Function at 0x440090
Capabilities:
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x118c
call fcn.0046dc60
mov eax, dword [0x49b470]
xor eax, esp
mov dword [esp + 0x1188], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov ebx, ecx
push edi
mov ecx, 6
mov esi, 0x4947d0
lea edi, [esp + 0x138]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x151], eax
mov dword [esp + 0x155], eax
mov dword [esp + 0x159], eax
mov word [esp + 0x15d], ax
mov byte [esp + 0x15f], al
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], eax
mov al, byte [edx]
xor ecx, ecx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x30], edx
test al, al
je 0x440124
lea esp, [esp]
cmp al, 0x2e
je 0x44011f
mov al, byte [edx + ecx + 1]
inc ecx
test al, al
jne 0x440110
jmp 0x440124
cmp ecx, 0xffffffff
jne 0x440172
mov esi, edx
push esi
lea ecx, [esp + 0x174]
push str._s.abm
push ecx
call fcn.0045f116
add esp, 0xc
push esi
lea edx, [esp + 0x184]
push str._s.bmp
push edx
call fcn.0045f116
add esp, 0xc
push esi
lea eax, [esp + 0x164]
push str._s.dat
push eax
call fcn.0045f116
add esp, 0xc
mov dword [esp + 0x24], 0
jmp 0x4401c2
lea ecx, [esp + 0x170]
mov esi, edx
sub ecx, edx
lea ecx, [ecx]
mov al, byte [esi]
mov byte [ecx + esi], al
inc esi
test al, al
jne 0x440180
lea ecx, [esp + 0x180]
mov esi, edx
sub ecx, edx
mov al, byte [esi]
mov byte [ecx + esi], al
inc esi
test al, al
jne 0x440195
lea esi, [esp + 0x160]
mov eax, edx
sub esi, edx
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [esi + eax], cl
inc eax
test cl, cl
jne 0x4401b0
mov dword [esp + 0x24], 1
lea ecx, [esp + 0x170]
push ecx
push 0x4b3848
lea edx, [esp + 0x598]
push str._sGRP_s
push edx
call fcn.0045f116
lea eax, [esp + 0x190]
push eax
push 0x4b3848
lea ecx, [esp + 0xda8]
push str._sGRP_s
push ecx
call fcn.0045f116
lea edx, [esp + 0x180]
push edx
push 0x4b3848
lea eax, [esp + 0x9b8]
push str._sGRP_s
push eax
call fcn.0045f116
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
add esp, 0x30
push 0
push 0x80
push 3
push 0
push 0
push DirectSoundCreate
lea ecx, [esp + 0x5a8]
push ecx
call esi
push 0
push 0x80
push 3
push 0
push 0
push DirectSoundCreate
lea edx, [esp + 0xda8]
push edx
mov edi, eax
call esi
push 0
push 0x80
push 3
push 0
push 0
mov dword [esp + 0x34], eax
push DirectSoundCreate
lea eax, [esp + 0x9a8]
push eax
call esi
mov dword [esp + 0x28], eax
cmp edi, 0xffffffff
je 0x440356
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
jne 0x44030a
lea eax, [esp + 0x590]
mov edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4402b0
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4402c1
mov ecx, eax
shr ecx, 2
mov esi, edx
mov edx, dword [0x4b3c9c]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0
rep movsb byte es:[edi], byte [esi]
push 0x494800
lea ecx, [esp + 0x140]
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1188]
xor ecx, esp
call fcn.0045f0aa
mov esp, ebp
pop ebp
ret
mov edx, dword [0x4b3d20]
push 0
lea ecx, [esp + 0x4c]
push ecx
push eax
push edx
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x30]
push eax
lea ecx, [esp + 0x194]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [esp + 0x24], 0
jne 0x440564
push str..abm
lea edx, [esp + 0x194]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x440564
mov esi, dword [esp + 0x20]
cmp esi, 0xffffffff
je 0x440425
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
jne 0x4403da
lea eax, [esp + 0xd90]
mov edx, eax
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x440380
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x440391
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0
and ecx, 3
push 0x494800
lea eax, [esp + 0x140]
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4b3c9c]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1188]
xor ecx, esp
call fcn.0045f0aa
mov esp, ebp
pop ebp
ret
push 0
lea edx, [esp + 0x4c]
push edx
push eax
mov eax, dword [0x4b3d20]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [esp + 0x30]
push ecx
lea edx, [esp + 0x194]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [esp + 0x24], 0
jne 0x440564
push str..bmp
lea eax, [esp + 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x440564
mov esi, dword [esp + 0x28]
cmp esi, 0xffffffff
je 0x4404ba
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
jne 0x44046e
