Function at 0x44d870
Capabilities:
Check if file exists
Delete file
Get file attributes
Move file

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d7241
push eax
mov dword fs:[0], esp
sub esp, 0x3c8
xor ecx, ecx
mov eax, 0x4f0398
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x3f4]
mov edx, dword [edi + 0x20]
cmp dword [eax], edx
je 0x44d8af
add eax, 4
inc ecx
cmp eax, 0x4f03ac
jl 0x44d8a0
cmp ecx, 5
jne 0x44d8b6
xor ecx, ecx
mov ecx, dword [ecx*4 + 0x4f03ac]
mov esi, dword [esp + 0x3f0]
lea eax, [esp + 0xac]
push eax
push ecx
push esi
call fcn.00442e80
add esp, 0xc
lea edx, [esp + 0xac]
mov dword [0x4fc004], 0
push esi
push edx
call dword [sym.imp.kernel32.dll_lstrcmpi]
mov ecx, dword [edi]
neg eax
sbb eax, eax
inc eax
cmp ecx, 2
mov dword [esp + 0x14], eax
je 0x44d90a
test eax, eax
je 0x44d924
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x44d924
lea eax, [esp + 0xac]
push 0x5f
lea ecx, [esp + 0xb0]
push eax
push ecx
call fcn.00444b90
add esp, 0xc
mov eax, dword [esp + 0x3e8]
lea edx, [esp + 0x1b0]
push 0x226
push edx
push 0x44c
push eax
call dword [sym.imp.user32.dll_LoadStringA]
mov edi, dword [sym.imp.kernel32.dll_lstrlen]
lea ecx, [esp + 0x1b0]
push 0x104
push ecx
call edi
mov ebp, dword [sym.imp.comdlg32.dll_GetFileTitleA]
lea edx, [esp + eax + 0x1b4]
push edx
push esi
call ebp
lea eax, [esp + 0x1b0]
push 0x4ee718
push eax
call dword [sym.imp.kernel32.dll_lstrcat]
lea ecx, [esp + 0x1b0]
push 0x104
push ecx
call edi
lea edx, [esp + eax + 0x1b4]
lea eax, [esp + 0xb0]
push edx
push eax
call ebp
mov edi, dword [esp + 0x3f8]
lea ecx, [esp + 0x1b0]
push ecx
push 0x1fb
push edi
call dword [sym.imp.user32.dll_SetDlgItemTextA]
mov ebx, dword [esp + 0x3fc]
mov esi, dword [sym.imp.user32.dll_SendDlgItemMessageA]
push 0
push ebx
push 0x402
push 0x208
push edi
call esi
push edi
call dword [sym.imp.user32.dll_UpdateWindow]
lea edx, [esp + 0xac]
push edx
call dword [sym.imp.kernel32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x44da56
mov ebp, dword [esp + 0x3f4]
mov eax, dword [ebp]
cmp eax, 1
jne 0x44da04
jmp 0x44dbff
xor ecx, ecx
test eax, eax
setne cl
mov eax, ecx
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x44da1c
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
jne 0x44da56
test eax, eax
je 0x44da56
mov edx, dword [esp + 0x3ec]
mov eax, dword [esp + 0x3e8]
push 0x104
push 0x44e
push 0x44d
push edx
push eax
call fcn.00443760
add esp, 0x14
cmp eax, 6
je 0x44da56
mov eax, 1
jmp 0x44dbff
push edi
call dword [sym.imp.user32.dll_SetFocus]
xor ebp, ebp
cmp edi, ebp
jne 0x44da76
push 0x7f02
push ebp
call dword [sym.imp.user32.dll_LoadCursorA]
push eax
call dword [sym.imp.user32.dll_SetCursor]
mov ecx, dword [esp + 0x3f0]
push ecx
lea ecx, [esp + 0x1c]
call fcn.004537e0
lea ecx, [esp + 0x74]
mov dword [esp + 0x3e0], ebp
