Function at 0x4053f0
Capabilities:
Delete file
Move file
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], ecx
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004031ec
xor eax, eax
push ebp
push 0x40574a
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 8], eax
push 0
push 0x80
push 3
push 0
push 3
push 0xc0000000
mov eax, dword [ebp - 4]
call fcn.004031fc
push eax
call sub.kernel32.dll_CreateFileA_1
mov esi, eax
movzx eax, si
cmp eax, 0xffffffff
je 0x405712
cmp eax, 0xffff
je 0x405712
test ebx, ebx
je 0x405573
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x18]
mov eax, esi
call fcn.00404c24
lea eax, [ebp - 0x2c]
mov dl, byte [0x408120]
call fcn.00402fdc
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x20]
mov edx, dword [0x4080bc]
call fcn.00403084
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.00404150
mov eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
call fcn.0040527c
mov edx, dword [ebp - 0x30]
pop eax
call fcn.00403148
je 0x4054d6
cmp dword [ebp - 0x1c], 0
je 0x4054d6
cmp dword [ebp - 0x18], 0
je 0x4054e4
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.00403148
jne 0x4054e4
movzx eax, si
push eax
call sub.kernel32.dll_CloseHandle_1
jmp 0x405712
cmp dword [ebp - 0x18], 0
je 0x40552e
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.00403148
jae 0x40552e
movzx eax, si
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 4]
call fcn.00404b64
test eax, eax
je 0x405712
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004053f0
test eax, eax
je 0x405712
mov dword [ebp - 8], 0xffffffff
jmp 0x405712
cmp dword [ebp - 0x18], 0
je 0x405573
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.00403148
jbe 0x405573
push 0
mov ecx, dword [0x4080e8]
mov edx, dword [0x4080e0]
mov eax, 0x80000002
call fcn.004051a0
push 0x258
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 4]
call fcn.004052c4
jmp 0x405712
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.00404150
mov eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
mov dl, byte [0x4080ac]
call fcn.00402fdc
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0xc]
pop edx
call fcn.00403084
xor ecx, ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4194bc]
call fcn.0040430c
test eax, eax
jne 0x4055bd
movzx eax, si
push eax
call sub.kernel32.dll_CloseHandle_1
jmp 0x405712
push 0
push 0x80
push 3
push 0
push 2
push 0x40000000
mov eax, dword [ebp - 0xc]
call fcn.004031fc
push eax
call sub.kernel32.dll_CreateFileA_1
mov ebx, eax
movzx eax, bx
cmp eax, 0xffffffff
je 0x4055ee
cmp eax, 0xffff
jne 0x40560a
movzx eax, si
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 0xc]
call fcn.004031fc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x405712
push 2
push 0
push 0
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, ebx
call fcn.00404db4
test eax, eax
je 0x40563b
push 0
lea eax, [ebp - 0x14]
push eax
push 1
push 0x4080a8
movzx eax, bx
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
jne 0x405660
movzx eax, bx
push eax
call sub.kernel32.dll_CloseHandle_1
movzx eax, si
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 0xc]
call fcn.004031fc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x405712
push 0
lea eax, [ebp - 0x10]
push eax
push pe_overlay
push 0x4094bc
movzx edi, si
push edi
call sub.kernel32.dll_ReadFile_1
test eax, eax
je 0x405699
push 0
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
push 0x4094bc
movzx eax, bx
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
jne 0x4056b8
movzx eax, bx
push eax
call sub.kernel32.dll_CloseHandle_1
push edi
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 0xc]
call fcn.004031fc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x405712
cmp dword [ebp - 0x10], 0
je 0x4056c6
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10]
je 0x405660
movzx eax, bx
push eax
call sub.kernel32.dll_CloseHandle_1
movzx eax, si
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 4]
call fcn.004031fc
mov ebx, eax
push ebx
call sub.kernel32.dll_DeleteFileA
test eax, eax
jne 0x4056fc
mov eax, dword [ebp - 0xc]
call fcn.004031fc
push eax
call sub.kernel32.dll_DeleteFileA
jmp 0x405712
push ebx
mov eax, dword [ebp - 0xc]
call fcn.004031fc
push eax
call sub.kernel32.dll_MoveFileA
mov dword [ebp - 8], 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x405751
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00402eec
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00402eec
lea eax, [ebp - 0xc]
call fcn.00402ec8
lea eax, [ebp - 4]
call fcn.00402ec8
ret