Function at 0x4fe9d7
Capabilities:
Clear file content

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], esi
mov edx, dword [edi + 0x4c]
test edx, edx
jne 0x4fe7dc
mov edx, dword [edi + 0x3c]
mov esi, dword [edi + 0x40]
test esi, esi
je 0x4fe7e9
neg esi
add esi, edx
jmp 0x4fe7ee
mov esi, edx
sub esi, dword [edi + 0x38]
movsx ebx, byte [edi + 0x154]
lea ecx, [esi + 4]
cmp ecx, dword [edi + 0xec]
jbe 0x4fe82e
cmp ebx, 1
je 0x4fe82e
push 0x200
push edi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], ecx
call fcn.00501570
mov ecx, dword [ebp - 0x18]
add esp, 8
mov edx, dword [ebp - 0x1c]
test eax, eax
jne 0x4ff822
movsx ebx, byte [edi + 0x154]
dec ebx
cmp ebx, 7
ja case.0x4fe83f.3
mov ebx, dword [ebx*4 + 0x566e08]
jmp ebx
cmp byte [edi + 0x156], 1
je case.0x4fe83f.5
test byte [edi + 0x16d], 0x40
jne case.0x4fe83f.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4fe8b0
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x4fe8b0
cmp dword [edi + 0x138], 1
je case.0x4fe83f.5
cmp dword [0x587060], 0
je 0x4fe8b0
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x4fe89e
cmp ecx, 0xfffffffa
je case.0x4fe83f.5
cmp ecx, 1
je case.0x4fe83f.5
cmp ecx, 2
je case.0x4fe83f.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x4ff8c6
mov byte [edx + esi], 0xd
mov edx, dword [edi + 0x40]
mov byte [edx + esi + 1], 0xa
add esi, 2
jmp case.0x4fe83f.5
cmp byte [edi + 0x156], 1
je case.0x4fe83f.5
test byte [edi + 0x16d], 0x40
jne case.0x4fe83f.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4fe93e
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x4fe93e
cmp dword [edi + 0x138], 1
je case.0x4fe83f.5
cmp dword [0x587060], 0
je 0x4fe93e
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x4fe92c
cmp ecx, 0xfffffffa
je case.0x4fe83f.5
cmp ecx, 1
je case.0x4fe83f.5
cmp ecx, 2
je case.0x4fe83f.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x4ff972
mov byte [edx + esi], 0xd
inc esi
jmp case.0x4fe83f.5
cmp byte [edi + 0x156], 1
je case.0x4fe83f.5
test byte [edi + 0x16d], 0x40
jne case.0x4fe83f.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4fe9c2
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x4fe9c2
cmp dword [edi + 0x138], 1
je case.0x4fe83f.5
cmp dword [0x587060], 0
je 0x4fe9c2
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x4fe9b0
cmp ecx, 0xfffffffa
je case.0x4fe83f.5
cmp ecx, 1
je case.0x4fe83f.5
cmp ecx, 2
je case.0x4fe83f.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x4ff8dd
mov byte [edx + esi], 0xa
inc esi
jmp case.0x4fe83f.5
add esi, 0xfffffffc
mov edx, esi
and edx, 0xff
mov ebx, dword [edi + 0x40]
test ebx, ebx
mov dword [ebp - 0x10], esi
je 0x4ff8ea
test byte [edi + 0x16d], 0x20
je 0x4fea2f
mov eax, esi
shr eax, 0x18
mov byte [ebx], al
mov ebx, dword [edi + 0x40]
mov dword [ebp - 0x1c], eax
mov eax, esi
shr eax, 0x10
movzx eax, al
mov byte [ebx + 1], al
mov ebx, dword [edi + 0x40]
shr esi, 8
mov dword [ebp - 0x18], eax
mov eax, esi
and eax, 0xff
mov byte [ebx + 2], al
mov esi, dword [edi + 0x40]
mov dword [ebp - 0x14], eax
mov byte [esi + 3], dl
jmp 0x4fea5c
movzx edx, byte [ebp - 0x10]
mov byte [ebx], dl
mov esi, dword [edi + 0x40]
movzx eax, byte [ebp - 0xf]
mov dword [ebp - 0x14], eax
mov byte [esi + 1], al
mov eax, dword [edi + 0x40]
