Function at 0x4eedec
Capabilities:
Clear file content

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404d30
xor eax, eax
push ebp
push 0x4ef162
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov dword [eax + 0x1a8], 0xffffffff
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0xba], 0
jne 0x4eee60
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x13c]
or al, byte [0x4ef170]
mov edx, dword [ebp - 4]
mov byte [edx + 0x13c], al
mov eax, dword [ebp - 4]
add eax, 0x214
mov edx, dword [ebp - 8]
call fcn.004048e4
jmp 0x4ef147
xor edx, edx
push ebp
push 0x4ef0d9
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x224]
call fcn.00404b48
test eax, eax
je 0x4eee96
push 1
lea ecx, [ebp - 0x2e]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x224]
mov eax, dword [ebp - 4]
call fcn.004ebbe0
mov eax, dword [ebp - 4]
add eax, 0x214
mov edx, dword [ebp - 8]
call fcn.004048e4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1a8], 0xffffffff
je 0x4ef0cf
mov eax, dword [ebp - 4]
add eax, 0x1a8
call fcn.004e13bc
lea eax, [ebp - 0xc]
push eax
mov cl, 1
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004e96bc
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x168]
call fcn.00404c8c
jne 0x4eeef4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ef147
mov eax, dword [ebp - 0xc]
call fcn.00404b48
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
xor edx, edx
add eax, 0x16
adc edx, 0
push edx
push eax
mov eax, ebx
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
cmp edx, 0
jne 0x4eef2a
cmp eax, 0xfffffffe
jbe 0x4eef44
jmp 0x4eef2c
jle 0x4eef44
push 1
mov ecx, 0x27dd
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1ac]
mov edx, 0x22
call fcn.00409400
mov esi, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x1a8], esi
inc esi
jne 0x4eef7d
push 1
mov ecx, 0x2afa
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
xor edx, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a8]
xor edx, edx
call fcn.004e0a28
cmp edx, 0xffffffff
jne 0x4eefc6
cmp eax, 0xffffffff
jne 0x4eefc6
push 1
mov ecx, 0x2b00
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
lea edx, [ebp - 0x2e]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a8]
mov ecx, 0x16
call fcn.00409488
cmp eax, 0x16
jne 0x4eefea
cmp dword [ebp - 0x2e], 0x6054b50
je 0x4ef002
push 1
mov ecx, 0x2b03
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov word [ebp - 0x1a], bx
mov dword [ebp - 0x18], 0xffffffea
mov dword [ebp - 0x14], 0xffffffff
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a8]
mov edx, 1
call fcn.004e0a28
cmp edx, 0xffffffff
jne 0x4ef04f
cmp eax, 0xffffffff
jne 0x4ef04f
push 1
mov ecx, 0x2b00
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov byte [ebp - 0xd], 1
lea edx, [ebp - 0x2e]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a8]
mov ecx, 0x16
call fcn.004094b4
cmp eax, 0x16
je 0x4ef086
push 1
mov ecx, 0x2b16
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov eax, dword [ebp - 0xc]
call fcn.00404d40
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a8]
mov ecx, ebx
call fcn.004094b4
cmp ebx, eax
je 0x4ef0bc
push 1
mov ecx, 0x2b02
mov dl, 1
mov eax, dword [0x4e2610]
call fcn.004e2790
call fcn.0040426c
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a8]
push eax
call sub.kernel32.dll_SetEndOfFile_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ef12c
mov eax, dword [ebp - 4]
add eax, 0x1a8
call fcn.004e13bc
cmp byte [ebp - 0xd], 0
je 0x4ef147
mov eax, dword [ebp - 4]
call fcn.004ec70c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ef169
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004048b4
ret