Function at 0x442158
Capabilities:
Check if file exists
Copy file
Create directory
Delete directory
Delete file
Enumerate files on windows
Enumerate files recursively
Get file attributes
Move file

Disassembly:
push ebp
lea ebp, [esp - 0x850]
sub esp, 0x8d0
mov eax, dword [0x4c3a60]
xor eax, ebp
mov dword [ebp + 0x84c], eax
mov ecx, dword [ebp + 0x85c]
mov eax, dword [ebp + 0x858]
push ebx
push esi
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp + 0x860]
push edi
mov dword [ebp - 0x64], ecx
push eax
lea ecx, [ebp + 0x1fc]
mov dword [ebp - 0x60], eax
call fcn.004018f6
mov eax, dword [ebp + 0x210]
dec eax
push eax
lea ecx, [ebp + 0x1fc]
call fcn.0040317f
cmp word [eax], 0x5c
je 0x4421c6
push 0x4b3018
lea ecx, [ebp + 0x1fc]
call fcn.004019f8
push 0x4b315c
lea ecx, [ebp + 0x1fc]
call fcn.004019f8
cmp dword [ebp + 0x214], 8
mov eax, dword [ebp + 0x200]
jae 0x4421eb
lea eax, [ebp + 0x200]
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x58], eax
cmp eax, 0xffffffff
je 0x4425bf
mov esi, 0x208
push esi
xor ebx, ebx
lea eax, [ebp + 0x43c]
push ebx
push eax
call fcn.00476cc0
push esi
lea eax, [ebp + 0x644]
push ebx
push eax
call fcn.00476cc0
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
add esp, 0x18
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x43c]
push eax
call esi
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x5c]
lea eax, [ebp + 0x644]
push eax
call esi
test byte [ebp - 0x54], 0x10
je 0x4423e6
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push 0x4b3160
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x4423dc
push 0x4b3010
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x4423dc
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4422a7
test al, 0x10
jne 0x4422a7
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x4423b4
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov ebx, 0xb7
cmp eax, ebx
je 0x4423b4
cmp eax, 0x50
je 0x4423b4
push 0x64
pop esi
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x44230d
call edi
cmp eax, 0x50
je 0x44230d
cmp eax, ebx
je 0x44230d
add esi, esi
cmp esi, 0x4e20
jl 0x4422de
cmp esi, 0x4e20
jl 0x4423b4
lea eax, [ebp + 0x644]
push eax
call fcn.004033be
pop ecx
test eax, eax
je 0x4423b4
call edi
mov esi, eax
lea eax, [ebp + 0x644]
push eax
lea ecx, [ebp + 0x218]
call fcn.004018f6
push 0x4b4b0c
lea ecx, [ebp + 0x218]
call fcn.004019f8
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x442369
lea eax, [ebp + 0x21c]
push eax
call fcn.004033be
pop ecx
test eax, eax
jne 0x4425e2
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x44238d
lea eax, [ebp + 0x21c]
push 9
lea ecx, [ebp + 0x644]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x4425c6
push 0
push 1
lea ecx, [ebp + 0x218]
call fcn.00401ad3
push dword [ebp - 0x64]
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call fcn.00442158
add esp, 0xc
test eax, eax
je 0x4425a1
push 0
jmp 0x442626
test byte [ebp - 0x54], 0x10
jne 0x4425a1
push 0x64
pop esi
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x4425a1
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x442432
add esi, esi
cmp esi, 0x4e20
jl 0x442407
cmp esi, 0x4e20
jl 0x4425a1
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
mov edi, eax
inc esi
cmp edi, 5
jne 0x44254c
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44254c
xor eax, eax
push 0x206
push eax
mov word [ebp + 0x234], ax
lea eax, [ebp + 0x236]
push eax
call fcn.00476cc0
add esp, 0xc
push 0x104
lea eax, [ebp + 0x234]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x4b3140
lea ecx, [ebp + 0x218]
call fcn.004018f6
lea eax, [ebp + 0x218]
push eax
lea eax, [ebp + 0x234]
push eax
call fcn.0040346e
lea eax, [ebp + 0x218]
push eax
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00409edc
add esp, 0x14
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x218]
call fcn.00401a1c
push 0
push esi
lea ecx, [ebp - 0x80]
call fcn.00401ad3
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x442506
lea eax, [ebp + 0x21c]
push 0xb
push eax
lea eax, [ebp + 0x644]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x44251d
xor ebx, ebx
inc ebx
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x442539
xor esi, esi
push 0
push 1
lea ecx, [ebp + 0x218]
call fcn.00401ad3
test esi, esi
je 0x4425a1
push 0
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x442568
xor esi, esi
test esi, esi
je 0x4425a1
lea eax, [ebp + 0x644]
push eax
call fcn.00424781
pop ecx
test eax, eax
je 0x442599
push 0xb
lea eax, [ebp + 0x644]
push eax
lea eax, [ebp + 0x43c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
je 0x442599
xor esi, esi
test esi, esi
jne 0x44264e
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x442202
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
jmp 0x442686
cmp dword [ebp + 0x230], 8
mov eax, dword [ebp + 0x21c]
jae 0x4425db
lea eax, [ebp + 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
xor edi, edi
push edi
sub esp, 0x1c
mov ecx, esp
push 0x4b3140
call fcn.004018f6
sub esp, 0x1c
lea eax, [ebp + 0x644]
mov ecx, esp
push eax
call fcn.004018f6
push esi
push 0x25d
call fcn.004446a8
mov ecx, eax
call fcn.00444f21
push edi
push 1
lea ecx, [ebp + 0x218]
call fcn.00401ad3
push edi
push 1
lea ecx, [ebp + 0x1fc]
call fcn.00401ad3
xor eax, eax
inc eax
mov ecx, dword [ebp + 0x84c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00476d3a
add ebp, 0x850
leave
ret
push ebx
sub esp, 0x1c
lea eax, [ebp + 0x644]
mov ecx, esp
push eax
call fcn.004018f6
sub esp, 0x1c
lea eax, [ebp + 0x43c]
mov ecx, esp
push eax
call fcn.004018f6
push edi
push 0x25a
call fcn.004446a8
mov ecx, eax
call fcn.00444f21
xor esi, esi
inc esi
push 0
push 1
lea ecx, [ebp + 0x1fc]
call fcn.00401ad3
mov eax, esi
jmp 0x442636