Function at 0x41cf10
Capabilities:
Clear file content
Delete file
Timestomp file

Disassembly:
sub esp, 0x30
mov eax, dword [0x4ba700]
xor eax, esp
mov dword [esp + 0x2c], eax
push ebx
push ebp
mov ebp, dword [esp + 0x3c]
cmp byte [ebp + 0x311], 0
push esi
push edi
je 0x41d150
mov ecx, dword [ebp + 0xe8]
mov byte [ebp + 0x311], 0
mov eax, dword [ecx]
mov edx, dword [eax + 0x1d4]
call edx
imul eax, eax, 0x3e8
mov edi, dword [ebp + 0xec]
push eax
call fcn.004537b0
push 1
push ebp
call fcn.0041de30
mov eax, dword [ebp + 0x2f8]
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov ecx, dword [ebp + 0x2f8]
push ecx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea edx, [ebp + 0x2dc]
mov eax, edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41cf90
sub eax, esi
je 0x41d033
push edx
call fcn.0047ca33
lea edx, [ebp + 0x2df]
add esp, 4
push edx
mov word [esp + 0x26], ax
call fcn.0047ca33
mov word [esp + 0x2a], ax
lea eax, [ebp + 0x2e2]
add esp, 4
push eax
call fcn.0047ca33
lea ecx, [ebp + 0x2e7]
add esp, 4
push ecx
mov word [esp + 0x24], ax
call fcn.0047ca33
lea edx, [ebp + 0x2ea]
add esp, 4
push edx
mov word [esp + 0x2c], ax
call fcn.0047ca33
mov word [esp + 0x2e], ax
xor eax, eax
add esp, 4
lea edx, [esp + 0x18]
mov word [esp + 0x2e], ax
push edx
lea eax, [esp + 0x24]
xor ecx, ecx
push eax
mov word [esp + 0x34], cx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea ecx, [esp + 0x18]
push ecx
mov edx, ecx
push edx
mov eax, ecx
mov ecx, dword [ebp + 0x2f8]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
mov eax, dword [ebp + 0x2f8]
cmp eax, 0xffffffff
je 0x41d04f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0x2f8], 0xffffffff
lea edi, [ebp + 0x198]
push ebp
mov ebx, edi
call fcn.0041d910
xor ebx, ebx
mov byte [esp + 0x17], al
cmp byte [ebp + 0x310], bl
je 0x41d08d
cmp byte [ebp + 0x313], bl
je 0x41d08d
push 0x2c
push edi
call fcn.0047e5be
add esp, 8
cmp eax, ebx
je 0x41d084
mov byte [eax], bl
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x41d105
sub esp, 0x1c
mov ecx, esp
mov eax, edi
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
mov dword [esp + 0x34], esp
mov byte [ecx + 4], bl
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41d0a8
sub eax, esi
push eax
push edi
call fcn.004072d0
lea esi, [esp + 0x3c]
call fcn.00414830
add esp, 0x1c
cmp byte [ebp + 0x310], bl
jne 0x41d0f1
cmp byte [esp + 0x17], bl
jne 0x41d0f1
cmp dword [esp + 0x38], 0x10
mov esi, dword [esp + 0x24]
jae 0x41d0e1
lea esi, [esp + 0x24]
call fcn.00414980
test al, al
sete dl
mov byte [ebp + 0x310], dl
cmp dword [esp + 0x38], 0x10
jb 0x41d105
mov eax, dword [esp + 0x24]
push eax
call fcn.0047c43d
add esp, 4
mov eax, dword [ebp + 0x2f4]
cmp eax, ebx
je 0x41d11e
push eax
call fcn.0047d0a1
add esp, 4
mov dword [ebp + 0x2f4], ebx
mov eax, dword [ebp + 0x2f0]
cmp eax, ebx
je 0x41d137
push eax
call fcn.0047d0a1
add esp, 4
mov dword [ebp + 0x2f0], ebx
mov eax, dword [ebp + 0x470]
cmp eax, ebx
je 0x41d150
push eax
call fcn.0047d0a1
add esp, 4
mov dword [ebp + 0x470], ebx
mov ecx, dword [esp + 0x3c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0047c3ff
add esp, 0x30
ret 4