Function at 0x4f1630
Capabilities:
Check if file exists
Delete file
Get file size
Move file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd90
mov eax, dword [0x564610]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x54c], 0
mov word [ebp - 0xb78], 0
push 0x410
push 0
lea eax, [ebp - 0xb76]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x548], 0
push 0x7e
push 0
lea ecx, [ebp - 0x546]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x4c8], 0
push 0x7e
push 0
lea edx, [ebp - 0x4c6]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0x40
lea ecx, [ebp - 0x548]
push ecx
push 0
lea edx, [ebp - 0x440]
push edx
push 2
push 0x400
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
push 0x40
lea eax, [ebp - 0x4c8]
push eax
push 0x523700
lea ecx, [ebp - 0x440]
push ecx
push 8
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTimeFormatW]
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x4c8]
push ecx
lea edx, [ebp - 0x548]
push edx
push str._s__s:_HRESULT:_d_ft:_x_func:_x_path:_s__s_r_n
push 0x208
lea eax, [ebp - 0xb78]
push eax
call dword [sym.imp.MSVCR80.dll_swprintf_s]
add esp, 0x28
mov byte [ebp - 0x428], 0
push 0x208
push 0
lea ecx, [ebp - 0x427]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0
push 0
push 0x208
lea edx, [ebp - 0x428]
push edx
lea eax, [ebp - 0xb78]
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 4
push eax
lea ecx, [ebp - 0xb78]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov word [ebp - 0x760], 0
push 0x208
push 0
lea edx, [ebp - 0x75e]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov word [ebp - 0x218], 0
push 0x208
push 0
lea eax, [ebp - 0x216]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x760]
push ecx
call fcn.004f1570
add esp, 8
test eax, eax
jne 0x4f17dd
jmp 0x4f1998
lea edx, [ebp - 0x760]
push edx
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
push str.QMDellog.dat
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0
push 0x80
push 4
push 0
push 3
push 0xc0000000
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0xffffffff
jne 0x4f1843
jmp 0x4f1998
push 0
mov eax, dword [ebp - 0x444]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x100000
jb 0x4f193c
mov word [ebp - 0xd90], 0
push 0x208
push 0
lea ecx, [ebp - 0xd8e]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
lea edx, [ebp - 0x218]
push edx
push 0x104
lea eax, [ebp - 0xd90]
push eax
call dword [sym.imp.MSVCR80.dll_wcscpy_s]
add esp, 0xc
push str..bak
push 0x104
lea ecx, [ebp - 0xd90]
push ecx
call dword [sym.imp.MSVCR80.dll_wcscat_s]
add esp, 0xc
lea edx, [ebp - 0xd90]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4f18db
lea eax, [ebp - 0xd90]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x444]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0xd90]
push edx
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x4f190a
jmp 0x4f1998
push 0
push 0x80
push 4
push 0
push 3
push 0xc0000000
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0xffffffff
jne 0x4f193c
jmp 0x4f1998
push 2
push 0
push 0
mov edx, dword [ebp - 0x444]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x428]
push eax
call sub.MSVCR80.dll_strlen
add esp, 4
mov dword [ebp - 0x430], eax
mov dword [ebp - 0xb7c], 0
push 0
lea ecx, [ebp - 0xb7c]
push ecx
mov edx, dword [ebp - 0x430]
push edx
lea eax, [ebp - 0x428]
push eax
mov ecx, dword [ebp - 0x444]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x444], 0
je 0x4f19ae
mov edx, dword [ebp - 0x444]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004f019a
mov esp, ebp
pop ebp
ret