movzx ebx, byte [ebp - 0xe]
mov dword [ebp - 0x18], ebx
mov byte [eax + 2], bl
mov ebx, dword [edi + 0x40]
movzx eax, byte [ebp - 0xd]
mov dword [ebp - 0x1c], eax
mov byte [ebx + 3], al
test byte [edi + 0x16d], 0x20
je 0x4fea87
mov esi, dword [edi + 0x3c]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x18]
mov byte [esi], al
mov eax, dword [edi + 0x3c]
mov byte [eax + 1], bl
mov ebx, dword [edi + 0x3c]
mov eax, dword [ebp - 0x14]
mov byte [ebx + 2], al
mov esi, dword [edi + 0x3c]
mov byte [esi + 3], dl
jmp 0x4feaa7
mov esi, dword [edi + 0x3c]
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov byte [esi], dl
mov edx, dword [edi + 0x3c]
mov byte [edx + 1], al
mov esi, dword [edi + 0x3c]
mov eax, dword [ebp - 0x1c]
mov byte [esi + 2], bl
mov edx, dword [edi + 0x3c]
mov byte [edx + 3], al
mov esi, ecx
jmp case.0x4fe83f.5
mov ecx, dword [edi + 0xf8]
cmp esi, ecx
jae 0x4feacc
sub ecx, esi
push ecx
push 0x20
push edx
call fcn.0053bad0
add esp, 0xc
mov esi, dword [edi + 0xf8]
test byte [edi + 0x168], 4
je case.0x4fe83f.5
test byte [edi + 0x16a], 0x40
je case.0x4fe83f.5
test byte [edi + 0x16b], 8
je case.0x4fe83f.5
cmp byte [edi + 0x156], 1
je case.0x4fe83f.5
test byte [edi + 0x16d], 0x40
jne case.0x4fe83f.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4feb4e
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x4feb4e
cmp dword [edi + 0x138], 1
je case.0x4fe83f.5
cmp dword [0x587060], 0
je 0x4feb4e
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x4feb44
cmp ecx, 0xfffffffa
je case.0x4fe83f.5
cmp ecx, 1
je case.0x4fe83f.5
cmp ecx, 2
je case.0x4fe83f.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x4ff95d
mov byte [edx + esi - 2], 0xd
mov edx, dword [edi + 0x40]
mov byte [edx + esi - 1], 0xa
jmp case.0x4fe83f.5
push 0x386
push str.for_put.c
push 2
push 8
call fcn.004fc9b0
add esp, 0x10
mov ecx, dword [edi + 0x40]
test ecx, ecx
je 0x4feb89
mov ebx, ecx
jmp 0x4feb8c
mov ebx, dword [edi + 0x38]
movsx edx, byte [edi + 0x156]
cmp edx, 2
jne 0x4fed87
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4fec1b
movzx ecx, byte [edx + 0x1c]
test ecx, ecx
jne 0x4febb3
movzx ecx, byte [edx + 0x1d]
test ecx, ecx
je 0x4fec14
movzx ecx, byte [edx + 0x20]
test ecx, ecx
je 0x4febf1
cmp dword [edi + 0x138], 1
je 0x4fec14
cmp dword [0x587060], 0
je 0x4febf1
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x4febe7
cmp eax, 0xfffffffa
je 0x4fec14
cmp eax, 1
je 0x4fec14
cmp eax, 2
je 0x4fec14
mov eax, edi
lea edx, [ebp - 0x14]
mov ecx, 1
mov byte [ebp - 0x14], 0xa
call fcn.004fe29c
cmp eax, 0xffffffff
je 0x4ff97f
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4fec1b
mov byte [edx + 0x1c], 0
mov edx, dword [edi + 0x7c]
test byte [edi + 0x168], 4
je 0x4fec3a
test byte [edi + 0x16a], 0x40
je 0x4fec3a
test byte [edi + 0x16b], 8
jne 0x4fecd5
movsx ecx, byte [edi + 0x154]
cmp ecx, 6
je 0x4fecd5
movzx eax, byte [edi + 0x16d]
cmp ecx, 8
mov dword [ebp - 0x18], eax
je 0x4feccd
test byte [ebp - 0x18], 0x40
jne 0x4feccd
test edx, edx
je 0x4feca8
movzx ecx, byte [edx + 0x1e]
test ecx, ecx
je 0x4feca8
mov ecx, dword [edi + 0x138]
cmp ecx, 1
je 0x4fece5
cmp dword [0x587060], 0
je 0x4feca8
mov eax, dword [edi + 0x140]
mov dword [ebp - 0x1c], eax
movzx eax, byte [edi + 0x170]