lea eax, [esp + 0x990]
mov edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x440450
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x440461
jmp 0x4402c9
mov edx, dword [0x4b3d24]
push 0
lea ecx, [esp + 0x4c]
push ecx
push eax
push edx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x30]
push eax
lea ecx, [esp + 0x194]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [esp + 0x24], 0
jne 0x44055c
push str..dat
lea edx, [esp + 0x194]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x44055c
mov esi, dword [esp + 0x34]
mov eax, dword [esi]
mov edx, dword [eax + 0x18]
lea ecx, [esp + 0x170]
push ecx
mov ecx, esi
call edx
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
je 0x4404f2
mov ecx, dword [0x4b3d20]
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
push ecx
lea edx, [esp + 0x174]
push edx
mov ecx, esi
call eax
jmp 0x440564
mov edx, dword [esi]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x180]
push eax
mov ecx, esi
call edx
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
je 0x440526
mov ecx, dword [0x4b3d20]
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
push ecx
lea edx, [esp + 0x184]
push edx
mov ecx, esi
call eax
jmp 0x440564
mov edx, dword [esi]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x160]
push eax
mov ecx, esi
call edx
mov dword [esp + 0x18], eax
cmp eax, 0xffffffff
je 0x441880
mov ecx, dword [0x4b3d24]
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
push ecx
lea edx, [esp + 0x164]
push edx
mov ecx, esi
call eax
mov dword [esp + 0x14], 1
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call esi
mov ecx, dword [esp + 0x20]
push ecx
call esi
mov edx, dword [esp + 0x28]
push edx
call esi
cmp dword [esp + 0x14], 1
jne 0x440596
mov eax, dword [0x4b3d20]
mov edx, dword [0x4b3d24]
push eax
call fcn.00443070
add esp, 4
cmp dword [ebp + 8], 6
mov eax, dword [0x4b3d20]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x3c], edx
mov dx, word [eax + 0xc]
lea esi, [eax + 0xe]
mov ecx, 0xa
lea edi, [esp + 0x4c]
mov word [esp + 0x44], dx
rep movsd dword es:[edi], dword [esi]
jne 0x44060b
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
cmp eax, 0x320
je 0x4405eb
mov dword [esp + 0xc], 1
cmp ecx, 0x258
je 0x4405fb
mov dword [esp + 0xc], 1
mov dword [esp + 0x50], 0x320
mov dword [esp + 0x54], 0x258
mov ecx, dword [esp + 0x58]
shr ecx, 0x10
cmp dword [ebp + 0x14], 0
mov byte [ebx + 6], 0
mov byte [ebx + 5], 0
mov byte [ebx + 4], 0
mov byte [ebx + 0x13], 0
mov byte [ebx + 0x18], 0
mov byte [ebx + 0x14], 0
mov byte [esp + 0x13], cl
jne 0x440679
cmp cl, 8
je 0x44063e
cmp cl, 0xf8
jne 0x440687
cmp dword [ebx + 0x1c], 0
jne 0x440664
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x440653
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push 0x400
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x1c], eax
mov esi, dword [0x4b3d20]
mov edi, dword [ebx + 0x1c]
add esi, 0x36
mov ecx, 0x100
rep movsd dword es:[edi], dword [esi]
jmp 0x440683
cmp cl, 8
jne 0x440687
mov byte [esp + 0x13], 0x18
mov cl, byte [esp + 0x13]
mov eax, dword [esp + 0x54]
cdq
mov esi, eax
mov al, byte [ebx + 0x16]
xor esi, edx
sub esi, edx
mov dword [esp + 0x1c], esi
cmp cl, al
jne 0x4406c2
movsx edx, word [ebx + 0xc]
cmp dword [esp + 0x50], edx
jne 0x4406c2
movsx edx, word [ebx + 0xe]
cmp esi, edx
jne 0x4406c2
cmp cl, 1
je 0x4406c2
cmp cl, 2
je 0x4406c2
cmp cl, 3
jne 0x44080e
xor edi, edi
cmp dword [ebx + 0x20], edi
je 0x4406ff
cmp al, 1
mov eax, dword [0x4b5af0]
jne 0x4406e2
cmp eax, edi
jne 0x4406dc
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [ebx + 0x20]
push ecx
jmp 0x4406f0
cmp eax, edi
jne 0x4406ec
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, dword [ebx + 0x20]
push edx
push edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov cl, byte [esp + 0x13]
mov dword [ebx + 0x20], edi
movsx eax, cl
add eax, 8
cmp eax, 0x28
ja case.0x440715.7
movzx eax, byte [eax + 0x44190c]
jmp dword [eax*4 + 0x4418f4]
mov edi, esi
imul edi, dword [esp + 0x50]
cmp dword [ebx + 0x24], 0
je 0x44074c
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x440738
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [ebx + 0x24]
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebx + 0x24], 0
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x44075b
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push edi
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x24], eax
jmp 0x4407e1
mov edx, dword [0x4b3d20]
mov ax, word [edx + 0x3a]
mov word [ebx + 0x40], ax
mov ecx, dword [0x4b3d20]
mov dx, word [ecx + 0x38]
mov word [ebx + 0x42], dx
movzx edi, word [ebx + 0x40]
imul edi, esi
imul edi, dword [esp + 0x50]
add edi, edi
add edi, edi
jmp 0x4407e1
mov eax, dword [0x4b3d20]
mov cx, word [eax + 0x3a]
mov word [ebx + 0x40], cx
mov edx, dword [0x4b3d20]
mov ax, word [edx + 0x38]
mov word [ebx + 0x42], ax
mov edi, esi
imul edi, dword [esp + 0x50]
add edi, edi
add edi, edi
jmp 0x4407e1
mov ecx, dword [0x4b3d20]
mov dx, word [ecx + 0x3a]
mov word [ebx + 0x40], dx
mov eax, dword [0x4b3d20]
mov cx, word [eax + 0x38]
mov word [ebx + 0x42], cx
jmp 0x440786
mov edi, dword [esp + 0x18]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x4407f8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push edi
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x20], eax
call fcn.004010f0
mov cl, byte [esp + 0x13]
mov edi, dword [esp + 0x50]
movsx eax, cl
add eax, 8
mov byte [ebx + 0x16], cl
mov word [ebx + 0xc], di
mov word [ebx + 0xe], si
cmp eax, 0x28
ja case.0x440833.7
movzx edx, byte [eax + 0x441958]
jmp dword [edx*4 + 0x441938]
cmp dword [ebp + 8], 6
je 0x4408b0
cmp dword [esp + 0x54], 0
jge 0x44086f
mov edx, dword [0x4b3d20]
movsx ecx, di
movsx eax, si
imul eax, ecx
mov ecx, dword [ebx + 0x20]
push eax
mov eax, dword [esp + 0x46]
add eax, edx
push eax
push ecx
call fcn.00463fd0
add esp, 0xc
jmp case.0x440833.7
movsx esi, si
sub esi, 1
js case.0x440833.7
mov edi, dword [esp + 0x42]
movsx edx, word [ebx + 0xe]
movsx eax, word [ebx + 0xc]
sub edx, esi
dec edx
imul edx, eax
push eax
imul eax, esi
add eax, dword [ebx + 0x20]
add edx, edi
add edx, dword [0x4b3d20]
push edx
push eax
call fcn.00463fd0
add esp, 0xc
sub esi, 1
jns 0x44087f
jmp case.0x440833.7
cmp dword [esp + 0x54], 0
jl case.0x440833.7
cmp dword [esp + 0xc], 0
jne 0x440929
movsx ecx, word [esp + 0x50]
mov edx, dword [ebx + 0x20]
movsx eax, si
imul eax, ecx
push eax
push 0
push edx
call fcn.00463f50
mov eax, dword [esp + 0x2c]
lea edi, [eax - 1]
add esp, 0xc
test edi, edi
jl case.0x440833.7
sub eax, edi
dec eax
imul eax, dword [esp + 0x24]
add eax, dword [esp + 0x42]
mov esi, eax
mov eax, dword [esp + 0x24]
mov ecx, dword [0x4b3d20]
push eax
movsx eax, word [ebx + 0xc]
imul eax, edi
add eax, dword [ebx + 0x20]
lea edx, [esi + ecx]
push edx
push eax
call fcn.00463fd0
add esi, dword [esp + 0x30]
dec edi
add esp, 0xc
test edi, edi
jge 0x4408f9
jmp case.0x440833.7
movsx edx, word [esp + 0x50]
mov eax, dword [ebx + 0x20]
movsx ecx, si
imul ecx, edx
push ecx
push 0
push eax
call fcn.00463f50
add esp, 0xc
lea eax, [esp + 0xd8]
call fcn.0040f930
lea eax, [esp + 0x78]
call fcn.0040f930
mov ecx, dword [0x4b3d20]
mov edx, dword [esp + 0x42]
mov edi, dword [esp + 0x20]
add edx, ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, 8
lea eax, [esp + 0xdc]
call fcn.00408d50
mov eax, dword [ebx + 0x20]
movsx edi, word [ebx + 0xe]
movsx ecx, word [ebx + 0xc]
push eax
mov edx, 8
lea eax, [esp + 0x7c]
call fcn.00408d50
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
cdq
xor eax, edx
sub eax, edx
push eax
mov eax, dword [esp + 0xa8]
push ecx
lea edx, [esp + 0xe0]
push edx
cdq
xor eax, edx
sub eax, edx
push eax
mov eax, dword [esp + 0xb0]
push eax
lea ecx, [esp + 0x8c]
call fcn.004106a0
jmp case.0x440833.7
mov ecx, dword [0x4b3d20]
mov edx, dword [esp + 0x42]
mov esi, dword [ebx + 0x20]
mov edi, dword [ebx + 0x24]
lea eax, [edx + ecx]
movsx ecx, word [esp + 0x1c]
movsx edx, word [esp + 0x50]
imul ecx, edx
mov dword [esp + 0xc], 0
test ecx, ecx
jle case.0x440833.7
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x440a32
movzx edx, byte [eax]
add dword [esp + 0xc], edx
xor ecx, ecx
test edx, edx
jle 0x440a60
nop
mov byte [esi], 0
mov byte [edi], 0
movzx edx, byte [eax]
inc ecx
inc esi
inc edi
cmp ecx, edx
jl 0x440a20
jmp 0x440a60
cmp cl, 0xff
jne 0x440a54
movzx ecx, byte [eax]
add dword [esp + 0xc], ecx
inc eax
test ecx, ecx
jle 0x440a61
mov dl, byte [eax]
mov byte [esi], dl
mov byte [edi], 0xff
dec ecx
inc esi
inc eax
inc edi
test ecx, ecx
jg 0x440a43
jmp 0x440a61
inc dword [esp + 0xc]
mov byte [edi], cl
mov cl, byte [eax]
inc edi
mov byte [esi], cl
