Function at 0x4948c0
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d0b53
mov eax, dword fs:[0]
push eax
sub esp, 0x1c0
mov eax, dword [0x50f880]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x34]
mov edx, dword [ebp + 0x44]
mov esi, ecx
mov ecx, dword [ebp + 0x40]
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x13c], edx
xor ebx, ebx
lea eax, [ebp - 0x1cc]
mov dword [ebp - 4], ebx
mov edi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push eax
call edi
lea ecx, [ebp - 0x1cc]
push ecx
call edi
movzx eax, byte [ebp + 0x48]
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
neg eax
sbb eax, eax
and eax, 0xf
inc eax
cdq
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
cmp byte [ebp + 0x30], bl
je 0x495a8b
mov edx, dword [esi + 0xf0]
mov eax, dword [esi + 0xf4]
mov dword [ebp - 0x124], edx
mov edx, edi
sub edx, dword [ebp + 0x10]
mov dword [ebp - 0x120], eax
mov eax, ecx
sbb eax, dword [ebp + 0x14]
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x188], eax
cmp ecx, eax
jl 0x496558
jg 0x4949a8
cmp edi, edx
jb 0x496558
lea ecx, [esi + 0x110]
lea edx, [esi + 0x74]
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x14c], edx
lea ecx, [ecx]
mov eax, dword [ebp - 0x184]
mov edi, dword [ebp - 0x14c]
push eax
push 0
mov ebx, 3
call fcn.004ab480
add esp, 8
test al, al
je 0x4953f7
mov ecx, dword [ebp - 0xa8]
cmp ecx, dword [ebp - 0x120]
jl 0x496558
jg 0x494a10
mov edx, dword [ebp - 0xac]
cmp edx, dword [ebp - 0x124]
jbe 0x496558
lea ebx, [ebx]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xac]
push eax
push ecx
call fcn.0044af60
test al, al
je 0x494a65
add dword [ebp - 0xac], 0xffffffff
mov eax, dword [ebp - 0xa8]
adc eax, 0xffffffff
mov dword [ebp - 0xa8], eax
cmp eax, dword [ebp - 0x120]
jl 0x496558
jg 0x494a5d
mov edx, dword [ebp - 0x124]
cmp dword [ebp - 0xac], edx
jbe 0x496558
mov esi, dword [ebp - 0xc4]
jmp 0x494a10
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0xa8], eax
jl 0x496558
jg 0x494a8b
mov ecx, dword [ebp - 0x124]
cmp dword [ebp - 0xac], ecx
jbe 0x496558
mov edx, dword [ebp - 0x188]
cmp dword [ebp - 0xa8], edx
jl 0x496558
jg 0x494ab1
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xac], eax
jbe 0x496558
mov ebx, dword [ebp - 0xa8]
mov edi, dword [ebp - 0xac]
mov esi, dword [ebp - 0xc4]
mov eax, dword [esi + 0x9c]
push ebx
push edi
lea ecx, [ebp - 0x118]
push ecx
call fcn.0044a980
mov eax, dword [esi + 0xa0]
test eax, eax
je 0x494ae6
add eax, 0xfffffff7
jmp 0x494ae8
xor eax, eax
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x118]
cmp ecx, eax
je 0x49544f
lea eax, [ebp - 0x108]
call fcn.00430980
mov edx, dword [ebp - 0xf4]
mov edi, dword [ebp - 0xf8]
lea esi, [ebp - 0xa4]
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x12c], edx
call fcn.0041b610
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0xa4]
mov ecx, 1
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, 0x104
or eax, ecx
jge 0x494b51
mov eax, 0x104
mov ecx, esi
call fcn.0041b590
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 0x68]
lea esi, [ebp - 0x148]
call fcn.004018f0
mov byte [ebp - 4], 3
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa4]
call fcn.0041acd0
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.00406510
sub esp, 8
lea ecx, [ebp - 0xf0]
mov eax, esp
mov dword [ebp - 0xd8], esp
call fcn.0040a4a0
lea ecx, [ebp - 0x140]
push ecx
call fcn.0042d9f0
add esp, 0xc
mov byte [ebp - 4], 4
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
call fcn.0041acd0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 2
call fcn.00406510
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x128]
mov esi, eax
sub esi, 1
mov ebx, ecx
mov dword [edx], esi
sbb ebx, 0
mov dword [edx + 4], ebx
mov edx, dword [ebp - 0xa8]
push edx
