Function at 0x407070
Capabilities:
Terminate process
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov edi, ecx
mov dword [esp], 0
push ecx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
inc eax
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x4079b4
mov ebx, eax
push edi
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
add esp, 8
mov dword [esp + 0x10], 0
xor edi, edi
mov dword [esp + 4], 0
mov dword [esp + 0xc], ebx
jmp 0x4070e3
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push esi
push str._s_requires__O_64bit_n
push eax
call fcn.00407010
add esp, 0xc
inc edi
test ebx, ebx
je 0x4078f4
cmp byte [ebx], 0
je 0x4078f4
mov esi, ebx
push 0x2c
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_strchr
add esp, 8
mov dword [esp], eax
xor ebp, ebp
mov ebx, 0
test eax, eax
je 0x40710d
mov byte [eax], 0
inc eax
mov ebx, eax
push 0x3d
push esi
call sub.api_ms_win_crt_private_l1_1_0.dll_strchr
add esp, 8
test eax, eax
je 0x407122
mov byte [eax], 0
inc eax
mov ebp, eax
push 0x4899cb
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407320
push str.desc_size
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407320
push str.hash_seed
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40735f
push 0x489a52
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407402
push str.mmp_update_interval
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407447
push str.no_copy_xattrs
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407487
push str.num_backup_sb
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4074ac
push str.packed_meta_blocks
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4074f0
push str.stride
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407559
push 0x489afb
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40751a
push str.stripe_width
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40751a
push str.resize
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4075bc
push str.test_fs
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4076e5
push str.lazy_itable_init
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4076f1
push str.lazy_journal_init
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407713
push str.root_owner
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407774
push 0x4893cb
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4077df
push str.nodiscard
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x4077fa
push str.quotatype
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407822
push str.android_sparse
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407885
push str.encoding
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x407891
push str.encoding_flags
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
jne 0x4078ce
xor eax, eax
test ebp, ebp
sete al
mov ecx, dword [esp + 0x10]
cmovne ecx, ebp
mov dword [esp + 0x10], ecx
add edi, eax
jmp 0x4070db
test byte [0x4b2f10], 0x80
je 0x4070c0
cmp word [0x4b2f7e], 0
je 0x407393
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
movzx ecx, word [0x4b2f7e]
push ecx
push esi
push str._s_must_be_before_resize_u_n
push eax
call fcn.00407010
add esp, 0x10
inc edi
jmp 0x4070db
test ebp, ebp
je 0x4078ce
push 0x4b2f9c
push ebp
call fcn.0040dc20
add esp, 8
test eax, eax
je 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_hash_seed:__s_n
jmp 0x4070d1
test ebp, ebp
je 0x4078ce
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov ecx, dword [esp]
cmp byte [ecx], 0
jne 0x407496
mov ecx, eax
shr ecx, 1
and ecx, 0x55555555
mov edx, eax
sub edx, ecx
mov ecx, edx
and ecx, 0x33333333
shr edx, 2
and edx, 0x33333333
add edx, ecx
mov ecx, edx
shr ecx, 4
add ecx, edx
and ecx, 0xf0f0f0f
imul ecx, ecx, 0x1010101
shr ecx, 0x18
cmp ecx, 2
jae 0x407496
mov word [0x4b2fae], ax
jmp 0x4070db
test ebp, ebp
je 0x4078ce
