Function at 0x441dea
Capabilities:
Check if file exists
Copy file
Create directory
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Move file

Disassembly:
push ebp
lea ebp, [esp - 0x850]
sub esp, 0x8d0
mov eax, dword [0x4c2f90]
xor eax, ebp
mov dword [ebp + 0x84c], eax
mov ecx, dword [ebp + 0x85c]
mov eax, dword [ebp + 0x858]
push ebx
push esi
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp + 0x860]
push edi
mov dword [ebp - 0x64], ecx
push eax
lea ecx, [ebp + 0x1fc]
mov dword [ebp - 0x60], eax
call fcn.00401903
mov eax, dword [ebp + 0x210]
dec eax
push eax
lea ecx, [ebp + 0x1fc]
call fcn.00416ac0
cmp word [eax], 0x5c
je 0x441e58
push 0x4b27d0
lea ecx, [ebp + 0x1fc]
call fcn.0040198a
push 0x4b2914
lea ecx, [ebp + 0x1fc]
call fcn.0040198a
cmp dword [ebp + 0x214], 8
mov eax, dword [ebp + 0x200]
jae 0x441e7d
lea eax, [ebp + 0x200]
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x58], eax
cmp eax, 0xffffffff
je 0x442220
mov esi, 0x208
push esi
xor ebx, ebx
lea eax, [ebp + 0x43c]
push ebx
push eax
call fcn.004764d0
push esi
lea eax, [ebp + 0x644]
push ebx
push eax
call fcn.004764d0
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
add esp, 0x18
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x43c]
push eax
call esi
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x5c]
lea eax, [ebp + 0x644]
push eax
call esi
test byte [ebp - 0x54], 0x10
je 0x442078
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push 0x4b2918
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x44206e
push 0x4b27c8
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x44206e
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x441f39
test al, 0x10
jne 0x441f39
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x442046
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov ebx, 0xb7
cmp eax, ebx
je 0x442046
cmp eax, 0x50
je 0x442046
push 0x64
pop esi
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x441f9f
call edi
cmp eax, 0x50
je 0x441f9f
cmp eax, ebx
je 0x441f9f
add esi, esi
cmp esi, 0x4e20
jl 0x441f70
cmp esi, 0x4e20
jl 0x442046
lea eax, [ebp + 0x644]
push eax
call fcn.00403333
pop ecx
test eax, eax
je 0x442046
call edi
mov esi, eax
lea eax, [ebp + 0x644]
push eax
lea ecx, [ebp + 0x218]
call fcn.00401903
push 0x4b429c
lea ecx, [ebp + 0x218]
call fcn.0040198a
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x441ffb
lea eax, [ebp + 0x21c]
push eax
call fcn.00403333
pop ecx
test eax, eax
jne 0x442243
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x44201f
lea eax, [ebp + 0x21c]
push 9
lea ecx, [ebp + 0x644]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x442227
push 0
push 1
lea ecx, [ebp + 0x218]
call fcn.00401a65
push dword [ebp - 0x64]
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call fcn.00441dea
add esp, 0xc
test eax, eax
je 0x442202
push 0
jmp 0x442287
test byte [ebp - 0x54], 0x10
jne 0x442202
push 0x64
pop esi
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x442202
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4420c4
add esi, esi
cmp esi, 0x4e20
jl 0x442099
cmp esi, 0x4e20
jl 0x442202
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
mov edi, eax
inc esi
cmp edi, 5
jne 0x4421de
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4421de
xor eax, eax
push 0x206
push eax
mov word [ebp + 0x234], ax
lea eax, [ebp + 0x236]
push eax
call fcn.004764d0
add esp, 0xc
push 0x104
lea eax, [ebp + 0x234]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x4b28f8
lea ecx, [ebp + 0x218]
call fcn.00401903
lea eax, [ebp + 0x218]
push eax
lea eax, [ebp + 0x234]
push eax
call fcn.004033e3
lea eax, [ebp + 0x218]
push eax
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00409daf
add esp, 0x14
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x218]
call fcn.004019ae
push 0
push esi
lea ecx, [ebp - 0x80]
call fcn.00401a65
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x442198
lea eax, [ebp + 0x21c]
push 0xb
push eax
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4421af
xor ebx, ebx
inc ebx
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x4421cb
xor esi, esi
push 0
push 1
lea ecx, [ebp + 0x218]
call fcn.00401a65
test esi, esi
je 0x442202
push 0
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x4421fa
xor esi, esi
test esi, esi
jne 0x4422af
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x441e94
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
jmp 0x4422e7
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x44223c
lea eax, [ebp + 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
xor edi, edi
push edi
sub esp, 0x1c
mov ecx, esp
push 0x4b28f8
call fcn.00401903
sub esp, 0x1c
lea eax, [ebp + 0x644]
mov ecx, esp
push eax
call fcn.00401903
push esi
push 0x25d
call fcn.004442e3
mov ecx, eax
call fcn.00444b5c
push edi
push 1
lea ecx, [ebp + 0x218]
call fcn.00401a65
push edi
push 1
lea ecx, [ebp + 0x1fc]
call fcn.00401a65
xor eax, eax
inc eax
mov ecx, dword [ebp + 0x84c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047654a
add ebp, 0x850
leave
ret
push ebx
sub esp, 0x1c
lea eax, [ebp + 0x644]
mov ecx, esp
push eax
call fcn.00401903
sub esp, 0x1c
lea eax, [ebp + 0x43c]
mov ecx, esp
push eax
call fcn.00401903
push edi
push 0x25a
call fcn.004442e3
mov ecx, eax
call fcn.00444b5c
xor esi, esi
inc esi
push 0
push 1
lea ecx, [ebp + 0x1fc]
call fcn.00401a65
mov eax, esi
jmp 0x442297