mov edx, dword [ebp - 0xac]
push edx
mov edx, dword [ebp - 0xf4]
push edx
push edi
push edx
mov edx, dword [ebp - 0xfc]
push edi
push edx
mov edx, dword [ebp - 0x100]
push edx
push ecx
push eax
mov eax, dword [ebp - 0xa4]
push eax
push 0x4e5598
lea eax, [ebp - 0x160]
mov dword [ebp - 0x160], 0x4e5560
mov dword [ebp - 0x15c], 0xac5
mov dword [ebp - 0x158], 3
call fcn.00409c10
mov ecx, dword [ebp - 0xc4]
add esp, 0x30
push ecx
lea esi, [ebp - 0x108]
call fcn.00491d00
test al, al
je 0x4959ee
mov edi, dword [ebp - 0x13c]
lea edx, [ebp - 0xf0]
push edx
call fcn.00436890
test al, al
je 0x4959ee
mov eax, dword [ebp - 0x12c]
xor ecx, ecx
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0x150], ecx
cmp eax, ecx
jg 0x494cb9
jl 0x494ca5
cmp dword [ebp - 0x130], 0x2000
jae 0x494cb9
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], eax
jmp 0x494cc9
mov dword [ebp - 0xc0], 0x2000
mov dword [ebp - 0xbc], ecx
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xbc], eax
jg 0x494cf9
jl 0x494ce7
mov edx, dword [ebp - 0xc0]
cmp edx, dword [ebp - 0xe0]
ja 0x494cf9
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], eax
mov ebx, dword [ebp - 0xc4]
mov eax, dword [ebx + 0xe0]
mov edx, dword [ebx + 0xe8]
mov edi, dword [ebx + 0xf0]
mov ecx, dword [ebx + 0xe4]
mov esi, dword [ebx + 0xec]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0x18]
mov dword [ebp - 0x40], edi
mov edi, dword [ebx + 0xf4]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x4c], esi
mov byte [ebp - 0x48], 1
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x30], 0
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x18], 1
call fcn.0041ac40
cmp dword [eax], 4
jl 0x494dbc
lea esi, [ebp - 0x11c]
call fcn.0041b610
push 0x4e336c
mov edi, esi
mov byte [ebp - 4], 5
call fcn.0041b170
mov ecx, dword [ebp - 0x11c]
push ecx
lea eax, [ebp - 0x178]
mov dword [ebp - 0x178], 0x4e56f8
mov dword [ebp - 0x174], 0xb01
mov dword [ebp - 0x170], 3
call fcn.00409c10
add esp, 8
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.00406510
cmp dword [ebx + 0xe4], 0
jl 0x494f21
jg 0x494dd8
cmp dword [ebx + 0xe0], 0
jbe 0x494f21
cmp dword [ebx + 0xec], 0
jl 0x494f21
jg 0x494df4
cmp dword [ebx + 0xe8], 0
jbe 0x494f21
lea esi, [ebx + 0xd0]
lea eax, [ebp - 0x108]
call fcn.00434150
test al, al
jne 0x494f21
mov esi, dword [ebp - 0xf0]
mov eax, dword [esi + 0x24]
mov ecx, dword [esi + 0x20]
xor edx, edx
cmp eax, edx
jg 0x494f21
jl 0x494e2e
cmp ecx, 0x20
ja 0x494f21
push 1
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x134], edx
mov edx, dword [ebp - 0x34]
push edx
mov edx, dword [ebp - 0x38]
push edx
mov edx, dword [ebp - 0x3c]
push edx
mov edx, dword [ebp - 0x40]
push edx
push eax
push ecx
add ebx, 0x94
push ebx
lea ebx, [ebp - 0x138]
call fcn.00490cd0
mov ecx, dword [ebp - 0x134]
add esp, 0x20
cmp ecx, dword [esi + 0x24]
jl 0x494f1b
jg 0x494e83
mov ecx, dword [ebp - 0x138]
cmp ecx, dword [esi + 0x20]
jb 0x494f1b
mov ecx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0xc4]
fld qword [edi + 0x100]
push ecx
sub esp, 0x10
fstp qword [ebp - 0x19c]
mov ecx, esp
lea esi, [edi + 0x100]
mov dword [ecx], esi
mov esi, dword [ebp - 0x1a0]
mov dword [ecx + 4], esi
mov esi, dword [ebp - 0x19c]
mov dword [ecx + 8], esi
mov esi, dword [ebp - 0x198]
mov dword [ecx + 0xc], esi
lea ecx, [ebp - 0x194]
push ecx
push edx
push eax
sub esp, 8
xor ebx, ebx
lea ecx, [ebp - 0xf0]
mov eax, esp
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0xd8], esp
call fcn.0040a4a0
push edi
call fcn.00493630
cmp eax, ebx
jl 0x494f1b
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], bl
call fcn.00436a90
mov esi, edi
jmp 0x4949c0
mov ebx, dword [ebp - 0xc4]
mov esi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edi, edi
lea edx, [ebp - 0x1ac]
push edx
