Function at 0x42fadf
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa1c
mov eax, dword [0x49f2a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor ebx, ebx
push ebx
push ebx
push 3
push ebx
push 3
push 0xc0000000
push esi
mov dword [ebp - 0xa0c], esi
call dword [sym.imp.___total_physical_size__lu_MB_CreateFileA]
mov edi, eax
mov dword [ebp - 0xa10], edi
cmp edi, 0xffffffff
jne 0x42fb32
push esi
push str.cant_open_drive__s:_for_write_access_n
call fcn.00450f5c
pop ecx
pop ecx
jmp 0x42fed0
push ebx
push ebx
push ebx
push edi
call fcn.0044df99
push ebx
lea eax, [ebp - 0xa14]
push eax
mov esi, 0x200
push esi
lea eax, [ebp - 0xa04]
push eax
push edi
call dword [sym.imp.___total_physical_size__lu_MB_ReadFile]
test eax, eax
je 0x42feb2
cmp dword [ebp - 0xa14], esi
jne 0x42feb2
push 8
pop ecx
mov edi, 0x474a94
lea esi, [ebp - 0xa01]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x42fb84
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x42fbb2
lea eax, [ebp - 0xa01]
push eax
push str.Currently__only_the_NTFS_filesystem_is_supported_nthis_filesystem_is__8.8s
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
push eax
push 0x16e
push str.ntfsResize
call fcn.0044dc85
add esp, 0x14
jmp 0x42fed0
mov esi, dword [ebp + 0x18]
mov edi, dword [ebp + 0x14]
cmp esi, dword [ebp + 0x10]
jb 0x42fc5e
ja 0x42fbcc
cmp edi, dword [ebp + 0xc]
jbe 0x42fc5e
push ebx
push 5
call fcn.0044dfdf
test eax, eax
je 0x42fc35
push ebx
lea eax, [ebp - 0xa14]
push eax
push ebx
push ebx
push 8
lea eax, [ebp - 0xa1c]
push eax
shrd edi, esi, 9
push 0x900f0
push dword [ebp - 0xa10]
shr esi, 9
mov dword [ebp - 0xa1c], edi
mov dword [ebp - 0xa18], esi
call dword [sym.imp.___total_physical_size__lu_MB_DeviceIoControl]
test eax, eax
je 0x42fcbe
push str.the_drive_has_been_successfully_resized__n_n
call fcn.0041c7ee
pop ecx
push dword [ebp - 0xa10]
call dword [sym.imp.___total_physical_size__lu_MB_CloseHandle]
mov eax, ebx
jmp 0x42fed3
push dword [ebp - 0xa0c]
push str._nvolume_extension_didnt_work_on_drive:__s
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
push eax
push 0x188
push str.ntfsResize
call fcn.0044dc85
xor ebx, ebx
add esp, 0x14
inc ebx
jmp 0x42fc22
movzx eax, word [ebp - 0x9f9]
cdq
push edx
push eax
push esi
push edi
call fcn.004544c0
push ebx
push ebx
push ebx
push dword [ebp - 0xa10]
mov dword [ebp - 0x9dc], eax
mov dword [ebp - 0x9d8], edx
call fcn.0044df99
push ebx
lea eax, [ebp - 0xa14]
push eax
mov esi, 0x200
push esi
lea eax, [ebp - 0xa04]
push eax
push dword [ebp - 0xa10]
call dword [sym.imp.___total_physical_size__lu_MB_WriteFile]
test eax, eax
je 0x42fe9f
cmp dword [ebp - 0xa14], esi
jne 0x42fe9f
push dword [ebp - 0xa10]
call dword [sym.imp.___total_physical_size__lu_MB_CloseHandle]
push 0x7d0
call dword [sym.imp.___total_physical_size__lu_MB_Sleep]
