Function at 0x42ebb5
Capabilities:
Clear file content
Delete file
Get disk size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x47ede8
push 0x4538c0
mov eax, dword fs:[0]
push eax
push ecx
push ecx
mov eax, 0x2620
call fcn.00453130
mov eax, dword [0x49f2a0]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 0x260c], edi
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x2608], ebx
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x2614], esi
mov dword [ebp - 0x261c], 1
or dword [0x4cce98], 0xffffffff
call dword [sym.imp.___total_physical_size__lu_MB_GetTickCount]
mov dword [ebp - 0x2610], eax
cmp dword [0x4cd298], 1
je 0x42ec75
push ebx
push edi
call fcn.0040ec0b
test eax, eax
jne 0x42ec75
push edi
call fcn.0041fe68
cmp eax, 3
jne 0x42ec54
mov dword [0x4cd290], 0x400
jmp 0x42ec75
mov dword [0x4cd290], 0x80
push 2
push 5
call fcn.0044dfdf
test eax, eax
je 0x42ec75
mov dword [0x4cd288], 0x100
call fcn.0041abd1
xor ebx, ebx
mov dword [ebp - 0x2604], ebx
push 0x3dc
push ebx
lea eax, [ebp - 0x2600]
push eax
call fcn.00450230
add esp, 0xc
cmp esi, ebx
je 0x42eca8
mov ecx, 0xf8
lea edi, [ebp - 0x2604]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], ebx
mov dword [0x4a3004], 1
mov dword [0x4d5048], ebx
mov dword [0x4d504c], ebx
mov dword [0x4d5040], ebx
mov dword [0x4d5044], ebx
mov edx, dword [ebp - 0x2608]
lea eax, [ebp - 0x224]
mov cl, byte [edx]
mov byte [eax], cl
inc edx
inc eax
test cl, cl
jne 0x42ecd9
lea eax, [ebp - 0x224]
push eax
call fcn.0042093a
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.0041f685
push ebx
push 0x20000000
push 3
push ebx
push 3
push Ordinal_2
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.___total_physical_size__lu_MB_CreateFileA]
mov dword [0x4cce9c], eax
cmp eax, 0xffffffff
jne 0x42ed69
lea eax, [ebp - 0x120]
push eax
push dword [ebp - 0x2608]
push str._nError_opening_source_for_read:__s___s_
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
push eax
push 0xbff
push str.NTCPVOL2FILE
call fcn.0044dc85
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x49f2a0
call fcn.00455650
add esp, 0x24
jmp 0x42f2ac
lea ecx, [ebp - 0x120]
push ecx
push eax
call fcn.0042931f
lea ecx, [ebp - 0x1224]
and ecx, 0xfff
lea eax, [ebp - 0x1224]
sub eax, ecx
push ebx
lea ecx, [ebp - 0x2630]
push ecx
push 0x1000
push eax
push dword [0x4cce9c]
call dword [sym.imp.___total_physical_size__lu_MB_ReadFile]
test eax, eax
jne 0x42edcb
lea eax, [ebp - 0x120]
push eax
push dword [ebp - 0x2608]
push str.Volume__s___s__is_not_accessible_n
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
push eax
push 0xc0f
jmp 0x42ed47
lea eax, [ebp - 0x262c]
push eax
lea eax, [ebp - 0x2624]
push eax
lea eax, [ebp - 0x2638]
push eax
lea eax, [ebp - 0x120]
push eax
push 0x46a500
call fcn.0042f614
pop ecx
pop ecx
push eax
call dword [sym.imp.___total_physical_size__lu_MB_GetDiskFreeSpaceExA]
mov eax, dword [ebp - 0x2624]
sub eax, dword [ebp - 0x262c]
mov ecx, dword [ebp - 0x2620]
sbb ecx, dword [ebp - 0x2628]
push ebx
push 6
push ecx
push eax
call fcn.00453310
push ebx
push 0xa
push edx
push eax
call fcn.004544c0
mov esi, eax
mov edi, edx
add esi, 0x500000
adc edi, ebx
push ebx
push dword [ebp - 0x260c]
call fcn.0044e0da
mov dword [0x4ce4c0], eax
mov dword [0x4ce4c4], edx
push edi
push esi
mov edi, dword [ebp - 0x260c]
push edi
call fcn.0042054f
test eax, eax
je 0x42ee73
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push 0x49f2a0
call fcn.00455650
add esp, 0xc
jmp 0x42f2ac
call fcn.0042438d
cmp dword [ebp - 0x2614], ebx
je 0x42eec4
lea eax, [ebp - 0x25f8]
push eax
mov esi, 0x469a48
push esi
push 0x3ff
call fcn.00447f71
