Function at 0x406590
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb4
mov eax, dword [esp + 0xbc]
push ebx
push ebp
mov ebp, dword [esp + 0xc0]
push esi
push edi
xor edi, edi
push edi
push eax
push ebp
call dword [sym.imp.MSVCRT.DLL_fseek]
mov ebx, dword [esp + 0xe0]
mov esi, dword [sym.imp.MSVCRT.DLL_fread]
add esp, 0xc
jmp 0x4065c7
xor edi, edi
push ebp
push 1
lea ecx, [esp + 0x3c]
push 8
push ecx
call esi
mov edx, dword [esp + 0x44]
add esp, 0x10
lea eax, [edx - 1]
cmp eax, 7
ja case.default.0x4065e6
jmp dword [eax*4 + 0x40756c]
mov eax, dword [ebx + 0x18]
cmp eax, 0x3333
jne 0x40661e
push ebp
push 1
lea eax, [esp + 0x9c]
push 4
push eax
call esi
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
push ecx
push 0x45
push edx
call fcn.00405e80
add esp, 0x1c
mov dword [ebx], eax
jmp 0x406cd5
cmp eax, 0x4444
jne case.0x4065e6.2
push ebp
push 1
lea eax, [esp + 0xa0]
push 0x2c
push eax
call dword [sym.imp.MSVCRT.DLL_fread]
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
push ecx
push 0x45
push edx
call fcn.00405e80
mov edx, dword [ebx + 4]
mov dword [ebx], eax
lea esi, [esp + 0xb8]
add esp, 0x1c
lea ecx, [edx + edx*2]
shl ecx, 3
sub ecx, edx
lea eax, [eax + ecx*2]
lea edi, [ecx + eax + 0x1c]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
fld dword [esp + 0xa8]
fadd dword [esp + 0x9c]
fmul dword [0x44e8d8]
mov eax, dword [esp + 0xcc]
test eax, eax
fstp dword [esp + 0x64]
fld dword [esp + 0xac]
fadd dword [esp + 0xa0]
mov esi, dword [esp + 0x64]
fmul dword [0x44e8d8]
fstp dword [esp + 0x68]
fld dword [esp + 0xb0]
fadd dword [esp + 0xa4]
mov edx, dword [esp + 0x68]
fmul dword [0x44e8d8]
fstp dword [esp + 0x6c]
mov edi, dword [esp + 0x6c]
jne 0x4066da
lea ecx, [ebx + 0x20]
mov dword [ebx + 0x20], esi
mov dword [ecx + 4], edx
mov dword [ecx + 8], edi
mov ecx, dword [ebx + 4]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx]
lea eax, [eax + eax*2]
lea eax, [eax + ecx + 0x34]
mov dword [eax], esi
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
fld dword [esp + 0xc0]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
lea ecx, [eax + eax*2]
fstp dword [ecx + edx + 0x40]
jmp 0x406ccf
mov edx, dword [ebx + 4]
mov eax, dword [esp + 0x38]
inc edx
push eax
mov dword [ebx + 4], edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x3c]
push ebp
mov edi, eax
push 1
push ecx
push edi
mov dword [esp + 0x38], edi
call esi
or ecx, 0xffffffff
xor eax, eax
add esp, 0x14
mov edx, dword [esp + 0x24]
repne scasb al, byte es:[edi]
not ecx
mov dword [esp + 0x20], ecx
lea edi, [ecx + edx]
or ecx, 0xffffffff
mov dword [esp + 0x14], edi
repne scasb al, byte es:[edi]
mov eax, dword [ebx + 0xc]
not ecx
dec ecx
mov edi, ecx
inc edi
test eax, eax
mov dword [esp + 0x74], edi
je 0x406817
mov dword [esp + 0x10], 0
jbe 0x406817
mov ecx, dword [ebx + 8]
add ecx, 8
mov dword [esp + 0x28], ecx
mov eax, dword [ecx - 4]
mov edi, dword [esp + 0x24]
mov dl, byte [edi]
mov cl, dl
cmp dl, byte [eax]
jne 0x4067b0
test cl, cl
je 0x4067ac
mov dl, byte [edi + 1]
mov cl, dl
cmp dl, byte [eax + 1]
jne 0x4067b0
add edi, 2
add eax, 2
test cl, cl
jne 0x40678c
xor eax, eax
jmp 0x4067b5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4067f4
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x14]
mov eax, dword [eax]
mov dl, byte [edi]
mov cl, dl
cmp dl, byte [eax]
jne 0x4067e7
test cl, cl
je 0x4067e3
mov dl, byte [edi + 1]
mov cl, dl
cmp dl, byte [eax + 1]