mov dword [ebp - 0x110], edi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xc8], edi
call esi
lea eax, [ebp - 0x1ac]
push eax
call esi
mov dword [ebp - 0xd8], edi
lea esi, [ebp - 0x50]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov edx, dword [esi - 8]
cmp dword [esi - 4], eax
jg 0x49500b
jl 0x494f71
cmp edx, ecx
jae 0x49500b
movzx edx, byte [esi + 8]
push edx
push eax
mov eax, dword [esi - 4]
push ecx
mov ecx, dword [ebp - 0xc0]
push eax
mov eax, dword [esi - 8]
push eax
mov eax, dword [ebp - 0xbc]
push eax
push ecx
add ebx, 0x94
push ebx
lea ebx, [ebp - 0x154]
call fcn.00490cd0
mov ebx, dword [ebp - 0x150]
add esp, 0x20
cmp ebx, edi
jl 0x494fd9
jg 0x494fbd
mov ecx, dword [ebp - 0x110]
cmp dword [ebp - 0x154], ecx
jbe 0x494fdf
mov ecx, dword [ebp - 0x154]
mov dword [ebp - 0x110], ecx
mov edi, ebx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
jmp 0x494fdf
mov ecx, dword [ebp - 0x110]
cmp edi, dword [ebp + 0x14]
jl 0x495005
jg 0x494feb
cmp ecx, dword [ebp + 0x10]
jb 0x495005
cmp edi, dword [ebp - 0xdc]
jg 0x49508c
jl 0x495005
cmp ecx, dword [ebp - 0xe0]
jae 0x49508c
mov ebx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd8]
inc eax
add esi, 0x18
mov dword [ebp - 0xd8], eax
cmp eax, 3
jb 0x494f56
cmp edi, dword [ebp - 0xdc]
jl 0x49503c
mov ecx, dword [ebp - 0x110]
jg 0x495092
cmp ecx, dword [ebp - 0xe0]
jae 0x495092
push 0x4e3494
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5730
mov dword [ebp - 0xb4], 0xb4f
mov dword [ebp - 0xb0], 3
call fcn.00409c10
add esp, 4
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
jmp 0x495482
mov ebx, dword [ebp - 0xc4]
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0xac]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp - 0xbc]
sbb edx, dword [ebp - 0xa8]
cmp esi, edi
jl 0x4950ca
jg 0x4950b8
cmp dword [ebp - 0xc0], ecx
jbe 0x4950ca
cmp edi, edx
jl 0x495498
jg 0x4950ca
cmp ecx, eax
jb 0x495498
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0xc8]
push esi
push edx
mov edx, dword [ebp - 0xcc]
push edi
push eax
mov eax, dword [ebp - 0xd8]
push ecx
push edx
push eax
push str.Found_free_block_in_zone__d_at__I64d:_I64d__requested:__I64d
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x16c], 0x4e585c
mov dword [ebp - 0x168], 0xb5f
mov dword [ebp - 0x164], 3
call fcn.00409c10
xor esi, esi
add esp, 0x20
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd0], esi
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x118]
mov eax, dword [ecx + 0x18]
lea edx, [ebp - 0xd4]
cmp eax, dword [ebp + 0x38]
jne 0x495171
mov eax, dword [ebp - 0x144]
cmp edx, eax
je 0x49515e
mov esi, dword [eax]
mov dword [eax], 0
mov dword [ebp - 0xd4], esi
mov eax, dword [eax + 4]
mov dword [ebp - 0xd0], eax
test esi, esi
jne 0x495188
lea edx, [ebp - 0xd4]
lea ecx, [ebp - 0xa4]
call fcn.004b87f0
mov esi, dword [ebp - 0xd4]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x49550f
lea esi, [ebp - 0x80]
call fcn.0042d580
mov ecx, dword [ebp - 0xdc]
mov esi, dword [ebp - 0xe0]
push ecx
push esi
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x110]
push edi
push edx
call fcn.0045a1e0
mov ecx, dword [ebp - 0xdc]
push ecx
push esi
push edx
push eax
call fcn.0045a290
mov ecx, dword [ebp - 0xe8]
mov esi, dword [ebp - 0xe4]
mov edi, ecx
sub edi, eax
sbb esi, edx
add edi, dword [ebp - 0x100]
mov dword [ebp - 0x17c], edx
adc esi, dword [ebp - 0xfc]
test esi, esi
jg 0x4951fd
jl 0x4951f9
test edi, edi
jne 0x4951fd
xor edi, edi
xor esi, esi
mov edx, dword [ebp - 0xe4]
cmp dword [ebp - 0x17c], edx
jg 0x495219
jl 0x495211
cmp eax, ecx
jae 0x495219
mov edx, dword [ebp - 0x17c]
mov ecx, eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xc0], ecx
cmp edx, eax
jg 0x49524b
jl 0x495239
cmp ecx, dword [ebp - 0xe0]
ja 0x49524b
