Function at 0x410470
Capabilities:
Delete drive layout via ioctl
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
je 0x4106e5
push 0
lea eax, [ebp - 0x1c]
push eax
push 0
push 0
push 0
push 0
push 0x7c100
push ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push 0x10000
call fcn.00424244
add esp, 4
mov dword [ebp - 4], eax
test eax, eax
je 0x4106e5
push esi
push edi
push 0x10000
push 0
push eax
call fcn.00424e90
add esp, 0xc
mov byte [ebp + 0xb], 0
xor esi, esi
lea ecx, [ecx]
mov eax, esi
cdq
mov ecx, eax
mov eax, edx
push 0
mov dword [ebp - 0x14], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push ecx
push ebx
mov dword [ebp - 0x10], ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0xc], eax
cmp eax, 0xffffffff
jne 0x410511
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
je 0x410511
call fcn.00425bcc
mov dword [eax], edi
or ecx, 0xffffffff
or eax, 0xffffffff
jmp 0x41051a
mov eax, dword [ebp - 8]
xor ecx, ecx
or ecx, dword [ebp - 0xc]
cdq
cmp ecx, dword [ebp - 0x10]
jne 0x410569
cmp eax, dword [ebp - 0x14]
jne 0x410569
push 0
lea eax, [ebp - 0x18]
push eax
push 0x10000
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x41055a
cmp dword [ebp - 0x18], 0x10000
jne 0x410569
add esi, 0x10000
cmp esi, 0xa00000
jl 0x4104d0
jmp 0x41056d
call fcn.00425bcc
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi], eax
mov byte [ebp + 0xb], 1
mov edi, 0xff5f0000
mov eax, edi
cdq
mov esi, eax
add esi, 0x8100000
mov eax, edx
adc eax, 0
mov dword [ebp - 0x10], eax
js 0x4105f9
jg 0x41058d
test esi, esi
jb 0x4105f9
push 0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x14], eax
cmp eax, 0xffffffff
jne 0x4105c5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4105c5
call fcn.00425bcc
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
or ecx, 0xffffffff
or eax, 0xffffffff
jmp 0x4105ce
mov eax, dword [ebp - 8]
xor ecx, ecx
or ecx, dword [ebp - 0x14]
cdq
cmp ecx, esi
jne 0x41061c
cmp eax, dword [ebp - 0x10]
jne 0x41061c
push 0
lea eax, [ebp - 0xc]
push eax
push 0x10000
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x41060d
cmp dword [ebp - 0xc], 0x10000
jne 0x41061c
add edi, 0x10000
cmp edi, 0xa00000
jl 0x410572
jmp 0x410620
call fcn.00425bcc
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi], eax
mov byte [ebp + 0xb], 1
mov edi, 0xff5f0000
mov eax, edi
cdq
mov ecx, eax
add ecx, dword [ebp + 0xc]
mov eax, edx
adc eax, dword [ebp + 0x10]
push 0
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push ecx
push ebx
mov dword [ebp - 0x14], ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x18], eax
cmp eax, 0xffffffff
jne 0x41066c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
je 0x41066c
call fcn.00425bcc
mov dword [eax], esi
or ecx, 0xffffffff
or eax, 0xffffffff
jmp 0x410675
mov eax, dword [ebp - 8]
xor ecx, ecx
or ecx, dword [ebp - 0x18]
cdq
cmp ecx, dword [ebp - 0x14]
jne 0x4106be
cmp eax, dword [ebp - 0x10]
jne 0x4106be
push 0
lea eax, [ebp - 0xc]
push eax
push 0x10000
push dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4106af
cmp dword [ebp - 0xc], 0x10000
jne 0x4106be
add edi, 0x10000
js 0x410625
jmp 0x4106c2
call fcn.00425bcc
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi], eax
mov byte [ebp + 0xb], 1
push dword [ebp - 4]
call fcn.0042420c
add esp, 4
cmp byte [ebp + 0xb], 1
pop edi
pop esi
je 0x4106e5
push ebx
call fcn.004106f0
add esp, 4
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret