Function at 0x439c35
Capabilities:
Clear file content
Get disk information
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x548aa8]
push ebx
push esi
mov esi, ecx
mov dword [esi + 0x14], eax
mov eax, dword [0x548aac]
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x68]
mov dword [ebp - 0x10], eax
movzx eax, dl
mov eax, dword [eax*4 + 0x4f8690]
cmp dl, 1
sete bl
cmp dword [esi + 0x10], 1
mov byte [ebp - 4], dl
mov dword [ebp - 0x18], eax
ja 0x439c7a
mov ecx, dword [ebp + 8]
push esi
call fcn.004418b1
cmp byte [ebp + 0x14], 0
jne 0x439c99
cmp dword [esi + 0x10], 1
jbe 0x439c99
cmp byte [0x547d9f], 0
mov byte [ebp - 8], 1
je 0x439c9d
mov byte [ebp - 6], 1
jmp 0x439ca7
mov byte [ebp - 8], 0
cmp byte [ebp - 8], 0
mov byte [ebp - 6], 0
je 0x439cb4
cmp byte [0x547da0], 0
mov byte [ebp - 7], 1
jne 0x439cb8
mov byte [ebp - 7], 0
cmp byte [0x547d70], 0
je 0x439cce
cmp byte [0x547d85], 0
mov byte [ebp - 5], 0
jne 0x439cd2
mov byte [ebp - 5], 1
cmp byte [ebp - 6], 0
jne 0x439ceb
cmp byte [ebp - 4], 0
je 0x439ce4
cmp byte [ebp - 4], 2
jne 0x439ceb
mov dword [ebp - 0x18], 5
cmp byte [ebp - 4], 3
jne 0x439cfe
cmp byte [ebp - 5], 0
je 0x439cfe
mov dword [ebp - 0x18], 6
cmp dword [ebp - 0x10], 0xffffffff
je 0x439d28
mov al, byte [esi + 0x26]
test al, 1
je 0x439d11
cmp byte [ebp + 0x14], 0
jne 0x439d21
test bl, bl
je 0x439d19
test al, 2
je 0x439d21
mov eax, dword [ebp - 0x10]
jmp 0x43a0a2
mov ecx, esi
call fcn.00440d9b
mov ecx, dword [ebp + 8]
push edi
push esi
call fcn.00440ed3
mov ecx, eax
mov dword [ebp - 0x14], ecx
mov edi, ecx
call fcn.004a3b17
test al, al
jne 0x439d4b
mov ecx, edi
call fcn.00488a4e
mov edi, eax
mov ecx, edi
call fcn.004a407b
mov ecx, dword [esi + 0xc]
cmp ecx, edx
jb 0x439d7d
ja 0x439d62
mov ecx, dword [esi + 8]
cmp ecx, eax
jbe 0x439d7d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xdf
cmp dword [ebp - 0x14], 0
je 0x43a020
mov ecx, dword [ebp - 0x14]
jmp 0x43a019
mov ecx, edi
call fcn.004a3b17
test al, al
je 0x439dc0
mov ax, word [edi]
mov word [ebp - 0x20], ax
mov ax, word [edi + 2]
mov word [ebp - 0x1e], ax
push 0x5c
pop eax
mov word [ebp - 0x1c], ax
xor eax, eax
mov word [ebp - 0x1a], ax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.DLL_GetDriveTypeW]
cmp eax, 4
je 0x439db8
cmp eax, 1
jne 0x439dc0
mov byte [ebp - 7], 0
mov byte [ebp - 6], 0
test bl, bl
je 0x439dc8
push 6
jmp 0x439e07
mov edi, dword [ebp - 0x18]
cmp edi, 3
jne 0x439dda
cmp byte [ebp - 6], 0
je 0x439dda
mov al, 1
jmp 0x439ddc
xor al, al
mov ecx, dword [ebp - 0x14]
push eax
push 0x80
mov edx, edi
call fcn.0047267a
mov dword [ebp - 0x10], eax
cmp eax, 0xffffffff
jne 0x439e6a
cmp byte [ebp - 4], 3
jne 0x439e0a
cmp edi, 6
jne 0x439e0a
cmp byte [ebp - 5], 0
je 0x439e0a
push 5
pop edi
jmp 0x439dcb
test bl, bl
je 0x439e33
mov ecx, dword [ebp - 0x14]
call fcn.004a4bf3
test al, al
je 0x439e33
mov ecx, dword [ebp - 0x14]
push 0
push 0x80
mov edx, edi
call fcn.0047267a
mov dword [ebp - 0x10], eax
cmp eax, 0xffffffff
jne 0x439e6a
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
cmp eax, 0x20
jne 0x439fb9
cmp dword [0x547ed8], 0
je 0x439fb9
dec dword [0x547ed8]
push 0xc8
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x439dcb
test bl, bl
