Function at 0x401b70
Capabilities:
Check if file exists
Get file attributes
Move file
Set file attributes
Timestomp file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3ec
mov eax, dword [0x52b004]
xor eax, esp
mov dword [esp + 0x3e8], eax
cmp dword [0x52b8b0], 1
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push esi
push edi
mov esi, ecx
jne 0x401bdb
cmp dword [0x52c4ec], 0
jne 0x401bdb
push 0x52c3e8
call ebx
cmp eax, 0xffffffff
jne 0x401bdb
mov ecx, 0x52c3e8
call fcn.00402210
test eax, eax
je 0x401bdb
mov eax, 0x11
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3e8]
xor ecx, esp
call fcn.00407a00
mov esp, ebp
pop ebp
ret
push 3
push 0x4255c0
push esi
mov edi, esi
call fcn.0040bb80
add esp, 0xc
test eax, eax
jne 0x401ca0
add edi, 0x24
lea eax, [esp + 0x38]
push edi
push 0x80
push eax
call fcn.0040bb18
mov eax, dword [edi + 0x88]
lea edx, [esp + 0x1ec]
add edi, 0x88
mov dword [esp + 0xc4], eax
add esp, 0xc
lea ecx, [esp + 0x38]
add eax, 4
add edi, eax
call fcn.00401a90
lea eax, [esp + 0x1e0]
push eax
call ebx
cmp eax, 0xffffffff
je 0x401c88
test al, 1
je 0x401c59
push 0x80
lea eax, [esp + 0x1e4]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x4255c4
lea eax, [esp + 0x1e4]
push eax
lea eax, [esp + 0x14]
push eax
call fcn.0040bcaf
mov eax, dword [esp + 0x18]
add esp, 0xc
test eax, eax
je 0x401e8f
push eax
call fcn.00409c03
add esp, 4
push 3
push 0x4255c0
push edi
call fcn.0040bb80
add esp, 0xc
test eax, eax
je 0x401bf5
push 3
push 0x4255c0
push esi
call fcn.0040bb80
add esp, 0xc
test eax, eax
jne 0x401f57
add esi, 4
lea eax, [esp + 0x18]
push esi
push 0x20
push eax
call fcn.0040bb18
add esp, 0xc
lea eax, [esp + 0x38]
add esi, 0x20
push esi
push 0x80
push eax
call fcn.0040bb18
mov eax, dword [esi + 0x80]
add esp, 0xc
mov dword [esp + 0xc0], eax
mov eax, dword [esi + 0x84]
mov dword [esp + 0xbc], eax
mov eax, dword [esi + 0x88]
add esi, 0x8c
mov dword [esp + 0xc4], esi
add esi, eax
cmp dword [0x52b8b0], 1
mov dword [esp + 0xb8], eax
jne 0x401dc2
cmp dword [0x52c4ec], 0
jne 0x401dc2
lea edx, [esp + 0x2e8]
lea ecx, [esp + 0x38]
call fcn.00401a90
lea eax, [esp + 0x2e8]
push eax
call ebx
cmp eax, 0xffffffff
je 0x401dc2
push 0x52c3e8
lea eax, [esp + 0xdc]
push 0x104
push eax
call fcn.0040bb18
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0xdc]
push 0x104
push eax
call fcn.0040bd11
add esp, 0xc
lea eax, [esp + 0xd8]
push eax
call ebx
cmp eax, 0xffffffff
je 0x401daa
test al, 1
je 0x401daa
push 0x80
lea eax, [esp + 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 1
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0x2f0]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExA]
lea edx, [esp + 0xd8]
lea ecx, [esp + 0x38]
call fcn.00401a90
cmp dword [0x52c4ec], 1
jne 0x401ec3
lea eax, [esp + 0x18]
push eax
push str.__Name_:__s_n
call fcn.00401020
lea eax, [esp + 0xe0]
push eax
push str.__Path_:__s_n
call fcn.00401020
push dword [esp + 0xc8]
push str.__Size_:__d_n
call fcn.00401020
add esp, 0x18
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0xc0]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [esp + 0xd4]
push eax
movzx eax, word [esp + 0xd6]
push eax
movzx eax, word [esp + 0xd8]
push eax
movzx eax, word [esp + 0xda]
push eax
movzx eax, word [esp + 0xda]
push eax
movzx eax, word [esp + 0xdc]
push eax
push str.__Time_:__04d__02d__02d___02d:_02d:_02d_n
call fcn.00401020
add esp, 0x1c
push 0x425398
call fcn.00401020
add esp, 4
jmp 0x401f3f
lea eax, [esp + 0x1e0]
push eax
push 0x104
push 0x52c8a0
call fcn.0040bb18
add esp, 0xc
mov eax, 0x13
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3e8]
xor ecx, esp
call fcn.00407a00
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0xd8]
call fcn.00402210
mov edi, eax
test edi, edi
jne 0x401f9d
mov edx, dword [esp + 0xb8]
lea eax, [esp + 0xd8]
mov ecx, dword [esp + 0xc4]
push eax
call fcn.00402460
mov edi, eax
add esp, 4
lea eax, [esp + 0xd8]
test edi, edi
jne 0x401f8a
push edi
push 0x80
push 3
push edi
push edi
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x401f6e
lea eax, [esp + 0xbc]
push eax
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 3
push 0x4255c0
push esi
call fcn.0040bb80
add esp, 0xc
test eax, eax
je 0x401cb8
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3e8]
xor ecx, esp
call fcn.00407a00
mov esp, ebp
pop ebp
ret
mov edi, 4
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3e8]
xor ecx, esp
call fcn.00407a00
mov esp, ebp
pop ebp
ret
push eax
push 0x104
push 0x52c8a0
call fcn.0040bb18
add esp, 0xc
mov ecx, dword [esp + 0x3f4]
mov eax, edi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00407a00
mov esp, ebp
pop ebp
ret