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
fld qword [ebx + 0x100]
mov edx, dword [ebp - 0x1c0]
fstp qword [ebp - 0x1bc]
sub esp, 0x10
mov eax, esp
lea ecx, [ebx + 0x100]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1bc]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x1b8]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xbc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xc8]
push ecx
mov ecx, dword [ebp - 0xcc]
push edx
push esi
push edi
push eax
push ecx
mov ecx, dword [ebp - 0xd4]
push ebx
lea edx, [ebp - 0x80]
call fcn.00492030
mov ecx, dword [ebx + 0x94]
mov edx, dword [ecx]
mov edi, eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x114], edi
call eax
cmp edi, 0x80070057
je 0x49561b
cmp edi, 0x80070005
je 0x495718
sub esp, 8
lea ecx, [ebp - 0xf0]
mov eax, esp
mov dword [ebp - 0xd8], esp
call fcn.0040a4a0
lea ecx, [ebp - 0x80]
push ecx
mov ecx, dword [ebx + 0x9c]
call fcn.00433e50
cmp edi, 0x80004004
je 0x4957c3
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xac]
push edx
push eax
mov esi, ebx
call fcn.0044af60
test al, al
je 0x49580f
test edi, edi
jns 0x4953af
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xfc]
push edi
push ecx
mov ecx, dword [ebp - 0x100]
push edx
mov edx, dword [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0xcc]
push ecx
mov ecx, dword [ebp - 0xa4]
push edx
push eax
push ecx
push 0x4e5be0
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5b74
mov dword [ebp - 0xb4], 0xbd9
mov dword [ebp - 0xb0], 1
call fcn.00409c10
add esp, 0x24
lea esi, [ebp - 0x80]
call fcn.00423eb0
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4953d2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xd4], 0
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
mov esi, dword [ebp - 0xc4]
jmp 0x4949c0
mov edx, dword [esi + 0xf4]
mov eax, dword [esi + 0xf0]
push edx
push eax
push 0x4e54a8
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5470
mov dword [ebp - 0xb4], 0xaa2
mov dword [ebp - 0xb0], 1
call fcn.00409c10
add esp, 0xc
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00432180
mov eax, 0x80004004
jmp 0x4965b0
push ebx
push edi
mov dword [ebp - 0xb8], 0x4e54e8
mov dword [ebp - 0xb4], 0xab3
push str.Found_unknown_cluster_at__I64d.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb0], 3
call fcn.00409c10
add esp, 0xc
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00432180
xor eax, eax
jmp 0x4965b0
mov ecx, dword [ebp - 0xc0]
push edx
mov edx, dword [ebp - 0x110]
push eax
mov eax, dword [ebp - 0xc8]
push esi
push ecx
mov ecx, dword [ebp - 0xcc]
push edi
push edx
mov edx, dword [ebp - 0xd8]
push eax
push ecx
push edx
push 0x4e57a0
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5768
mov dword [ebp - 0xb4], 0xb5a
mov dword [ebp - 0xb0], 3
call fcn.00409c10
add esp, 0x28
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
jmp 0x495482
mov edi, dword [ebp - 0x114]
mov eax, dword [ebp - 0xa4]
push edi
push eax
push 0x4e59a0
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e593c
mov dword [ebp - 0xb4], 0xb77
mov dword [ebp - 0xb0], 1
call fcn.00409c10
add esp, 0xc
cmp edi, 0x80070005
jne 0x495607
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x128]
sub ecx, 1
sbb edx, 0
mov dword [eax], ecx
mov dword [eax + 4], edx
lea eax, [ebp - 0x108]
push eax
add ebx, 0x118
push ebx
call fcn.0044b720
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0xac]
mov ecx, dword [ebp + 0xc]
sbb ecx, dword [ebp - 0xa8]
or eax, ecx
jne 0x4955dd
test esi, esi
je 0x4955aa
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00432180
mov eax, 0x80070005
jmp 0x4965b0
test esi, esi
je 0x4955e8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
jmp 0x495482
test esi, esi
je 0x49653e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x49653e