inc esi
inc eax
movsx edx, word [ebx + 0xe]
movsx ecx, word [ebx + 0xc]
imul edx, ecx
cmp dword [esp + 0xc], edx
jl 0x440a0b
jmp case.0x440833.7
mov al, byte [esp + 0x5a]
cmp al, 0x18
jne 0x440b4f
mov eax, dword [esp + 0x42]
mov edx, dword [0x4b3d20]
xor ecx, ecx
cmp dword [esp + 0x54], ecx
lea edi, [eax + edx]
mov eax, dword [ebx + 0x20]
jge 0x440ae2
xor edx, edx
cmp dx, si
jge case.0x440833.7
xor edx, edx
xor esi, esi
cmp dx, word [ebx + 0xc]
jge 0x440ad4
movzx edx, byte [edi]
mov byte [eax], dl
movzx edx, byte [edi + 1]
inc edi
inc eax
mov byte [eax], dl
movzx edx, byte [edi + 1]
inc edi
inc eax
mov byte [eax], dl
inc eax
mov byte [eax], 0xff
movsx edx, word [ebx + 0xc]
inc esi
inc edi
inc eax
cmp esi, edx
jl 0x440ab0
movsx edx, word [ebx + 0xe]
inc ecx
cmp ecx, edx
jl 0x440aa6
jmp case.0x440833.7
mov dword [esp + 0xc], ecx
xor ecx, ecx
cmp cx, si
jge case.0x440833.7
movsx ecx, word [ebx + 0xe]
sub ecx, dword [esp + 0xc]
movsx edx, word [ebx + 0xc]
mov esi, dword [esp + 0x42]
dec ecx
imul ecx, edx
lea edi, [esi + ecx*2]
add edi, ecx
add edi, dword [0x4b3d20]
xor esi, esi
test edx, edx
jle 0x440b39
movzx edx, byte [edi]
mov byte [eax], dl
mov cl, byte [edi + 1]
inc edi
inc eax
mov byte [eax], cl
movzx edx, byte [edi + 1]
inc edi
inc eax
mov byte [eax], dl
inc eax
mov byte [eax], 0xff
movsx ecx, word [ebx + 0xc]
inc esi
inc edi
inc eax
cmp esi, ecx
jl 0x440b16
mov ecx, dword [esp + 0xc]
movsx edx, word [ebx + 0xe]
inc ecx
cmp ecx, edx
mov dword [esp + 0xc], ecx
jl 0x440af1
jmp case.0x440833.7
cmp al, 8
jne case.0x440833.7
mov eax, dword [0x4b3d20]
mov ecx, dword [esp + 0x42]
xor edx, edx
cmp dword [esp + 0x54], edx
lea esi, [eax + 0x36]
lea edi, [ecx + eax]
mov eax, dword [ebx + 0x20]
mov dword [esp + 0xc], edx
jge 0x440bcf
cmp dx, word [esp + 0x1c]
jge case.0x440833.7
xor edx, edx
xor ecx, ecx
cmp dx, word [ebx + 0xc]
jge 0x440bb9
movzx edx, byte [edi]
movzx edx, byte [esi + edx*4]
mov byte [eax], dl
movzx edx, byte [edi]
movzx edx, byte [esi + edx*4 + 1]
mov byte [eax + 1], dl
movzx edx, byte [edi]
movzx edx, byte [esi + edx*4 + 2]
inc eax
inc eax
mov byte [eax], dl
inc eax
mov byte [eax], 0xff
movsx edx, word [ebx + 0xc]
inc ecx
inc eax
inc edi
cmp ecx, edx
jl 0x440b8a
mov ecx, dword [esp + 0xc]
movsx edx, word [ebx + 0xe]
inc ecx
cmp ecx, edx
mov dword [esp + 0xc], ecx
jl 0x440b80
jmp case.0x440833.7
xor ecx, ecx
cmp cx, word [esp + 0x1c]
jge case.0x440833.7
lea esp, [esp]
movsx edi, word [ebx + 0xe]
movsx ecx, word [ebx + 0xc]
sub edi, edx
dec edi
imul edi, ecx
add edi, dword [esp + 0x42]
mov dword [esp + 0x14], 0
add edi, dword [0x4b3d20]
test ecx, ecx
jle 0x440c38
movzx edx, byte [edi]
movzx ecx, byte [esi + edx*4]
mov byte [eax], cl
movzx edx, byte [edi]
movzx ecx, byte [esi + edx*4 + 1]
inc dword [esp + 0x14]
mov byte [eax + 1], cl
movzx edx, byte [edi]
movzx ecx, byte [esi + edx*4 + 2]
inc eax
inc eax
mov byte [eax], cl
inc eax
mov byte [eax], 0xff
movsx edx, word [ebx + 0xc]
inc eax
inc edi
cmp dword [esp + 0x14], edx
jl 0x440c04
mov edx, dword [esp + 0xc]
movsx ecx, word [ebx + 0xe]
inc edx
cmp edx, ecx
mov dword [esp + 0xc], edx
jl 0x440be0
jmp case.0x440833.7
mov edx, dword [0x4b3d20]
mov eax, dword [esp + 0x42]
movsx ecx, word [esp + 0x1c]
lea edi, [eax + edx]
movsx edx, word [esp + 0x50]
mov eax, dword [ebx + 0x20]
imul ecx, edx
xor esi, esi
lea ecx, [ecx + ecx*2]
mov dword [esp + 0xc], esi
test ecx, ecx
jle case.0x440833.7
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x440cac
movzx ecx, byte [edi]
add dword [esp + 0xc], ecx
xor edx, edx
test ecx, ecx
jle 0x440ca9
mov cl, byte [edi]
mov byte [eax], cl
inc esi
inc eax
cmp esi, 3
jne 0x440ca1
mov byte [eax], 0
inc eax
xor esi, esi
movzx ecx, byte [edi]
inc edx
cmp edx, ecx
jl 0x440c90
inc edi
jmp 0x440cee
cmp cl, 0xff
jne 0x440cd9
movzx ecx, byte [edi]
add dword [esp + 0xc], ecx
inc edi
test ecx, ecx
jle 0x440cee
lea ecx, [ecx]
mov dl, byte [edi]
mov byte [eax], dl
inc esi
inc eax
inc edi
cmp esi, 3
jne 0x440cd2
mov byte [eax], 0xff
inc eax
xor esi, esi
dec ecx
test ecx, ecx
jg 0x440cc0
jmp 0x440cee
mov dl, byte [edi]
inc dword [esp + 0xc]
mov byte [eax], dl
inc esi
inc eax
inc edi
cmp esi, 3
jne 0x440cee
mov byte [eax], cl
inc eax
xor esi, esi
movsx ecx, word [ebx + 0xe]
movsx edx, word [ebx + 0xc]
imul ecx, edx
lea ecx, [ecx + ecx*2]
cmp dword [esp + 0xc], ecx
jl 0x440c7c
jmp case.0x440833.7
mov edx, dword [0x4b3d20]
mov ax, word [edx + 0x3a]
mov esi, dword [esp + 0x54]
mov word [ebx + 0x40], ax
mov ecx, dword [0x4b3d20]
mov dx, word [ecx + 0x38]
xor eax, eax
mov word [ebx + 0x42], dx
mov word [ebx + 0x44], ax
mov ecx, dword [0x4b3d20]
mov edx, dword [ecx + 0x3e]
mov edi, dword [ecx + 0x42]
mov eax, dword [ebx + 0x20]
add edi, ecx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x1c], 0x42
test esi, esi
jle 0x440d97
mov dword [esp + 0x20], esi
lea ebx, [ebx]
test edx, edx
jle 0x440d86
mov esi, edx
movzx ecx, byte [edi]
mov byte [eax], cl
movzx ecx, byte [edi + 1]
inc edi
inc eax
mov byte [eax], cl
movzx ecx, byte [edi + 1]
inc edi
inc eax
mov byte [eax], cl
inc eax
mov byte [eax], 0xff
inc edi
inc eax
sub esi, 1
jne 0x440d66
sub dword [esp + 0x20], 1
jne 0x440d60
mov ecx, dword [0x4b3d20]
mov esi, dword [esp + 0x54]
mov eax, 1
mov dword [esp + 0x18], 1
cmp ax, word [ebx + 0x40]
jae 0x440e96
mov eax, esi
imul eax, edx
lea edx, [eax + eax*2]
add eax, eax
add eax, eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], eax
mov edi, eax
mov dword [esp + 0x20], eax
jmp 0x440dd0
mov esi, dword [esp + 0x1c]
mov eax, dword [ebx + 0x20]
add esi, 4
add eax, edi
mov edi, dword [esi + ecx]
mov dword [esp + 0x1c], esi
add edi, ecx
xor esi, esi
mov dword [esp + 0xc], 0
test edx, edx
jle 0x440e75
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x440e26
movzx ecx, byte [edi]
add dword [esp + 0xc], ecx
xor edx, edx
test ecx, ecx
jle 0x440e23
mov byte [eax], 0
inc esi
inc eax
cmp esi, 3
jne 0x440e1b
mov byte [eax], 0
inc eax
xor esi, esi
movzx ecx, byte [edi]
inc edx
cmp edx, ecx
jl 0x440e0b
inc edi
jmp 0x440e65
cmp cl, 0xff
jne 0x440e50
movzx ecx, byte [edi]
add dword [esp + 0xc], ecx
inc edi
test ecx, ecx
jle 0x440e65
mov dl, byte [edi]
mov byte [eax], dl
inc esi
inc eax
inc edi
cmp esi, 3
jne 0x440e49
mov byte [eax], 0xff
inc eax
xor esi, esi
dec ecx
test ecx, ecx
jg 0x440e37
jmp 0x440e65
mov dl, byte [edi]
inc dword [esp + 0xc]
mov byte [eax], dl
inc esi
inc eax
inc edi
cmp esi, 3
jne 0x440e65
mov byte [eax], cl
inc eax
xor esi, esi
mov edx, dword [esp + 0x14]
cmp dword [esp + 0xc], edx
jl 0x440df7
mov ecx, dword [0x4b3d20]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
movzx esi, word [ebx + 0x40]
add edi, dword [esp + 0x28]
inc eax
cmp eax, esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], edi
jl 0x440dd0
cmp dword [ebx + 0x3c], 0
je 0x440ebf
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x440eab
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [ebx + 0x3c]
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebx + 0x3c], 0
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x440ece
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov esi, dword [esp + 0x24]
push esi
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [esp + 0x1c]
mov dword [ebx + 0x3c], eax
mov edx, dword [0x4b3d20]
push esi
lea edx, [ecx + edx + 4]
push edx
push eax
call fcn.00463fd0
add esp, 0xc
xor eax, eax
mov word [ebx + 0x46], ax
jmp case.0x440833.7
push ebx
call fcn.0043ffe0
mov eax, dword [0x4b5af0]
add esp, 4
test eax, eax
jne 0x440f1b
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
movzx ecx, word [ebx + 0x42]
lea edx, [ecx*4 + 4]
push edx
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
xor eax, eax
xor edi, edi
mov dword [esp + 0x34], esi
mov dword [ebx + 0x48], esi
cmp ax, word [ebx + 0x42]
jae 0x440f69
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x440f52
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push 0x1c
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esi + edi*4], eax
movzx ecx, word [ebx + 0x42]
inc edi
cmp edi, ecx
jl 0x440f43
mov dword [esi + edi*4], 0xffffffff
mov edi, ebx
call fcn.0043ff60
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x440f86
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
movzx edx, word [ebx + 0x42]
movzx ecx, word [ebx + 0x40]
add edx, ecx
lea edx, [edx*4 + 4]
push edx
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x4c], eax
mov eax, dword [0x4b3d20]
mov cx, word [eax + 0x3a]
mov word [ebx + 0x40], cx
mov edx, dword [0x4b3d20]
mov ax, word [edx + 0x38]
mov word [ebx + 0x42], ax
mov eax, dword [0x4b3d20]
mov ecx, dword [eax + 0x3e]
mov dword [esp + 0x24], ecx
