Function at 0x4817fb
Capabilities:
Clear file content

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffe8
mov edi, 0x4caccc
xor esi, esi
xor eax, eax
mov dword [edi + 0x10b88], eax
xor edx, edx
mov dword [edi + 0x10b84], edx
xor ecx, ecx
mov dword [edi + 0x10b8c], ecx
mov dword [edi + 0x10c5c], 1
mov dword [edi + 0x10b70], 0xffffffff
cmp byte [0x4b09a2], 0
jne 0x4818c9
call fcn.00480a18
test eax, eax
je 0x4818c9
lea eax, [edi + 0x10c88]
mov cl, 1
xor edx, edx
call fcn.00409c94
call fcn.00480a18
test eax, eax
je 0x4818c9
lea ecx, [edi + 0x10c88]
mov edx, 0x4b26c4
mov eax, 0x4a6984
call fcn.00429674
lea eax, [edi + 0x10c88]
call fcn.0040bd58
test al, al
je 0x481891
mov eax, 0x32
jmp 0x481d68
mov eax, 0x456
call fcn.004116e0
push eax
push 0x4b26c4
call fcn.00444878
add esp, 8
lea eax, [edi + 0x10c88]
mov dl, 1
call fcn.0040bda0
call fcn.00480a18
test eax, eax
je 0x4818c9
mov eax, 0x32
jmp 0x481d68
cmp byte [0x4b09a2], 0
jne 0x4819bc
push 0
push 0x800
mov eax, dword [edi + 0x44]
mov edx, dword [edi + 0x48]
call fcn.00491bf3
cmp edx, dword [edi + 0x40]
jne 0x4818f8
cmp eax, dword [edi + 0x3c]
jae 0x4819bc
jmp 0x4818fe
jge 0x4819bc
cmp dword [edi + 0x48], 0
mov cl, 1
jne 0x481911
cmp dword [edi + 0x44], 0x5f5e100
jbe 0x48197a
jmp 0x481913
jle 0x48197a
push 0
push 0
mov edx, 1
mov eax, dword [edi + 0x10b94]
call fcn.004810a0
mov dword [esp], eax
mov dword [esp + 4], edx
push 0
push 0
mov edx, 2
mov eax, dword [edi + 0x10b94]
call fcn.004810a0
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
push dword [esp + 4]
push dword [esp + 4]
xor edx, edx
mov eax, dword [edi + 0x10b94]
call fcn.004810a0
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
cmp edx, dword [edi + 0x40]
jne 0x481974
cmp eax, dword [edi + 0x3c]
seta cl
jmp 0x481977
setg cl
and ecx, 1
test cl, cl
je 0x4819bc
push 0
mov eax, dword [edi + 0x44]
push eax
push dword [edi + 0x10c70]
call fcn.0048fa18
add esp, 0xc
mov edx, dword [edi + 0x10c70]
xor ecx, ecx
mov cl, byte [edx + 0x16]
push ecx
call fcn.00490304
pop ecx
push eax
call sub.KERNEL32.DLL_SetEndOfFile
push 0
push 0
push dword [edi + 0x10c70]
call fcn.0048fa18
add esp, 0xc
call fcn.00480b78
mov ax, word [edi + 0x10bcc]
sub ax, 1
jb 0x4819f0
je 0x481b2e
sub ax, 5
je 0x481b56
add eax, 0xfffffffe
sub ax, 2
jb 0x481bb0
jmp 0x481bdc
mov ebx, 0x10000
lea eax, [edi + 0xb6c]
mov dword [edi + 0x10c80], eax
xor edx, edx
mov dword [edi + 0x10c84], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
jmp 0x481ab7
mov ecx, ebp
mov eax, dword [edi + 0x10c80]
inc dword [edi + 0x10c80]
mov byte [eax], cl
inc dword [edi + 0x10c84]
mov edx, dword [edi + 0x10c84]
cmp ebx, edx
jne 0x481ab7
mov eax, dword [edi + 0x10c84]
xor edx, edx
add dword [esp + 0x10], eax
adc dword [esp + 0x14], edx
push dword [esp + 0x14]
push dword [esp + 0x14]
push dword [edi + 0x48]
push dword [edi + 0x44]
mov edx, dword [edi + 0xb68]
mov eax, dword [edx]
mov edx, dword [edx + 4]
add eax, dword [esp + 0x20]
adc edx, dword [esp + 0x24]
push edx
push eax
push dword [edi + 0x10b9c]
push dword [edi + 0x10b98]
call fcn.00459418
call fcn.00444258
cmp dword [0x4bc1b4], 0
jne 0x481b09
lea eax, [edi + 0xb6c]
xor ecx, ecx
mov edx, dword [edi + 0x10c84]
call fcn.004810ec
lea eax, [edi + 0xb6c]
xor edx, edx
mov dword [edi + 0x10c80], eax
mov dword [edi + 0x10c84], edx
sub dword [edi + 0x10b7c], 1
sbb dword [edi + 0x10b80], 0
mov eax, dword [edi + 0x10b7c]
mov edx, dword [edi + 0x10b80]
cmp edx, 0
jne 0x481add
cmp eax, 0
jb 0x481af0
jmp 0x481adf
jl 0x481af0
mov ecx, dword [edi + 0x10b78]
inc dword [edi + 0x10b78]
movzx ebp, byte [ecx]
jmp 0x481af7
call fcn.00480df0
mov ebp, eax
cmp ebp, 0xffffffff
je 0x481b09
cmp dword [edi + 0x10c58], 0
je 0x481a1e
mov eax, dword [edi + 0x10c84]
test eax, eax
je 0x481c0a
lea edx, [edi + 0xb6c]
mov ecx, edx
xor edx, edx
xchg ecx, eax
xchg ecx, edx
call fcn.004810ec
jmp 0x481c0a
call fcn.0047db94
mov ebp, eax
test eax, eax
je 0x481c0a
cmp ebp, 3
jne 0x481b4c
mov esi, 6
jmp 0x481c0a
mov esi, 2
jmp 0x481c0a
call fcn.004843bc
mov ebp, eax
test eax, eax
je 0x481b77
cmp ebp, 5
je 0x481b77
cmp ebp, 3
jne 0x481b72
mov esi, 6
jmp 0x481b77
mov esi, 2
cmp ebp, 5
jne 0x481c0a
mov eax, dword [edi + 0x4c]
xor edx, edx
cmp edx, dword [edi + 0x10bdc]
jne 0x481b98
cmp eax, dword [edi + 0x10bd8]
setbe al
jmp 0x481b9b
setle al
and eax, 1
test eax, eax
je 0x481ba9
mov esi, 1
jmp 0x481c0a
mov esi, 2
jmp 0x481c0a
cmp word [edi + 0x10bcc], 9
sete al
and eax, 1
call fcn.004802a4
mov ebp, eax
test eax, eax
je 0x481c0a
cmp ebp, 3
jne 0x481bd5
mov esi, 6
jmp 0x481c0a
mov esi, 2
jmp 0x481c0a
lea eax, [edi + 0x10d8c]
push eax
mov eax, 0x342
call fcn.004116e0
push eax
push 0x4b26c4
call fcn.00444878
add esp, 0xc
call fcn.00480ac0
mov eax, 1
jmp 0x481d68
xor ebx, ebx
cmp dword [0x4bc1b4], 0
je 0x481c20
cmp byte [0x4b09a2], 0
jne 0x481c20
mov bl, 1
mov eax, dword [edi + 0x10c58]
test eax, eax
je 0x481c62
dec eax
jle 0x481c5d
cmp byte [0x4b08e4], 0
jne 0x481c41
cmp byte [0x4b09a2], 0
jne 0x481c41
mov bl, 1
lea ecx, [edi + 0x10c88]
mov edx, 0x4b26c4
mov eax, 0x4a6984
call fcn.00429750
mov esi, 0x32
jmp 0x481c62
mov esi, 1
cmp esi, 6
jne 0x481c71
mov eax, 0x4a6984
call fcn.00429614
mov edx, dword [edi + 0x10b70]
xor edx, 0xffffffff
cmp edx, dword [edi + 0x10bd4]
je 0x481cf3
cmp esi, 1
jle 0x481c8c
cmp esi, 2
jne 0x481cd8
mov ecx, dword [edi + 0xb68]
test byte [ecx + 0x28], 1
je 0x481cb9
lea eax, [edi + 0x10d8c]
push eax
mov eax, 0x1f8
call fcn.004116e0
push eax
push 0x4b26c4
call fcn.00444878
add esp, 0xc
jmp 0x481cd8
lea edx, [edi + 0x10d8c]
mov eax, 0x1f9
push edx
call fcn.004116e0
push eax
push 0x4b26c4
call fcn.00444878
add esp, 0xc
cmp byte [0x4b08e4], 0
jne 0x481cec
cmp byte [0x4b09a2], 0
jne 0x481cec
mov bl, 1
mov esi, 2
jmp 0x481d1f
cmp byte [0x4b09a2], 0
je 0x481d1f
cmp dword [edi + 0x10bb0], 0
je 0x481d1f
movzx edx, word [edi + 0x10bea]
mov eax, dword [edi + 0x10bb0]
call fcn.00481d70
mov ebp, eax
cmp esi, eax
jge 0x481d1f
mov esi, ebp
cmp byte [0x4b09a2], 0
jne 0x481d44
test esi, esi
je 0x481d44
mov eax, dword [edi + 0x10c70]
xor edx, edx
mov dl, byte [eax + 0x16]
push edx
call fcn.00490304
pop ecx
push eax
call sub.KERNEL32.DLL_SetEndOfFile
cmp byte [0x4b09a2], 0
jne 0x481d52
call fcn.0047daac
test bl, bl
je 0x481d61
lea eax, [edi + 0x10c88]
call fcn.0040a8f4
call fcn.00480ac0
mov eax, esi
add esp, 0x18
pop ebp
pop edi
pop esi
pop ebx
ret