Function at 0x41c7ee
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4034
call fcn.00453130
mov eax, dword [0x49f2a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
push esi
push edi
cmp dword [0x4cd630], ebx
je 0x41c819
push str.Backup:
jmp 0x41c826
cmp dword [0x4cd608], ebx
je 0x41c833
push str.Vdisk_:
lea eax, [ebp - 0x18]
push eax
call fcn.00450c76
pop ecx
pop ecx
jmp 0x41c836
mov byte [ebp - 0x18], bl
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
mov dword [ebp - 0x4030], eax
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0x2018]
push 0x2000
push eax
call fcn.00454f4e
add esp, 0x10
lea eax, [ebp - 0x2018]
push eax
call fcn.0041c722
lea eax, [ebp - 0x2018]
push 0x46d62c
push eax
call fcn.004501a0
mov edi, eax
pop ecx
pop ecx
cmp edi, ebx
je 0x41c8bd
add edi, 3
push 0x40
push edi
call fcn.00452730
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x41c8bd
push 0x3a
push edi
mov byte [esi], bl
call fcn.00452730
pop ecx
pop ecx
cmp eax, ebx
je 0x41c8ba
inc eax
cmp eax, esi
jae 0x41c8ba
mov ecx, esi
sub ecx, eax
push ecx
push 0x2a
push eax
call fcn.00450230
add esp, 0xc
mov byte [esi], 0x40
lea eax, [ebp - 0x4028]
push eax
call dword [sym.imp.___total_physical_size__lu_MB_GetLocalTime]
lea eax, [ebp - 0x2018]
push eax
lea eax, [ebp - 0x18]
push eax
movzx eax, word [ebp - 0x401c]
push eax
movzx eax, word [ebp - 0x401e]
push eax
movzx eax, word [ebp - 0x4020]
push eax
push str._02d:_02d:_02d__s_s
lea eax, [ebp - 0x4018]
push 0x2000
push eax
call fcn.00450d91
call fcn.004552b3
add eax, 0x20
push eax
call fcn.004550f5
call fcn.004552b3
add eax, 0x40
push eax
call fcn.004550f5
add esp, 0x28
cmp dword [0x4cd324], 1
jne 0x41c93e
lea eax, [ebp - 0x4018]
push eax
push 0x46d030
call fcn.00450f5c
pop ecx
pop ecx
lea edi, [ebp - 0x4018]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x41c945
mov ecx, dword [0x482364]
mov esi, 0x46ad94
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [sym.imp.___total_physical_size__lu_MB_WriteFile]
mov edi, dword [sym.imp.___total_physical_size__lu_MB_FlushFileBuffers]
cmp ecx, 0xffffffff
je 0x41c9a3
lea eax, [ebp - 0x4018]
lea edx, [eax + 1]
mov dword [ebp - 0x402c], edx
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41c97b
sub eax, dword [ebp - 0x402c]
push ebx
lea edx, [ebp - 0x4034]
push edx
push eax
lea eax, [ebp - 0x4018]
push eax
push ecx
call esi
push dword [0x482364]
call edi
mov ecx, dword [0x482368]
cmp ecx, 0xffffffff
je 0x41c9e5
lea eax, [ebp - 0x4018]
lea edx, [eax + 1]
mov dword [ebp - 0x402c], edx
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41c9bd
sub eax, dword [ebp - 0x402c]
push ebx
lea edx, [ebp - 0x402c]
push edx
push eax
lea eax, [ebp - 0x4018]
push eax
push ecx
call esi
push dword [0x482368]
call edi
push 0x47e
push dword [0x4d617c]
call dword [sym.imp.e_to_open__s_GetDlgItem]
mov edi, eax
cmp edi, ebx
je 0x41ca31
mov esi, dword [sym.imp.e_to_open__s_SendMessageA]
push ebx
push ebx
push ebx
push 0xba
push edi
call esi
dec eax
push eax
push 0xbb
push edi
call esi
push eax
push eax
push 0xb1
push edi
call esi
lea eax, [ebp - 0x4018]
push eax
push ebx
push 0xc2
push edi
call esi
push dword [ebp - 0x4030]
call dword [sym.imp.___total_physical_size__lu_MB_SetLastError]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00450b32
leave
ret