xor ecx, ecx
xor edx, edx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x1c], 0x42
mov dword [esp + 0x18], ecx
cmp dx, word [ebx + 0x40]
jae 0x441147
jmp 0x440ff8
mov eax, dword [0x4b3d20]
mov ecx, dword [esp + 0x1c]
mov esi, dword [ecx + eax]
add esi, eax
mov eax, dword [0x4b5af0]
mov edi, esi
test eax, eax
jne 0x441012
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea edx, [esi + 8]
mov dword [esp + 0x20], edx
mov edx, dword [edx]
imul edx, dword [esi + 0xc]
lea ecx, [esi + 0xc]
add edx, edx
add edx, edx
push edx
push 8
push eax
mov dword [esp + 0x38], ecx
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [esp + 0x18]
mov edx, dword [ebx + 0x4c]
mov dword [edx + ecx*4], eax
mov eax, dword [ebx + 0x4c]
mov eax, dword [eax + ecx*4]
mov edx, dword [esp + 0x14]
add esi, 0x10
mov ecx, esi
movzx ecx, byte [ecx]
inc esi
cmp edx, 0xffffffff
je 0x44105e
cmp ecx, edx
je 0x441062
inc dword [esp + 0x28]
mov dword [esp + 0x14], ecx
movzx edx, word [esp + 0x28]
mov ecx, dword [esp + 0x34]
mov ecx, dword [ecx + edx*4]
mov edx, dword [edi]
add ecx, 0xc
mov dword [ecx], edx
mov edx, dword [edi + 4]
mov dword [ecx + 4], edx
mov edx, dword [edi + 8]
mov dword [ecx + 8], edx
mov edx, dword [edi + 0xc]
mov dword [ecx + 0xc], edx
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x2c]
imul ecx, dword [edx]
xor edi, edi
lea ecx, [ecx + ecx*2]
mov dword [esp + 0xc], edi
test ecx, ecx
jle 0x44112d
mov cl, byte [esi]
inc esi
test cl, cl
jne 0x4410d4
movzx ecx, byte [esi]
add dword [esp + 0xc], ecx
xor edx, edx
test ecx, ecx
jle 0x4410d1
mov byte [eax], 0
inc edi
inc eax
cmp edi, 3
jne 0x4410c9
mov byte [eax], 0
inc eax
xor edi, edi
movzx ecx, byte [esi]
inc edx
cmp edx, ecx
jl 0x4410b9
inc esi
jmp 0x441113
cmp cl, 0xff
jne 0x4410fe
movzx ecx, byte [esi]
add dword [esp + 0xc], ecx
inc esi
test ecx, ecx
jle 0x441113
mov dl, byte [esi]
mov byte [eax], dl
inc edi
inc eax
inc esi
cmp edi, 3
jne 0x4410f7
mov byte [eax], 0xff
inc eax
xor edi, edi
dec ecx
test ecx, ecx
jg 0x4410e5
jmp 0x441113
mov dl, byte [esi]
inc dword [esp + 0xc]
mov byte [eax], dl
inc edi
inc eax
inc esi
cmp edi, 3
jne 0x441113
mov byte [eax], cl
inc eax
xor edi, edi
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x2c]
imul ecx, dword [edx]
lea ecx, [ecx + ecx*2]
cmp dword [esp + 0xc], ecx
jl 0x4410a5
mov eax, dword [esp + 0x18]
movzx edx, word [ebx + 0x40]
add dword [esp + 0x1c], 4
inc eax
cmp eax, edx
mov dword [esp + 0x18], eax
jl 0x440ff3
movzx eax, word [ebx + 0x42]
xor edi, edi
dec eax
mov dword [esp + 0xc], edi
test eax, eax
jle 0x441478
mov ecx, dword [esp + 0x18]
lea edx, [ecx*4]
mov dword [esp + 0x14], edx
lea esp, [esp]
mov eax, vtable.CBuffer.0
mov ecx, 0x20
mov dword [esp + 0x78], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0x90], ecx
mov dword [esp + 0xf0], ecx
xor ecx, ecx
mov eax, ebx
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x8c], edi
mov dword [esp + 0x94], edi
mov dword [esp + 0x98], edi
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa8], edi
mov dword [esp + 0xac], edi
mov dword [esp + 0xb0], edi
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], edi
mov dword [esp + 0xbc], edi
mov dword [esp + 0xc0], edi
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd4], edi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], edi
mov dword [esp + 0xec], edi
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf8], edi
mov dword [esp + 0xfc], edi
mov dword [esp + 0x100], edi
mov dword [esp + 0x104], edi
mov dword [esp + 0x108], edi
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], edi
mov dword [esp + 0x114], edi
mov dword [esp + 0x118], edi
mov dword [esp + 0x11c], edi
mov dword [esp + 0x120], edi
mov dword [esp + 0x130], edi
mov dword [esp + 0x134], edi
call fcn.00440060
cmp byte [ebx + 0x16], 2
mov dword [esp + 0x2c], eax
je 0x4412a3
xor esi, esi
jmp 0x4412c2
mov eax, dword [esp + 0xc]
movzx ecx, word [ebx + 0x40]
inc eax
cmp ecx, eax
jg 0x4412b4
xor esi, esi
jmp 0x4412c2
mov edx, dword [ebx + 0x48]
mov eax, dword [esp + 0xc]
mov esi, dword [edx + eax*4 + 4]
add esi, 0xc
mov eax, dword [0x4b5af0]
cmp eax, edi
jne 0x4412d1
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [esi + 0xc]
imul ecx, dword [esi + 8]
add ecx, ecx
add ecx, ecx
push ecx
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edx, dword [ebx + 0x4c]