test eax, 0x80
je 0x4fec9c
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x4fece5
cmp dword [ebp - 0x1c], 1
je 0x4fece5
cmp dword [ebp - 0x1c], 2
je 0x4fece5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x4ff99d
mov byte [edx + esi], 0xa
movzx eax, byte [edi + 0x16d]
inc esi
mov ecx, dword [edi + 0x138]
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x18], eax
jmp 0x4fece5
mov ecx, dword [edi + 0x138]
jmp 0x4fece5
movzx eax, byte [edi + 0x16d]
mov ecx, dword [edi + 0x138]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
and eax, 0xffffffbf
mov byte [edi + 0x16d], al
test edx, edx
je 0x4fed3c
movzx eax, byte [edx + 0x1e]
test eax, eax
je 0x4fed3c
cmp ecx, 1
je 0x4fed33
cmp dword [0x587060], 0
je 0x4fed48
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x4fed25
cmp eax, 0xfffffffa
je 0x4fed33
cmp eax, 2
je 0x4fed33
cmp eax, 1
jne 0x4ff9f7
mov byte [edx + 0x20], 1
jmp 0x4ff7d4
cmp ecx, 1
je 0x4fed76
cmp dword [0x587060], 0
je 0x4ff7d4
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x4fed68
cmp eax, 0xfffffffa
je 0x4fed76
cmp eax, 2
je 0x4fed76
cmp eax, 1
jne 0x4ff7d4
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
cmp edx, 1
jne 0x4ff745
cmp esi, 5
lea edx, [esi + 1]
je 0x4fed9a
mov edx, esi
test ecx, ecx
je 0x4feda3
lea ebx, [ecx + 4]
jmp 0x4feda9
mov ebx, dword [edi + 0x38]
add ebx, 4
test ecx, ecx
lea esi, [edx - 4]
je 0x4ff9a9
movsx ecx, byte [ecx + 5]
cmp ecx, 0x31
ja case.0x4fedc8.1
mov ecx, dword [ecx*4 + 0x566e40]
jmp ecx
movzx eax, byte [edi + 0x168]
test al, 2
je 0x4fef84
cmp dword [edi + 0x138], 1
je 0x4fee1d
cmp dword [0x587060], 0
je 0x4fef84
mov ecx, dword [edi + 0x140]
mov dword [ebp - 0x1c], ecx
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
je 0x4fee0d
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x4fee1d
cmp dword [ebp - 0x1c], 2
je 0x4fee1d
cmp dword [ebp - 0x1c], 1
jne 0x4fef84
mov ecx, dword [edi + 0x7c]
inc ebx
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x4fef2a
movzx ecx, byte [ecx + 0x1e]
test ecx, ecx
je 0x4feece
and eax, 4
shr eax, 2
test eax, eax
je 0x4fee52
mov ecx, dword [ebp - 0x1c]
movzx esi, byte [ecx + 0x20]
test esi, esi
je 0x4fee52
lea esi, [edx - 5]
jmp 0x4feea5
mov ecx, dword [ebp - 0x1c]
movzx esi, byte [ecx + 0x1c]
test esi, esi
jne 0x4fee65
movzx esi, byte [ecx + 0x1d]
test esi, esi
je 0x4feea1
test eax, eax
je 0x4fee8d
add ebx, 0xfffffffc
mov eax, 0xd
lea esi, [edx - 1]
mov byte [ebx], 0xa
mov byte [ebx + 1], 0xc
mov byte [ebx + 2], al
mov byte [ebx + 3], 0x20
mov byte [ebx + 4], al
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], edx
jmp 0x4fee99
mov byte [ebx], 0xc
lea esi, [edx - 5]
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0
jne 0x4feea5
jmp 0x4feec2
inc ebx
lea esi, [edx - 6]
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x4feec2
mov edx, ecx
mov byte [edx + 0x1d], 0
mov ecx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x20], 1
jmp 0x4ff7d4
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x4feeef
test al, 4
je 0x4feee4
mov byte [ebx + esi - 1], 0xd
jmp 0x4fef54
inc ebx
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
jmp 0x4fef54
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x4fef05
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x4fef2a
