Function at 0x44faa9
Capabilities:
Delete directory
Move file

Disassembly:
push 0xe90
mov eax, 0x4b88c6
call fcn.00469c08
mov ebx, ecx
push 0x250
lea eax, [ebp - 0x278]
push 0
push eax
call fcn.0046d6f0
add esp, 0xc
lea ecx, [ebp - 0xe9c]
call fcn.00411071
and dword [ebp - 4], 0
lea eax, [ebp - 0xe9c]
push 0x4d2994
push ebx
push eax
call fcn.0040c507
pop ecx
pop ecx
push eax
call fcn.00411005
pop ecx
pop ecx
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0xe9c]
call fcn.00412324
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x44fd58
mov esi, dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
lea ecx, [ebp - 0x684]
call fcn.00411071
lea eax, [ebp - 0x24c]
mov byte [ebp - 4], 1
push eax
push 0x4d2b00
lea eax, [ebp - 0x684]
push ebx
push eax
call fcn.0040c507
pop ecx
pop ecx
push eax
call fcn.00411005
pop ecx
pop ecx
push eax
call fcn.00411005
test byte [ebp - 0x278], 0x10
pop ecx
pop ecx
je 0x44fcfb
lea eax, [ebp - 0x24c]
push 0x4d2ac8
push eax
call fcn.0047b3dc
pop ecx
pop ecx
test eax, eax
je 0x44fd23
lea eax, [ebp - 0x24c]
push 0x4d2ac4
push eax
call fcn.0047b3dc
pop ecx
pop ecx
test eax, eax
je 0x44fd23
lea ecx, [ebp - 0x684]
call fcn.00412324
push eax
lea ecx, [ebp - 0x28]
call fcn.0041185a
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.0044faa9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.004123b1
lea ecx, [ebp - 0x684]
call fcn.00412324
mov edx, 0x80
mov ecx, eax
call fcn.00455041
lea ecx, [ebp - 0x684]
call fcn.00412324
push eax
call esi
test eax, eax
jne 0x44fd23
lea eax, [ebp - 0x24c]
push 0x4d5bac
push eax
call fcn.0046d424
pop ecx
pop ecx
test eax, eax
jne 0x44fc16
xor al, al
jmp 0x44fc1d
mov ecx, eax
call fcn.0044f5c4
test al, al
jne 0x44fcd1
lea ecx, [ebp - 0xa90]
call fcn.00411071
lea ecx, [ebp - 0x28]
call fcn.00412607
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.00452ffb
lea eax, [ebp - 0x28]
push eax
push 0x4d2ac4
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.0040c4d9
pop ecx
pop ecx
push eax
call fcn.00411005
pop ecx
pop ecx
push eax
call fcn.0040c507
pop ecx
pop ecx
lea ecx, [ebp - 0xa90]
call fcn.00412324
push eax
lea ecx, [ebp - 0x684]
call fcn.00412324
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x44fcbc
lea ecx, [ebp - 0xa90]
call fcn.00412324
push eax
call esi
test eax, eax
jne 0x44fcbc
push 4
lea ecx, [ebp - 0xa90]
call fcn.00412324
xor edx, edx
mov ecx, eax
call fcn.0045500a
lea ecx, [ebp - 0x28]
call fcn.004123b1
lea ecx, [ebp - 0xa90]
call fcn.0041104c
jmp 0x44fd23
lea ecx, [ebp - 0x684]
call fcn.00412324
push eax
call esi
test eax, eax
jne 0x44fd23
push 4
lea ecx, [ebp - 0x684]
call fcn.00412324
xor edx, edx
mov ecx, eax
call fcn.0045500a
jmp 0x44fd23
lea ecx, [ebp - 0x684]
call fcn.00412324
push eax
lea ecx, [ebp - 0x28]
call fcn.0041185a
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.0044f5f4
lea ecx, [ebp - 0x28]
call fcn.004123b1
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 0
call fcn.0041104c
lea edx, [ebp - 0x278]
mov ecx, edi
call fcn.00454fbf
test eax, eax
jne 0x44fb25
mov ecx, edi
call fcn.00454fe4
mov ecx, ebx
call fcn.00412374
push eax
call esi
lea ecx, [ebp - 0xe9c]
call fcn.0041104c
call fcn.00469bb2
ret