mov ecx, dword [esp + 0x14]
mov dword [ecx + edx], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ecx + 8]
mov dword [esp + 0xa0], ecx
add ecx, ecx
add ecx, ecx
mov edx, eax
imul eax, ecx
neg edx
mov dword [esp + 0xa4], edx
add ecx, 3
and ecx, 0xfffffffc
mov edx, 1
mov word [esp + 0xa8], dx
mov dword [esp + 0xc4], ecx
mov ecx, dword [ebx + 0x4c]
mov edx, 0x20
mov word [esp + 0xaa], dx
mov edx, dword [ecx]
mov dword [esp + 0x88], edx
mov edx, dword [esi + 0xc]
mov dword [esp + 0x2c], edx
neg edx
mov dword [esp + 0x104], edx
mov edx, 1
mov word [esp + 0x108], dx
mov dword [esp + 0xb0], eax
mov eax, 4
mov edx, 0x20
mov word [esp + 0x10a], dx
mov edx, dword [esp + 0x2c]
mov word [esp + 0xc8], ax
mov eax, dword [esi + 8]
imul edx, eax
add edx, edx
add edx, edx
mov dword [esp + 0x110], edx
lea edx, [eax*4 + 3]
and edx, 0xfffffffc
mov dword [esp + 0x124], edx
mov edx, 4
mov word [esp + 0x128], dx
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + ecx]
mov edx, dword [esi + 4]
mov dword [esp + 0xe8], ecx
mov ecx, 0x4b5adc
push edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0x130], ecx
mov ecx, dword [esi]
push ecx
push edx
push eax
push edi
mov dword [esp + 0xb0], 0x28
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc8], edi
mov dword [esp + 0xcc], edi
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd4], edi
mov dword [esp + 0x110], 0x28
mov dword [esp + 0x114], eax
mov dword [esp + 0x120], edi
mov dword [esp + 0x128], edi
mov dword [esp + 0x12c], edi
mov dword [esp + 0x130], edi
mov dword [esp + 0x134], edi
push edi
lea eax, [esp + 0x90]
lea ecx, [esp + 0xf0]
call fcn.00408dc0
movzx ecx, word [ebx + 0x42]
mov eax, dword [esp + 0xc]
add dword [esp + 0x14], 4
inc eax
dec ecx
cmp eax, ecx
mov dword [esp + 0xc], eax
jl 0x441170
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
mov ecx, dword [ebx + 0x4c]
add edx, eax
mov dword [ecx + edx*4], 0xffffffff
cmp dword [ebx + 0x3c], edi
je 0x4414af
mov eax, dword [0x4b5af0]
cmp eax, edi
jne 0x4414a0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, dword [ebx + 0x3c]
push edx
push edi
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebx + 0x3c], edi
mov eax, dword [0x4b5af0]
cmp eax, edi
jne 0x4414be
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov esi, dword [esp + 0x24]
push esi
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edx, dword [esp + 0x1c]
mov dword [ebx + 0x3c], eax
mov ecx, dword [0x4b3d20]
push esi
add edx, ecx
push edx
push eax
call fcn.00463fd0
movzx eax, word [ebx + 0x42]
dec eax
add esp, 0xc
test eax, eax
jle 0x44160e
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], 4
cmp dword [esp + 0x18], 3
je 0x4415f2
xor ecx, ecx
mov eax, ebx
call fcn.00440060
cmp byte [ebx + 0x16], 2
mov dword [esp + 0x20], eax
je 0x441525
xor esi, esi
jmp 0x441540
movzx ecx, word [ebx + 0x40]
cmp ecx, dword [esp + 0x18]
jg 0x441533
xor esi, esi
jmp 0x441540
mov edx, dword [ebx + 0x48]
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + edx]
add esi, 0xc
xor ecx, ecx
mov eax, ebx
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], edi
call fcn.0043d7f0
xor ecx, ecx
cmp cx, ax
jae 0x4415f2
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 8]
movzx ecx, word [esp + 0x24]
mov edx, dword [ebx + 0x3c]
movzx ecx, word [edx + ecx*2 + 4]
mov edx, dword [ebx + 0x4c]
mov ecx, dword [edx + ecx*4]
mov edx, dword [esi + 8]
mov dword [esp + 0x14], edx
mov edx, dword [esi + 4]
mov esi, dword [esi]
lea eax, [eax*4 + 3]
and eax, 0xfffffffc
imul edx, eax
add edx, ecx
mov ecx, dword [esp + 0x14]
add ecx, ecx
add ecx, ecx
sub eax, ecx
lea edx, [edx + esi*4]
mov esi, dword [esp + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [esi + 0xc]
cmp eax, edi
jle 0x4415d8
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x14], edi
jle 0x4415cd
mov ecx, dword [esp + 0x14]
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x14]
add eax, eax
add eax, eax
add edx, eax
xor edi, edi
add edx, dword [esp + 0xc]
sub dword [esp + 0x2c], 1
jne 0x4415b1
inc dword [esp + 0x24]
xor ecx, ecx
mov eax, ebx
call fcn.0043d7f0
movzx eax, ax
cmp dword [esp + 0x24], eax
jl 0x44155c
mov eax, dword [esp + 0x18]
movzx ecx, word [ebx + 0x42]
add dword [esp + 0x1c], 4
inc eax
mov dword [esp + 0x18], eax
dec ecx
dec eax
cmp eax, ecx
jl 0x441503