add esp, 0xc
cmp dword [0x4cd314], ebx
mov eax, str.differential
jne 0x42eeac
mov eax, 0x469fcc
push edi
lea ecx, [ebp - 0x25f8]
push ecx
push eax
push str.Start__sVSS_backup_of__s_____s
call fcn.0041c7ee
add esp, 0x10
jmp 0x42ef1b
cmp dword [0x4cd630], ebx
je 0x42eedb
push edi
push str.Start_merging_to__s
call fcn.0041c7ee
pop ecx
pop ecx
jmp 0x42ef02
cmp dword [0x4cd314], ebx
mov eax, str.differential
jne 0x42eeed
mov eax, 0x469fcc
push edi
push dword [ebp - 0x2608]
push eax
push str.Start__sbackup_of__s_____s
call fcn.0041c7ee
add esp, 0x10
push dword [ebp - 0x2608]
mov esi, 0x469a48
push esi
push 0x3ff
call fcn.00447f71
add esp, 0xc
push edi
push esi
push 0x400
call fcn.00447f71
add esp, 0xc
cmp byte [ebp - 0x11b], 0x3a
jne 0x42ef4c
movsx eax, byte [ebp - 0x11c]
push eax
call fcn.00453103
pop ecx
sub eax, 0x41
mov dword [ebp - 0x25fc], eax
jmp 0x42ef56
mov dword [ebp - 0x25fc], 0x3f
mov esi, dword [sym.imp.___total_physical_size__lu_MB_GetCurrentProcess]
call esi
push eax
call dword [sym.imp.___total_physical_size__lu_MB_GetPriorityClass]
mov edi, eax
cmp dword [0x4cd314], ebx
jne 0x42ef7a
push dword [ebp - 0x260c]
call fcn.00417552
push dword [ebp - 0x260c]
push dword [ebp - 0x2608]
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x2604]
push eax
call fcn.0042e425
push edi
call esi
push eax
call dword [sym.imp.___total_physical_size__lu_MB_SetPriorityClass]
cmp dword [0x4d659c], ebx
jne 0x42efbd
push 0x5f444e45
call fcn.00423da9
cmp dword [0x4d659c], ebx
je 0x42efd3
push str.operation_aborted
call fcn.0041c7ee
pop ecx
xor edi, edi
inc edi
mov dword [ebp - 0x2600], edi
jmp 0x42efd6
xor edi, edi
inc edi
mov eax, dword [0x4cce9c]
or esi, 0xffffffff
cmp eax, esi
je 0x42efef
push eax
call dword [sym.imp.___total_physical_size__lu_MB_CloseHandle]
mov dword [0x4cce9c], esi
mov eax, dword [0x4cce98]
cmp eax, esi
je 0x42f011
push eax
call dword [sym.imp.___total_physical_size__lu_MB_SetEndOfFile]
push dword [0x4cce98]
call dword [sym.imp.___total_physical_size__lu_MB_CloseHandle]
mov dword [0x4cce98], esi
cmp dword [0x4cd334], edi
jne 0x42f023
mov ecx, 0x4cde18
call fcn.00414e3f
cmp dword [0x4cd320], edi
jne 0x42f085
cmp dword [0x4cd334], ebx
jne 0x42f085
cmp dword [ebp - 0x2600], ebx
jne 0x42f08d
push dword [ebp - 0x260c]
call fcn.0041fe68
cmp eax, 5
je 0x42f085
push dword [ebp - 0x260c]
call fcn.0042100c
test eax, eax
jne 0x42f085
push ebx
call dword [sym.imp.___total_physical_size__lu_MB_SetLastError]
push str.The_image_structure_is_corrupted_nBackup_operation_failed.
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
push eax
push 0xc73
push str.NTCPVOL2FILE
call fcn.0044dc85
add esp, 0x10
mov dword [ebp - 0x2600], edi
cmp dword [ebp - 0x2600], ebx
je 0x42f0bb
cmp dword [0x4cd314], ebx
jne 0x42f0b0
mov esi, 0x4cd33c
push esi
call dword [sym.imp.___total_physical_size__lu_MB_DeleteFileA]
push 0x104
push ebx
push esi
call fcn.00450230
add esp, 0xc
push dword [ebp - 0x260c]
call fcn.00420604
push 0x104
push ebx
push 0x4cd33c
call fcn.00450230
add esp, 0xc
mov ebx, dword [ebp - 0x23d8]
xor eax, eax
push eax
push ebx
push eax
push dword [ebp - 0x23dc]
call fcn.00453310
mov esi, eax
mov edi, edx
add esi, dword [ebp - 0x23c4]
adc edi, dword [ebp - 0x23c0]
xor eax, eax
push eax
push ebx
push eax
push dword [ebp - 0x23e0]
call fcn.00453310
mov ebx, esi
sub ebx, eax
mov eax, edi
sbb eax, edx
mov dword [ebp - 0x2614], eax
test byte [0x4cdde0], 0x20
je 0x42f2ce
push 0xc
push edi
push esi
call fcn.0040c6f5
push eax
push str._n_total_DiskSize_________12s_n
call fcn.00450f5c
pop ecx
pop ecx
push 0xc
pop esi
push esi
push dword [ebp - 0x2614]
push ebx