push 0
lea eax, [esp + 4]
push eax
push ebp
call fcn.004247b0
add esp, 0xc
mov dword [0x4b32b4], edx
mov dword [0x4b32b0], eax
mov eax, dword [esp]
cmp byte [eax], 0
je 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_offset:__s_n
jmp 0x4070d1
test ebp, ebp
je 0x4078ce
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov word [0x4b3016], ax
mov eax, dword [esp]
cmp byte [eax], 0
je 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_mmp_update_interval:__s_n
jmp 0x4070d1
mov dword [0x4b3330], 1
jmp 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_desc_size:__s_n
jmp 0x4070d1
test ebp, ebp
je 0x4078ce
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov dword [0x4b2030], eax
mov ecx, dword [esp]
cmp byte [ecx], 0
jne 0x4074da
cmp eax, 3
jl 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid__of_backup_superblocks:__s_n
jmp 0x4070d1
test ebp, ebp
je 0x407599
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov dword [0x4b32f4], eax
test eax, eax
jne 0x4075a3
jmp 0x4070db
test ebp, ebp
je 0x4078ce
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov dword [0x4b3020], eax
mov eax, dword [esp]
cmp byte [eax], 0
je 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_stripe_width_parameter:__s_n
jmp 0x4070d1
test ebp, ebp
je 0x4078ce
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov word [0x4b3014], ax
mov eax, dword [esp]
cmp byte [eax], 0
je 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_stride_parameter:__s_n
jmp 0x4070d1
mov dword [0x4b32f4], 1
mov dword [0x4b201c], 0
mov dword [0x4b2018], 0
jmp 0x4070db
test ebp, ebp
je 0x4078ce
push dword [0x4b2ec8]
push ebp
call fcn.0040eb00
add esp, 8
mov esi, eax
or eax, edx
je 0x40773f
push 0x4b2eb0
mov dword [esp + 0x18], edx
call fcn.00411820
add esp, 4
cmp eax, esi
sbb edx, dword [esp + 0x14]
jae 0x407755
mov dword [esp + 0x20], esi
mov eax, dword [0x4b2ed0]
movzx ecx, byte [0x4b2ec8]
mov esi, 0x2000
shl esi, cl
test eax, eax
cmovne esi, eax
mov eax, 0x400
shl eax, cl
test byte [0x4b2f10], 0x80
movzx ecx, word [0x4b2fae]
mov edx, 0x20
cmove ecx, edx
cdq
idiv ecx
mov ebp, eax
push 0x4b2eb0
call fcn.00411820
add esp, 4
mov ecx, eax
or ecx, edx
mov ecx, 0
je 0x407666
add eax, 0xffffffff
adc edx, 0xffffffff
push 0
push esi
push edx
push eax
call fcn.004236c0
add esp, 0x10
mov ecx, eax
inc ecx
lea eax, [ecx + ebp]
dec eax
xor edx, edx
mov dword [esp + 0x18], ebp
div ebp
mov dword [esp + 0x1c], eax
mov ebp, dword [esp + 0x20]
add ebp, 0xffffffff
mov eax, dword [esp + 0x14]
adc eax, 0xffffffff
push 0
push esi
push eax
push ebp
call fcn.004236c0
add esp, 0x10
cmp eax, 0xffffffff
mov edx, 0
je 0x4076a4
xor edx, edx
div dword [esp + 0x18]
mov edx, eax
inc edx
sub edx, dword [esp + 0x1c]
movzx ecx, byte [0x4b2ec8]
mov eax, 0x400
shl eax, cl
shr eax, 2
cmp edx, eax
cmovl eax, edx
test eax, eax
jle 0x4070db
cmp dword [0x4b2efc], 0
je 0x407a30
or byte [0x4b2f0c], 0x10
mov word [0x4b2f7e], ax
jmp 0x4070db
or byte [0x4b3010], 4
jmp 0x4070db
test ebp, ebp
je 0x4077d0
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov dword [0x4b32c8], eax
jmp 0x4070db
test ebp, ebp
je 0x4077ee
push 0
lea eax, [esp + 4]
push eax
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
xor ecx, ecx
test eax, eax
setne cl
add ecx, ecx
or dword [0x4b332c], ecx
jmp 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_resize_parameter:__s_n
jmp 0x4070d1
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 0x3d
push str.The_resize_maximum_must_be_greater_than_the_filesystem_size._n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
jmp 0x407356
test ebp, ebp
je 0x407809
push 0
lea esi, [esp + 4]
push esi
push ebp
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov dword [0x4b3308], eax
mov eax, dword [esp]
cmp byte [eax], 0x3a
jne 0x4077ba
inc eax
mov dword [esp], eax
push 0
push esi
push eax