jne 0x4067e7
add edi, 2
add eax, 2
test cl, cl
jne 0x4067c3
xor eax, eax
jmp 0x4067ec
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4068e8
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov eax, dword [ebx + 0xc]
inc edx
add ecx, 0x12
cmp edx, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], ecx
jb 0x406785
mov edi, dword [esp + 0x74]
mov ecx, dword [ebx + 8]
push eax
push 0x12
push ecx
call fcn.00405e80
mov edx, dword [esp + 0x2c]
mov dword [ebx + 8], eax
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
push edi
lea ecx, [ecx + ecx*8]
mov dword [edx + ecx*2 + 4], eax
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
mov edi, dword [esp + 0x38]
lea ecx, [ecx + ecx*8]
mov dword [edx + ecx*2 + 8], eax
mov eax, dword [ebx + 0xc]
or ecx, 0xffffffff
lea edx, [eax + eax*8]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x34], edx
mov edx, dword [ebx + 8]
mov esi, edi
mov edi, dword [esp + 0x34]
mov eax, ecx
shr ecx, 2
mov edi, dword [edx + edi*2 + 4]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0xc]
mov edi, dword [esp + 0x28]
or ecx, 0xffffffff
lea edx, [eax + eax*8]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x34], edx
mov edx, dword [ebx + 8]
mov esi, edi
mov edi, dword [esp + 0x34]
mov eax, ecx
shr ecx, 2
mov edi, dword [edx + edi*2 + 8]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x38]
push ecx
call sub.MSVCRT.DLL_void___cdecl_operator_delete_void__
mov ecx, dword [ebx + 4]
add esp, 0x18
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx + 0xc]
lea edx, [eax + eax*2]
mov eax, dword [ebx]
mov dword [edx + eax - 0x31], ecx
mov eax, dword [ebx + 0xc]
inc eax
mov dword [ebx + 0xc], eax
jmp 0x406ccf
mov ecx, dword [ebx + 4]
mov edx, dword [esp + 0x10]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx]
lea eax, [eax + eax*2]
mov dword [eax + ecx - 0x31], edx
mov eax, dword [esp + 0x24]
push eax
call sub.MSVCRT.DLL_void___cdecl_operator_delete_void__
add esp, 4
jmp 0x406cd5
cmp dword [ebx + 0x18], 0x4444
jne case.0x4065e6.5
push ebp
push 1
lea edx, [esp + 0x78]
push 4
push edx
call esi
push ebp
push 1
lea eax, [esp + 0x30]
push 4
push eax
call esi
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [esp + 0x38]
mov dword [ecx + edx - 0x45], eax
mov eax, dword [esp + 0x38]
lea ecx, [eax + eax*4]
shl ecx, 2
push ecx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edx, dword [ebx + 4]
lea ecx, [edx + edx*2]
shl ecx, 3
sub ecx, edx
lea edx, [ecx + ecx*2]
mov ecx, dword [ebx]
mov dword [edx + ecx - 0x41], eax
mov eax, dword [esp + 0x3c]
lea edx, [eax + eax*2]
shl edx, 2
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edx, dword [ebx + 4]
add esp, 0x28
lea ecx, [edx + edx*2]
shl ecx, 3
sub ecx, edx
mov edx, dword [ebx]
lea ecx, [ecx + ecx*2]
mov dword [ecx + edx - 0x3d], eax
mov eax, dword [esp + 0x70]
cmp eax, 1
je 0x406df3
cmp eax, 0x12071980
je 0x406df3
cmp eax, 2
je 0x406d01
cmp eax, 0x240e3300
je 0x406d01
cmp eax, 3
jne 0x406ac5
mov eax, dword [esp + 0x18]
imul eax, eax, 0x46
push eax
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x1c]
push ebp
mov edi, eax
push ecx
push 0x46
push edi
mov dword [esp + 0x34], edi
call esi
mov eax, dword [esp + 0x2c]
xor edx, edx
add esp, 0x14
cmp eax, edx
mov dword [esp + 0x14], edx
jbe 0x406abf
mov dword [esp + 0x10], edx
lea ecx, [edi + 0x3e]
mov esi, dword [ebx + 4]