call fcn.004537a0
mov eax, 1
cmp edi, ebp
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], eax
mov dword [esp + 0x7c], 4
mov dword [esp + 0x8c], eax
je 0x44dba8
lea edx, [esp + 0x74]
lea ecx, [esp + 0x18]
push edx
call fcn.00453dd0
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.00454890
mov ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 6
mov eax, edx
mov ecx, 0x14
shr eax, 0x1f
add edx, eax
sub ecx, edx
cmp ecx, 1
jge 0x44db00
mov ebp, 1
jmp 0x44db25
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.00454890
mov ecx, eax
mov eax, 0x51eb851f
imul ecx
sar edx, 6
mov eax, edx
mov ebp, 0x14
shr eax, 0x1f
add edx, eax
sub ebp, edx
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.00454bc0
test eax, eax
jne 0x44db9b
mov eax, dword [0x4fc004]
test eax, eax
jne 0x44db9b
push 0
push 0
push ebp
lea ecx, [esp + 0x24]
call fcn.004541b0
test eax, eax
je 0x44db9b
mov eax, dword [esp + 0x400]
push 0
cdq
sub eax, edx
push 0x2710
sar eax, 1
push eax
lea ecx, [esp + 0x24]
call fcn.00454d70
push eax
call dword [sym.imp.kernel32.dll_MulDiv]
add eax, ebx
push eax
push 0x402
push 0x208
push edi
call esi
push edi
call fcn.0044bdb0
add esp, 4
lea ecx, [esp + 0x18]
push 0xffffffffffffffff
call fcn.00454bc0
test eax, eax
je 0x44db34
push 1
lea ecx, [esp + 0x1c]
call fcn.00454350
jmp 0x44dbb6
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x1c]
call fcn.004549c0
or ebp, 0xffffffff
lea ecx, [esp + 0x18]
push ebp
call fcn.00454bc0
test eax, eax
jne 0x44dc18
mov eax, dword [0x4fc004]
test eax, eax
jne case.0x44dc27.1
mov edx, dword [esp + 0x3e8]
push 0
push 0x3e9
push 0x3eb
push edi
push edx
call fcn.00443760
add esp, 0x14
mov dword [esp + 0x3e0], ebp
lea ecx, [esp + 0x18]
call fcn.00453a10
xor eax, eax
mov ecx, dword [esp + 0x3d8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3d4
ret
mov esi, dword [esp + 0x3f4]
mov eax, dword [esi + 0x20]
cmp eax, 5
ja case.0x44dc27.1
jmp dword [eax*4 + 0x44df34]
push 0x3c
call fcn.004c7e90
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0x3e0], 1
je 0x44dcf3
mov ecx, eax
call fcn.0045f810
jmp 0x44dcf5
push 0x278
call fcn.004c7e90
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0x3e0], 2
je 0x44dcf3
add esi, 4
mov ecx, eax
push esi
call fcn.0045f380
jmp 0x44dcf5
push 0x48
call fcn.004c7e90
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0x3e0], 3
je 0x44dcf3
mov ecx, eax
call fcn.0045ff70
jmp 0x44dcf5
push 0x4c
call fcn.004c7e90
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0x3e0], 4
je 0x44dcf3
add esi, 0x24
mov ecx, eax
push esi
call fcn.0045fa00
jmp 0x44dcf5
push 0x50
call fcn.004c7e90
add esp, 4
mov dword [esp + 0x10], eax
test eax, eax
mov byte [esp + 0x3e0], 5
je 0x44dcf3
add esi, 0x2c
mov ecx, eax
push esi
call fcn.0045ee10
jmp 0x44dcf5
xor eax, eax
push ebp
