Function at 0x4fde72
Capabilities:
Delete file
Move file
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x67484d
call fcn.006313fc
sub esp, 0x60
push ebx
mov ebx, dword [esp + 0x88]
test bl, bl
push ebp
push esi
push edi
sete al
movzx eax, al
push eax
push dword [esp + 0x8c]
lea eax, [esp + 0x30]
push dword [esp + 0x94]
push eax
call fcn.0045daae
mov ebp, dword [esp + 0x84]
lea eax, [esp + 0x40]
and dword [esp + 0x78], 0
push ebx
push ebp
push dword [esp + 0x98]
push eax
call fcn.0045daae
xor edi, edi
mov dword [esp + 0x24], 7
and dword [esp + 0x20], edi
xor eax, eax
mov word [esp + 0x10], ax
mov eax, dword [esp + 0x28]
xor esi, esi
inc esi
mov byte [esp + 0x78], 2
cmp dword [esp + 0x3c], 8
mov dword [esp + 0x94], esi
jae 0x4fdefd
lea eax, [esp + 0x28]
push eax
call fcn.0045e93a
test al, al
jne 0x4fdf6a
push ebx
push dword [esp + 0x8c]
lea eax, [esp + 0x60]
push dword [esp + 0x94]
push eax
call fcn.0045daae
push eax
lea ecx, [esp + 0x2c]
call fcn.0044dbe6
push 0
push 1
lea ecx, [esp + 0x60]
call fcn.0042341c
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x2c]
call fcn.00434b9c
test eax, eax
je 0x4fe049
cmp dword [esp + 0x3c], 8
mov eax, dword [esp + 0x28]
jae 0x4fdf5c
lea eax, [esp + 0x28]
push eax
call fcn.0045e93a
test al, al
je 0x4fe049
cmp dword [esp + 0x3c], 8
mov eax, dword [esp + 0x28]
jae 0x4fdf79
lea eax, [esp + 0x28]
push esi
push eax
lea eax, [esp + 0x60]
push str._s._d
push eax
call fcn.0047224d
add esp, 0x10
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x84], 3
call fcn.00423462
push 0
push 1
lea ecx, [esp + 0x60]
mov byte [esp + 0x80], 2
call fcn.0042341c
cmp dword [esp + 0x24], 8
mov eax, dword [esp + 0x10]
jae 0x4fdfc7
lea eax, [esp + 0x10]
push eax
call fcn.0045e93a
test al, al
jne 0x4fe00f
cmp dword [esp + 0x24], 8
mov eax, dword [esp + 0x10]
jae 0x4fdfe0
lea eax, [esp + 0x10]
cmp dword [ebp + 0x14], 8
jb 0x4fdfeb
mov ebx, dword [ebp]
jmp 0x4fdfed
mov ebx, ebp
push eax
call fcn.0045dcfa
push ebx
mov esi, eax
call fcn.0045dcfa
push esi
push eax
call fcn.0063299b
pop ecx
pop ecx
test eax, eax
jne 0x4fe01c
mov esi, dword [esp + 0x94]
inc esi
mov dword [esp + 0x94], esi
jmp 0x4fdf6a
mov ecx, dword [esp + 0x10]
push 8
pop ebx
cmp dword [esp + 0x24], ebx
jae 0x4fe02d
lea ecx, [esp + 0x10]
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x3c], ebx
jae 0x4fe03b
lea eax, [esp + 0x28]
mov ebp, dword [sym.imp.KERNEL32.DLL_MoveFileW]
push ecx
push eax
call ebp
test eax, eax
jne 0x4fe050
xor edi, edi
jmp 0x4fe1d0
cmp byte [esp + 0x98], 0
je 0x4fe0b8
mov eax, dword [esp + 0x40]
cmp dword [esp + 0x54], ebx
jae 0x4fe068
lea eax, [esp + 0x40]
push eax
call fcn.0045e93a
test al, al
je 0x4fe0b8
mov eax, dword [esp + 0x40]
cmp dword [esp + 0x54], ebx
jae 0x4fe080
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
test eax, eax
jne 0x4fe0b8
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x3c], ebx
jae 0x4fe099
lea ecx, [esp + 0x28]
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x24], ebx
jae 0x4fe0a7
lea eax, [esp + 0x10]
push ecx
push eax
call ebp
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov edi, eax
jmp 0x4fe1d0
cmp dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x40]
mov eax, ebx
jae 0x4fe0c8
lea eax, [esp + 0x40]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x28]
mov edx, ecx
cmp esi, 8
jae 0x4fe0db
lea edx, [esp + 0x28]
mov bp, word [edx]
cmp bp, word [eax]
mov ebp, dword [sym.imp.KERNEL32.DLL_MoveFileW]
jne 0x4fe11c
cmp word [edx], 0
je 0x4fe118
mov bp, word [edx + 2]
cmp bp, word [eax + 2]
mov word [esp + 0x98], bp
mov ebp, dword [sym.imp.KERNEL32.DLL_MoveFileW]
jne 0x4fe11c
add edx, 4
add eax, 4
cmp word [esp + 0x98], 0
jne 0x4fe0db
xor eax, eax
jmp 0x4fe121
sbb eax, eax
or eax, 1
test eax, eax
je 0x4fe1b4
cmp dword [esp + 0x54], 8
jae 0x4fe134
lea ebx, [esp + 0x40]
cmp dword [esp + 0x24], 8
mov eax, dword [esp + 0x10]
jae 0x4fe143
lea eax, [esp + 0x10]
push ebx
push eax
call ebp
test eax, eax
jne 0x4fe1d0
mov esi, dword [sym.imp.KERNEL32.DLL_GetLastError]
call esi
mov edi, eax
cmp edi, 3
je 0x4fe163
cmp edi, 2
jne 0x4fe1a8
mov eax, dword [esp + 0x40]
xor edi, edi
cmp dword [esp + 0x54], 8
jae 0x4fe174
lea eax, [esp + 0x40]
push eax
call fcn.0045f74f
test al, al
je 0x4fe1a4
cmp dword [esp + 0x54], 8
mov ecx, dword [esp + 0x40]
jae 0x4fe18d
lea ecx, [esp + 0x40]
cmp dword [esp + 0x24], 8
mov eax, dword [esp + 0x10]
jae 0x4fe19c
lea eax, [esp + 0x10]
push ecx
push eax
call ebp
test eax, eax
jne 0x4fe1d0
call esi
mov edi, eax
test edi, edi
je 0x4fe1d0
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x28]
cmp esi, 8
jae 0x4fe1bd
lea ecx, [esp + 0x28]
cmp dword [esp + 0x24], 8
mov eax, dword [esp + 0x10]
jae 0x4fe1cc
lea eax, [esp + 0x10]
push ecx
push eax
call ebp
xor ebx, ebx
lea ecx, [esp + 0x10]
push ebx
push 1
call fcn.0042341c
push ebx
push 1
lea ecx, [esp + 0x48]
call fcn.0042341c
push ebx
push 1
lea ecx, [esp + 0x30]
call fcn.0042341c
mov ecx, dword [esp + 0x70]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
leave
ret 0x18