Function at 0x426a01
Capabilities:
Get disk size
Timestomp file

Disassembly:
push 0x258
mov eax, 0x5a0b10
call fcn.005744f6
mov edi, ecx
mov eax, dword [ebp + 0x10]
lea ebx, [edi + 0x14]
mov esi, dword [ebp + 8]
mov ecx, ebx
mov dword [ebp - 0x244], eax
call fcn.004063d0
xor eax, eax
test dword [ebp + 0xc], 0x1000
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
je 0x426b61
push eax
lea eax, [ebp - 0x23c]
push eax
push esi
call fcn.004dd7f7
test eax, eax
je 0x426b61
lea ecx, [ebp - 0x240]
call fcn.00406150
and dword [ebp - 4], 0
lea eax, [ebp - 0x240]
push eax
push esi
call fcn.004d3316
lea eax, [ebp - 0x260]
xor ebx, ebx
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x250]
push eax
push dword [ebp - 0x240]
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
test eax, eax
je 0x426acf
mov ebx, dword [ebp - 0x250]
imul ebx, dword [ebp - 0x254]
imul ebx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x220]
shld ecx, eax, 1
add eax, eax
mov dword [ebp - 0x248], eax
mov eax, ebx
cdq
cmp edx, ecx
jb 0x426b4c
ja 0x426af8
cmp eax, dword [ebp - 0x248]
jbe 0x426b4c
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x114]
push eax
push 0x104
push esi
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
mov eax, dword [ebp - 0x248]
lea ebx, [edi + 0x14]
mov ecx, ebx
mov byte [eax], 0
mov eax, 0x105
push eax
push eax
call fcn.00406820
push eax
lea eax, [ebp - 0x114]
push 0x5b471c
push eax
call fcn.004255dc
add esp, 0x10
mov ecx, ebx
push 0xffffffffffffffff
call fcn.004123c1
jmp 0x426b4f
lea ebx, [edi + 0x14]
mov ecx, dword [ebp - 0x240]
or dword [ebp - 4], 0xffffffff
lea ecx, [ecx - 0x10]
call fcn.004066a0
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
je 0x426c52
push dword [ebp - 0x244]
mov ecx, edi
push dword [ebp + 0xc]
push eax
call fcn.004d3a1b
test eax, eax
je 0x426c52
test esi, esi
jne 0x426b8e
xor eax, eax
jmp 0x426b95
push esi
call fcn.0057fe70
pop ecx
push eax
push esi
lea ecx, [edi + 0xc]
call fcn.00406430
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x426bf4
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.004dd1d0
pop ecx
pop ecx
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_SetFileTime]
xor ecx, ecx
lea eax, [ebp - 0x240]
push eax
push ecx
push ecx
push 4
push esi
mov dword [ebp - 0x240], ecx
call dword [sym.imp.ADVAPI32.dll_GetFileSecurityA]
test eax, eax
je 0x426c4d
push dword [ebp - 0x240]
call fcn.004bc86d
pop ecx
mov edi, eax
lea eax, [ebp - 0x240]
push eax
push dword [ebp - 0x240]
push edi
push 4
push esi
call dword [sym.imp.ADVAPI32.dll_GetFileSecurityA]
test eax, eax
je 0x426c46
push edi
push 4
push dword [ebx]
call dword [sym.imp.ADVAPI32.dll_SetFileSecurityA]
push edi
call fcn.004126e5
pop ecx
xor eax, eax
inc eax
jmp 0x426c6a
mov ecx, ebx
call fcn.004063d0
push dword [ebp - 0x244]
mov ecx, edi
push dword [ebp + 0xc]
push esi
call fcn.004d3a1b
call fcn.005744a5
ret 0xc