xor edx, edx
cmp dx, word [ebx + 0x42]
jae case.0x440833.7
mov edx, dword [esp + 0x34]
mov edi, edi
mov eax, dword [ebx + 0x3c]
test edi, edi
jbe 0x44163d
mov ecx, edi
lea esp, [esp]
sub ecx, 1
movzx esi, word [eax + 2]
lea eax, [eax + esi*2 + 4]
jne 0x441630
mov ax, word [eax + 2]
mov ecx, dword [edx + edi*4]
mov word [ecx], ax
mov ecx, dword [edx + edi*4]
xor eax, eax
mov word [ecx + 2], ax
mov eax, dword [ebx + 0x3c]
test edi, edi
jbe 0x44166d
mov ecx, edi
lea esp, [esp]
sub ecx, 1
movzx esi, word [eax + 2]
lea eax, [eax + esi*2 + 4]
jne 0x441660
movzx eax, byte [eax + 1]
sub eax, 2
je 0x441682
mov ecx, dword [edx + edi*4]
mov dword [ecx + 4], 1
jmp 0x44168c
mov eax, dword [edx + edi*4]
mov dword [eax + 4], 0
movzx ecx, word [ebx + 0x42]
inc edi
cmp edi, ecx
jl 0x441620
jmp case.0x440833.7
mov edx, dword [0x4b3d20]
mov ax, word [edx + 0x3a]
mov word [ebx + 0x40], ax
mov ecx, dword [0x4b3d20]
mov dx, word [ecx + 0x38]
xor eax, eax
mov word [ebx + 0x44], ax
mov eax, dword [ebx + 0x20]
mov word [ebx + 0x42], dx
mov edx, dword [0x4b3d20]
mov ecx, dword [edx + 0x3e]
mov dword [esp + 0x24], ecx
xor ecx, ecx
mov dword [esp + 0x1c], 0x42
mov dword [esp + 0x18], 0
cmp cx, word [ebx + 0x40]
jae 0x4417cd
mov ecx, dword [esp + 0x54]
imul ecx, edi
lea esi, [ecx + ecx*2]
add ecx, ecx
add ecx, ecx
mov dword [esp + 0x14], esi
mov dword [esp + 0x20], 0
mov dword [esp + 0x28], ecx
cmp dword [esp + 0x18], 0
je 0x441719
mov eax, dword [ebx + 0x20]
add dword [esp + 0x1c], 4
add eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edi, dword [ecx + edx]
xor esi, esi
add edi, edx
cmp dword [esp + 0x14], esi
mov dword [esp + 0xc], esi
jle 0x4417b0
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x441761
movzx ecx, byte [edi]
add dword [esp + 0xc], ecx
xor edx, edx
test ecx, ecx
jle 0x44175e
mov byte [eax], 0
inc esi
inc eax
cmp esi, 3
jne 0x441756
mov byte [eax], 0
inc eax
xor esi, esi
movzx ecx, byte [edi]
inc edx
cmp edx, ecx
jl 0x441746
inc edi
jmp 0x4417a0
cmp cl, 0xff
jne 0x44178b
movzx ecx, byte [edi]
add dword [esp + 0xc], ecx
inc edi
test ecx, ecx
jle 0x4417a0
mov dl, byte [edi]
mov byte [eax], dl
inc esi
inc eax
inc edi
cmp esi, 3
jne 0x441784
mov byte [eax], 0xff
inc eax
xor esi, esi
dec ecx
test ecx, ecx
jg 0x441772
jmp 0x4417a0
mov dl, byte [edi]
inc dword [esp + 0xc]
mov byte [eax], dl
inc esi
inc eax
inc edi
cmp esi, 3
jne 0x4417a0
mov byte [eax], cl
inc eax
xor esi, esi
mov ecx, dword [esp + 0xc]
cmp ecx, dword [esp + 0x14]
jl 0x441732
mov edx, dword [0x4b3d20]
mov esi, dword [esp + 0x28]
add dword [esp + 0x20], esi
mov ecx, dword [esp + 0x18]
movzx esi, word [ebx + 0x40]
inc ecx
cmp ecx, esi
mov dword [esp + 0x18], ecx
jl 0x441706
cmp dword [ebx + 0x3c], 0
je 0x4417f6
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x4417e2
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, dword [ebx + 0x3c]
push edx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebx + 0x3c], 0
mov eax, dword [0x4b5af0]
test eax, eax
jne 0x441805
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov esi, dword [esp + 0x24]
push esi
push 8
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edx, dword [esp + 0x1c]
mov dword [ebx + 0x3c], eax
mov ecx, dword [0x4b3d20]
push esi
lea ecx, [edx + ecx + 4]
push ecx
push eax
call fcn.00463fd0
add esp, 0xc
xor edx, edx
mov word [ebx + 0x46], dx
mov eax, dword [esp + 0x30]
sub ebx, eax
lea edx, [ebx + 0x28]
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x441840
cmp dword [ebp + 0x10], 1
jne 0x4418dd
mov ebx, dword [0x4b5e44]
test ebx, ebx
je 0x4418dd
mov eax, dword [esp + 0x74]
call fcn.004480c0
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1188]
xor ecx, esp
call fcn.0045f0aa
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x30]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x441886
lea edi, [esp + 0x138]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x441897
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0
and ecx, 3
push 0x494828
lea eax, [esp + 0x140]
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4b3c9c]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffff
call esi
push 0xffffffffffffffff
call esi
push 0xffffffffffffffff
call esi
mov ecx, dword [esp + 0x1194]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0045f0aa
mov esp, ebp
pop ebp
ret