Function at 0x48198b
Capabilities:
Clear file content

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffe8
mov edi, 0x4c8d3c
xor esi, esi
xor eax, eax
mov dword [edi + 0x10b88], eax
xor edx, edx
mov dword [edi + 0x10b84], edx
xor ecx, ecx
mov dword [edi + 0x10b8c], ecx
mov dword [edi + 0x10c5c], 1
mov dword [edi + 0x10b70], 0xffffffff
cmp byte [0x4b0a12], 0
jne 0x481a59
call fcn.00480ba8
test eax, eax
je 0x481a59
lea eax, [edi + 0x10c88]
mov cl, 1
xor edx, edx
call fcn.00409c94
call fcn.00480ba8
test eax, eax
je 0x481a59
lea ecx, [edi + 0x10c88]
mov edx, 0x4b2734
mov eax, 0x4a69f4
call fcn.00429690
lea eax, [edi + 0x10c88]
call fcn.0040bd58
test al, al
je 0x481a21
mov eax, 0x32
jmp 0x481ef8
mov eax, 0x456
call fcn.004116e8
push eax
push 0x4b2734
call fcn.00444910
add esp, 8
lea eax, [edi + 0x10c88]
mov dl, 1
call fcn.0040bda0
call fcn.00480ba8
test eax, eax
je 0x481a59
mov eax, 0x32
jmp 0x481ef8
cmp byte [0x4b0a12], 0
jne 0x481b4c
push 0
push 0x800
mov eax, dword [edi + 0x44]
mov edx, dword [edi + 0x48]
call fcn.00491e83
cmp edx, dword [edi + 0x40]
jne 0x481a88
cmp eax, dword [edi + 0x3c]
jae 0x481b4c
jmp 0x481a8e
jge 0x481b4c
cmp dword [edi + 0x48], 0
mov cl, 1
jne 0x481aa1
cmp dword [edi + 0x44], 0x5f5e100
jbe 0x481b0a
jmp 0x481aa3
jle 0x481b0a
push 0
push 0
mov edx, 1
mov eax, dword [edi + 0x10b94]
call fcn.00481230
mov dword [esp], eax
mov dword [esp + 4], edx
push 0
push 0
mov edx, 2
mov eax, dword [edi + 0x10b94]
call fcn.00481230
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
push dword [esp + 4]
push dword [esp + 4]
xor edx, edx
mov eax, dword [edi + 0x10b94]
call fcn.00481230
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
cmp edx, dword [edi + 0x40]
jne 0x481b04
cmp eax, dword [edi + 0x3c]
seta cl
jmp 0x481b07
setg cl
and ecx, 1
test cl, cl
je 0x481b4c
push 0
mov eax, dword [edi + 0x44]
push eax
push dword [edi + 0x10c70]
call fcn.0048fba8
add esp, 0xc
mov edx, dword [edi + 0x10c70]
xor ecx, ecx
mov cl, byte [edx + 0x16]
push ecx
call fcn.00490494
pop ecx
push eax
call sub.KERNEL32.DLL_SetEndOfFile
push 0
push 0
push dword [edi + 0x10c70]
call fcn.0048fba8
add esp, 0xc
call fcn.00480d08
mov ax, word [edi + 0x10bcc]
sub ax, 1
jb 0x481b80
je 0x481cbe
sub ax, 5
je 0x481ce6
add eax, 0xfffffffe
sub ax, 2
jb 0x481d40
jmp 0x481d6c
mov ebx, 0x10000
lea eax, [edi + 0xb6c]
mov dword [edi + 0x10c80], eax
xor edx, edx
mov dword [edi + 0x10c84], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
jmp 0x481c47
mov ecx, ebp
mov eax, dword [edi + 0x10c80]
inc dword [edi + 0x10c80]
mov byte [eax], cl
inc dword [edi + 0x10c84]
mov edx, dword [edi + 0x10c84]
cmp ebx, edx
jne 0x481c47
mov eax, dword [edi + 0x10c84]
xor edx, edx
add dword [esp + 0x10], eax
adc dword [esp + 0x14], edx
push dword [esp + 0x14]
push dword [esp + 0x14]
push dword [edi + 0x48]
push dword [edi + 0x44]
mov edx, dword [edi + 0xb68]
mov eax, dword [edx]
mov edx, dword [edx + 4]
add eax, dword [esp + 0x20]
adc edx, dword [esp + 0x24]
push edx
push eax
push dword [edi + 0x10b9c]
push dword [edi + 0x10b98]
call fcn.0045958c
call fcn.004442e0
cmp dword [0x4bc224], 0
jne 0x481c99
lea eax, [edi + 0xb6c]
xor ecx, ecx
mov edx, dword [edi + 0x10c84]