test al, 4
je 0x4fef4c
add ebx, 0xfffffffc
mov eax, 0xd
mov byte [ebx], 0xa
mov byte [ebx + 1], 0xc
mov byte [ebx + 2], al
mov byte [ebx + 3], 0x20
mov byte [ebx + 4], al
mov byte [ebx + esi + 3], al
mov esi, edx
jmp 0x4fef54
test al, 4
je 0x4fef4c
add ebx, 0xfffffffd
mov eax, 0xd
mov byte [ebx], 0xc
mov byte [ebx + 1], al
mov byte [ebx + 2], 0x20
mov byte [ebx + 3], al
mov byte [ebx + esi + 2], al
lea esi, [edx - 1]
jmp 0x4fef54
mov byte [ebx], 0xc
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
mov ecx, dword [edi + 0x7c]
inc ebx
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x4fefc7
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x4fefa2
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x4fefc7
test al, 4
je 0x4fefe9
add ebx, 0xfffffffc
mov eax, 0xd
mov byte [ebx], 0xa
mov byte [ebx + 1], 0xc
mov byte [ebx + 2], al
mov byte [ebx + 3], 0x20
mov byte [ebx + 4], al
mov byte [ebx + esi + 3], al
mov esi, edx
jmp 0x4feff1
test al, 4
je 0x4fefe9
add ebx, 0xfffffffd
mov eax, 0xd
mov byte [ebx], 0xc
mov byte [ebx + 1], al
mov byte [ebx + 2], 0x20
mov byte [ebx + 3], al
mov byte [ebx + esi + 2], al
lea esi, [edx - 1]
jmp 0x4feff1
mov byte [ebx], 0xc
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
movzx eax, byte [edi + 0x168]
test al, 2
je 0x4ff1de
cmp dword [edi + 0x138], 1
je 0x4ff074
cmp dword [0x587060], 0
je 0x4ff1de
mov ecx, dword [edi + 0x140]
mov dword [ebp - 0x1c], ecx
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
je 0x4ff064
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x4ff074
cmp dword [ebp - 0x1c], 2
je 0x4ff074
cmp dword [ebp - 0x1c], 1
jne 0x4ff1de
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x4ff18e
movzx ecx, byte [ecx + 0x1e]
test ecx, ecx
je 0x4ff124
and eax, 4
shr eax, 2
test eax, eax
je 0x4ff0a9
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x4ff0a9
inc ebx
lea esi, [edx - 5]
jmp 0x4ff0fb
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x4ff0bf
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x4ff0f5
test eax, eax
je 0x4ff0dd
dec ebx
mov eax, 0xa
lea esi, [edx - 3]
mov byte [ebx], al
mov byte [ebx + 1], 0xd
mov byte [ebx + 2], al
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], edx
jmp 0x4ff0ed
mov edx, 0xa
mov byte [ebx], dl
mov byte [ebx + 1], dl
mov ecx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0
jne 0x4ff0fb
jmp 0x4ff118
add ebx, 2
lea esi, [edx - 6]
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x4ff118
mov edx, ecx
mov byte [edx + 0x1d], 0
mov ecx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x20], 1
jmp 0x4ff7d4
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x4ff148
test al, 4
je 0x4ff13b
inc ebx
mov byte [ebx + esi - 1], 0xd
jmp 0x4ff1ae
add ebx, 2
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
jmp 0x4ff1ae
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x4ff15e
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x4ff18e
test al, 4
je 0x4ff17b
dec ebx
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], 0xd
mov byte [ebx + 2], al
mov byte [ebx + esi + 1], 0xd
lea esi, [edx - 2]
jmp 0x4ff1ae
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], al
mov byte [ebx + esi], 0xd
lea esi, [edx - 3]
jmp 0x4ff1ae
test al, 4
je 0x4ff1a5
mov eax, 0xd
