Function at 0x426860
Capabilities:
Clear file content
Delete file
Timestomp file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x4ea5e0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
cmp byte [esi + 0x3a1], 0
push edi
mov dword [ebp - 0x28], esi
je 0x426aa6
mov ecx, dword [esi + 0x108]
mov byte [esi + 0x3a1], 0
mov eax, dword [ecx]
mov edx, dword [eax + 0x1dc]
call edx
imul eax, eax, 0x3e8
mov edi, dword [esi + 0x10c]
push eax
call fcn.00460690
push 1
mov eax, esi
call fcn.004278d0
mov eax, dword [esi + 0x388]
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov ecx, dword [esi + 0x388]
push ecx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea edx, [esi + 0x36c]
mov eax, edx
lea edi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4268e0
sub eax, edi
je 0x426972
push edx
call fcn.004a9a0c
lea edx, [esi + 0x36f]
add esp, 4
push edx
mov word [ebp - 0x12], ax
call fcn.004a9a0c
mov word [ebp - 0xe], ax
lea eax, [esi + 0x372]
add esp, 4
push eax
call fcn.004a9a0c
lea ecx, [esi + 0x377]
add esp, 4
push ecx
mov word [ebp - 0x14], ax
call fcn.004a9a0c
lea edx, [esi + 0x37a]
add esp, 4
push edx
mov word [ebp - 0xc], ax
call fcn.004a9a0c
mov word [ebp - 0xa], ax
xor eax, eax
add esp, 4
lea edx, [ebp - 0x34]
mov dword [ebp - 8], eax
push edx
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea ecx, [ebp - 0x34]
push ecx
mov edx, ecx
push edx
mov eax, ecx
mov ecx, dword [esi + 0x388]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
mov eax, dword [esi + 0x388]
cmp eax, 0xffffffff
je 0x42698e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x388], 0xffffffff
lea ebx, [esi + 0x228]
push esi
mov dword [ebp - 0x2c], ebx
call fcn.00427320
cmp byte [esi + 0x3a0], 0
mov byte [ebp - 0x21], al
je 0x4269d0
cmp byte [esi + 0x3a3], 0
je 0x4269d0
push 0x2c
push ebx
call fcn.004ab543
add esp, 8
test eax, eax
je 0x4269c4
mov byte [eax], 0
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x426a59
sub esp, 0x1c
mov esi, esp
mov eax, ebx
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov dword [ebp - 0x30], esp
mov byte [esi], 0
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4269f0
sub eax, edx
mov edi, eax
mov eax, ebx
call fcn.00402590
lea ebx, [ebp - 0x20]
call fcn.0041b010
mov edi, dword [ebp - 0x28]
add esp, 0x1c
cmp byte [edi + 0x3a0], 0
mov ebx, 0x10
jne 0x426a46
cmp byte [ebp - 0x21], 0
jne 0x426a46
mov esi, dword [ebp - 0x20]
cmp dword [ebp - 0xc], ebx
jae 0x426a2f
lea esi, [ebp - 0x20]
mov edx, dword [ebp - 0x2c]
push edx
call fcn.0041b150
add esp, 4
test al, al
sete al
mov byte [edi + 0x3a0], al
cmp dword [ebp - 0xc], ebx
jb 0x426a57
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.004a9046
add esp, 4
mov esi, edi
mov eax, dword [esi + 0x384]
xor edi, edi
cmp eax, edi
je 0x426a74
push eax
call fcn.004a9011
add esp, 4
mov dword [esi + 0x384], edi
mov eax, dword [esi + 0x380]
cmp eax, edi
je 0x426a8d
push eax
call fcn.004a9011
add esp, 4
mov dword [esi + 0x380], edi
mov eax, dword [esi + 0x500]
cmp eax, edi
je 0x426aa6
push eax
call fcn.004a9011
add esp, 4
mov dword [esi + 0x500], edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret