Function at 0x402350
Capabilities:
Accept command line arguments
Get file size
Get process heap flags
Read file on windows
Set console window title
Set current directory
Terminate process

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff8
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x528
mov esi, dword [ecx + 4]
call fcn.00402290
mov ebx, dword [esi + 4]
test ebx, ebx
je 0x4029d4
mov dword [esp + 4], str.__app_name
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_strcmp]
test eax, eax
jne 0x402845
mov eax, dword [esi + 8]
mov dword [ebp - 0x4f8], eax
test eax, eax
je 0x4029d4
lea eax, [esi + 0xc]
mov edx, dword [eax]
test edx, edx
je 0x4028d3
mov ebx, dword [eax + 4]
lea edi, [eax + 4]
mov dword [ebp - 0x4ec], edi
test ebx, ebx
je 0x4028cd
xor eax, eax
mov dword [ebp - 0x4fc], esi
mov dword [ebp - 0x4f0], edi
mov esi, eax
lea esi, [esi]
movzx eax, byte [ebx]
test al, al
je 0x40278d
mov edx, ebx
xor edi, edi
xor ecx, ecx
jmp 0x402415
cmp al, 9
je 0x4026b0
cmp al, 0x20
je 0x4026b0
cmp al, 0x22
je 0x4026c0
xor ecx, ecx
movzx eax, byte [edx + 1]
add edx, 1
test al, al
je 0x402427
cmp al, 0x5c
jne 0x4023f0
movzx eax, byte [edx + 1]
add edx, 1
add ecx, 1
test al, al
jne 0x402415
sub edx, ebx
add edx, 1
add dword [ebp - 0x4f0], 4
add esi, edx
mov eax, dword [ebp - 0x4f0]
lea esi, [esi + edi*2]
mov ebx, dword [eax]
test ebx, ebx
jne 0x4023d8
mov dword [ebp - 0x4f4], esi
mov ebx, dword [ebp - 0x4f4]
mov edx, 2
mov esi, dword [ebp - 0x4fc]
lea eax, [ebx + 1]
test ebx, ebx
cmove eax, edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov edi, eax
test eax, eax
je 0x40259a
mov ebx, dword [ebp - 0x4f4]
lea eax, [eax + 1]
mov dword [ebp - 0x4f0], eax
mov eax, 0xff
cmp ebx, eax
cmovle eax, ebx
mov byte [edi], al
mov eax, dword [ebp - 0x4ec]
mov ebx, dword [eax]
test ebx, ebx
je 0x402583
mov dword [ebp - 0x4fc], edi
mov dword [ebp - 0x500], esi
lea esi, [esi]
movzx ecx, byte [ebx]
test cl, cl
je 0x4028b1
mov edx, ebx
mov eax, ecx
xor edi, edi
xor esi, esi
jmp 0x4024fb
cmp al, 0x22
je 0x4026d0
movzx eax, byte [edx + 1]
add edx, 1
test al, al
je 0x40251b
cmp al, 0x20
je 0x402503
cmp al, 9
jne 0x4024e8
test esi, esi
jne 0x4026e0
movzx eax, byte [edx + 1]
add edx, 1
mov edi, 1
test al, al
jne 0x4024fb
test edi, edi
jne 0x40279c
test esi, esi
jne 0x402780
mov dword [esp + 4], ebx
mov edi, dword [ebp - 0x4f0]
mov dword [esp], edi
call dword [sym.imp.ucrtbase.dll_strcpy]
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_strlen]
lea edx, [edi + eax]
test esi, esi
je 0x402554
mov byte [edx], 0x22
add edx, 1
add dword [ebp - 0x4ec], 4
lea eax, [edx + 1]
mov byte [edx], 0x20
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4ec]
mov ebx, dword [eax]
test ebx, ebx
jne 0x4024d0
mov edi, dword [ebp - 0x4fc]
mov esi, dword [ebp - 0x500]
cmp dword [ebp - 0x4f4], 1
adc dword [ebp - 0x4f0], 0xffffffff
mov eax, dword [ebp - 0x4f0]
mov byte [eax], 0
test byte [section..data], 8
jne 0x4027c9
lea eax, [ebp - 0x3d0]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetStartupInfoA]
mov eax, 2
mov word [ebp - 0x4e4], ax
sub esp, 4
mov eax, 1
test byte [ebp - 0x3a4], 1
jne 0x4027bd
mov word [ebp - 0x4e2], ax
xor eax, eax
mov word [ebp - 0x4d5], ax
mov dword [esp], edi
call sub.krnl386.exe16_MapLS
mov dword [ebp - 0x4d3], eax
lea eax, [ebp - 0x4e4]
sub esp, 4
mov dword [esp], eax
call sub.krnl386.exe16_MapLS
mov dword [ebp - 0x4cb], 0
sub esp, 4
mov dword [ebp - 0x4cf], eax
mov dword [esp], 1
call sub.krnl386.exe16_RestoreThunkLock
sub esp, 4
mov dword [esp], str.gdi.exe
call sub.krnl386.exe16_LoadLibrary16
sub esp, 4
mov dword [esp], str.user.exe
call sub.krnl386.exe16_LoadLibrary16
sub esp, 4
mov dword [esp], str.mmsystem.dll
call sub.krnl386.exe16_LoadLibrary16
lea eax, [ebp - 0x4d5]
sub esp, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4f8]
mov dword [esp], eax
call sub.krnl386.exe16_LoadModule16
movzx ebx, ax
sub esp, 8
cmp bx, 0x1f
jbe 0x402998
lea eax, [ebp - 0x184]
mov dword [esp], eax
call sub.krnl386.exe16_ReleaseThunkLock
sub esp, 4
mov dword [esp], 0xffffffff
call dword [sym.imp.kernel32.dll_Sleep]
xor eax, eax
sub esp, 4
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
xor ecx, ecx
mov edi, 1
jmp 0x40240a
lea esi, [esi + ecx*2 + 1]
xor ecx, ecx
jmp 0x40240a
test edi, edi
jne 0x4026e0
mov esi, 1
jmp 0x4024f0
mov eax, dword [ebp - 0x4f0]
lea edx, [eax + 1]
mov byte [eax], 0x22
movzx ecx, byte [ebx]
test cl, cl
je 0x40254e
mov esi, 1
xor eax, eax
mov edi, edx
jmp 0x40271e
cmp cl, 0x22
je 0x402740
mov byte [edi], cl
xor eax, eax
mov edi, edx
movzx ecx, byte [ebx + 1]
add ebx, 1
test cl, cl
je 0x402738
lea edx, [edi + 1]
cmp cl, 0x5c
jne 0x402708
add ebx, 1
mov byte [edi], 0x5c
add eax, 1
mov edi, edx
movzx ecx, byte [ebx]
test cl, cl
jne 0x40271e
mov edx, edi
jmp 0x40254a
test eax, eax
js 0x4028aa
lea edx, [eax + 1]
mov dword [esp + 8], edx
mov dword [ebp - 0x4f0], edx
mov dword [esp + 4], 0x5c
mov dword [esp], edi
call sub.ucrtbase.dll_memset
mov edx, dword [ebp - 0x4f0]
lea eax, [edi + edx]
lea edi, [eax + 1]
mov byte [eax], 0x22
xor eax, eax
jmp 0x402713
mov edx, dword [ebp - 0x4f0]
xor esi, esi
jmp 0x4026fc
mov edx, 1
mov edi, 1
jmp 0x40242c
mov eax, dword [ebp - 0x4f0]
lea edx, [eax + 1]
mov byte [eax], 0x22
test esi, esi
jne 0x4026ec
mov dword [ebp - 0x4f0], edx
mov esi, edi
jmp 0x40252b
movzx eax, word [ebp - 0x3a0]
jmp 0x4025d7
mov dword [esp], section..data
call fcn.004021d0
test al, 8
je 0x4025a7
test byte [section..data], 8
jne 0x4028eb
mov eax, dword [esi]
xor ebx, ebx
test eax, eax
jne 0x40280e
jmp 0x4025a7
add ebx, 1
mov eax, dword [esi + ebx*4]
test eax, eax
je 0x4025a7
test byte [section..data], 8
je 0x402800
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.argv__d_:__s_n
mov dword [esp + 8], str.main
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401880
jmp 0x402800
lea edi, [ebp - 0x38c]
xor ecx, ecx
mov dword [esp + 4], ebx
xor ebx, ebx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0x104
mov dword [esp + 8], str..exe
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_SearchPathA]
mov dword [ebp - 0x4f8], edi
mov edx, eax
sub esp, 0x18
lea eax, [esi + 4]
test edx, edx
jne 0x4023a7
mov eax, dword [esi + 4]
mov dword [esp], str.winevdm:_unable_to_exec__s:_file_not_found_n
mov dword [esp + 4], eax
call fcn.00401360
mov dword [esp], 1
call dword [sym.imp.kernel32.dll_ExitProcess]
mov eax, edi
jmp 0x40276e
mov eax, dword [ebp - 0x4f0]
mov esi, 1
mov byte [eax], 0x22
add eax, 1
mov dword [ebp - 0x4f0], eax
jmp 0x40252b
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4ec], eax
xor eax, eax
mov dword [ebp - 0x4f4], eax
mov eax, 2
jmp 0x402463
call dword [sym.imp.kernel32.dll_GetCommandLineA]
mov dword [esp + 0xc], str.GetCommandLine___s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.main
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401880
test byte [section..data], 8
je 0x4027ea
mov eax, dword [ebp - 0x4f8]
mov dword [esp + 0xc], str.appname___s_n
mov dword [esp + 8], str.main
mov dword [esp + 4], 0x404000
mov dword [esp], 3
mov dword [esp + 0x10], eax
call fcn.00401880
test byte [section..data], 8
je 0x4027ea
lea eax, [edi + 1]
mov dword [esp + 0x14], eax
movsx eax, byte [edi]
mov dword [esp + 0xc], str.cmdline___.s_n
mov dword [esp + 8], str.main
mov dword [esp + 4], 0x404000
mov dword [esp + 0x10], eax
mov dword [esp], 3
call fcn.00401880
jmp 0x4027ea
cmp bx, 0xb
je 0x4029ff
mov eax, dword [ebp - 0x4f8]
mov dword [esp], str.winevdm:_cant_exec__s:
mov dword [esp + 4], eax
call fcn.00401360
cmp bx, 2
jne 0x4029ed
mov dword [esp], str.file_not_found_n
mov ebx, 2
call fcn.00401360
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_ExitProcess]
mov dword [esp], str.Usage:_winevdm.exe____app_name_app.exe__command_line_n_n
call fcn.00401360
mov dword [esp], 1
call dword [sym.imp.kernel32.dll_ExitProcess]
mov dword [esp + 4], ebx
mov dword [esp], str.error_d_n
call fcn.00401360
jmp 0x4029cb
mov dword [esp + 4], 0x2e
mov eax, dword [ebp - 0x4f8]
lea esi, [edi + 1]
mov dword [esp], eax
mov eax, dword [sym.imp.ucrtbase.dll_strrchr]
mov dword [ebp - 0x50c], eax
call eax
mov dword [ebp - 0x4f0], esi
test eax, eax
je 0x402a48
mov dword [esp], eax
mov eax, dword [sym.imp.ucrtbase.dll__stricmp]
mov dword [esp + 4], str..pif
mov dword [ebp - 0x508], eax
call eax
mov ebx, eax
test eax, eax
je 0x402a85
mov edx, dword [ebp - 0x4f0]
mov eax, dword [ebp - 0x4f8]
call fcn.00401380
mov eax, dword [ebp - 0x4f8]
mov dword [esp], str.winevdm:_cant_exec__s:
mov ebx, 0xb
mov dword [esp + 4], eax
call fcn.00401360
mov dword [esp], str.invalid_program_file_n
call fcn.00401360
jmp 0x4029cb
xor ecx, ecx
xor esi, esi
mov dword [esp + 0x10], 3
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], 0x80000000
mov eax, dword [ebp - 0x4f8]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x4ec], eax
add eax, 1
je 0x402ceb
lea eax, [ebp - 0x4e0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4ec]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GetFileSizeEx]
push edx
push edx
test eax, eax
je 0x40339b
mov eax, 0x186
cmp eax, dword [ebp - 0x4e0]
sbb ebx, dword [ebp - 0x4dc]
jge 0x40339b
xor ebx, ebx
mov eax, dword [sym.imp.kernel32.dll_SetFilePointer]
xor esi, esi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ebx
mov dword [esp + 4], ebx
mov ebx, dword [ebp - 0x4ec]
mov dword [esp], ebx
mov dword [ebp - 0x504], eax
call eax
lea eax, [ebp - 0x4e8]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [sym.imp.kernel32.dll_ReadFile]
mov dword [esp + 0x10], esi
lea esi, [ebp - 0x184]
mov dword [esp + 8], 0x171
mov dword [esp + 4], esi
mov dword [esp], ebx
mov dword [ebp - 0x4fc], eax
call eax
sub esp, 0x14
test eax, eax
je 0x403353
test byte [section..data], 8
jne 0x4031f7
xor ecx, ecx
mov dword [esp + 8], 0x16
lea eax, [ebp - 0x4e8]
mov dword [esp + 0x10], ecx
lea ebx, [ebp - 0x4c7]
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x4ec]
mov dword [esp], eax
mov eax, dword [ebp - 0x4fc]
call eax
sub esp, 0x14
mov dword [esp + 8], 0xf
mov dword [esp + 4], str.MICROSOFT_PIFEX
mov dword [esp], ebx
call sub.ucrtbase.dll_strncmp
mov dword [ebp - 0x4f4], eax
test eax, eax
jne 0x40318c
mov dword [ebp - 0x500], edi
movzx eax, word [ebp - 0x4b7]
test ax, ax
js 0x402d8c
lea edx, [eax + 0x16]
cmp dword [ebp - 0x4e0], edx
mov edx, dword [ebp - 0x4dc]
sbb edx, 0
jl 0x402d8c
xor edx, edx
mov dword [esp + 4], eax
mov dword [esp + 0xc], edx
mov dword [esp + 8], edx
mov edi, dword [ebp - 0x4ec]
mov dword [esp], edi
mov eax, dword [ebp - 0x504]
call eax
sub esp, 0x10
test eax, eax
je 0x403353
xor eax, eax
mov dword [esp + 8], 0x16
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x4e8]
mov dword [esp + 0xc], eax
mov dword [esp + 4], ebx
mov dword [esp], edi
mov eax, dword [ebp - 0x4fc]
call eax
sub esp, 0x14
test eax, eax
je 0x403353
cmp byte [ebp - 0x4c7], 0
je 0x402bdb
test byte [section..data], 8
jne 0x402d33
mov dword [esp + 8], 0xb
mov dword [esp + 4], str.WINDOWS_386
mov dword [esp], ebx
call sub.ucrtbase.dll_strncmp
test eax, eax
jne 0x402bdb
xor eax, eax
mov dword [esp + 8], 0x68
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x4e8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4ec]
mov dword [esp], eax
mov eax, dword [ebp - 0x4fc]
call eax
sub esp, 0x14
test byte [section..data], 8
jne 0x403065
mov dword [ebp - 0x4f4], 1
jmp 0x402bdb
test byte [section..data], 2
je 0x402a59
mov eax, dword [ebp - 0x4f8]
or edx, 0xffffffff
call fcn.00401240
mov dword [esp + 0xc], str.open_file__s_failed_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.pif_cmd
mov dword [esp + 4], 0x404000
mov dword [esp], 1
call fcn.00401880
jmp 0x402a59
movzx ecx, word [ebp - 0x4b7]
or edx, 0xffffffff
mov eax, ebx
movzx edi, word [ebp - 0x4b3]
mov dword [ebp - 0x510], ecx
call fcn.00401240
mov ecx, dword [ebp - 0x510]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.reading_record__s_size__d_next_0x_x_n
mov dword [esp + 8], 0x40550c
mov dword [esp + 0x18], ecx
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401880
jmp 0x402c79
lea eax, [ebp - 0x160]
mov edi, dword [ebp - 0x500]
mov dword [esp + 8], 0x40
mov dword [esp + 4], eax
lea eax, [ebp - 0x492]
mov dword [esp], eax
call section..text
lea eax, [ebp - 0x182]
sub esp, 0xc
mov dword [esp + 4], eax
lea eax, [ebp - 0x4b1]
mov dword [esp + 8], 0x1f
mov dword [esp], eax
call section..text
sub esp, 0xc
cmp dword [ebp - 0x4f4], 0
mov dword [esp + 8], 0x41
je 0x40300c
lea eax, [ebp - 0x260]
mov dword [esp + 4], eax
lea eax, [ebp - 0x452]
mov dword [ebp - 0x4fc], eax
lea ebx, [ebp - 0x411]
mov dword [esp], eax
call section..text
lea eax, [ebp - 0x11f]
sub esp, 0xc
mov dword [esp + 8], 0x41
mov dword [esp + 4], eax
mov dword [esp], ebx
call section..text
movzx eax, word [ebp - 0x274]
sub esp, 0xc
and eax, 0x10
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4ec]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CloseHandle]
push eax
lea eax, [ebp - 0x492]
mov dword [esp + 4], 0x2e
mov dword [esp], eax
mov eax, dword [ebp - 0x50c]
call eax
test eax, eax
je 0x402e92
mov dword [esp + 4], str..bat
mov dword [esp], eax
mov eax, dword [ebp - 0x508]
call eax
test eax, eax
jne 0x402e92
test byte [section..data], 1
jne 0x403165
cmp byte [ebp - 0x411], 0
jne 0x402f7e
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xc], 0x104
mov dword [esp + 8], eax
lea eax, [ebp - 0x492]
mov dword [esp + 4], eax
lea ebx, [ebp - 0x288]
xor eax, eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], ebx
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_SearchPathA]
sub esp, 0x18
test eax, eax
je 0x402f30
cmp dword [ebp - 0x4f4], 0
jne 0x402f14
cmp byte [edi + 1], 0
jne 0x402f02
cmp byte [ebp - 0x452], 0
mov eax, dword [ebp - 0x4fc]
cmove eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f0], eax
mov edx, dword [ebp - 0x4f0]
