Function at 0x401cda
Capabilities:
Clear file content

Disassembly:
push ecx
or dword [0x421550], 0xffffffff
push ebx
push ebp
push esi
xor ebp, ebp
push edi
xor edi, edi
inc ebp
cmp byte [0x429792], 0
mov dword [esp + 0x10], edi
mov dword [0x42156c], edi
mov dword [0x421568], edi
mov dword [0x421570], edi
mov dword [0x421650], ebp
jne 0x401dea
call fcn.00404712
test eax, eax
je 0x401d56
push ebp
mov esi, 0x421a7c
push esi
mov ebx, 0x42167c
push ebx
call fcn.00403cbd
call fcn.00404712
test eax, eax
je 0x401d56
push esi
push ebx
push 0x42b0a4
push 0x42aca4
mov ecx, 0x42698c
call fcn.00401a91
push 0x34
pop eax
jmp 0x4020a3
cmp byte [0x429792], 0
jne 0x401dea
mov esi, dword [0x41092c]
mov ebx, dword [0x410928]
push edi
push 0x800
push esi
push ebx
call fcn.00401070
cmp edx, dword [0x410924]
jg 0x401dea
jl 0x401d8e
cmp eax, dword [0x410920]
jae 0x401dea
cmp esi, edi
jl 0x401db9
jg 0x401d9c
cmp ebx, 0x5f5e100
jbe 0x401db9
mov ecx, dword [0x421578]
call fcn.004037c2
cmp edx, dword [0x410924]
jl 0x401dea
jg 0x401db9
cmp eax, dword [0x410920]
jbe 0x401dea
push edi
push dword [0x410928]
push dword [0x421664]
call fcn.004092af
push dword [0x421664]
call fcn.00403aeb
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push edi
push edi
push dword [0x421664]
call fcn.004092af
call fcn.00403f2d
mov cx, word [0x4215b4]
movzx eax, cx
cmp eax, edi
je 0x401e7c
add eax, 0xfffffff8
cmp eax, ebp
ja 0x401e33
xor eax, eax
cmp cx, 9
sete al
push eax
call fcn.00406c84
cmp eax, edi
je 0x401f63
xor ecx, ecx
cmp eax, 3
sete cl
lea ecx, [ecx*4 + 2]
mov dword [esp + 0x10], ecx
jmp 0x401f63
push 0x42227c
call fcn.0040c7f0
push eax
push 0x6c
call fcn.004090dd
push eax
push 0x42b0a4
call fcn.0040a386
add esp, 0xc
call fcn.00403ea5
cmp byte [0x429792], 0
jne 0x401e75
call fcn.0040d5da
push 0x421a7c
push 0x42167c
call fcn.004039e7
mov eax, ebp
jmp 0x4020a3
mov esi, 0x41154c
mov dword [0x421678], edi
xor ebp, ebp
mov ebx, 0x10000
mov dword [0x421674], esi
add dword [0x421560], 0xffffffff
adc dword [0x421564], 0xffffffff
js 0x401ebf
jg 0x401eaf
cmp dword [0x421560], 0
jb 0x401ebf
mov eax, dword [0x421558]
movzx eax, byte [eax]
inc dword [0x421558]
jmp 0x401ec4
call fcn.00404185
cmp eax, 0xffffffff
je 0x401f4e
cmp dword [0x42164c], 0
jne 0x401f4e
mov ecx, dword [0x421674]
mov byte [ecx], al
inc dword [0x421674]
inc dword [0x421678]
cmp dword [0x421678], ebx
jne 0x401e94
push dword [0x421584]
mov eax, dword [0x411548]
push dword [0x421580]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
add edi, ebx
adc ebp, 0
add ecx, edi
adc eax, ebp
push eax
push ecx
push dword [0x41092c]
push dword [0x410928]
push ebp
push edi
call fcn.0040a3e3
call fcn.0040993e
cmp byte [0x42584a], 0
jne 0x401f4e
push 0
push dword [0x421678]
push esi
call fcn.00404819
and dword [0x421678], 0
jmp 0x401e8e
mov eax, dword [0x421678]
test eax, eax
je 0x401f60
push 0
push eax
push esi
call fcn.00404819
xor ebp, ebp
inc ebp
mov cl, byte [0x429792]
xor bl, bl
cmp byte [0x42584a], bl
je 0x401f79
test cl, cl
jne 0x401f79
inc bl
mov eax, dword [0x42164c]
mov esi, 0x42b0a4
test eax, eax
je 0x401fc2
cmp eax, ebp
jle 0x401fbe
cmp byte [0x429730], 0
jne 0x401f9a
test cl, cl
jne 0x401f9a
mov bl, 1
push 0x421a7c
push 0x42167c
push esi
push 0x42aca4
mov ecx, 0x42698c
call fcn.00401b49
mov dword [esp + 0x10], 0x32
jmp 0x401fd3
mov dword [esp + 0x10], ebp
cmp dword [esp + 0x10], 6
jne 0x401fd3
mov ecx, 0x42698c
call fcn.004018f0
cmp byte [0x422705], 0
je 0x401fe5
cmp byte [0x422706], 0
je 0x401ff4
mov eax, dword [0x421550]
not eax
cmp eax, dword [0x4215bc]
jne 0x401fff
cmp byte [0x429792], 0
je 0x402060
jmp 0x402057
cmp dword [esp + 0x10], ebp
push 2
pop edi
jle 0x40200e
cmp dword [esp + 0x10], edi
jne 0x40203f
mov eax, dword [0x411548]
test byte [eax + 0x28], 1
push 0x42227c
je 0x402028
call fcn.0040c7f0
push eax
push 0x70
jmp 0x402030
call fcn.0040c7f0
push eax
push 0x71
call fcn.004090dd
push eax
push esi
call fcn.0040a386
add esp, 0xc
cmp byte [0x429730], 0
jne 0x402053
cmp byte [0x429792], 0
jne 0x402053
mov bl, 1
mov dword [esp + 0x10], edi
cmp byte [0x429792], 0
jne 0x402087
cmp dword [esp + 0x10], 0
je 0x402079
push dword [0x421664]
call fcn.00403aeb
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp byte [0x429792], 0
jne 0x402087
call fcn.0040d5da
test bl, bl
je 0x40209a
push 0x421a7c
push 0x42167c
call fcn.004039e7
call fcn.00403ea5
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret