Function at 0x42b29a
Capabilities:
Clear file content

Disassembly:
sub esp, 0x424
mov eax, dword [0x4c03a0]
xor eax, esp
mov dword [esp + 0x420], eax
push ebx
push ebp
xor ebx, ebx
push esi
xor ebp, ebp
push edi
mov dword [0x4da50c], ebx
mov dword [0x4da508], ebx
mov dword [0x4da510], ebx
mov dword [0x4da5f0], 1
mov dword [0x4da4f0], 0xffffffff
cmp byte [0x4e58b2], bl
jne 0x42b178
call fcn.00432810
test eax, eax
je 0x42b0dc
push 1
push 0x4daa1c
push 0x4da61c
call fcn.00430590
call fcn.00432810
test eax, eax
je 0x42b0dc
push 0x4da61c
push 0x4e75f4
mov ecx, 0x4c93ac
call fcn.00428440
push 0x4da61c
call fcn.0044e5f0
test al, al
je 0x42b065
mov eax, 0x34
jmp 0x42b58e
push 0x456
call fcn.0045be10
push eax
push 0x4e75f4
call fcn.0048d240
push 0x3ff
lea eax, [esp + 0x3c]
push 0x4da61c
push eax
call fcn.0049fa10
add esp, 0x14
push 1
push 0x4da61c
mov byte [esp + 0x437], bl
call fcn.0044e680
push 1
push ebx
push 0x4da61c
call fcn.00430590
call fcn.00432810
test eax, eax
jne 0x42b05b
push 0x4da61c
lea ecx, [esp + 0x34]
push ecx
push 0x4ae
call fcn.0045be10
push eax
push 0x4e75f4
call fcn.0048d240
add esp, 0x10
cmp byte [0x4e58b2], bl
jne 0x42b178
mov edi, dword [0x4c98c4]
mov esi, dword [0x4c98c0]
push ebx
push 0x800
push edi
push esi
call fcn.0049f560
cmp edx, dword [0x4c98bc]
jg 0x42b178
jl 0x42b113
cmp eax, dword [0x4c98b8]
jae 0x42b178
cmp edi, ebx
jl 0x42b144
jg 0x42b121
cmp esi, 0x5f5e100
jbe 0x42b144
mov ecx, dword [0x4da518]
call fcn.0042ed90
cmp edx, dword [0x4c98bc]
jl 0x42b178
jg 0x42b13e
cmp eax, dword [0x4c98b8]
jbe 0x42b178
mov esi, dword [0x4c98c0]
mov edx, dword [0x4da604]
push ebx
push esi
push edx
call fcn.004a0425
mov eax, dword [0x4da604]
add esp, 0xc
push eax
call fcn.00430500
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov ecx, dword [0x4da604]
push ebx
push ebx
push ecx
call fcn.004a0425
add esp, 0xc
call fcn.00431ee0
mov cx, word [0x4da554]
movzx eax, cx
cmp eax, 9
ja case.0x42b197.2
movzx edx, byte [eax + 0x42b5bc]
jmp dword [edx*4 + 0x42b5a8]
xor esi, esi
xor edi, edi
mov dword [0x4da618], ebx
mov dword [0x4da614], 0x4ca4ec
jmp 0x42b1c0
or eax, 0xffffffff
add dword [0x4da500], eax
adc dword [0x4da504], eax
js 0x42b1ed
jg 0x42b1db
cmp dword [0x4da500], ebx
jb 0x42b1ed
mov ecx, dword [0x4da4f8]
movzx eax, byte [ecx]
inc ecx
mov dword [0x4da4f8], ecx
jmp 0x42b1f2
call fcn.00432140
cmp eax, 0xffffffff
je 0x42b27c
cmp dword [0x4da5ec], ebx
jne 0x42b27c
mov ecx, dword [0x4da614]
mov byte [ecx], al
mov eax, dword [0x4da618]
inc dword [0x4da614]
inc eax
mov dword [0x4da618], eax
cmp eax, 0x10000
jne 0x42b1c0
mov edx, dword [0x4da524]
push edx
add esi, eax
mov eax, dword [0x4da520]
push eax
mov eax, dword [0x4ca4e8]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [0x4c98c4]
adc edi, ebx
add ecx, esi
adc edx, edi
push edx
push ecx
mov ecx, dword [0x4c98c0]
push eax
push ecx
push edi
push esi
call fcn.004095d0
call fcn.00445860
cmp dword [0x4dc1c0], ebx
jne 0x42b27c
mov edx, dword [0x4da618]
push ebx
push edx
push 0x4ca4ec
call fcn.00432980
jmp 0x42b1a2
mov eax, dword [0x4da618]
cmp eax, ebx
je 0x42b320
push ebx
push eax
push 0x4ca4ec
call fcn.00432980
jmp 0x42b320
call fcn.00474600
jmp 0x42b30b
call fcn.00429470
cmp eax, ebx
je 0x42b2c0
cmp eax, 5
je 0x42b2c5
xor edx, edx
cmp eax, 3
sete dl
lea edx, [edx*4 + 2]
mov ebp, edx