lea edi, [ecx - 0x38]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [edi]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
lea edi, [ecx - 0x2c]
add ecx, 0x46
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x46]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x42]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [esp + 0x10]
add eax, esi
mov esi, dword [edi]
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
mov edi, dword [esp + 0x10]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
inc eax
add edi, 0xc
cmp eax, esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
jb 0x406a09
mov edi, dword [esp + 0x20]
push edi
jmp 0x406cc7
cmp eax, 4
jne 0x406bca
mov eax, dword [esp + 0x18]
lea ecx, [eax + eax*8]
lea edx, [eax + ecx*2]
shl edx, 2
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edi, eax
mov eax, dword [esp + 0x1c]
push ebp
push eax
push 0x4c
push edi
mov dword [esp + 0x34], edi
call esi
mov eax, dword [esp + 0x2c]
xor edx, edx
add esp, 0x14
cmp eax, edx
mov dword [esp + 0x14], edx
jbe 0x406bc4
mov dword [esp + 0x10], edx
lea ecx, [edi + 0x44]
mov esi, dword [ebx + 4]
lea edi, [ecx - 0x3c]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [edi]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
lea edi, [ecx - 0x30]
add ecx, 0x4c
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x4c]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x48]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [esp + 0x10]
add eax, esi
mov esi, dword [edi]
mov dword [eax], esi
mov esi, dword [edi + 4]
mov dword [eax + 4], esi
mov esi, dword [edi + 8]
mov edi, dword [esp + 0x10]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
inc eax
add edi, 0xc
cmp eax, esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
jb 0x406b0e
mov edi, dword [esp + 0x20]
push edi
jmp 0x406cc7
cmp eax, 0x112
jne 0x406cd5
mov ecx, dword [esp + 0x18]
shl ecx, 5
push ecx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edx, dword [esp + 0x1c]
push ebp
push edx
push 0x20
push eax
mov dword [esp + 0x24], eax
call esi
mov eax, dword [esp + 0x2c]
add esp, 0x14
test eax, eax
mov dword [esp + 0x14], 0
jbe 0x406cc2
mov eax, dword [esp + 0x10]
xor edi, edi
xor edx, edx
lea ecx, [eax + 0x1c]
mov esi, dword [ebx + 4]
lea ebp, [ecx - 0x1c]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ebp]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
lea ebp, [ecx - 0x10]
add ecx, 0x20
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x24]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x20]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [ebp]
add eax, edi
add edi, 0xc
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
inc eax
cmp eax, esi
mov dword [esp + 0x14], eax
jb 0x406c13
mov ebp, dword [esp + 0xc8]
mov ecx, dword [esp + 0x10]
push ecx
call sub.MSVCRT.DLL_void___cdecl_operator_delete_void__
add esp, 4
mov esi, dword [sym.imp.MSVCRT.DLL_fread]
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0xd0]
mov eax, 0xfffffff8
sub eax, edx
add ecx, eax
mov dword [esp + 0xd0], ecx
jne 0x4065c5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret
mov edx, dword [esp + 0x18]
shl edx, 6
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x1c]
push ebp
push ecx
push 0x40
push eax
mov dword [esp + 0x24], eax
call esi
mov eax, dword [esp + 0x2c]
add esp, 0x14
cmp eax, edi
mov dword [esp + 0x14], edi
jbe 0x406dea
mov eax, dword [esp + 0x10]
xor edi, edi
xor edx, edx