call fcn.0048127c
lea eax, [edi + 0xb6c]
xor edx, edx
mov dword [edi + 0x10c80], eax
mov dword [edi + 0x10c84], edx
sub dword [edi + 0x10b7c], 1
sbb dword [edi + 0x10b80], 0
mov eax, dword [edi + 0x10b7c]
mov edx, dword [edi + 0x10b80]
cmp edx, 0
jne 0x481c6d
cmp eax, 0
jb 0x481c80
jmp 0x481c6f
jl 0x481c80
mov ecx, dword [edi + 0x10b78]
inc dword [edi + 0x10b78]
movzx ebp, byte [ecx]
jmp 0x481c87
call fcn.00480f80
mov ebp, eax
cmp ebp, 0xffffffff
je 0x481c99
cmp dword [edi + 0x10c58], 0
je 0x481bae
mov eax, dword [edi + 0x10c84]
test eax, eax
je 0x481d9a
lea edx, [edi + 0xb6c]
mov ecx, edx
xor edx, edx
xchg ecx, eax
xchg ecx, edx
call fcn.0048127c
jmp 0x481d9a
call fcn.0047dd24
mov ebp, eax
test eax, eax
je 0x481d9a
cmp ebp, 3
jne 0x481cdc
mov esi, 6
jmp 0x481d9a
mov esi, 2
jmp 0x481d9a
call fcn.0048454c
mov ebp, eax
test eax, eax
je 0x481d07
cmp ebp, 5
je 0x481d07
cmp ebp, 3
jne 0x481d02
mov esi, 6
jmp 0x481d07
mov esi, 2
cmp ebp, 5
jne 0x481d9a
mov eax, dword [edi + 0x4c]
xor edx, edx
cmp edx, dword [edi + 0x10bdc]
jne 0x481d28
cmp eax, dword [edi + 0x10bd8]
setbe al
jmp 0x481d2b
setle al
and eax, 1
test eax, eax
je 0x481d39
mov esi, 1
jmp 0x481d9a
mov esi, 2
jmp 0x481d9a
cmp word [edi + 0x10bcc], 9
sete al
and eax, 1
call fcn.00480434
mov ebp, eax
test eax, eax
je 0x481d9a
cmp ebp, 3
jne 0x481d65
mov esi, 6
jmp 0x481d9a
mov esi, 2
jmp 0x481d9a
lea eax, [edi + 0x10d8c]
push eax
mov eax, 0x342
call fcn.004116e8
push eax
push 0x4b2734
call fcn.00444910
add esp, 0xc
call fcn.00480c50
mov eax, 1
jmp 0x481ef8
xor ebx, ebx
cmp dword [0x4bc224], 0
je 0x481db0
cmp byte [0x4b0a12], 0
jne 0x481db0
mov bl, 1
mov eax, dword [edi + 0x10c58]
test eax, eax
je 0x481df2
dec eax
jle 0x481ded
cmp byte [0x4b0954], 0
jne 0x481dd1
cmp byte [0x4b0a12], 0
jne 0x481dd1
mov bl, 1
lea ecx, [edi + 0x10c88]
mov edx, 0x4b2734
mov eax, 0x4a69f4
call fcn.0042976c
mov esi, 0x32
jmp 0x481df2
mov esi, 1
cmp esi, 6
jne 0x481e01
mov eax, 0x4a69f4
call fcn.00429630
mov edx, dword [edi + 0x10b70]
xor edx, 0xffffffff
cmp edx, dword [edi + 0x10bd4]
je 0x481e83
cmp esi, 1
jle 0x481e1c
cmp esi, 2
jne 0x481e68
mov ecx, dword [edi + 0xb68]
test byte [ecx + 0x28], 1
je 0x481e49
lea eax, [edi + 0x10d8c]
push eax
mov eax, 0x1f8
call fcn.004116e8
push eax
push 0x4b2734
call fcn.00444910
add esp, 0xc
jmp 0x481e68
lea edx, [edi + 0x10d8c]
mov eax, 0x1f9
push edx
call fcn.004116e8
push eax
push 0x4b2734
call fcn.00444910
add esp, 0xc
cmp byte [0x4b0954], 0
jne 0x481e7c
cmp byte [0x4b0a12], 0
jne 0x481e7c
mov bl, 1
mov esi, 2
jmp 0x481eaf
cmp byte [0x4b0a12], 0
je 0x481eaf
cmp dword [edi + 0x10bb0], 0
je 0x481eaf
movzx edx, word [edi + 0x10bea]
mov eax, dword [edi + 0x10bb0]
call fcn.00481f00
mov ebp, eax
cmp esi, eax
jge 0x481eaf
mov esi, ebp
cmp byte [0x4b0a12], 0
jne 0x481ed4
test esi, esi
je 0x481ed4
mov eax, dword [edi + 0x10c70]
xor edx, edx
mov dl, byte [eax + 0x16]
push edx
call fcn.00490494
pop ecx
push eax
call sub.KERNEL32.DLL_SetEndOfFile
cmp byte [0x4b0a12], 0
jne 0x481ee2
call fcn.0047dc3c
test bl, bl
je 0x481ef1
lea eax, [edi + 0x10c88]
call fcn.0040a8f4
call fcn.00480c50
mov eax, esi
add esp, 0x18
pop ebp
pop edi
pop esi
pop ebx
ret