lea ecx, [esp + 0x1c]
mov byte [esp + 0x3e4], 0
mov ebx, eax
call fcn.00454ac0
push eax
mov ecx, ebx
call fcn.0045ea30
lea eax, [esp + 0xac]
mov ecx, ebx
push eax
call fcn.0045e890
mov ecx, ebx
call fcn.0045ebb0
test eax, eax
mov dword [esp + 0x10], eax
jl 0x44de00
test edi, edi
je 0x44ddce
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
xor ebp, ebp
call fcn.004547c0
test eax, eax
jle 0x44dde4
mov eax, dword [0x4fc004]
test eax, eax
jne 0x44dde4
push 1
mov ecx, ebx
call fcn.0045ec00
test eax, eax
mov dword [esp + 0x10], eax
jl 0x44de00
mov eax, dword [esp + 0x400]
push 0
cdq
sub eax, edx
push 0xffffffffffffffff
mov esi, eax
lea ecx, [esp + 0x20]
sar esi, 1
call fcn.004547c0
push eax
push esi
push ebp
call dword [sym.imp.kernel32.dll_MulDiv]
mov edx, dword [esp + 0x400]
add eax, esi
add eax, edx
push eax
push 0x402
push 0x208
push edi
call dword [sym.imp.user32.dll_SendDlgItemMessageA]
push edi
call fcn.0044bdb0
add esp, 4
lea ecx, [esp + 0x18]
inc ebp
push 0xffffffffffffffff
call fcn.004547c0
cmp ebp, eax
jl 0x44dd50
jmp 0x44dde4
push ebp
lea ecx, [esp + 0x1c]
call fcn.004547c0
push eax
mov ecx, ebx
call fcn.0045ec00
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x44de00
mov eax, dword [0x4fc004]
test eax, eax
jne 0x44de00
mov ecx, ebx
call fcn.0045ec10
mov dword [esp + 0x10], eax
test ebx, ebx
je 0x44de0c
mov edx, dword [ebx]
push 1
mov ecx, ebx
call dword [edx]
mov eax, dword [0x4fc004]
test eax, eax
je 0x44de33
lea eax, [esp + 0xac]
push eax
call dword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [esp + 0x3e0], 0xffffffff
jmp 0x44dbf4
mov eax, dword [esp + 0x10]
push 0
test eax, eax
jge 0x44de69
mov ecx, dword [esp + 0x3ec]
push 0x3e9
push 0x3ea
push 0
push ecx
call fcn.00443760
add esp, 0x14
mov dword [esp + 0x3e0], 0xffffffff
jmp 0x44dbf4
mov esi, dword [esp + 0x3f4]
push esi
call fcn.00443ef0
add esp, 8
test eax, eax
je 0x44de92
push 0
push 1
lea edx, [esp + 0xb4]
push eax
push edx
call fcn.00444190
add esp, 0x10
mov eax, dword [esp + 0x3f4]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
je 0x44df02
mov eax, dword [esp + 0x14]
push esi
test eax, eax
je 0x44dedb
call dword [sym.imp.kernel32.dll_DeleteFileA]
test eax, eax
je 0x44dec4
lea ecx, [esp + 0xac]
push esi
push ecx
call dword [sym.imp.kernel32.dll_MoveFileA]
jmp 0x44df02
mov edx, dword [esp + 0x3ec]
mov eax, dword [esp + 0x3e8]
push 0x3fc
push edx
push eax
jmp 0x44defa
call dword [sym.imp.kernel32.dll_DeleteFileA]
test eax, eax
jne 0x44df02
mov ecx, dword [esp + 0x3ec]
mov edx, dword [esp + 0x3e8]
push 0x3fc
push ecx
push edx
call fcn.00443860
add esp, 0xc
push 0x7f00
push 0
call dword [sym.imp.user32.dll_LoadCursorA]
push eax
call dword [sym.imp.user32.dll_SetCursor]
lea ecx, [esp + 0x18]
mov dword [esp + 0x3e0], 0xffffffff
call fcn.00453a10
mov eax, 1
jmp 0x44dbff