov dword [esp + 4], 0x5c
mov dword [esp], edi
call sub.msvcrt.dll_wcschr
test eax, eax
jne 0x44d6f5
cmp word [edi - 2], 0x5c
je 0x44d99c
mov eax, dword [ebp - 0x4128]
mov dword [ebp - method.nInst.virtual_0], vtable.nInst.0
test eax, eax
je 0x44d743
mov dword [esp], eax
call fcn.006febd0
mov dword [esp + 4], 0x1000
mov dword [esp], 0
call dword [sym.imp.msvcrt.dll__wgetcwd]
test eax, eax
je 0x44d979
mov dword [esp], eax
mov ecx, 0x869458
call fcn.00441ec0
sub esp, 4
mov dword [ebp - 0x41bc], eax
lea eax, [ebp - 0x4018]
mov ecx, 0x869458
mov dword [esp], eax
call fcn.00441ec0
sub esp, 4
mov edi, eax
cmp eax, 0xffffffff
cmove edi, dword [ebp - 0x41bc]
lea eax, [ebp - 0x4018]
mov dword [esp + 4], str.Src:__d__S_n
mov dword [esp], 0x849160
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
call fcn.0041f5d0
lea eax, [ebp - 0x2018]
mov ecx, 0x869458
mov dword [esp], eax
call fcn.00441ec0
lea edx, [ebp - 0x2018]
sub esp, 4
mov dword [ebp - 0x41c8], eax
mov dword [esp + 4], 0x745200
mov dword [esp], edx
call sub.msvcrt.dll_wcscspn
test eax, eax
je 0x44d968
cmp dword [ebp - 0x41c8], 0xffffffff
jne 0x44d968
lea eax, [ebp - 0x2018]
mov dword [esp + 4], str.Dst:__d__S_n
mov dword [esp], 0x849160
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x41bc]
mov dword [esp + 8], eax
call fcn.0041f5d0
cmp edi, dword [ebp - 0x41bc]
lea eax, [ebp - 0x2018]
mov dword [esp + 8], eax
je 0x44d8d6
mov dword [esp + 4], str.Copy_new_file:__S_n
mov dword [esp], 0x849160
call fcn.0041f5d0
lea eax, [ebp - 0x2018]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
lea eax, [ebp - 0x4018]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
sub esp, 0x18
test eax, eax
jne 0x44d92f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], str.CopyFileExW__
mov dword [esp], eax
mov ecx, 0x849160
call fcn.0041f8f0
sub esp, 8
mov eax, dword [ebp - 0x41b0]
lea edx, [ebp - 0x41a8]
cmp eax, edx
je 0x44d329
mov dword [esp], eax
call fcn.006febf0
jmp 0x44d329
mov dword [esp + 4], str.Move_new_file:__S_n
mov dword [esp], 0x849160
call fcn.0041f5d0
lea eax, [ebp - 0x2018]
mov dword [esp + 8], 1
mov dword [esp + 4], eax
lea eax, [ebp - 0x4018]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
sub esp, 0xc
test eax, eax
jne 0x44d8b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 4], str.MoveFileEx__
mov dword [esp], eax
mov ecx, 0x849160
call fcn.0041f8f0
jmp 0x44d8b2
lea eax, [ebp - 0x2018]
mov ecx, 0x869458
mov dword [esp], eax
call fcn.00441540
sub esp, 4
test al, al
je 0x44d8b5
lea eax, [ebp - 0x4018]
mov ecx, 0x869458
mov dword [esp], eax
call sub.KERNEL32.dll_DeleteFileW
sub esp, 4
jmp 0x44d8b5
mov eax, dword [ebp - 0x41c8]
mov dword [ebp - 0x41bc], eax
jmp 0x44d801
mov dword [esp + 4], str._wgetcwd_error
mov dword [esp], 0x849160
call fcn.0041f5d0
mov dword [ebp - 0x41bc], 0xffffffff
jmp 0x44d776
xor eax, eax
mov word [edi - 2], ax
mov eax, dword [ebp - 0x4124]
mov dword [esp], eax
call fcn.00441300
jmp 0x44d727
mov eax, dword [ebp - 0x41c0]
test eax, eax
je 0x44d9e5
mov dword [esp], eax
call fcn.00600540
mov dword [esp], ebx
call fcn.005e6130
mov ebx, eax
mov eax, dword [ebp - 0x4128]
mov dword [ebp - method.nInst.virtual_0], vtable.nInst.0
test eax, eax
je 0x44da0b
mov dword [esp], eax
call fcn.006febd0
mov eax, dword [ebp - 0x41b0]
lea edx, [ebp - 0x41a8]
cmp eax, edx
je 0x44da23
mov dword [esp], eax
call fcn.006febf0
lea ecx, [ebp - 0x4198]
call fcn.0051930e
jmp 0x44d9d3
mov dword [esp], 0x745104
call fcn.006e4530
mov ebx, eax
jmp 0x44d9d3