cmp dword [0x4cddcc], ebx
je 0x42fdcd
test byte [ebp + 0x1c], 1
je 0x42fdcd
push 0x640000
push ebx
push 0x401
mov esi, 0x3f3
push esi
call fcn.00448019
push ebx
push ebx
push 0x402
push esi
call fcn.00448019
mov esi, 0x469fcc
push esi
push 0x515
call fcn.00447f71
push str.Resizing_Filesystem
push 0x516
call fcn.00447f71
push esi
push 0x517
call fcn.00447f71
add esp, 0x18
cmp dword [0x49e598], ebx
je 0x42fd69
push str.Chkdsk
push str.fmifs.dll
call dword [sym.imp.___total_physical_size__lu_MB_GetModuleHandleA]
push eax
call dword [sym.imp.___total_physical_size__lu_MB_GetProcAddress]
mov dword [0x4d24f0], eax
cmp eax, ebx
je 0x42fdc6
mov dword [0x49e598], ebx
cmp dword [0x4d24f0], ebx
je 0x42fdc6
mov eax, dword [ebp - 0xa0c]
mov edx, dword [eax]
mov ecx, 0x46a5b4
cmp edx, dword [ecx]
jne 0x42fd8e
movsx eax, byte [eax + 4]
push eax
push 0x4749cc
jmp 0x42fd94
push eax
push 0x472e9c
lea eax, [ebp - 0x804]
push 0x400
push eax
call fcn.0042f7a5
add esp, 0x10
push 0x42fa5b
push ebx
push ebx
push ebx
push ebx
push ebx
push 1
push 0x4749c0
lea eax, [ebp - 0x804]
push eax
call dword [0x4d24f0]
xor eax, eax
jmp 0x42fed3
test byte [ebp + 0x1c], 2
je 0x42fed0
lea eax, [ebp - 0xa05]
push eax
push str.._c:
push dword [ebp - 0xa0c]
call fcn.00451ad6
add esp, 0xc
cmp eax, 1
jne 0x42fe11
movsx eax, byte [ebp - 0xa05]
push eax
push 0x46a8cc
push dword [ebp - 0xa0c]
call fcn.00450c76
add esp, 0xc
push ebx
push 0x4749bc
push dword [ebp - 0xa0c]
mov eax, str.chkdsk
push eax
push eax
push ebx
call fcn.0045659d
push 0x46a57c
mov esi, eax
call fcn.00450f5c
mov eax, esi
add esp, 0x1c
sub eax, ebx
je 0x42fe8f
dec eax
je 0x42fe64
dec eax
je 0x42fe5d
dec eax
je 0x42fe56
push esi
push str.unknown_exit_code__d_from_CHKDSK_nplease_make_sure_that_CHKDSK_runs_to_success_nbefore_continuing_to_use_this_drive_n
call fcn.00450f5c
pop ecx
jmp 0x42fe99
push str.you_MUST_CHKDSK__F_the_drive_nplease_answer_all_questions_with_YES_nand_reboot_the_maschine_if_necessary_n_n
jmp 0x42fe94
push str.chkdsk_returned_status_2___assuming_that_means_OK__n
jmp 0x42fe94
push str.chkdsk_found_some_errors__and_corrected_them_n
call fcn.00450f5c
mov dword [esp], str.this_is_the_expected_behaviour_n
call fcn.00450f5c
mov dword [esp], str.it_should_be_safe_to_use_this_drive_now_n
call fcn.00450f5c
mov dword [esp], str.SUCCESS_
jmp 0x42fe94
push str.chkdsk_found_no_errors__but_it_should___n
call fcn.00450f5c
pop ecx
jmp 0x42fdc6
push str.Unable_to_write_the_boot_record______
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
push eax
push 0x195
jmp 0x42fec3
push str.Unable_to_read_the_boot_record___aborting
call dword [sym.imp.___total_physical_size__lu_MB_GetLastError]
push eax
push 0x168
push str.ntfsResize
call fcn.0044dc85
add esp, 0x10
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00450b32
leave
ret 0x18