Function at 0x42cfdc
Capabilities:
Clear file content

Disassembly:
sub esp, 0x824
mov eax, dword [0x4d8620]
xor eax, esp
mov dword [esp + 0x820], eax
push ebx
push ebp
xor ebx, ebx
push esi
xor ebp, ebp
mov esi, 1
push edi
mov dword [0x5261e4], ebx
mov dword [0x5261e0], ebx
mov dword [0x5261e8], ebx
mov dword [0x5262d8], esi
mov dword [0x5261c8], 0xffffffff
cmp byte [0x53395a], bl
jne 0x42cfb6
call fcn.00436de0
test eax, eax
je 0x42cf1a
push esi
push 0x526304
call fcn.00432de0
call fcn.00436de0
test eax, eax
je 0x42cf1a
push 0x526304
push ebx
push 0x5362aa
push 0x535eaa
mov ecx, 0x513904
call fcn.00429e10
push 0x526304
call fcn.00455510
test al, al
jne 0x42ced4
push 0x456
call fcn.00465ec0
push eax
push 0x5362aa
call fcn.00498be0
add esp, 8
push 0x400
push 0x526304
lea eax, [esp + 0x38]
push eax
call fcn.0046f260
push esi
push 0x526304
call fcn.00455590
push 0x526304
call fcn.00432420
test al, al
je 0x42cee4
movzx ecx, word [0x526240]
movzx edx, word [0x52623e]
mov eax, dword [0x514fa4]
push ebx
shl ecx, 0x10
add ecx, edx
push ecx
mov ecx, dword [0x514fa0]
push eax
push ecx
push 0x526304
push ebx
call fcn.0040b080
movsx eax, al
sub eax, 0x41
je 0x42cede
sub eax, 2
je 0x42ced4
sub eax, 0xb
jne 0x42cee4
mov eax, 0x34
jmp 0x42d3d0
mov dword [0x533810], esi
push esi
push 0x526304
call fcn.00432de0
call fcn.00436de0
test eax, eax
jne 0x42ced4
push 0x526304
lea edx, [esp + 0x34]
push edx
push 0x4ae
call fcn.00465ec0
push eax
push 0x5362aa
call fcn.00498be0
add esp, 0x10
cmp byte [0x53395a], bl
jne 0x42cfb6
mov edi, dword [0x514fa4]
mov esi, dword [0x514fa0]
push ebx
push 0x800
push edi
push esi
call fcn.004b0290
cmp edx, dword [0x514f9c]
jg 0x42cfb6
jl 0x42cf51
cmp eax, dword [0x514f98]
jae 0x42cfb6
cmp edi, ebx
jl 0x42cf82
jg 0x42cf5f
cmp esi, 0x5f5e100
jbe 0x42cf82
mov ecx, dword [0x5261f0]
call fcn.004312b0
cmp edx, dword [0x514f9c]
jl 0x42cfb6
jg 0x42cf7c
cmp eax, dword [0x514f98]
jbe 0x42cfb6
mov esi, dword [0x514fa0]
mov eax, dword [0x5262ec]
push ebx
push esi
push eax
call fcn.004b1123
mov ecx, dword [0x5262ec]
add esp, 0xc
push ecx
call fcn.00432bf0
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov edx, dword [0x5262ec]
push ebx
push ebx
push edx
call fcn.004b1123
add esp, 0xc
call fcn.00436380
mov cx, word [0x52623c]
movzx eax, cx
cmp eax, 9
ja case.0x42cfd5.2
movzx eax, byte [eax + 0x42d400]
jmp dword [eax*4 + 0x42d3ec]
xor esi, esi
xor edi, edi
mov dword [0x526300], ebx
mov dword [0x5262fc], 0x5161c4
or eax, 0xffffffff
add dword [0x5261d8], eax
adc dword [0x5261dc], eax
js 0x42d01d
jg 0x42d00b
cmp dword [0x5261d8], ebx
jb 0x42d01d
mov ecx, dword [0x5261d0]
movzx eax, byte [ecx]
inc ecx
mov dword [0x5261d0], ecx
jmp 0x42d022
call fcn.004366b0
cmp eax, 0xffffffff
je 0x42d0b9
cmp dword [0x5262d4], ebx
jne 0x42d0b9
mov ecx, dword [0x5262fc]
mov byte [ecx], al
mov eax, dword [0x526300]
inc dword [0x5262fc]
inc eax
mov dword [0x526300], eax
cmp eax, 0x10000
jne 0x42cff0
mov edx, dword [0x526204]
mov ecx, dword [0x5261f0]
add esi, eax
mov eax, dword [0x526200]
push edx
push eax
adc edi, ebx
call fcn.004311b0
add eax, dword [0x526208]
mov ecx, dword [0x514fa4]
adc edx, dword [0x52620c]
push edx
mov edx, dword [0x514fa0]
push eax
push ecx
push edx
push edi
push esi
call fcn.00409a10
call fcn.0044aea0
cmp byte [0x527e58], bl
jne 0x42d0b9
mov eax, dword [0x526300]
push ebx
push eax
push 0x5161c4
call fcn.00436eb0
jmp 0x42cfe0
mov eax, dword [0x526300]
cmp eax, ebx
je 0x42d15d
push ebx
push eax
push 0x5161c4
call fcn.00436eb0
