Function at 0x414530
Capabilities:
Check if file exists
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c3533
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x4f4214]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
mov dword [ebp - 0x298], esi
cmp esi, edi
je 0x4145db
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x414571
sub eax, edx
sar eax, 1
cmp eax, 4
jb 0x4145db
push esi
xor ebx, ebx
mov dword [ebp - 0x294], edi
mov dword [ebp - 0x2a0], edi
call fcn.00434ae0
mov ebx, eax
add esp, 4
push ebx
lea ecx, [ebp - 0x2a0]
lea edi, [ebp - 0x294]
mov edx, str..app_Info.plist
call fcn.00438000
add esp, 4
test eax, eax
jg 0x414602
mov eax, dword [esi + 0x208]
push 0
push 0
push 0x13a6
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
call fcn.0049ca2e
add esp, 4
push esi
call fcn.0049c71f
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049c72a
mov esp, ebp
pop ebp
ret
push ebx
call fcn.0049ca2e
mov edi, dword [ebp - 0x2a0]
add esp, 4
cmp edi, 8
jge 0x41462e
mov ecx, dword [esi + 0x208]
push 0
push 0
push 0x13a6
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4145db
mov esi, dword [ebp - 0x294]
mov edx, dword [esi]
push 6
mov dword [ebp - 0x18], edx
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x18]
push str.bplist
xor ebx, ebx
push ecx
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x14], eax
call fcn.0049d9fa
add esp, 0xc
test eax, eax
jne 0x414695
push 2
lea edx, [ebp - 0x12]
push 0x4d6428
push edx
call fcn.0049d9fa
add esp, 0xc
test eax, eax
jne 0x414695
push edi
push esi
lea edi, [ebp - 0x2a4]
call fcn.00442320
push esi
call fcn.0049c78c
add esp, 4
xor esi, esi
mov dword [ebp - 0x294], esi
jmp 0x41469b
mov dword [ebp - 0x2a4], esi
push 0x144
call fcn.0049caff
add esp, 4
cmp eax, ebx
je 0x4146bc
push eax
call fcn.00410f00
mov edi, eax
mov dword [ebp - 0x29c], edi
jmp 0x4146c4
mov dword [ebp - 0x29c], ebx
mov edi, ebx
mov eax, dword [ebp - 0x298]
push eax
xor ebx, ebx
call fcn.00434ae0
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4146f2
push ebx
push 0x4d642c
lea ecx, [edi + 0x30]
push 0x104
push ecx
call fcn.0049c891
add esp, 0x10
push ebx
call fcn.0049ca2e
mov edx, dword [ebp - 0x298]
add esp, 4
push edx
call fcn.00437e00
xor ebx, ebx
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], 8
mov dword [edi + 0x138], ebx
mov dword [edi + 0x13c], ebx
mov dword [edi + 0x140], ebx
add esp, 4
mov dword [ebp - 0x228], 0xf
mov dword [ebp - 0x22c], ebx
mov byte [ebp - 0x23c], bl
mov dword [ebp - 4], ebx
mov ecx, dword [ebp - 0x2a4]
push edi
lea edx, [ebp - 0x23c]
call fcn.00413560
add esp, 4
test al, al
jne 0x4147b7
cmp esi, ebx
jne 0x414767
mov eax, dword [ebp - 0x2a4]
push eax
jmp 0x414768
push esi
call fcn.0049c78c
mov ecx, dword [ebp - 0x298]
mov edx, dword [ecx + 0x208]
add esp, 4
push ebx
push ebx
push 0x13a6
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, edi
call fcn.00410ee0
mov eax, dword [ebp - 0x298]
push eax
call fcn.0049c71f
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.00406c40
jmp 0x4145e4
cmp esi, ebx
jne 0x4147c9
mov ecx, dword [ebp - 0x2a4]
push ecx
call fcn.0049c78c
jmp 0x4147d5
push esi
call fcn.0049c78c
mov dword [ebp - 0x294], ebx
add esp, 4
push 0x206
lea eax, [ebp - 0x21e]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x220], dx
call fcn.0049f910
add esp, 0xc
lea ecx, [edi + 4]
push ecx
lea edx, [ebp - 0x2b0]