call sub.api_ms_win_crt_convert_l1_1_0.dll_strtoul
add esp, 0xc
mov dword [0x4b330c], eax
mov eax, dword [esp]
cmp byte [eax], 0
je 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_root_owner:__s_n
jmp 0x4070d1
mov dword [0x4b32c8], 1
jmp 0x4070db
mov dword [0x4b200c], 1
jmp 0x4070db
or byte [0x4b332c], 2
jmp 0x4070db
mov dword [0x4b200c], 0
jmp 0x4070db
mov dword [0x4b3308], 0
mov dword [0x4b330c], 0
jmp 0x4070db
mov dword [esp + 8], 0
test ebp, ebp
je 0x4078ce
mov dword [0x4b2034], 0
lea eax, [esp + 8]
push eax
push 0x4b2034
push ebp
call fcn.0040b470
add esp, 0xc
test eax, eax
je 0x4078b4
cmp dword [esp + 8], 0
je 0x4078ba
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push dword [esp + 8]
push str.Failed_to_parse_quota_type_at__s
push eax
call fcn.00407010
add esp, 0xc
push dword [esp + 8]
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
jmp 0x4078ce
mov byte [0x4b2ea8], 1
jmp 0x4070db
test ebp, ebp
je 0x4078d8
push ebp
call fcn.0040dde0
add esp, 4
test eax, eax
js 0x4078de
mov word [0x4b312c], ax
or byte [0x4b2f12], 2
jmp 0x4070db
mov esi, dword [esp + 4]
jmp 0x4078cf
push str.while_parsing_quota_type
push eax
push dword [0x4b2008]
call fcn.00422cf0
add esp, 0xc
inc edi
mov dword [esp + 4], esi
jmp 0x4070db
inc edi
jmp 0x4070db
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push ebp
push str.Invalid_encoding:__s
jmp 0x4070d1
test edi, edi
jne 0x4079d8
movzx ecx, word [0x4b3014]
test ecx, ecx
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
je 0x407943
mov eax, dword [0x4b3020]
xor edx, edx
div ecx
test edx, edx
je 0x407943
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
movzx ecx, word [0x4b3014]
push ecx
push dword [0x4b3020]
push str._nWarning:_RAID_stripe_width__u_not_an_even_multiple_of_stride__u._n_n
push eax
call fcn.00407010
add esp, 0x10
test byte [0x4b2f12], 2
jne 0x407972
test edi, edi
je 0x4079a6
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 0x4c
push str.error:_An_encoding_must_be_explicitly_specified_when_passing_encoding_flags_n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x407a20
movzx eax, word [0x4b312c]
push eax
call fcn.0040de80
add esp, 4
mov word [0x4b312e], ax
test edi, edi
je 0x4079a6
movzx eax, word [0x4b312c]
push 0x4b312e
push edi
push eax
call fcn.0040de90
add esp, 0xc
test eax, eax
jne 0x407a06
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 0x2b
push str.Couldnt_allocate_memory_to_parse_options__n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
push 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
mov edx, dword [esp + 4]
test edx, edx
mov ecx, 0x488e9b
cmovne ecx, edx
push ecx
push str._nBad_option_s__specified:__s_n_nExtended_options_are_separated_by_commas__and_may_take_an_argument_which_n_tis_set_off_by_an_equals____sign._n_nValid_extended_options_are:_n_tmmp_update_interval_interval__n_tnum_backup_sb_012__n_tstride_RAID_per_disk_data_chunk_in_blocks__n_tstripe_width_RAID_stride__data_disks_in_blocks__n_toffset_offset_to_create_the_file_system__n_tresize_resize_maximum_size_in_blocks__n_tpacked_meta_blocks_0_to_disable__1_to_enable__n_tlazy_itable_init_0_to_disable__1_to_enable__n_tlazy_journal_init_0_to_disable__1_to_enable__n_troot_owner_uid_of_root_dir_:_gid_of_root_dir__n_ttest_fs_n_tdiscard_n_tnodiscard_n_tencoding_encoding__n_tencoding_flags_flags__n_tquotatype_quota_type_s__to_be_enabled__n_n
push eax
call fcn.00407010
add esp, 0xc
push dword [esp + 0xc]
jmp 0x407a21
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push edi
push str.error:_Invalid_encoding_flag:__s_n
push eax
call fcn.00407010
add esp, 0xc
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
push 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 0x3b
push str.On_line_resizing_not_supported_with_revision_0_filesystems_n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x407a00