mov eax, ebx
call fcn.00401380
jmp 0x402a59
call dword [sym.imp.kernel32.dll_AllocConsole]
test eax, eax
je 0x402ee2
lea eax, [ebp - 0x4b1]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_SetConsoleTitleA]
push eax
jmp 0x402ee2
mov eax, dword [ebp - 0x4f8]
mov dword [esp + 4], str._s_nInvalid_program_file_name._Check_your_pif_file.
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.004012b0
xor edx, edx
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], str.16_bit_DOS_subsystem
mov dword [esp], edx
call dword [sym.imp.user32.dll_MessageBoxA]
sub esp, 0x10
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 2
jmp 0x402a59
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_SetCurrentDirectoryA]
push edx
test eax, eax
jne 0x402e9f
test byte [section..data], 2
je 0x402fcb
or edx, 0xffffffff
mov eax, ebx
call fcn.00401240
mov dword [esp + 0xc], str.Cannot_change_directory__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.pif_cmd
mov dword [esp + 4], 0x404000
mov dword [esp], 1
call fcn.00401880
mov eax, dword [ebp - 0x4f8]
mov dword [esp + 4], str._s_nInvalid_startup_directory._Check_your_pif_file.
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.004012b0
xor eax, eax
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], str.16_bit_DOS_subsystem
mov dword [esp], eax
call dword [sym.imp.user32.dll_MessageBoxA]
sub esp, 0x10
jmp 0x402e9f
lea eax, [ebp - 0xdf]
mov dword [esp + 4], eax
lea eax, [ebp - 0x452]
mov dword [ebp - 0x4fc], eax
lea ebx, [ebp - 0x411]
mov dword [esp], eax
call section..text
lea eax, [ebp - 0x11f]
sub esp, 0xc
mov dword [esp + 8], 0x41
mov dword [esp + 4], eax
mov dword [esp], ebx
call section..text
movzx eax, byte [ebp - 0x121]
sub esp, 0xc
and eax, 2
mov dword [ebp - 0x4f4], eax
jmp 0x402e41
movzx eax, word [ebp - 0x27c]
mov dword [esp + 0x24], eax
movzx eax, word [ebp - 0x27a]
mov dword [esp + 0x20], eax
movzx eax, word [ebp - 0x280]
mov dword [esp + 0x1c], eax
movzx eax, word [ebp - 0x27e]
mov dword [esp + 0x18], eax
movzx eax, word [ebp - 0x288]
mov dword [esp + 0x14], eax
movzx eax, word [ebp - 0x286]
mov dword [esp + 0xc], str.386rec:_memory_reqd__d_desd__d_EMS_reqd__d_desd__d_XMS_reqd__d_desd__d_n
mov dword [esp + 8], 0x40550c
mov dword [esp + 4], 0x404000
mov dword [esp + 0x10], eax
mov dword [esp], 3
call fcn.00401880
test byte [section..data], 8
je 0x402cdc
movzx eax, word [ebp - 0x274]
mov dword [esp + 0x18], eax
movzx eax, word [ebp - 0x276]
mov dword [esp + 0x14], eax
movzx eax, word [ebp - 0x278]
mov dword [esp + 0xc], str.386rec:_option_0x_x_memory_0x_x_video_0x_x_n
mov dword [esp + 8], 0x40550c
mov dword [esp + 4], 0x404000
mov dword [esp + 0x10], eax
mov dword [esp], 3
call fcn.00401880
test byte [section..data], 8
je 0x402cdc
or edx, 0xffffffff
lea eax, [ebp - 0x260]
call fcn.00401240
mov dword [esp + 0xc], str.386rec:_optional_parameters__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0x40550c
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401880
jmp 0x402cdc
xor ecx, ecx
mov dword [esp + 0xc], str..bat_programs_in_pif_files_are_not_supported._n
mov dword [esp + 8], str.pif_cmd
mov dword [esp + 4], 0x404000
mov dword [esp], ecx
call fcn.00401880
jmp 0x402e92
test byte [section..data], 2
jne 0x40332f
mov eax, dword [ebp - 0x4ec]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CloseHandle]
push eax
mov eax, dword [ebp - 0x4f8]
mov dword [esp + 4], str._s_nInvalid_file_format._Check_your_pif_file.