lea ecx, [eax + 0x38]
mov esi, dword [ebx + 4]
lea ebp, [ecx - 0x34]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ebp]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
lea ebp, [ecx - 0x28]
add ecx, 0x40
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x40]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x3c]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [ebp]
add eax, edi
add edi, 0xc
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
inc eax
cmp eax, esi
mov dword [esp + 0x14], eax
jb 0x406d3b
mov ebp, dword [esp + 0xc8]
mov ecx, dword [esp + 0x10]
jmp 0x406cc6
mov eax, dword [esp + 0x18]
lea eax, [eax + eax*2]
lea edx, [eax + eax*4]
shl edx, 2
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x1c]
push ebp
push ecx
push 0x3c
push eax
mov dword [esp + 0x28], eax
call esi
mov eax, dword [esp + 0x2c]
add esp, 0x14
xor edi, edi
test eax, eax
jbe 0x406ee6
mov eax, dword [esp + 0x14]
xor edx, edx
mov dword [esp + 0x10], edx
lea ecx, [eax + 0x34]
mov esi, dword [ebx + 4]
lea ebp, [ecx - 0x34]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ebp]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
lea ebp, [ecx - 0x28]
add ecx, 0x3c
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x40]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x3c]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [esp + 0x10]
add eax, esi
mov esi, dword [ebp]
inc edi
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
mov dword [eax + 8], esi
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
add esi, 0xc
cmp edi, eax
mov dword [esp + 0x10], esi
jb 0x406e33
mov ebp, dword [esp + 0xc8]
mov ecx, dword [esp + 0x14]
jmp 0x406cc6
cmp dword [ebx + 0x18], 0x4444
jne case.0x4065e6.5
push ebp
push 1
lea edx, [esp + 0x38]
push 4
push edx
call esi
mov ecx, dword [ebx + 4]
mov edx, dword [esp + 0x40]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx]
lea eax, [eax + eax*2]
mov dword [eax + ecx - 0x39], edx
mov eax, dword [esp + 0x40]
lea ecx, [eax + eax]
push ecx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edx, dword [ebx + 4]
push ebp
lea ecx, [edx + edx*2]
shl ecx, 3
sub ecx, edx
lea edx, [ecx + ecx*2]
mov ecx, dword [ebx]
mov dword [edx + ecx - 0x35], eax
mov edx, dword [esp + 0x48]
jmp 0x407525
mov eax, dword [ebx + 0x18]
cmp eax, 0x3333
jne 0x406f76
mov eax, dword [esp + 0x38]
push eax
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x3c]
push ebp
mov edi, eax
push 1
push ecx
push edi
call esi
push edi
call sub.MSVCRT.DLL_void___cdecl_operator_delete_void__
add esp, 0x18
jmp 0x406cd5
cmp eax, 0x4444
je 0x406cd5
xor edi, edi
mov eax, dword [ebx + 0x18]
cmp eax, 0x3333
jne 0x407089
push ebp
push 1
lea edx, [esp + 0x44]
push 0x18
push edx
call dword [sym.imp.MSVCRT.DLL_fread]
mov ecx, dword [ebx + 4]
lea esi, [esp + 0x4c]
add esp, 0x10
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx]
lea eax, [eax + eax*2]
lea edi, [eax + ecx - 0x29]
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
fld dword [esp + 0x48]
fadd dword [esp + 0x3c]
fmul dword [0x44e8d8]
fstp dword [esp + 0x58]
fld dword [esp + 0x4c]
fadd dword [esp + 0x40]
mov esi, dword [esp + 0x58]
fmul dword [0x44e8d8]
fstp dword [esp + 0x5c]
fld dword [esp + 0x50]
fadd dword [esp + 0x44]
mov edx, dword [esp + 0x5c]
fmul dword [0x44e8d8]
fstp dword [esp + 0x60]
fld dword [ebx + 0x20]
fcomp dword [0x44e9f4]
mov edi, dword [esp + 0x60]
fnstsw ax
test ah, 0x40
je 0x40701e
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x24], edx
mov dword [ebx + 0x28], edi
mov ecx, dword [ebx + 4]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx]
lea eax, [eax + eax*2]
lea eax, [eax + ecx - 0x11]
mov dword [eax], esi
mov dword [eax + 4], edx
mov dword [eax + 8], edi
mov ecx, dword [ebx + 4]
fld dword [esp + 0x44]
fsub dword [esp + 0x50]
fld dword [esp + 0x40]
fsub dword [esp + 0x4c]
fld dword [esp + 0x3c]
fsub dword [esp + 0x48]
fld st(0)
fmul st(1)
fld st(2)
fmul st(3)
mov edx, dword [ebx]
lea eax, [ecx + ecx*2]
shl eax, 3
faddp st(1)
fld st(3)
fmul st(4)
sub eax, ecx
faddp st(1)
lea ecx, [eax + eax*2]
fsqrt
fmul qword [0x44e960]
fstp st(3)
fstp st(0)
fstp st(0)
fstp dword [ecx + edx - 5]
jmp 0x406ccf
cmp eax, 0x4444
jne case.0x4065e6.7
push ebp
push 1
lea eax, [esp + 0x80]
push 0x1c
push eax
call dword [sym.imp.MSVCRT.DLL_fread]
mov eax, dword [esp + 0xa0]
mov ecx, dword [ebx + 4]
and eax, 0xffff
add esp, 0x10
lea edx, [eax + eax*2]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [ebx]
mov dword [ecx + eax - 0x39], edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [ebx]
mov edi, dword [ecx + eax - 0x35]
lea ecx, [edx + edx]
mov edx, dword [esp + 0x8c]
mov eax, ecx
shr ecx, 2
lea esi, [edi + edx*2]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x88]
dec eax
mov dword [esp + 0x88], eax
je 0x406ccf
mov esi, dword [sym.imp.MSVCRT.DLL_fread]
push ebp
push 1
lea ecx, [esp + 0x94]
push 8
push ecx
call esi
mov eax, dword [esp + 0x98]
add esp, 0x10
dec eax
mov dword [esp + 0x88], eax
jne 0x407117
jmp 0x406ccf
cmp dword [ebx + 0x18], 0x3333
jne case.default.0x4065e6
push ebp
push 1
lea edx, [esp + 0x5c]
push 4
push edx
call esi
push ebp
push 1
lea eax, [esp + 0x34]
push 4
push eax
call esi
mov ecx, dword [ebx + 4]
mov edx, dword [ebx]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [esp + 0x3c]
mov dword [ecx + edx - 0x45], eax
mov eax, dword [esp + 0x3c]
lea ecx, [eax + eax*4]
shl ecx, 2
push ecx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edx, dword [ebx + 4]
lea ecx, [edx + edx*2]
shl ecx, 3
sub ecx, edx
lea edx, [ecx + ecx*2]
mov ecx, dword [ebx]
mov dword [edx + ecx - 0x41], eax
mov eax, dword [esp + 0x40]
lea edx, [eax + eax*2]
shl edx, 2
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edx, dword [ebx + 4]
add esp, 0x28
lea ecx, [edx + edx*2]
shl ecx, 3
sub ecx, edx
mov edx, dword [ebx]
lea ecx, [ecx + ecx*2]
mov dword [ecx + edx - 0x3d], eax
mov eax, dword [esp + 0x54]
cmp eax, 1
je 0x4073dd
cmp eax, 0x12071980
je 0x4073dd
cmp eax, 0x240e3300
jne 0x4072dc
mov eax, dword [esp + 0x1c]
shl eax, 6
push eax
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x20]
push ebp
push ecx
push 0x40
push eax
mov dword [esp + 0x24], eax
call esi
mov eax, dword [esp + 0x30]
add esp, 0x14
cmp eax, edi
mov dword [esp + 0x14], edi
jbe 0x4072d3
mov eax, dword [esp + 0x10]
xor edi, edi
xor edx, edx
lea ecx, [eax + 0x38]
mov esi, dword [ebx + 4]
lea ebp, [ecx - 0x34]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ebp]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
lea ebp, [ecx - 0x28]
add ecx, 0x40
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x40]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x3c]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [ebp]
add eax, edi
add edi, 0xc
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
inc eax
cmp eax, esi