call fcn.0040c6f5
push eax
push str._Bytes_in_use_by_OS_____12s_n
call fcn.00450f5c
pop ecx
pop ecx
mov eax, dword [ebp - 0x237c]
or eax, dword [ebp - 0x2378]
je 0x42f17f
push esi
push dword [ebp - 0x2378]
push dword [ebp - 0x237c]
call fcn.0040c6f5
push eax
push str._not_saved_files________12s_n
call fcn.00450f5c
pop ecx
pop ecx
push esi
push dword [0x4d5044]
push dword [0x4d5040]
call fcn.0040c6f5
push eax
push esi
mov eax, dword [0x4d5048]
sub eax, dword [ebp - 0x224c]
mov ecx, dword [0x4d504c]
sbb ecx, dword [ebp - 0x2248]
push ecx
push eax
call fcn.0040c6f5
push eax
push str._saved_by_SLpack__s___HUFFpack__s_n
call fcn.00450f5c
add esp, 0xc
push esi
push dword [0x4bcb7c]
push dword [0x4bcb78]
call fcn.0040c6f5
push eax
push str._total_size_written_____12s_n
call fcn.00450f5c
pop ecx
pop ecx
mov esi, 0x3e8
test byte [0x4cdde0], 0x20
je 0x42f294
mov eax, dword [0x4cce94]
xor edx, edx
mov ecx, esi
div ecx
push eax
mov eax, dword [0x4bcbd8]
xor edx, edx
div ecx
push eax
mov eax, dword [0x4bcbec]
xor edx, edx
div ecx
push eax
mov eax, dword [0x4cce74]
xor edx, edx
div ecx
push eax
push str._n_nTreading____lu__Twriting___lu___Tcompressing__lu__Tunc_lu_n
call fcn.00450f5c
mov eax, dword [0x4bc39c]
xor edx, edx
mov ecx, esi
div ecx
push eax
mov eax, dword [0x4bcb84]
xor edx, edx
div ecx
push eax
mov eax, dword [0x4cddac]
xor edx, edx
div ecx
push eax
mov eax, dword [0x4ac264]
xor edx, edx
div ecx
push eax
push str.Treadingc___lu__Twritingc___lu__Thuffman___lu_____ThuffmanV___lu_n
call fcn.00450f5c
mov eax, dword [0x4cce84]
xor edx, edx
mov ecx, esi
div ecx
push eax
push str.encrypting_lu_n
call fcn.00450f5c
add esp, 0x30
push 0
push esi
push dword [0x4cdda4]
push dword [0x4cdda0]
call fcn.004544c0
push edx
push eax
push str.MD5Time___lu_n
call fcn.00450f5c
add esp, 0xc
mov dword [ebp - 4], 0xfffffffe
call fcn.0042f419
mov eax, dword [ebp - 0x2600]
mov dword [ebp - 0x261c], eax
mov eax, dword [ebp - 0x261c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00450b32
leave
ret 0xc
add dword [0x4cddf8], esi
adc dword [0x4cddfc], edi
add dword [0x4cde00], ebx
adc dword [0x4cde04], eax
mov eax, dword [0x4bcb78]
add dword [0x4cde08], eax
mov eax, dword [0x4bcb7c]
adc dword [0x4cde0c], eax
cmp dword [ebp - 0x2600], 0
jne 0x42f1de
mov edi, dword [sym.imp.___total_physical_size__lu_MB_GetTickCount]
cmp dword [0x4cd324], 0
jne 0x42f382
call edi
sub eax, dword [ebp - 0x2610]
xor edx, edx
mov esi, 0x3e8
mov ecx, esi
div ecx
xor edx, edx
push 0x3c
pop ecx
div ecx
push edx
call edi
sub eax, dword [ebp - 0x2610]
xor edx, edx
mov ecx, esi
div ecx
xor edx, edx
push 0x3c
pop ecx
div ecx
push eax
push 9
push dword [0x4bcb7c]
push dword [0x4bcb78]
call fcn.0040c6f5
push eax
push 9
push dword [ebp - 0x2614]
push ebx
call fcn.0040c6f5
push eax
lea eax, [ebp - 0x25f8]
push eax
push str._n_s____sB_in_use___stored_in__sB____u:_02u_minutes_n
call fcn.00450f5c
add esp, 0x18
jmp 0x42f387
mov esi, 0x3e8
cmp dword [0x4cd630], 0
jne 0x42f39e
lea eax, [ebp - 0x25f8]
mov dword [ebp - 0x2608], eax
jmp 0x42f3a8
mov dword [ebp - 0x2608], 0x469fcc
call edi
sub eax, dword [ebp - 0x2610]
xor edx, edx
mov ecx, esi
div ecx
xor edx, edx
push 0x3c
pop ecx
div ecx
push edx
call edi
sub eax, dword [ebp - 0x2610]
xor edx, edx
mov ecx, esi
div ecx
xor edx, edx
push 0x3c
pop ecx
div ecx
push eax
push 9
push dword [0x4bcb7c]
push dword [0x4bcb78]
call fcn.0040c6f5
push eax
push 9
push dword [ebp - 0x2614]
push ebx
call fcn.0040c6f5
push eax
push dword [ebp - 0x2608]
push str._s__sB_in_use___stored_in__sB____u:_02u_minutes
call fcn.0041c7ee
push str.Success
call fcn.0041c7ee
add esp, 0x1c
jmp 0x42f1e3