Function at 0x442ab5
Capabilities:
Create thread
Get file size
Resume thread

Disassembly:
sub esp, 0x58
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov ecx, 0x14
xor eax, eax
lea edi, [esp + 0x18]
lea edx, [esp + 0x14]
mov dword [esp + 0x10], 0
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x74]
push edx
lea edx, [esp + 0x14]
mov dword [esp + 0x18], 0x54
mov ecx, dword [eax]
push edx
push eax
mov ebp, 0x800c0011
call dword [ecx + 0xc]
test eax, eax
jl 0x442e03
test byte [esp + 0x10], 0x40
je 0x442e03
mov ebx, dword [esp + 0x6c]
lea edi, [esi + 0x224]
push 0x103
push edi
push ebx
mov ecx, esi
call fcn.00443480
test eax, eax
mov dword [esp + 0x6c], eax
je 0x442e03
push 0x55afec
push edi
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x442df6
mov eax, dword [esp + 0x6c]
lea edi, [esi + 0x1c]
mov ecx, dword [eax + 8]
push ecx
push 0x53d4a4
push 0x103
push edi
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
push 0
push 0x20
push 3
push 0
push 1
push SysReAllocStringLen
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [esi + 0x14], eax
je 0x442df6
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, dword [esp + 0x70]
mov dword [esi + 0x18], eax
push edi
mov edx, dword [edi]
call dword [edx + 4]
mov eax, dword [esp + 0x6c]
mov dword [esi + 0x430], edi
mov ecx, dword [eax + 0x40]
push ecx
push ebx
mov ecx, esi
call fcn.004429e0
push 0x57d7d0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x57d7e8]
test eax, eax
jne 0x442c14
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea edx, [esp + 0x74]
mov dword [0x57d7e8], eax
push edx
push 4
push 0
push 0x442930
push 0
push 0
mov dword [esp + 0x8c], 0
call dword [sym.imp.MSVCRT.dll__beginthreadex]
mov edi, eax
add esp, 0x18
test edi, edi
je 0x442c14
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push edi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x57d7c8]
mov ecx, dword [0x57d7cc]
sub ecx, eax
mov dword [esp + 0x74], esi
sar ecx, 2
cmp ecx, 1
mov esi, eax
jae 0x442d2a
mov edx, dword [0x57d7c4]
test edx, edx
je 0x442c52
mov ecx, eax
sub ecx, edx
sar ecx, 2
cmp ecx, 1
jbe 0x442c52
mov ecx, eax
sub ecx, edx
sar ecx, 2
jmp 0x442c57
mov ecx, 1
test edx, edx
jne 0x442c5f
xor eax, eax
jmp 0x442c64
sub eax, edx
sar eax, 2
add eax, ecx
test eax, eax
mov dword [esp + 0x70], eax
jge 0x442c70
xor eax, eax
lea edx, [eax*4]
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ebx, dword [0x57d7c4]
add esp, 4
mov ebp, eax
cmp ebx, esi
mov edi, ebp
je 0x442ca2
push ebx
push edi
call fcn.004d7990
add ebx, 4
add esp, 8
add edi, 4
cmp ebx, esi
jne 0x442c8e
lea eax, [esp + 0x74]
mov ecx, 0x57d7c0
push eax
push 1
push edi
call fcn.0046eac0
mov ecx, dword [0x57d7c8]
add edi, 4
push edi
push ecx
push esi
mov ecx, 0x57d7c0
call fcn.0046ea90
mov edx, dword [0x57d7c8]
mov eax, dword [0x57d7c4]
push edx
push eax
mov ecx, 0x57d7c0
call fcn.004f0f70
mov ecx, dword [0x57d7c4]
push ecx
call fcn.0051e1fa
mov edx, dword [esp + 0x74]
mov ecx, dword [0x57d7c4]
add esp, 4
lea eax, [ebp + edx*4]
test ecx, ecx
mov dword [0x57d7cc], eax
jne 0x442d0b
xor eax, eax
jmp 0x442d15
mov eax, dword [0x57d7c8]
sub eax, ecx
sar eax, 2
lea ecx, [ebp + eax*4 + 4]
mov dword [0x57d7c4], ebp
mov dword [0x57d7c8], ecx
jmp 0x442dcf
mov edx, eax
sub edx, esi
sar edx, 2
cmp edx, 1
jae 0x442d85
lea ecx, [esi + 4]
push ecx
push eax
push esi
mov ecx, 0x57d7c0
call fcn.0046ea90
mov eax, dword [0x57d7c8]
lea edx, [esp + 0x74]
mov ecx, eax
push edx
sub ecx, esi
mov edx, 1
sar ecx, 2
sub edx, ecx
mov ecx, 0x57d7c0
push edx
push eax
call fcn.0046eac0
mov ecx, dword [0x57d7c8]
mov eax, esi
cmp esi, ecx
je 0x442dc8
mov edx, dword [esp + 0x74]
mov dword [eax], edx
add eax, 4
cmp eax, ecx
jne 0x442d76
jmp 0x442dc8
push eax
push eax
add eax, 0xfffffffc
mov ecx, 0x57d7c0
push eax
call fcn.0046ea90
mov eax, dword [0x57d7c8]
mov ecx, eax
add eax, 0xfffffffc
cmp esi, eax
je 0x442db2
mov edx, dword [eax - 4]
sub eax, 4
sub ecx, 4
cmp eax, esi
mov dword [ecx], edx
jne 0x442da3
lea ecx, [esi + 4]
mov eax, esi
cmp esi, ecx
je 0x442dc8
mov edx, dword [esp + 0x74]
mov dword [eax], edx
add eax, 4
cmp eax, ecx
jne 0x442dbb
add dword [0x57d7c8], 4
push 0x57d7d0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x78]
mov dword [eax], 1
mov ecx, dword [0x57d7e8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ebp, reloc.OLEAUT32.dll_VariantCopyInd
mov edx, dword [esp + 0x6c]
push edx
call fcn.0051e1fa
add esp, 4
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 0x10