Function at 0x4088e0
Capabilities:
Delete file
Get file attributes
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44740b
mov eax, dword fs:[0]
push eax
mov eax, 0x111c
call fcn.0042a310
mov eax, dword [0x465074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
sub eax, 2
and esi, eax
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
sub eax, 0x81
and esi, eax
and esi, 0xffe0fe00
push esi
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x40896b
mov eax, 1
jmp 0x408d42
push 0x45106c
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHLWAPI.dll_PathMatchSpecW]
test eax, eax
je 0x4089eb
push 0x4510bc
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
call fcn.0042fb23
add esp, 8
test eax, eax
je 0x4089eb
mov ecx, 0xa
mov esi, str.TASKKILL__F__T__IM
lea edi, [ebp - 0x1010]
rep movsd dword es:[edi], dword [esi]
push 0xfd8
push 0
lea ecx, [ebp - 0xfe8]
push ecx
call fcn.0042d590
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea eax, [ebp - 0x1010]
push eax
call fcn.0042faf2
add esp, 8
lea ecx, [ebp - 0x1010]
push ecx
call fcn.00407ed0
add esp, 4
push 1
lea ecx, [ebp - 0x1128]
call fcn.00402ea0
mov dword [ebp - 4], 0
push 0x40
push 1
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x1128]
call fcn.004242e0
lea ecx, [ebp - 0x1128]
call fcn.00422c70
movzx eax, al
test eax, eax
je 0x408a2f
lea ecx, [ebp - 0x1128]
call fcn.00421b60
mov ecx, dword [ebp + 8]
push ecx
call fcn.004087c0
test eax, eax
jl 0x408a76
mov edx, dword [ebp + 8]
push edx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x408a76
mov dword [ebp - 0x1014], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x1014]
jmp 0x408d42
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x408abe
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x408abe
mov dword [ebp - 0x1018], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x1018]
jmp 0x408d42
mov edx, dword [ebp + 8]
push edx
call fcn.00419150
add esp, 4
test eax, eax
je 0x408c11
mov eax, dword [ebp + 8]
push eax
call fcn.004087c0
test eax, eax
jl 0x408b19
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x408b19
mov dword [ebp - 0x101c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x101c]
jmp 0x408d42
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x408b61
mov eax, dword [ebp + 8]
push eax
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x408b61
mov dword [ebp - 0x1020], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x1020]
jmp 0x408d42
mov dword [ebp - 0x1050], 0
xor ecx, ecx
mov dword [ebp - 0x104c], ecx
mov dword [ebp - 0x1048], ecx
mov dword [ebp - 0x1044], ecx
mov dword [ebp - 0x1040], ecx
mov dword [ebp - 0x103c], ecx
mov dword [ebp - 0x1038], ecx
mov word [ebp - 0x1034], cx
mov dword [ebp - 0x104c], 3
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1048], edx
mov eax, 0x614
mov word [ebp - 0x1040], ax
mov dword [ebp - 0x103e], 0
lea ecx, [ebp - 0x1050]
push ecx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
je 0x408c0c
mov edx, dword [ebp + 8]
push edx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x408c0c
mov dword [ebp - 0x1024], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x1024]
jmp 0x408d42
jmp 0x408cbc
mov dword [ebp - 0x1070], 0
xor eax, eax
mov dword [ebp - 0x106c], eax
mov dword [ebp - 0x1068], eax
mov dword [ebp - 0x1064], eax
mov dword [ebp - 0x1060], eax
mov dword [ebp - 0x105c], eax
mov dword [ebp - 0x1058], eax
mov word [ebp - 0x1054], ax
mov dword [ebp - 0x106c], 3
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1068], ecx
mov edx, 0x614
mov word [ebp - 0x1060], dx
mov dword [ebp - 0x105e], 0
lea eax, [ebp - 0x1070]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
je 0x408cbc
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x408cbc
mov dword [ebp - 0x1028], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x1028]
jmp 0x408d42
mov edx, dword [ebp + 8]
push edx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
jne 0x408d12
mov eax, dword [ebp + 8]
push eax
call fcn.0041b990
add esp, 4
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040d580
add esp, 4
cmp eax, 0x2b9
je 0x408d12
mov dword [ebp - 0x102c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x102c]
jmp 0x408d42
push 4
push 0
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
mov dword [ebp - 0x1030], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.004051c0
mov eax, dword [ebp - 0x1030]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042a2fe
mov esp, ebp
pop ebp
ret