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x128]
sub ecx, 1
sbb edx, 0
mov dword [eax], ecx
mov ecx, dword [ebp - 0x108]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x104]
mov edx, dword [ebp - 0xa4]
push eax
push ecx
push edx
push str.Moving_intruder_fragment__file:__s__at_lcn:__I64d__returned_E_INVALIDARG._Marking_fragment_as_unmovable
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e59fc
mov dword [ebp - 0xb4], 0xba9
mov dword [ebp - 0xb0], 3
call fcn.00409be0
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
add ebx, 0x118
push ebx
call fcn.0044b720
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0xac]
mov ecx, dword [ebp + 0xc]
sbb ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x17c], ecx
js 0x4956cc
jg 0x4956b0
test eax, eax
je 0x4956cc
lea esi, [ebp - 0x80]
call fcn.00423eb0
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4955e8
push eax
jmp 0x4955e2
lea esi, [ebp - 0x80]
call fcn.00423eb0
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4956e5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00432180
mov eax, 0x80070057
jmp 0x4965b0
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x128]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
sub ecx, 1
sbb edx, 0
sub esi, dword [ebp - 0xac]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x108]
sbb edi, dword [ebp - 0xa8]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x104]
mov edx, dword [ebp - 0xa4]
push eax
push ecx
push edx
push str.Moving_intruder_fragment__file:__s__at_lcn:__I64d__returned_E_ACCESSDENIED._Marking_fragment_as_unmovable
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5ad0
mov dword [ebp - 0xb4], 0xbbc
mov dword [ebp - 0xb0], 3
call fcn.00409be0
add esp, 0x10
lea eax, [ebp - 0x108]
push eax
add ebx, 0x118
push ebx
call fcn.0044b720
or esi, edi
lea esi, [ebp - 0x80]
jne 0x4956b3
call fcn.00423eb0
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4955aa
push eax
jmp 0x4955a4
lea esi, [ebp - 0x80]
call fcn.00423eb0
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x4957dc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00432180
mov eax, 0x80004004
jmp 0x4965b0
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xac]
mov esi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xfc]
push ecx
mov ecx, dword [ebp - 0x100]
push edx
mov edx, dword [ebp - 0xc8]
push edi
mov edi, dword [ebp - 0xbc]
push edi
push esi
push eax
mov eax, dword [ebp - 0xcc]
push ecx
mov ecx, dword [ebp - 0xa4]
push edx
push eax
push ecx
push 0x4e5d08
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5cb4
mov dword [ebp - 0xb4], 0xbe0
mov dword [ebp - 0xb0], 1
call fcn.00409c10
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xcc]
add esp, 0x2c
push edi
push esi
push edx
push eax
push ebx
call fcn.0044afc0
mov esi, 3
mov dword [ebp - 0xb0], esi
test al, al
je 0x495912
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
push ecx
mov ecx, dword [ebp - 0x100]
push edx
mov edx, dword [ebp - 0x104]
push eax
mov eax, dword [ebp - 0x108]
push ecx
mov ecx, dword [ebp - 0xa4]
push edx
push eax
push ecx
push 0x4e5e20
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5de8
mov dword [ebp - 0xb4], 0xbe6
call fcn.00409c10
add esp, 0x20
lea edx, [ebp - 0x108]
push edx
add ebx, 0x118
push ebx
call fcn.0044b720
jmp 0x49597d
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xfc]
push eax
mov eax, dword [ebp - 0x100]
push ecx
mov ecx, dword [ebp - 0x104]
push edx
mov edx, dword [ebp - 0x108]
push eax
mov eax, dword [ebp - 0xa4]
push ecx
push edx
push eax
push 0x4e5f10
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5ed8
mov dword [ebp - 0xb4], 0xbeb
call fcn.00409c10
add esp, 0x20
lea ecx, [ebp - 0x108]
push ecx
add ebx, 0x118
push ebx
