Function at 0x541384
Capabilities:
Clear file content

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.00404208
xor eax, eax
push ebp
push 0x5416fa
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov dword [eax + 0x1a4], 0xffffffff
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0xba], 0
jne 0x5413f8
mov eax, dword [ebp - 4]
mov al, byte [eax + 0x13c]
or al, byte [0x541708]
mov edx, dword [ebp - 4]
mov byte [edx + 0x13c], al
mov eax, dword [ebp - 4]
add eax, 0x214
mov edx, dword [ebp - 8]
call fcn.00403e2c
jmp 0x5416df
xor edx, edx
push ebp
push 0x541671
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x224]
call fcn.00404054
test eax, eax
je 0x54142e
push 1
lea ecx, [ebp - 0x2e]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x224]
mov eax, dword [ebp - 4]
call fcn.0053ec48
mov eax, dword [ebp - 4]
add eax, 0x214
mov edx, dword [ebp - 8]
call fcn.00403e2c
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1a4], 0xffffffff
je 0x541667
mov eax, dword [ebp - 4]
add eax, 0x1a4
call fcn.005378c8
lea eax, [ebp - 0xc]
push eax
mov cl, 1
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0053cd9c
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x168]
call fcn.00404164
jne 0x54148c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5416df
mov eax, dword [ebp - 0xc]
call fcn.00404054
mov ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
xor edx, edx
add eax, 0x16
adc edx, 0
push edx
push eax
mov eax, ebx
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
cmp edx, 0
jne 0x5414c2
cmp eax, 0xfffffffe
jbe 0x5414dc
jmp 0x5414c4
jle 0x5414dc
push 1
mov ecx, 0x27dd
mov dl, 1
mov eax, dword [0x538ad8]
call fcn.00538c54
call fcn.00403898
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a8]
mov edx, 0x22
call fcn.0040a3a8
mov esi, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x1a4], esi
inc esi
jne 0x541515
push 1
mov ecx, 0x2afa
mov dl, 1
mov eax, dword [0x538ad8]
call fcn.00538c54
call fcn.00403898
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x220]
xor edx, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a4]
xor edx, edx
call fcn.005370c0
cmp edx, 0xffffffff
jne 0x54155e
cmp eax, 0xffffffff
jne 0x54155e
push 1
mov ecx, 0x2b00
mov dl, 1
mov eax, dword [0x538ad8]
call fcn.00538c54
call fcn.00403898
lea edx, [ebp - 0x2e]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a4]
mov ecx, 0x16
call fcn.0040a40c
cmp eax, 0x16
jne 0x541582
cmp dword [ebp - 0x2e], 0x6054b50
je 0x54159a
push 1
mov ecx, 0x2b03
mov dl, 1
mov eax, dword [0x538ad8]
call fcn.00538c54
call fcn.00403898
mov word [ebp - 0x1a], bx
mov dword [ebp - 0x18], 0xffffffea
mov dword [ebp - 0x14], 0xffffffff
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a4]
mov edx, 1
call fcn.005370c0
cmp edx, 0xffffffff
jne 0x5415e7
cmp eax, 0xffffffff
jne 0x5415e7
push 1
mov ecx, 0x2b00
mov dl, 1
mov eax, dword [0x538ad8]
call fcn.00538c54
call fcn.00403898
mov byte [ebp - 0xd], 1
lea edx, [ebp - 0x2e]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a4]
mov ecx, 0x16
call fcn.0040a438
cmp eax, 0x16
je 0x54161e
push 1
mov ecx, 0x2b16
mov dl, 1
mov eax, dword [0x538ad8]
call fcn.00538c54
call fcn.00403898
mov eax, dword [ebp - 0xc]
call fcn.00404218
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a4]
mov ecx, ebx
call fcn.0040a438
cmp ebx, eax
je 0x541654
push 1
mov ecx, 0x2b02
mov dl, 1
mov eax, dword [0x538ad8]
call fcn.00538c54
call fcn.00403898
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1a4]
push eax
call sub.kernel32.dll_SetEndOfFile_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5416c4
mov eax, dword [ebp - 4]
add eax, 0x1a4
call fcn.005378c8
cmp byte [ebp - 0xd], 0
je 0x5416df
mov eax, dword [ebp - 4]
call fcn.0053f51c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x541701
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00403dfc
ret