mov byte [ebx], al
mov byte [ebx + 1], 0xa
mov byte [ebx + esi], al
lea esi, [edx - 3]
jmp 0x4ff1ae
inc ebx
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x4ff22b
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x4ff1fb
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x4ff22b
test al, 4
je 0x4ff218
dec ebx
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], 0xd
mov byte [ebx + 2], al
mov byte [ebx + esi + 1], 0xd
lea esi, [edx - 2]
jmp 0x4ff24b
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], al
mov byte [ebx + esi], 0xd
lea esi, [edx - 3]
jmp 0x4ff24b
test al, 4
je 0x4ff242
mov eax, 0xd
mov byte [ebx], al
mov byte [ebx + 1], 0xa
mov byte [ebx + esi], al
lea esi, [edx - 3]
jmp 0x4ff24b
inc ebx
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
movzx eax, byte [edi + 0x168]
test al, 2
je 0x4ff371
cmp dword [edi + 0x138], 1
je 0x4ff2ce
cmp dword [0x587060], 0
je 0x4ff371
mov ecx, dword [edi + 0x140]
mov dword [ebp - 0x1c], ecx
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
je 0x4ff2be
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x4ff2ce
cmp dword [ebp - 0x1c], 2
je 0x4ff2ce
cmp dword [ebp - 0x1c], 1
jne 0x4ff371
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x4ff319
movzx ecx, byte [ecx + 0x1e]
test ecx, ecx
je 0x4ff319
test al, 4
je 0x4ff2f5
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x4ff2f5
inc ebx
lea esi, [edx - 5]
jmp 0x4ff2fb
add ebx, 2
lea esi, [edx - 6]
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff310
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x20], 1
jmp 0x4ff7d4
test al, 4
je 0x4ff336
cmp dword [ebp - 0x1c], 0
je 0x4ff336
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x4ff336
inc ebx
mov byte [ebx + esi - 1], 0xd
jmp 0x4ff341
add ebx, 2
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
add ebx, 2
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
test byte [edi + 0x168], 2
je 0x4ff4a1
cmp dword [edi + 0x138], 1
je 0x4ff3f6
cmp dword [0x587060], 0
je 0x4ff4a1
movzx eax, byte [edi + 0x170]
test eax, 0x80
mov ecx, dword [edi + 0x140]
je 0x4ff3e8
cmp ecx, 0xfffffffa
je 0x4ff3f6
cmp ecx, 2
je 0x4ff3f6
cmp ecx, 1
jne 0x4ff4a1
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x4ff472
movzx ecx, byte [eax + 0x1e]
test ecx, ecx
je 0x4ff446
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x4ff415
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x4ff425
inc ebx
lea esi, [edx - 5]
mov byte [ebx], 0xa
mov eax, dword [edi + 0x7c]
test eax, eax
jne 0x4ff42b
jmp 0x4ff43d
add ebx, 2
lea esi, [edx - 6]
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x4ff43d
mov byte [eax + 0x1d], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x20], 1
jmp 0x4ff7d4
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x4ff456
add ebx, 2
lea esi, [edx - 6]
jmp 0x4ff47c
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x4ff466
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x4ff472
inc ebx
lea esi, [edx - 5]
mov byte [ebx], 0xa
mov eax, dword [edi + 0x7c]
jmp 0x4ff478
add ebx, 2
lea esi, [edx - 6]
test eax, eax
je 0x4ff483
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x4ff4c4
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x4ff4b8
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x4ff4c4
inc ebx
lea esi, [edx - 5]
mov byte [ebx], 0xa
mov eax, dword [edi + 0x7c]
jmp 0x4ff4ca
add ebx, 2
lea esi, [edx - 6]
test eax, eax
je 0x4ff4d5
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
test byte [edi + 0x168], 2
je 0x4ff59a
cmp dword [edi + 0x138], 1
je 0x4ff539
cmp dword [0x587060], 0
je 0x4ff59a
movzx eax, byte [edi + 0x170]
test eax, 0x80
mov ecx, dword [edi + 0x140]
je 0x4ff52f
cmp ecx, 0xfffffffa
je 0x4ff539
cmp ecx, 2
je 0x4ff539
cmp ecx, 1
jne 0x4ff59a
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x4ff546
movzx ecx, byte [eax + 0x1e]
jmp 0x4ff548
xor ecx, ecx
add ebx, 2
lea esi, [edx - 6]
test ecx, ecx
je 0x4ff571
test eax, eax
je 0x4ff568
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x4ff568
mov byte [eax + 0x1d], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x20], 1
jmp 0x4ff7d4
test eax, eax
je 0x4ff57c
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
add ebx, 2
lea esi, [edx - 6]
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff5ae
mov byte [edx + 0x1c], 0
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
movzx ecx, byte [edi + 0x168]
test cl, 2
mov dword [ebp - 0x1c], ecx
je 0x4ff6ea
cmp dword [edi + 0x138], 1
je 0x4ff61d
cmp dword [0x587060], 0
je 0x4ff6ea
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x4ff60f
cmp eax, 0xfffffffa
je 0x4ff61d
cmp eax, 2
je 0x4ff61d
cmp eax, 1
jne 0x4ff6ea
mov eax, dword [edi + 0x7c]
inc ebx
test eax, eax
je 0x4ff6b1
movzx ecx, byte [eax + 0x1e]
test ecx, ecx
je 0x4ff682
test byte [ebp - 0x1c], 4
je 0x4ff644
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x4ff644
lea esi, [edx - 5]
jmp 0x4ff667
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x4ff654
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x4ff663
mov byte [ebx], 0xa
lea esi, [edx - 5]
mov eax, dword [edi + 0x7c]
test eax, eax
jne 0x4ff667
jmp 0x4ff679
inc ebx
lea esi, [edx - 6]
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x4ff679
mov byte [eax + 0x1d], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x20], 1
jmp 0x4ff7d4
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x4ff697
test byte [ebp - 0x1c], 4
je 0x4ff6b1
mov byte [ebx + esi - 1], 0xd
jmp 0x4ff6ba
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x4ff6a7
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x4ff6b1
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
jmp 0x4ff6ba
inc ebx
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
mov eax, dword [edi + 0x7c]
inc ebx
test eax, eax
je 0x4ff70c
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x4ff702
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x4ff70c
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
jmp 0x4ff715
inc ebx
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x4ff7d4
mov byte [edx + 0x20], 0
jmp 0x4ff7d4
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x4ff9da
mov ecx, dword [edi + 0x138]
movzx edx, byte [eax + 0x1e]
test edx, edx
je 0x4ff79a
cmp ecx, 1
je 0x4ff794
cmp dword [0x587060], 0
je 0x4ff7a6
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x4ff786
cmp ecx, 0xfffffffa
je 0x4ff794
cmp ecx, 2
je 0x4ff794
cmp ecx, 1
jne 0x4ff9e5
mov byte [eax + 0x20], 1
jmp 0x4ff7d4
cmp ecx, 1
je 0x4ff7cc
cmp dword [0x587060], 0
je 0x4ff7d4
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x4ff7c2
cmp ecx, 0xfffffffa
je 0x4ff7cc
cmp ecx, 2
je 0x4ff7cc
cmp ecx, 1
jne 0x4ff7d4
test eax, eax
je 0x4ff7d4
mov byte [eax + 0x20], 0
mov eax, edi
mov edx, ebx
mov ecx, esi
call fcn.004fe29c
and byte [edi + 0x16c], 0xbf
cmp eax, 0xffffffff
je 0x4ff97f
test byte [edi + 0x16d], 8
je 0x4ff813
push dword [edi + 0xe4]
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
test eax, eax
je 0x4ff9b5
and byte [edi + 0x16d], 0xf7
xor eax, eax
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
push 4
push edi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], ecx
call fcn.00501570
mov ecx, dword [ebp - 0x18]
add esp, 8
mov edx, dword [ebp - 0x1c]
test eax, eax
je 0x4fe827
mov eax, dword [edi + 0x18]
test eax, eax
je 0x4ff8a7
test byte [eax + 0x44], 2
je 0x4ff87d
mov edx, 0x42
mov dword [eax + 0x38], edx
mov eax, dword [edi + 0x18]
mov dword [eax + 0x3c], edx
mov eax, dword [edi + 0x64]
test eax, eax
je 0x4ff86b
xor edx, edx
mov dword [eax + 4], edx
mov dword [edi + 0x64], edx
mov eax, 0x42
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov eax, 0x42
push eax
movzx edx, byte [edi + 0x16c]
push eax
and edx, 7
push edx
push 0xffffffffffffffff
push edi
call fcn.00500a40
add esp, 0x14
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
push edi
mov eax, 0x42
push eax
push eax
push 1
call fcn.004fa8e0
add esp, 0x10
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xd
mov ecx, dword [edi + 0x38]
mov byte [ecx + esi + 1], 0xa
add esi, 2
jmp case.0x4fe83f.5
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xa
inc esi
jmp case.0x4fe83f.5
test byte [edi + 0x16d], 0x20
je 0x4ff928
mov esi, dword [edi + 0x38]
movzx edx, byte [ebp - 0xd]
movzx eax, byte [ebp - 0xe]
mov byte [esi], dl
mov ebx, dword [edi + 0x38]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], edx
mov byte [ebx + 1], al
mov eax, dword [edi + 0x38]
movzx edx, byte [ebp - 0xf]
mov dword [ebp - 0x14], edx
mov byte [eax + 2], dl
mov ebx, dword [edi + 0x38]
movzx edx, byte [ebp - 0x10]
mov byte [ebx + 3], dl
jmp 0x4fea5c
mov esi, dword [edi + 0x38]
movzx edx, byte [ebp - 0x10]
movzx eax, byte [ebp - 0xf]
mov byte [esi], dl
mov ebx, dword [edi + 0x38]
mov dword [ebp - 0x14], eax
mov byte [ebx + 1], al
mov eax, dword [edi + 0x38]
movzx ebx, byte [ebp - 0xe]
mov dword [ebp - 0x18], ebx
mov byte [eax + 2], bl
mov esi, dword [edi + 0x38]
movzx eax, byte [ebp - 0xd]
mov dword [ebp - 0x1c], eax
mov byte [esi + 3], al
jmp 0x4fea5c
mov edx, dword [edi + 0x38]
mov byte [edx + esi - 2], 0xd
mov ecx, dword [edi + 0x38]
mov byte [ecx + esi - 1], 0xa
jmp case.0x4fe83f.5
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xd
inc esi
jmp case.0x4fe83f.5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 0xe8], eax
mov eax, 0x26
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xa
jmp 0x4fecb7
mov ecx, dword [edi + 0x38]
movsx ecx, byte [ecx + 5]
jmp 0x4fedb8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 0xe8], eax
mov eax, 0x26
and byte [edi + 0x16d], 0xf7
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov ecx, dword [edi + 0x138]
jmp 0x4ff79a
cmp dword [0x587060], 0
jne 0x4ff7a8
jmp 0x4ff7d4
cmp dword [0x587060], 0
jne 0x4fed4e
jmp 0x4ff7d4