call fcn.0044b7e0
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
push edx
push eax
mov eax, dword [ebp + 8]
mov edx, eax
sub edx, dword [ebp - 0xac]
mov dword [ebp - 0xb0], esi
mov esi, ecx
sbb esi, dword [ebp - 0xa8]
mov dword [ebp - 0xb8], 0x4e5f88
push esi
push edx
push ecx
push eax
push 0x4e5fc0
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb4], 0xbef
call fcn.00409c10
add esp, 0x1c
lea esi, [ebp - 0x80]
call fcn.00423eb0
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x49653e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x49653e
mov edi, dword [ebp + 8]
sub edi, dword [ebp - 0xac]
mov esi, dword [ebp + 0xc]
sbb esi, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x128]
sub ecx, 1
sbb edx, 0
push edx
push ecx
push esi
mov dword [eax], ecx
mov dword [eax + 4], edx
push edi
push str.Unmovable_fragment._Free_block_size:__I64d._Setting_skip_to:__I64d
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e5638
mov dword [ebp - 0xb4], 0xad2
mov dword [ebp - 0xb0], 3
call fcn.00409c10
add esp, 0x14
cmp esi, dword [ebp - 0xdc]
jl 0x4955aa
jg 0x495a6c
cmp edi, dword [ebp - 0xe0]
jb 0x4955aa
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
jmp 0x495482
add edi, dword [ebp + 0x10]
mov eax, ecx
adc eax, dword [ebp + 0x14]
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x134], eax
cmp ecx, eax
jg 0x496558
jl 0x495ab4
mov eax, edi
cmp dword [ebp + 8], eax
jae 0x496558
mov edi, dword [esi + 0xfc]
mov ebx, dword [esi + 0xf8]
cmp dword [ebp - 0xa8], edi
jg 0x496558
jl 0x495ae0
cmp dword [ebp - 0xac], ebx
jae 0x496558
lea ebx, [ebx]
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xac]
push ecx
push edx
call fcn.0044af60
test al, al
je 0x495b2b
add dword [ebp - 0xac], 1
mov eax, dword [ebp - 0xa8]
adc eax, 0
mov dword [ebp - 0xa8], eax
cmp eax, edi
jg 0x496558
jl 0x495b23
cmp dword [ebp - 0xac], ebx
jae 0x496558
mov esi, dword [ebp - 0xc4]
jmp 0x495ae0
cmp dword [ebp - 0xa8], edi
jg 0x496558
jl 0x495b45
cmp dword [ebp - 0xac], ebx
jae 0x496558
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xa8], eax
jg 0x496558
jl 0x495b6b
mov ecx, dword [ebp - 0x138]
cmp dword [ebp - 0xac], ecx
jae 0x496558
mov ebx, dword [ebp - 0xa8]
mov edi, dword [ebp - 0xac]
mov esi, dword [ebp - 0xc4]
mov eax, dword [esi + 0x9c]
push ebx
push edi
lea edx, [ebp - 0x144]
push edx
call fcn.0044a980
mov eax, dword [esi + 0xa0]
test eax, eax
je 0x495ba0
add eax, 0xfffffff7
jmp 0x495ba2
xor eax, eax
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x144]
cmp ecx, eax
je 0x4961fa
lea eax, [ebp - 0x108]
call fcn.00430980
mov eax, dword [ebp - 0xf4]
mov edi, dword [ebp - 0xf8]
lea esi, [ebp - 0xa4]
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x12c], eax
call fcn.0041b610
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0xa4]
mov ecx, 1
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, 0x104
or eax, ecx
jge 0x495c0b
mov eax, 0x104
mov ecx, esi
call fcn.0041b590
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ecx + 0x68]
lea esi, [ebp - 0x140]
call fcn.004018f0
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp - 0xa4]
call fcn.0041acd0
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00406510
sub esp, 8
lea ecx, [ebp - 0xf0]
mov eax, esp
mov dword [ebp - 0x14c], esp
call fcn.0040a4a0
lea edx, [ebp - 0x148]
push edx
call fcn.0042d9f0
add esp, 0xc
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
call fcn.0041acd0
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 9
call fcn.00406510
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x128]
mov esi, eax
add esi, 1
mov ebx, ecx
mov dword [edx], esi
adc ebx, 0
mov dword [edx + 4], ebx
mov edx, dword [ebp - 0xa8]
push edx
mov edx, dword [ebp - 0xac]
push edx
mov edx, dword [ebp - 0xf4]
push edx
push edi
push edx
mov edx, dword [ebp - 0xfc]
push edi
push edx
mov edx, dword [ebp - 0x100]
push edx
push ecx
push eax
mov eax, dword [ebp - 0xa4]
push eax
push str.Intruder_fragment____s____I64d___I64d___I64d__lcLeft:__I64d__detected_at__I64d.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e60b0
mov dword [ebp - 0xb4], 0xc27
mov dword [ebp - 0xb0], 3
call fcn.00409c10
mov ecx, dword [ebp - 0xc4]
add esp, 0x30
push ecx
lea esi, [ebp - 0x108]
call fcn.00491d00
test al, al
je 0x49650d
mov edi, dword [ebp - 0x13c]
lea edx, [ebp - 0xf0]
push edx
call fcn.00436890
test al, al
je 0x49650d
mov eax, dword [ebp - 0x12c]
xor ecx, ecx
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], ecx
cmp eax, ecx
jg 0x495d73
jl 0x495d5f
cmp dword [ebp - 0x130], 0x2000
jae 0x495d73
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], eax
jmp 0x495d83
mov dword [ebp - 0xc0], 0x2000
mov dword [ebp - 0xbc], ecx
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xbc], eax
jg 0x495db3
jl 0x495da1
mov edx, dword [ebp - 0xc0]
cmp edx, dword [ebp - 0xe0]
ja 0x495db3
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], eax
mov ebx, dword [ebp - 0xc4]
mov edx, dword [ebx + 0xe8]
mov eax, dword [ebx + 0xe0]
mov ecx, dword [ebx + 0xe4]
mov esi, dword [ebx + 0xec]
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x88], edx
mov edx, dword [ebx + 0xf8]
mov dword [ebp - 0x80], edx
mov edx, dword [ebx + 0xfc]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp + 0x18]
mov dword [ebp - 0x70], edx
mov edx, dword [ebp + 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x94], esi
mov byte [ebp - 0x90], 1
mov dword [ebp - 0x84], esi
mov byte [ebp - 0x78], 1
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov byte [ebp - 0x60], 0
call fcn.0041ac40
cmp dword [eax], 4
jl 0x495e8b
lea esi, [ebp - 0x11c]
call fcn.0041b610
push str.Free_block_info:
mov edi, esi
mov byte [ebp - 4], 0xc
call fcn.0041b170
mov eax, dword [ebp - 0x11c]
push eax
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x16c], 0x4e61c0
mov dword [ebp - 0x168], 0xc51
mov dword [ebp - 0x164], 3
call fcn.00409c10
add esp, 8
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00406510
xor edi, edi
add ebx, 0x94
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0x118], ebx
lea esi, [ebp - 0x98]
movzx ecx, byte [esi + 8]
mov edx, dword [esi + 4]
mov eax, dword [esi]
push ecx
mov ecx, dword [esi - 4]
push edx
mov edx, dword [esi - 8]
push eax
mov eax, dword [ebp - 0xbc]
push ecx
mov ecx, dword [ebp - 0xc0]
push edx
mov edx, dword [ebp - 0x118]
push eax
push ecx
push edx
lea ebx, [ebp - 0x124]
call fcn.00490cd0
add esp, 0x20
cmp edx, dword [ebp - 0xa8]
jg 0x495f10
jl 0x495f00
cmp eax, dword [ebp - 0xac]
jae 0x495f10
xor eax, eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
jmp 0x495f68
mov ebx, dword [ebp - 0x120]
cmp ebx, edi
jl 0x495f3e
mov ecx, dword [ebp - 0x124]
jg 0x495f2a
cmp ecx, dword [ebp - 0xd4]
jbe 0x495f3e
mov dword [ebp - 0xd4], ecx
mov edi, ebx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
cmp edi, dword [ebp + 0x14]
jl 0x495f68
jg 0x495f50
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp + 0x10]
jb 0x495f68
cmp edi, dword [ebp - 0xdc]
jg 0x495fa1
jl 0x495f68
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xe0]
jae 0x495fa1
mov eax, dword [ebp - 0xd8]
inc eax
add esi, 0x18
mov dword [ebp - 0xd8], eax
cmp eax, 3
jb 0x495eb7
cmp edi, dword [ebp - 0xdc]
jl 0x49621a
jg 0x495fa1
mov edx, dword [ebp - 0xd4]
cmp edx, dword [ebp - 0xe0]
jb 0x49621a
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xa8]
mov ebx, dword [ebp - 0xbc]
sbb ecx, dword [ebp + 0xc]
cmp ebx, edi
jl 0x495fe3
jg 0x495fcd
mov edx, dword [ebp - 0xc0]
cmp edx, dword [ebp - 0xd4]
jbe 0x495fe3
cmp edi, ecx
jl 0x49627e
jg 0x495fe3