push edx
mov ebx, str..png
call fcn.00415430
add esp, 8
mov ebx, eax
mov byte [ebp - 4], 1
lea esi, [ebp - 0x2ac]
call fcn.00434d50
mov byte [ebp - 4], 2
mov ebx, dword [ebx]
mov eax, dword [eax]
push ebx
push eax
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [ebp - 0x2a8]
push ecx
mov ecx, eax
call fcn.004152e0
mov byte [ebp - 4], 4
mov edx, esi
push edx
call fcn.00402550
mov byte [ebp - 4], 5
lea eax, [ebp - 0x2b0]
push eax
call fcn.00402550
mov ecx, dword [ebp - 0x2a8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x414a53
lea edx, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x258]
call fcn.00406bd0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x22c]
cmp eax, 4
jbe 0x4148e8
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x4d4184
call fcn.004155a0
test eax, eax
je 0x41490a
mov ecx, dword [ebp - 0x22c]
add ecx, 0xfffffffc
push ecx
lea edx, [ebp - 0x23c]
push edx
mov edx, str..PNG
call fcn.004155a0
test eax, eax
je 0x41490a
lea eax, [ebp - 0x23c]
push eax
mov edx, 0x4d4184
call fcn.00415570
lea ecx, [ebp - 0x258]
push ecx
jmp 0x414900
lea edx, [ebp - 0x23c]
push edx
mov edx, 0x4d4184
call fcn.00415570
lea eax, [ebp - 0x258]
push eax
mov edx, str._2x.png
call fcn.00415570
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x274]
push edx
call fcn.00417090
mov byte [ebp - 4], 7
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x290]
push ecx
call fcn.00417090
add esp, 0x10
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x274]
mov ebx, 0x10
cmp dword [ebp - 0x260], ebx
jae 0x414954
lea edx, [ebp - 0x274]
lea esi, [edi + 0x30]
push esi
lea ecx, [ebp - 0x2a0]
lea edi, [ebp - 0x294]
call fcn.00438000
add esp, 4
test eax, eax
jg 0x4149a1
mov edx, dword [ebp - 0x290]
cmp dword [ebp - 0x27c], ebx
jae 0x414984
lea edx, [ebp - 0x290]
push esi
lea ecx, [ebp - 0x2a0]
lea edi, [ebp - 0x294]
call fcn.00438000
add esp, 4
test eax, eax
jle 0x414a24
lea edx, [ebp - 0x220]
push edx
xor ebx, ebx
call fcn.00434ae0
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x414a24
push 0x4d46bc
push ebx
call fcn.0049d1a1
mov esi, eax
add esp, 8
test esi, esi
je 0x414a1b
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x294]
push esi
push eax
push 1
push ecx
call fcn.0049d5a0
push esi
call fcn.0049d986
add esp, 0x14
push ebx
call fcn.00442380
add esp, 4
test al, al
je 0x414a0e
mov edi, dword [ebp - 0x29c]
add edi, 0x10
lea eax, [ebp - 0x2a8]
call fcn.00402630
jmp 0x414a1b
lea edx, [ebp - 0x220]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
call fcn.0049ca2e
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x290]
call fcn.00406c40
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x274]
call fcn.00406c40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x258]
call fcn.00406c40
jmp 0x414a61
add edi, 0x10
lea eax, [ebp - 0x2a8]
call fcn.00402630
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, byte [0x4f966d]
test al, al
je 0x414a95
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x298]
mov eax, dword [edx + 0x208]
push 0
push ecx
push 0x13a5
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x414aa0
mov esi, dword [ebp - 0x29c]
call fcn.00410ee0
mov ecx, dword [ebp - 0x298]
push ecx
call fcn.0049c71f
add esp, 4
mov byte [ebp - 4], 0
lea edx, [ebp - 0x2a8]
push edx
call fcn.00402550
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.00406c40
jmp 0x4145e4