mov dword [esp + 0x14], eax
jb 0x407224
mov ebp, dword [esp + 0xc8]
mov ecx, dword [esp + 0x10]
jmp 0x406cc6
cmp eax, 0x112
jne 0x406cd5
mov edx, dword [esp + 0x1c]
shl edx, 5
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x20]
push ebp
push ecx
push 0x20
push eax
mov dword [esp + 0x24], eax
call esi
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
mov dword [esp + 0x14], 0
jbe 0x4073d4
mov eax, dword [esp + 0x10]
xor edi, edi
xor edx, edx
lea ecx, [eax + 0x1c]
mov esi, dword [ebx + 4]
lea ebp, [ecx - 0x1c]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ebp]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
lea ebp, [ecx - 0x10]
add ecx, 0x20
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x24]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x20]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [ebp]
add eax, edi
add edi, 0xc
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
inc eax
cmp eax, esi
mov dword [esp + 0x14], eax
jb 0x407325
mov ebp, dword [esp + 0xc8]
mov ecx, dword [esp + 0x10]
jmp 0x406cc6
mov eax, dword [esp + 0x1c]
lea edx, [eax + eax*8]
shl edx, 2
push edx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x20]
push ebp
push ecx
push 0x24
push eax
mov dword [esp + 0x24], eax
call esi
mov eax, dword [esp + 0x30]
add esp, 0x14
cmp eax, edi
mov dword [esp + 0x14], edi
jbe 0x4074c9
mov eax, dword [esp + 0x10]
xor edi, edi
xor edx, edx
lea ecx, [eax + 0x1c]
mov esi, dword [ebx + 4]
lea ebp, [ecx - 0x1c]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ebp]
add eax, edx
add edx, 0x14
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
lea ebp, [ecx - 0x10]
add ecx, 0x24
mov dword [eax + 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x28]
mov dword [eax + edx - 8], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x41]
mov esi, dword [ecx - 0x24]
mov dword [eax + edx - 4], esi
mov esi, dword [ebx + 4]
lea eax, [esi + esi*2]
shl eax, 3
sub eax, esi
mov esi, dword [ebx]
lea eax, [eax + eax*2]
mov eax, dword [eax + esi - 0x3d]
mov esi, dword [ebp]
add eax, edi
add edi, 0xc
mov dword [eax], esi
mov esi, dword [ebp + 4]
mov dword [eax + 4], esi
mov esi, dword [ebp + 8]
mov dword [eax + 8], esi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
inc eax
cmp eax, esi
mov dword [esp + 0x14], eax
jb 0x40741a
mov ebp, dword [esp + 0xc8]
mov ecx, dword [esp + 0x10]
jmp 0x406cc6
cmp dword [ebx + 0x18], 0x3333
jne case.default.0x4065e6
push ebp
push 1
lea edx, [esp + 0x34]
push 4
push edx
call esi
mov ecx, dword [ebx + 4]
mov edx, dword [esp + 0x3c]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx]
lea eax, [eax + eax*2]
mov dword [eax + ecx - 0x39], edx
mov eax, dword [esp + 0x3c]
lea ecx, [eax + eax]
push ecx
call sub.MSVCRT.DLL_void____cdecl_operator_new_unsigned_int_
mov edx, dword [ebx + 4]
push ebp
lea ecx, [edx + edx*2]
shl ecx, 3
sub ecx, edx
lea edx, [ecx + ecx*2]
mov ecx, dword [ebx]
mov dword [edx + ecx - 0x35], eax
mov edx, dword [esp + 0x44]
mov ecx, dword [ebx + 4]
push edx
push 2
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
mov ecx, dword [ebx]
lea eax, [eax + eax*2]
mov edx, dword [eax + ecx - 0x35]
push edx
call esi
add esp, 0x24
jmp 0x406cd5
push ebp
call dword [sym.imp.MSVCRT.DLL_ftell]
mov edx, dword [esp + 0x3c]
push edi
add eax, edx
push eax
push ebp
mov dword [esp + 0xdc], eax
call dword [sym.imp.MSVCRT.DLL_fseek]
add esp, 0x10
jmp 0x406cd5