cmp eax, 5
jne 0x42b320
mov ecx, dword [0x4c98c8]
xor eax, eax
cmp eax, dword [0x4da564]
jg 0x42b2ef
jl 0x42b2df
cmp ecx, dword [0x4da560]
ja 0x42b2ef
mov eax, 1
neg eax
sbb eax, eax
add eax, 2
mov ebp, eax
jmp 0x42b320
xor eax, eax
neg eax
sbb eax, eax
add eax, 2
mov ebp, eax
jmp 0x42b320
xor eax, eax
cmp cx, 9
sete al
push eax
call fcn.00437010
cmp eax, ebx
je 0x42b320
xor ecx, ecx
cmp eax, 3
sete cl
lea ecx, [ecx*4 + 2]
mov ebp, ecx
mov cl, byte [0x4e58b2]
xor edi, edi
xor bl, bl
cmp dword [0x4dc1c0], edi
je 0x42b338
test cl, cl
jne 0x42b338
mov bl, 1
mov eax, dword [0x4da5ec]
cmp eax, edi
je 0x42b377
cmp eax, 1
jle 0x42b370
cmp byte [0x4e57f8], 0
jne 0x42b355
test cl, cl
jne 0x42b355
mov bl, 1
push 0x4da61c
push 0x4e75f4
mov ecx, 0x4c93ac
call fcn.00428560
mov ebp, 0x32
jmp 0x42b386
mov ebp, 1
jmp 0x42b386
cmp ebp, 6
jne 0x42b386
mov ecx, 0x4c93ac
call fcn.004283e0
cmp byte [0x4db6a5], 0
je 0x42b474
push 0x4db6ac
lea edx, [esp + 0x24]
push edx
call fcn.0042fa90
mov eax, dword [0x4c98b8]
and eax, dword [0x4c98bc]
cmp eax, 0xffffffff
jne 0x42b3be
mov dword [0x4c98b8], edi
mov dword [0x4c98bc], edi
call fcn.00431e50
add dword [0x4c98b8], 0xa
adc dword [0x4c98bc], edi
call fcn.00431ee0
mov eax, dword [0x4ca4e8]
and dword [eax + 0x28], 0xfffffffe
xor esi, esi
or eax, 0xffffffff
add dword [0x4da500], eax
adc dword [0x4da504], eax
js 0x42b411
jg 0x42b3fb
cmp dword [0x4da500], edi
jb 0x42b411
mov ecx, dword [0x4da4f8]
movzx dx, byte [ecx]
inc ecx
movzx eax, dx
mov dword [0x4da4f8], ecx
jmp 0x42b419
call fcn.00432140
movzx eax, ax
mov byte [esp + esi + 0x10], al
inc esi
cmp esi, 0xa
jl 0x42b3e0
mov eax, dword [0x4ca4e8]
or dword [eax + 0x28], 1
mov edx, 0xa
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
lea esp, [esp]
mov esi, dword [ecx]
cmp esi, dword [eax]
jne 0x42b4af
sub edx, 4
add eax, 4
add ecx, 4
cmp edx, 4
jae 0x42b440
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42b4af
mov al, byte [eax + 1]
cmp al, byte [ecx + 1]
jne 0x42b4af
cmp byte [0x4db6a5], 0
je 0x42b474
cmp byte [0x4db6a6], 0
je 0x42b484
mov ecx, dword [0x4da4f0]
not ecx
cmp ecx, dword [0x4da55c]
jne 0x42b4af
cmp byte [0x4e58b2], 0
je 0x42b50a
mov eax, dword [0x4da538]
test eax, eax
je 0x42b501
movzx edx, word [0x4da572]
push edx
call fcn.0042ae70
cmp eax, ebp
jle 0x42b501
mov ebp, eax
jmp 0x42b501
cmp ebp, 1
jle 0x42b4b9
cmp ebp, 2
jne 0x42b4e8
mov eax, dword [0x4ca4e8]
test byte [eax + 0x28], 1
push 0x4db21c
je 0x42b4d0
push 0x1f8
jmp 0x42b4d5
push 0x1f9
call fcn.0045be10
push eax
push 0x4e75f4
call fcn.0048d240
add esp, 0xc
cmp byte [0x4e57f8], 0
jne 0x42b4fc
cmp byte [0x4e58b2], 0
jne 0x42b4fc
mov bl, 1
mov ebp, 2
cmp byte [0x4e58b2], 0
jne 0x42b52f
test ebp, ebp
je 0x42b521
mov ecx, dword [0x4da604]
push ecx
call fcn.00430500
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp byte [0x4e58b2], 0
jne 0x42b52f
call fcn.00475b60
test bl, bl
je 0x42b542
push 0x4daa1c
push 0x4da61c
call fcn.00430040
call fcn.00431e50
mov eax, ebp
jmp 0x42b58e
push 0x4db21c
push 0x342
call fcn.0045be10
push eax
push 0x4e75f4
call fcn.0048d240
add esp, 0xc
call fcn.00431e50
cmp byte [0x4e58b2], bl
jne 0x42b589
call fcn.00475b60
push 0x4daa1c
push 0x4da61c
call fcn.00430040
mov eax, 1
mov ecx, dword [esp + 0x430]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0049e626
add esp, 0x424
ret