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.004012b0
xor eax, eax
mov dword [esp + 4], esi
mov dword [esp + 0xc], 0x30
mov dword [esp + 8], str.16_bit_DOS_subsystem
mov dword [esp], eax
call dword [sym.imp.user32.dll_MessageBoxA]
sub esp, 0x10
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0xb
jmp 0x402a59
lea eax, [ebp - 0xdf]
or edx, 0xffffffff
call fcn.00401240
or edx, 0xffffffff
mov ebx, eax
lea eax, [ebp - 0x11f]
call fcn.00401240
mov edx, 0x1e
mov dword [ebp - 0x4f4], eax
lea eax, [ebp - 0x182]
call fcn.00401240
lea ecx, [ebp - 0x160]
or edx, 0xffffffff
mov dword [ebp - 0x500], eax
mov eax, ecx
call fcn.00401240
mov dword [esp + 0x1c], ebx
mov ebx, dword [ebp - 0x4f4]
mov dword [esp + 0x18], ebx
mov ebx, dword [ebp - 0x500]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.header:_program__s_title__s_startdir__s_params__s_n
mov dword [esp + 8], 0x40550c
mov dword [esp + 0x14], ebx
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401880
test byte [section..data], 8
je 0x402b79
movzx eax, byte [ebp - 0x9f]
mov dword [esp + 0x1c], eax
movzx eax, byte [ebp - 0x120]
mov dword [esp + 0x18], eax
movzx eax, word [ebp - 0x164]
mov dword [esp + 0x14], eax
movzx eax, word [ebp - 0x162]
mov dword [esp + 0xc], str.header:_memory_reqd__d_desrd__d_drive__d_videomode__d_n
mov dword [esp + 8], 0x40550c
mov dword [esp + 4], 0x404000
mov dword [esp + 0x10], eax
mov dword [esp], 3
call fcn.00401880
test byte [section..data], 8
je 0x402b79
movzx eax, byte [ebp - 0x14]
mov dword [esp + 0x18], eax
movzx eax, byte [ebp - 0x15]
mov dword [esp + 0x14], eax
movzx eax, byte [ebp - 0x121]
mov dword [esp + 0xc], str.header:_flags_0x_x_0x_x_0x_x_n
mov dword [esp + 8], 0x40550c
mov dword [esp + 4], 0x404000
mov dword [esp + 0x10], eax
mov dword [esp], 3
call fcn.00401880
jmp 0x402b79
mov dword [esp + 0xc], str.Invalid_pif_file:_magic_string_not_found_n
mov dword [esp + 8], 0x40550c
mov dword [esp + 4], 0x404000
mov dword [esp], 1
call fcn.00401880
test byte [section..data], 2
je 0x403199
mov eax, dword [ebp - 0x4f8]
or edx, 0xffffffff
call fcn.00401240
mov dword [esp + 0xc], str.failed_to_read__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.pif_cmd
mov dword [esp + 4], 0x404000
mov dword [esp], 1
call fcn.00401880
jmp 0x403199
test byte [section..data], 2
jne 0x4033af
lea esi, [ebp - 0x184]
jmp 0x403199
mov eax, dword [ebp - 0x4e0]
mov dword [esp + 0xc], str.Invalid_pif_file:_size_error__d_n
lea esi, [ebp - 0x184]
mov dword [esp + 8], 0x40550c
mov dword [esp + 4], 0x404000
mov dword [esp], 1
mov dword [esp + 0x10], eax
call fcn.00401880
jmp 0x403353