Function at 0x402620
Capabilities:
Terminate process

Disassembly:
push ebp
push ebx
push edi
push esi
cmp dword [0x4703a8], 0
je 0x4028dd
mov eax, dword [0x470338]
mov edi, dword [eax]
cmp dword [0x4709e8], 0
je 0x40269b
push dword [0x470b00]
call fcn.004096e0
add esp, 4
push 0
push 0
push dword [0x47074c]
call fcn.0040c510
add esp, 0xc
test eax, eax
jne 0x4029a0
push 0
push 0
push 0
push dword [0x47074c]
call fcn.0040c890
add esp, 0x10
push dword [0x4703fc]
push dword [0x4703f8]
push 0x1000
call fcn.00409690
add esp, 0xc
mov dword [0x470b00], eax
xor eax, eax
cmp edi, 1
mov ecx, 0
sbb ecx, ecx
mov edx, dword [0x470b08]
or edx, dword [0x470b0c]
je 0x40280c
xor esi, esi
cmp edi, 1
mov ecx, 0
sbb ecx, ecx
xor edi, edi
mov edx, ecx
jmp 0x4026f7
mov ecx, 0xffffffff
mov edx, 0xffffffff
add esi, 1
adc edi, 0
mov ebx, dword [0x470b0c]
mov eax, dword [0x470b08]
cmp esi, eax
mov ebp, edi
sbb ebp, ebx
jae 0x402810
mov eax, ecx
and eax, edx
cmp eax, 0xffffffff
je 0x402728
mov eax, esi
sub eax, ecx
mov ebx, edi
sbb ebx, edx
cmp eax, 0x40000
mov ebp, ebx
sbb ebp, 0
jb 0x402780
push 0
push ebx
push eax
call fcn.004029c0
add esp, 0xc
test eax, eax
jne 0x402965
mov eax, dword [0x470338]
mov ebx, dword [eax + esi*4]
test ebx, ebx
je 0x4026d0
mov ecx, esi
mov edx, edi
cmp ebx, dword [0x47033c]
jne 0x4026da
mov dword [eax + esi*4], 0
push esi
push 0
push 0x1000
push 0
push dword [0x470b00]
call fcn.00409720
add esp, 0x14
mov ecx, 0xffffffff
mov edx, 0xffffffff
test eax, eax
je 0x4026da
jmp 0x402971
mov ebp, dword [0x470338]
mov ebp, dword [ebp + esi*4]
test ebp, ebp
je 0x40279a
cmp ebp, dword [0x47033c]
jne 0x4026da
push 0
push ebx
push eax
call fcn.004029c0
add esp, 0xc
test eax, eax
jne 0x40297d
mov eax, dword [0x470338]
mov ebx, dword [eax + esi*4]
mov ecx, 0xffffffff
mov edx, 0xffffffff
cmp ebx, dword [0x47033c]
jne 0x4026da
mov dword [eax + esi*4], 0
push esi
push 0
push 0x1000
push 0
push dword [0x470b00]
call fcn.00409720
add esp, 0x14
mov ecx, 0xffffffff
mov edx, 0xffffffff
test eax, eax
je 0x4026da
push str._ret
push 0x303
jmp 0x402987
mov edx, ecx
xor ebx, ebx
mov esi, ecx
and esi, edx
cmp esi, 0xffffffff
je 0x402831
sub eax, ecx
sbb ebx, edx
push 0
push ebx
push eax
call fcn.004029c0
add esp, 0xc
test eax, eax
jne 0x4029ac
push 0
push 1
push 0
push dword [0x47074c]
push dword [0x470b00]
call fcn.00409860
add esp, 0x14
cmp dword [0x4703a8], 0
je 0x4028dd
mov eax, dword [0x470b00]
test eax, eax
je 0x402874
push eax
call fcn.004096e0
add esp, 4
mov dword [0x470b00], 0
mov eax, dword [0x470b08]
or eax, dword [0x470b0c]
mov esi, dword [0x470338]
je 0x4028b2
mov edi, 1
nop dword [eax]
push dword [esi + edi*4 - 4]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
cmp edi, dword [0x470b08]
lea edi, [edi + 1]
mov eax, 0
sbb eax, dword [0x470b0c]
jb 0x402890
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov dword [0x470338], 0
push dword [0x47033c]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov dword [0x47033c], 0
cmp dword [0x4709c8], 0
jle 0x402924
xor edi, edi
mov ebx, 0x470748
nop dword [eax]
push dword [ebx + 4]
call sub.api_ms_win_crt_stdio_l1_1_0.dll__close
add esp, 4
mov esi, eax
test eax, eax
js 0x402928
push dword [ebx]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
push dword [ebx + 0x48]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
inc edi
add ebx, 0x50
cmp edi, dword [0x4709c8]
jl 0x4028f0
jmp 0x402950
xor esi, esi
jmp 0x402950
cmp dword [0x4709d8], 0
js 0x402950
cmp dword [0x470a24], 0
jne 0x402950
cmp dword [0x470a28], 0
jne 0x402950
push str._tError:_Failed_to_close_device_file___
call sub.api_ms_win_crt_stdio_l1_1_0.dll_puts
add esp, 4
push dword [0x47073c]
call sub.api_ms_win_crt_stdio_l1_1_0.dll__close
add esp, 4
mov eax, esi
pop esi
pop edi
pop ebx
pop ebp
ret
push str._ret
push 0x2ea
jmp 0x402987
push str._ret
push 0x2f5
jmp 0x402987
push str._ret
push 0x2ff
push str.f2fs_finalize_device
push section..rdata
call fcn.004024c0
add esp, 0x10
push 0xffffffffffffffff
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
push str._ret
push 0x2df
jmp 0x402987
push str._ret
push 0x30c
jmp 0x402987