Function at 0x44217a
Capabilities:
Copy file
Delete file
Get common file path
Get file attributes
Move file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x430
mov eax, dword [0x46700c]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov esi, ecx
mov edi, edx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
test esi, esi
jne 0x4421b3
mov eax, 0x80004003
jmp 0x44253c
test edi, edi
jne 0x4421c2
test eax, eax
jne 0x4421c2
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
call fcn.00440bc3
test eax, eax
jne 0x4421db
neg edi
sbb edi, edi
and edi, 0x80070002
jmp 0x44253a
test edi, edi
je 0x4422e3
cmp dword [ebp + 8], 0
je 0x4421ff
lea eax, reloc.ADVAPI32.dll_TraceMessage
test eax, eax
je 0x4421fa
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
call fcn.0044210a
push 0x208
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new___unsigned_int_]
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x44221b
mov eax, 0x8007000e
jmp 0x44253c
mov eax, 0x104
mov ecx, ebx
mov edx, edi
call fcn.004402f7
push ebx
call fcn.004402ab
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
test eax, eax
je 0x442255
push eax
push ebx
push 0x40339c
mov eax, 0x104
lea ecx, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c95b
add esp, 0xc
jmp 0x44228a
push dword [0x469260]
mov eax, 0x104
push ebx
push 0x41d7d0
lea ecx, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c95b
add esp, 0xc
inc dword [0x469260]
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00440bc3
test eax, eax
jne 0x442255
push ebx
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
pop ecx
push 1
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push esi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4422f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x4422b5
push 0x57
pop eax
test eax, eax
jle 0x4422c1
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push esi
push 0x41d7f0
xor esi, esi
call fcn.00440126
add esp, 0x10
mov eax, 0x80004005
jmp 0x44253c
mov edx, esi
mov ebx, 0x104
mov eax, ebx
lea esi, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c88c
jmp 0x4422fe
mov ebx, 0x104
push 0x208
call dword [sym.imp.msvcrt.dll_void____cdecl_operator_new___unsigned_int_]
pop ecx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
test eax, eax
je 0x442487
and dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0
push eax
push ebx
mov esi, 0x80004005
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x44246a
push dword [ebp - 0x420]
call fcn.00440bf0
push dword [ebp - 0x420]
call fcn.004402ab
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
xor ecx, ecx
mov dword [0x469260], ecx
test eax, eax
je 0x44237a
push eax
push dword [ebp - 0x420]
mov eax, ebx
push 0x40339c
lea ecx, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c95b
add esp, 0xc
jmp 0x4423bb
mov edi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
push ecx
push edi
push 0x41d7d0
mov eax, ebx
lea ecx, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c95b
add esp, 0xc
inc dword [0x469260]
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00440bc3
test eax, eax
je 0x4423b5
mov ecx, dword [0x469260]
jmp 0x442380
mov edi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
test edi, edi
je 0x442403
mov ebx, dword [sym.imp.KERNEL32.dll_MoveFileW]
push edi
call ebx
test eax, eax
je 0x44246a
push edi
call fcn.00440bc3
test eax, eax
je 0x4423f1
xor esi, esi
push edi
push 0x41d840
inc esi
call fcn.00440126
pop ecx
pop ecx
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call ebx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
jmp 0x442434
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x44246a
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x41d884
push 4
pop esi
call fcn.00440126
pop ecx
pop ecx
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 1
lea eax, reloc.ADVAPI32.dll_TraceMessage
test eax, eax
jne 0x442445
mov esi, 0x80004003
jmp 0x44246a
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call fcn.00442fbe
mov esi, eax
cmp esi, 0xd2af9
jne 0x44246a
push 2
lea ecx, reloc.ADVAPI32.dll_TraceMessage
pop eax
dec esi
call fcn.00441394
push dword [ebp - 0x420]
call dword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void__]
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0
pop ecx
je 0x442487
mov eax, esi
jmp 0x44253c
push 5
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x4424fa
test edi, edi
je 0x4424ba
mov esi, edi
call fcn.004402c6
test eax, eax
je 0x4424ba
push edi
push 0x41d8c4
push 2
pop esi
call fcn.00440126
pop ecx
pop ecx
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x41d8e8
push 2
pop esi
call fcn.00440126
cmp dword [ebp + 0x10], 0
pop ecx
pop ecx
lea ecx, reloc.ADVAPI32.dll_TraceMessage
je 0x4424eb
push 8
pop eax
call fcn.00441394
mov eax, 0xd2af9
jmp 0x44253c
push 2
pop eax
call fcn.00441394
mov eax, 0xd2af8
jmp 0x44253c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jne 0x44250b
push 0x57
pop edi
test edi, edi
jle 0x442519
and edi, 0xffff
or edi, 0x80070000
test edi, edi
js 0x442522
mov edi, 0x80004005
push edi
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x41d918
push 2
pop esi
call fcn.00440126
add esp, 0xc
mov eax, edi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004655f1
leave
ret 0xc