Function at 0x434bb0
Capabilities:
Delete file
Set file attributes
Write file on windows

Disassembly:
sub esp, 0x2b8
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2c8]
push edi
mov ecx, 0xab
xor eax, eax
lea edi, [esp + 0x1c]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x41c]
mov edi, dword [esp + 0x2d0]
mov ebx, 1
xor ebp, ebp
mov eax, dword [edi + 4]
mov dword [esp + 0x1c], 0x8994
mov dword [esp + 0x2a4], ebx
mov dword [esp + 0x2a8], ebx
mov dword [esp + 0x14], ebp
mov edx, dword [ecx + 0x594c]
mov ecx, dword [esi + 0x688]
mov dword [esp + 0x10], edx
add ecx, eax
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x684]
mov dword [esi + 0x688], ecx
mov edx, dword [esi + 0x68c]
mov ecx, dword [esi + 0x680]
adc edx, ebp
push eax
mov dword [esi + 0x68c], edx
mov eax, dword [esi + 0x688]
push ecx
push edx
push eax
call fcn.0042d7b0
add esp, 0x10
cmp eax, 0x64
jle 0x434c51
mov eax, 0x64
mov ecx, dword [esi]
push ebp
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push 0x418
push ecx
call ebp
mov edx, dword [esp + 0x10]
push edx
call fcn.00437f20
add esp, 4
test eax, eax
jne 0x434c83
xor ebx, ebx
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x2b8
ret
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x434e02
mov eax, dword [esi + 0x578]
mov ecx, dword [edi + 0x24]
cmp eax, ecx
mov eax, dword [esi + 0x424]
je 0x434d41
test eax, eax
je 0x434cb0
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esi + 0x57c]
mov dword [esi + 0x424], 0
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edx, dword [esi]
xor ebx, ebx
push ebx
push 0xc9
push 0x418
push edx
call ebp
mov eax, dword [esi + 0x8a4]
mov ecx, dword [esi + 0x8a8]
cmp eax, ecx
push esi
jae 0x434d2f
mov ecx, dword [esi + 4]
push 0xffffe5f5
push 0x41e
push ecx
call ebp
mov ebx, eax
test ebx, ebx
jne 0x434fd4
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x1c]
push 0x2ac
push eax
mov dword [esp + 0x2b4], 1
call fcn.0042cfc0
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x2b8
ret
mov edx, dword [esi + 4]
push 0xffffe5f6
push 0x41e
push edx
call ebp
jmp 0x434d04
test eax, eax
je 0x434de2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call ebx
push 0
push 0
push 3
push 0
lea edi, [esi + 0x57c]
push 3
push 0xc0000000
push edi
mov dword [esi + 0x424], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
test eax, eax
mov dword [esi + 0x424], eax
je 0x434db5
cmp eax, 0xffffffff
je 0x434db5
lea ecx, [esi + 0x43c]
lea edx, [esi + 0x434]
push ecx
lea ecx, [esi + 0x42c]
push edx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x434db5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi + 0x424]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
mov dword [esi + 0x424], 0
call ebx
mov eax, dword [esi + 0x428]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0
call ebx
mov ecx, dword [esi]
push 0
push 0x64
push 0x418
push ecx
mov ebx, 1
call ebp
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x2b8
ret
mov eax, dword [edi + 8]
test eax, eax
je 0x434ecf
mov dword [esi + 0x690], eax
mov eax, dword [esi + 0x424]
test eax, eax
je 0x434e24
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esi + 0x57c]
mov dword [esi + 0x424], 0
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [esi + 0x8a4]
mov ecx, dword [esi + 0x8a8]
xor edi, edi
xor ebx, ebx
cmp eax, ecx
push esi
jae 0x434e77
mov ecx, dword [esi + 4]
push 0xffffe19e
push 0x41e
push ecx
call ebp
xor edx, edx
cmp eax, edi
sete dl
mov dword [esp + 0x2a8], eax
mov dword [esp + 0x2ac], edx
jmp 0x434e95
mov eax, dword [esi + 4]
push 0xffffe19f
push 0x41e
push eax
call ebp
mov dword [esp + 0x2a8], edi
mov dword [esp + 0x2ac], edi
mov ecx, dword [esi]
push edi
push 0xc9
push 0x418
push ecx
call ebp
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x1c]
push 0x2ac
push edx
call fcn.0042cfc0
test eax, eax
jne 0x434fd4
xor ebx, ebx
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x2b8
ret
mov eax, dword [esi + 0x8ac]
test eax, eax
je 0x434f42
mov eax, dword [esi + 0x8b0]
cmp eax, 1
jne 0x434f13
mov ecx, dword [esi + 0x8bc]
test ecx, ecx
je 0x434f13
push 0xfc0
call fcn.0042ae00
mov dword [edi + 0x14], eax
mov ecx, dword [esi + 0x8bc]
push 1
lea eax, [edi + 0x28]
push 0xfc0
push eax
call fcn.0042a6a0
jmp 0x434f42
test eax, eax
jne 0x434f42
mov ecx, dword [esi + 0x8b8]
test ecx, ecx
je 0x434f42
push 0xfc0
call fcn.0042ae00
lea ecx, [edi + 0x28]
push 0xfc0
mov dword [edi + 0x14], eax
push ecx
mov ecx, dword [esi + 0x8b8]
call fcn.00429b80
mov ebp, dword [esp + 0x18]
mov eax, dword [esi + 0x424]
lea edx, [esp + 0x14]
push 0
add edi, 0x28
push edx
push ebp
push edi
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x434fbd
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
call esi
test eax, eax
mov dword [esp + 0x20], eax
jne 0x434f7d
mov dword [esp + 0x20], 2
mov esi, dword [esp + 0x10]
push esi
call fcn.00437f20
add esp, 4
test eax, eax
jne 0x434f9d
xor ebx, ebx
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x2b8
ret
lea ecx, [esp + 0x1c]
push 0x2ac
push ecx
mov ecx, esi
call fcn.0042cfc0
xor ebx, ebx
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x2b8
ret
mov edx, dword [esi + 0x578]
push ebp
push edi
push edx
call fcn.00428ee0
add esp, 0xc
mov dword [esi + 0x578], eax
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x2b8
ret