jne 0x439e81
cmp byte [ebp - 4], 3
jne 0x43a025
cmp byte [ebp - 5], bl
je 0x43a025
cmp byte [ebp + 0x18], 0
je 0x439eb1
test byte [esi + 0x26], 0x10
je 0x439eb1
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
test eax, 0x200
je 0x439eb1
xor eax, eax
push eax
lea ecx, [ebp - 0x18]
push ecx
push eax
push eax
mov byte [ebp - 9], 0
push 1
lea eax, [ebp - 9]
jmp 0x439ec4
cmp byte [0x547d84], 0
je 0x439ed3
xor eax, eax
push eax
lea ecx, [ebp - 0x18]
push ecx
push eax
push eax
push eax
push eax
push 0x900c4
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
cmp edi, 6
jne 0x43a025
mov eax, dword [ebp + 8]
cmp dword [eax + 0x50], 0
jne 0x43a025
cmp byte [ebp - 5], 0
mov ecx, dword [ebp - 0x10]
mov byte [0x547d71], 1
je 0x439f06
push dword [esi + 0xc]
push dword [esi + 8]
call fcn.004726ce
jmp 0x439f4d
lea edx, [ebp - 0x20]
call fcn.004a256f
test al, al
je 0x439ff8
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0x20]
mov ecx, dword [esi + 0xc]
cmp edx, eax
jne 0x439f2a
mov edx, dword [ebp - 0x1c]
cmp edx, ecx
je 0x439f4d
push ecx
mov ecx, dword [ebp - 0x10]
push eax
call fcn.00472393
test eax, eax
jne 0x439ff8
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.DLL_SetEndOfFile]
test eax, eax
je 0x439ff8
cmp byte [0x547d70], 0
je 0x439f77
cmp byte [0x547d85], 0
je 0x439f77
cmp byte [0x547d84], 0
jne 0x439f77
push dword [esi + 0xc]
push dword [esi + 8]
push dword [ebp - 0x10]
call dword [0x547dd8]
cmp byte [ebp - 4], 3
mov byte [0x547d71], 0
jne 0x439fa3
cmp byte [ebp - 5], 0
je 0x439fa3
lea ecx, [ebp - 0x10]
call fcn.0047230d
cmp byte [ebp - 6], 0
je 0x439e05
xor edi, edi
jmp 0x439dcb
cmp byte [ebp - 7], 0
je 0x43a025
lea ecx, [ebp - 0x10]
call fcn.0047230d
xor edi, edi
inc edi
jmp 0x439dcb
cmp byte [ebp - 4], 3
je 0x439fc5
cmp byte [ebp + 0x10], 0
je 0x439fe2
cmp eax, 0x490
je 0x439d6b
cmp eax, 2
je 0x439d6b
cmp eax, 3
je 0x439d6b
push eax
push dword [ebp - 0x14]
push str.Error_opening___s_:__E
call fcn.0041ffc1
add esp, 0xc
jmp 0x439d6b
mov byte [0x547d71], 0
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
lea ecx, [ebp - 0x10]
call fcn.0047230d
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x43a020
mov dl, 1
call fcn.0046b3e9
or eax, 0xffffffff
jmp 0x43a0a1
mov eax, dword [ebp - 0x10]
mov dword [esi + 0x68], eax
mov eax, dword [0x548aa8]
add bl, bl
xor bl, byte [esi + 0x26]
mov dword [esi + 0x14], eax
mov eax, dword [0x548aac]
and bl, 2
xor byte [esi + 0x26], bl
mov ecx, edi
mov dword [esi + 0x18], eax
call fcn.00472668
test al, al
sete al
xor al, byte [esi + 0x26]
and al, 1
xor byte [esi + 0x26], al
test byte [esi + 0x26], 1
je 0x43a08e
mov esi, dword [esi + 0x10]
cmp esi, 1
ja 0x43a08e
movzx eax, byte [ebp - 7]
push eax
movzx eax, byte [ebp - 6]
push eax
movzx eax, byte [ebp - 8]
push eax
movzx eax, byte [ebp + 0x14]
push eax
push esi
push edi
push dword [ebp - 0x14]
push str.Incorrect_alignment_on_mode_set____s__mode:_d_alignment:_u_force_buffered:_d_file_bufferless:_d_unbuffered_read:_d_unbuffered_write:_d
call fcn.0041ffc1
add esp, 0x20
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
test ecx, ecx
je 0x43a09f
mov dl, 1
call fcn.0046b3e9
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x14