Function at 0x45b9b8
Capabilities:
Read file on windows
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffbc
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov esi, dword [ebp + 0x14]
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x18]
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0x1c]
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00405238
mov eax, dword [ebp - 8]
call fcn.00405238
xor eax, eax
push ebp
push 0x45bbd2
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x28], 1
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2c], eax
push 0
push 0
push 3
push 0
push 1
push 0x80000000
mov eax, dword [ebp - 4]
call fcn.00405248
push eax
call sub.kernel32.dll_CreateFileA_1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
je 0x45bbb7
xor eax, eax
push ebp
push 0x45bbb0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebp + 8], 0
jne 0x45bad8
push 0
push 0
push 3
push 0
push 1
push 0x80000000
mov eax, dword [ebp - 8]
call fcn.00405248
push eax
call sub.kernel32.dll_CreateFileA_1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffff
je 0x45bad8
xor eax, eax
push ebp
push 0x45bad1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x44]
push eax
push 0
push 0
mov eax, dword [ebp - 0x34]
push eax
call sub.kernel32.dll_GetFileTime
test eax, eax
je 0x45baba
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x24]
push eax
call sub.kernel32.dll_CompareFileTime
test eax, eax
je 0x45baba
call fcn.0040482c
call fcn.0040482c
jmp 0x45bbb7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45bad8
mov eax, dword [ebp - 0x34]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
push 0
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x28]
push eax
push 0
push 0
push 0x40000000
mov eax, dword [ebp - 8]
call fcn.00405248
push eax
call sub.kernel32.dll_CreateFileA_1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffff
je 0x45bb99
xor eax, eax
push ebp
push 0x45bb92
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0xc]
mov edx, dword [ebp + 0x20]
call fcn.004054d0
push 0
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xc]
call fcn.004052a0
push eax
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_ReadFile_1
call fcn.0040e2a8
push 0
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xc]
call fcn.004052a0
push eax
mov eax, dword [ebp - 0x34]
push eax
call sub.kernel32.dll_WriteFile_1
call fcn.0040e2a8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x34]
push eax
call sub.kernel32.dll_SetFileTime
call fcn.0040e2a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45bb99
mov eax, dword [ebp - 0x34]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45bbb7
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45bbd9
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404d98
ret