Function at 0x414da0
Capabilities:
Delete file
Read file on windows
Set file attributes
Write file on windows

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x44dd7b
push eax
mov eax, 0x1728
mov dword fs:[0], esp
call fcn.004239e0
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
cmp dword [ebp + 0x860], ebx
je 0x41506c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x1748]
cmp esi, ebx
je 0x41506c
mov eax, dword [esp + 0x174c]
mov edx, dword [ebp + 0x858]
lea ecx, [esp + 0x20]
push ebx
push ecx
push eax
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
je 0x41506c
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x25]
mov byte [esp + 0x24], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x229]
mov byte [esp + 0x228], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x1750]
push 0x104
lea ecx, [esp + 0x28]
push eax
push ecx
call fcn.00423d60
lea edx, [esp + 0x30]
push 0x104
lea eax, [esp + 0x238]
push edx
push eax
call fcn.00423d60
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x141]
mov byte [esp + 0x140], bl
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x140]
lea edx, [esp + 0x3c]
push ecx
push ebx
stosw word es:[edi], ax
push ebx
push ebx
push edx
stosb byte es:[edi], al
call fcn.00423b43
lea edi, [esp + 0x154]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x2c
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esp + 0x24]
sub edx, ecx
lea edi, [esp + 0x24]
or ecx, 0xffffffff
push 0x80
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x28]
push eax
mov byte [edx + ecx], bl
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push ebx
push 0x86
push 2
push ebx
push 1
lea edx, [esp + 0x38]
push 0x40000000
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, eax
cmp edx, 0xffffffff
mov dword [esp + 0x14], edx
jne 0x414f22
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x1754]
xor eax, eax
cmp ecx, ebx
sete al
jmp 0x41506e
mov ecx, 0x3ff
xor eax, eax
lea edi, [esp + 0x739]
mov byte [esp + 0x738], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [esi + 0x24]
mov dword [esp + 0x10], ebx
cmp edi, ebx
mov dword [esp + 0x18], ebx
je 0x415033
cmp edi, 0x1000
mov esi, 0x1000
ja 0x414f5e
mov esi, edi
mov edx, dword [ebp + 0x858]
lea eax, [esp + 0x10]
push ebx
push eax
lea ecx, [esp + 0x740]
push esi
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp esi, dword [esp + 0x10]
jne 0x415056
cmp dword [esp + 0x1754], ebx
je 0x414fd9
lea ecx, [esp + 0x32c]
call fcn.00414240
mov ecx, dword [esp + 0x10]
lea eax, [ebp + 0x3f0]
push 0x10
push eax
lea edx, [esp + 0x740]
push ecx
push edx
lea ecx, [esp + 0x33c]
mov dword [esp + 0x1750], ebx
call fcn.00414390
lea ecx, [esp + 0x32c]
mov dword [esp + 0x1740], 0xffffffff
call fcn.00414270
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x18]
push ebx
push eax
lea edx, [esp + 0x740]
push ecx
push edx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
cmp eax, ecx
jne 0x415089
mov ecx, dword [ebp + 0x864]
cmp ecx, ebx
je 0x415027
mov edx, dword [ebp + 0x868]
push edx
push eax
push eax
call ecx
add esp, 0xc
test al, al
je 0x415097
mov eax, dword [esp + 0x10]
sub edi, eax
jne 0x414f4f
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x228]
lea edx, [esp + 0x24]
push ecx
push edx
call fcn.004244e4
add esp, 8
mov eax, 1
jmp 0x41506e
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
mov ecx, dword [esp + 0x1738]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1734
ret 0x10
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [esp + 0x24]
push edx
jmp 0x415066
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x24]
push eax
jmp 0x415066