jmp 0x42d15d
call fcn.0047f0d0
jmp 0x42d148
call fcn.0042ae70
cmp eax, ebx
je 0x42d0fd
cmp eax, 5
je 0x42d102
xor edx, edx
cmp eax, 3
sete dl
lea edx, [edx*4 + 2]
mov ebp, edx
cmp eax, 5
jne 0x42d15d
mov ecx, dword [0x514fa8]
xor eax, eax
cmp eax, dword [0x52624c]
jg 0x42d12c
jl 0x42d11c
cmp ecx, dword [0x526248]
ja 0x42d12c
mov eax, 1
neg eax
sbb eax, eax
add eax, 2
mov ebp, eax
jmp 0x42d15d
xor eax, eax
neg eax
sbb eax, eax
add eax, 2
mov ebp, eax
jmp 0x42d15d
xor eax, eax
cmp cx, 9
sete al
push eax
call fcn.0043cd70
cmp eax, ebx
je 0x42d15d
xor ecx, ecx
cmp eax, 3
sete cl
lea ecx, [ecx*4 + 2]
mov ebp, ecx
mov cl, byte [0x53395a]
xor bl, bl
cmp byte [0x527e58], bl
je 0x42d173
test cl, cl
jne 0x42d173
mov bl, 1
mov eax, dword [0x5262d4]
xor edi, edi
cmp eax, edi
je 0x42d1ba
cmp eax, 1
jle 0x42d1b3
cmp byte [0x533870], 0
jne 0x42d192
test cl, cl
jne 0x42d192
mov bl, 1
push 0x526304
push edi
push 0x5362aa
push 0x535eaa
mov ecx, 0x513904
call fcn.00429f60
mov ebp, 0x32
jmp 0x42d1c9
mov ebp, 1
jmp 0x42d1c9
cmp ebp, 6
jne 0x42d1c9
mov ecx, 0x513904
call fcn.00429700
cmp byte [0x526ba5], 0
je 0x42d2c4
push 0x526bac
lea edx, [esp + 0x24]
push edx
call fcn.00432050
mov eax, dword [0x514f98]
and eax, dword [0x514f9c]
cmp eax, 0xffffffff
jne 0x42d201
mov dword [0x514f98], edi
mov dword [0x514f9c], edi
call fcn.004362f0
add dword [0x514f98], 0xa
adc dword [0x514f9c], edi
call fcn.00436380
mov eax, dword [0x5161c0]
and dword [eax + 0x40], 0xfffffffe
xor esi, esi
jmp 0x42d230
or eax, 0xffffffff
add dword [0x5261d8], eax
adc dword [0x5261dc], eax
js 0x42d261
jg 0x42d24b
cmp dword [0x5261d8], edi
jb 0x42d261
mov ecx, dword [0x5261d0]
movzx dx, byte [ecx]
inc ecx
movzx eax, dx
mov dword [0x5261d0], ecx
jmp 0x42d269
call fcn.004366b0
movzx eax, ax
mov byte [esp + esi + 0x10], al
inc esi
cmp esi, 0xa
jl 0x42d230
mov eax, dword [0x5161c0]
or dword [eax + 0x40], 1
mov edx, 0xa
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
lea esp, [esp]
mov esi, dword [ecx]
cmp esi, dword [eax]
jne 0x42d2fb
sub edx, 4
add eax, 4
add ecx, 4
cmp edx, 4
jae 0x42d290
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42d2fb
mov al, byte [eax + 1]
cmp al, byte [ecx + 1]
jne 0x42d2fb
cmp byte [0x526ba5], 0
je 0x42d2c4
cmp byte [0x526ba6], 0
je 0x42d2d4
mov ecx, dword [0x5261c8]
not ecx
cmp ecx, dword [0x526244]
jne 0x42d2fb
cmp byte [0x53395a], 0
je 0x42d356
mov eax, dword [0x526220]
test eax, eax
je 0x42d34d
movzx edx, word [0x52625a]
push edx
call fcn.0042cc60
cmp eax, ebp
jle 0x42d34d
mov ebp, eax
jmp 0x42d34d
cmp ebp, 1
jle 0x42d305
cmp ebp, 2
jne 0x42d334
mov eax, dword [0x5161c0]
test byte [eax + 0x40], 1
push 0x526304
je 0x42d31c
push 0x1f8
jmp 0x42d321
push 0x1f9
call fcn.00465ec0
push eax
push 0x5362aa
call fcn.00498be0
add esp, 0xc
cmp byte [0x533870], 0
jne 0x42d348
cmp byte [0x53395a], 0
jne 0x42d348
mov bl, 1
mov ebp, 2
cmp byte [0x53395a], 0
jne 0x42d37b
test ebp, ebp
je 0x42d36d
mov ecx, dword [0x5262ec]
push ecx
call fcn.00432bf0
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp byte [0x53395a], 0
jne 0x42d37b
call fcn.00480810
test bl, bl
je 0x42d389
push 0x526304
call fcn.00432710
call fcn.004362f0
mov eax, ebp
jmp 0x42d3d0
push 0x526304
push 0x342
call fcn.00465ec0
push eax
push 0x5362aa
call fcn.00498be0
add esp, 0xc
call fcn.004362f0
cmp byte [0x53395a], bl
jne 0x42d3cb
call fcn.00480810
push 0x526304
call fcn.00432710
mov eax, 1
mov ecx, dword [esp + 0x830]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004aedbb
add esp, 0x824
ret