Function at 0x4420f1
Capabilities:
Check if file exists
Copy file
Create directory
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Move file

Disassembly:
push ebp
lea ebp, [esp - 0x850]
sub esp, 0x8d0
mov eax, dword [0x4c3a10]
xor eax, ebp
mov dword [ebp + 0x84c], eax
mov ecx, dword [ebp + 0x85c]
mov eax, dword [ebp + 0x858]
push ebx
push esi
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp + 0x860]
push edi
mov dword [ebp - 0x64], ecx
push eax
lea ecx, [ebp + 0x1fc]
mov dword [ebp - 0x60], eax
call fcn.00401900
mov eax, dword [ebp + 0x210]
dec eax
push eax
lea ecx, [ebp + 0x1fc]
call fcn.00403108
cmp word [eax], 0x5c
je 0x44215f
push 0x4b30a0
lea ecx, [ebp + 0x1fc]
call fcn.00401987
push 0x4b31e4
lea ecx, [ebp + 0x1fc]
call fcn.00401987
cmp dword [ebp + 0x214], 8
mov eax, dword [ebp + 0x200]
jae 0x442184
lea eax, [ebp + 0x200]
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x58], eax
cmp eax, 0xffffffff
je 0x442558
mov esi, 0x208
push esi
xor ebx, ebx
lea eax, [ebp + 0x43c]
push ebx
push eax
call fcn.004766d0
push esi
lea eax, [ebp + 0x644]
push ebx
push eax
call fcn.004766d0
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
add esp, 0x18
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x43c]
push eax
call esi
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x5c]
lea eax, [ebp + 0x644]
push eax
call esi
test byte [ebp - 0x54], 0x10
je 0x44237f
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push 0x4b31e8
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x442375
push 0x4b3098
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x442375
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x442240
test al, 0x10
jne 0x442240
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x44234d
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov ebx, 0xb7
cmp eax, ebx
je 0x44234d
cmp eax, 0x50
je 0x44234d
push 0x64
pop esi
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x4422a6
call edi
cmp eax, 0x50
je 0x4422a6
cmp eax, ebx
je 0x4422a6
add esi, esi
cmp esi, 0x4e20
jl 0x442277
cmp esi, 0x4e20
jl 0x44234d
lea eax, [ebp + 0x644]
push eax
call fcn.00403347
pop ecx
test eax, eax
je 0x44234d
call edi
mov esi, eax
lea eax, [ebp + 0x644]
push eax
lea ecx, [ebp + 0x218]
call fcn.00401900
push 0x4b4b2c
lea ecx, [ebp + 0x218]
call fcn.00401987
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x442302
lea eax, [ebp + 0x21c]
push eax
call fcn.00403347
pop ecx
test eax, eax
jne 0x44257b
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x442326
lea eax, [ebp + 0x21c]
push 9
lea ecx, [ebp + 0x644]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x44255f
push 0
push 1
lea ecx, [ebp + 0x218]
call fcn.00401a62
push dword [ebp - 0x64]
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call fcn.004420f1
add esp, 0xc
test eax, eax
je 0x44253a
push 0
jmp 0x4425bf
test byte [ebp - 0x54], 0x10
jne 0x44253a
push 0x64
pop esi
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x44253a
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4423cb
add esi, esi
cmp esi, 0x4e20
jl 0x4423a0
cmp esi, 0x4e20
jl 0x44253a
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
mov edi, eax
inc esi
cmp edi, 5
jne 0x4424e5
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4424e5
xor eax, eax
push 0x206
push eax
mov word [ebp + 0x234], ax
lea eax, [ebp + 0x236]
push eax
call fcn.004766d0
add esp, 0xc
push 0x104
lea eax, [ebp + 0x234]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x4b31c8
lea ecx, [ebp + 0x218]
call fcn.00401900
lea eax, [ebp + 0x218]
push eax
lea eax, [ebp + 0x234]
push eax
call fcn.004033f7
lea eax, [ebp + 0x218]
push eax
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00409d9a
add esp, 0x14
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x218]
call fcn.004019ab
push 0
push esi
lea ecx, [ebp - 0x80]
call fcn.00401a62
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x44249f
lea eax, [ebp + 0x21c]
push 0xb
push eax
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4424b6
xor ebx, ebx
inc ebx
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x4424d2
xor esi, esi
push 0
push 1
lea ecx, [ebp + 0x218]
call fcn.00401a62
test esi, esi
je 0x44253a
push 0
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x442501
xor esi, esi
test esi, esi
je 0x44253a
lea eax, [ebp + 0x644]
push eax
call fcn.00424525
pop ecx
test eax, eax
je 0x442532
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x442532
xor esi, esi
test esi, esi
jne 0x4425e7
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x44219b
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
jmp 0x44261f
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x442574
lea eax, [ebp + 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
xor edi, edi
push edi
sub esp, 0x1c
mov ecx, esp
push 0x4b31c8
call fcn.00401900
sub esp, 0x1c
lea eax, [ebp + 0x644]
mov ecx, esp
push eax
call fcn.00401900
push esi
push 0x25d
call fcn.0044481d
mov ecx, eax
call fcn.0044576c
push edi
push 1
lea ecx, [ebp + 0x218]
call fcn.00401a62
push edi
push 1
lea ecx, [ebp + 0x1fc]
call fcn.00401a62
xor eax, eax
inc eax
mov ecx, dword [ebp + 0x84c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047674a
add ebp, 0x850
leave
ret
push ebx
sub esp, 0x1c
lea eax, [ebp + 0x644]
mov ecx, esp
push eax
call fcn.00401900
sub esp, 0x1c
lea eax, [ebp + 0x43c]
mov ecx, esp
push eax
call fcn.00401900
push edi
push 0x25a
call fcn.0044481d
mov ecx, eax
call fcn.0044576c
xor esi, esi
inc esi
push 0
push 1
lea ecx, [ebp + 0x1fc]
call fcn.00401a62
mov eax, esi
jmp 0x4425cf