cmp dword [ebp - 0xd4], eax
jb 0x49627e
mov eax, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xcc]
push ebx
push eax
mov eax, dword [ebp - 0xd8]
push edi
push esi
push ecx
push edx
push eax
push 0x4e6360
lea eax, [ebp - 0x178]
mov dword [ebp - 0x178], 0x4e6324
mov dword [ebp - 0x174], 0xc89
mov dword [ebp - 0x170], 3
call fcn.00409c10
add esp, 0x20
cmp ebx, edi
jl 0x496055
jg 0x496047
cmp dword [ebp - 0xc0], esi
jb 0x496055
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xbc], edi
mov ebx, edi
xor esi, esi
mov dword [ebp - 0x110], esi
mov dword [ebp - 0x10c], esi
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xd
call fcn.004b87f0
mov dword [ebp - 0x114], eax
cmp eax, esi
jl 0x4962db
lea esi, [ebp - 0x38]
call fcn.0042d580
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp + 0x24]
sub esp, 0x10
mov eax, esp
mov esi, dword [ebp - 0xc4]
mov dword [eax], ecx
mov ecx, dword [ebp + 0x28]
mov dword [eax + 4], edx
mov edx, dword [ebp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0xc0]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xfc]
push eax
mov eax, dword [ebp - 0x100]
push ebx
push ecx
mov ecx, dword [ebp - 0xc8]
push edx
mov edx, dword [ebp - 0xcc]
push eax
push ecx
mov ecx, dword [ebp - 0x110]
push edx
push esi
lea edx, [ebp - 0x38]
call fcn.00492030
mov edi, eax
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
mov dword [ebp - 0x114], edi
call eax
sub esp, 8
lea ecx, [ebp - 0xf0]
mov eax, esp
mov dword [ebp - 0x14c], esp
call fcn.0040a4a0
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [esi + 0x9c]
call fcn.00433e50
cmp edi, 0x80004004
je 0x49632e
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xac]
push edx
push eax
call fcn.0044af60
test al, al
je 0x496341
test edi, edi
jns 0x4961b2
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x100]
push edi
push ebx
push ecx
mov ecx, dword [ebp - 0xc8]
push edx
mov edx, dword [ebp - 0xcc]
push eax
mov eax, dword [ebp - 0xa4]
push ecx
push edx
push eax
push str.MoveFileRegionWithMarking_for_file___s__to__I64d___I64d:_I64d_failed__hr0x_08x___but_cluster_was_freed.
lea eax, [ebp - 0x160]
mov dword [ebp - 0x160], 0x4e6484
mov dword [ebp - 0x15c], 0xcaa
mov dword [ebp - 0x158], 1
call fcn.00409c10
add esp, 0x24
lea esi, [ebp - 0x38]
call fcn.00423eb0
mov eax, dword [ebp - 0x110]
test eax, eax
je 0x4961d5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x110], 0
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
mov esi, dword [ebp - 0xc4]
jmp 0x495ab4
push ebx
push edi
mov dword [ebp - 0xb8], 0x4e6034
mov dword [ebp - 0xb4], 0xc0d
push 0x4e6070
jmp 0x49546a
push str.Didnt_find_a_free_block.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e61f8
mov dword [ebp - 0xb4], 0xc79
mov dword [ebp - 0xb0], 3
call fcn.00409c10
add esp, 4
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00432180
mov eax, 0x80070070
jmp 0x4965b0
mov edx, dword [ebp - 0xd4]
push ecx
mov ecx, dword [ebp - 0xc0]
push eax
mov eax, dword [ebp - 0xc8]
push ebx
push ecx
mov ecx, dword [ebp - 0xcc]
push edi
push edx
mov edx, dword [ebp - 0xd8]
push eax
push ecx
push edx
push str.Found_free_block_in_zone__d_at__I64d:_I64d__requested:__I64d__freed_so_far:__I64d___canceling
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e6230
mov dword [ebp - 0xb4], 0xc84
mov dword [ebp - 0xb0], 3
call fcn.00409c10
add esp, 0x28
jmp 0x49653e
push eax
mov eax, dword [ebp - 0xa4]
push eax
push 0x4e6428
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e63dc
mov dword [ebp - 0xb4], 0xc93
mov dword [ebp - 0xb0], 1
call fcn.00409c10
mov eax, dword [ebp - 0x110]
add esp, 0xc
cmp eax, esi
je 0x49653e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x49653e
lea esi, [ebp - 0x38]
call fcn.00423eb0
mov eax, dword [ebp - 0x110]
jmp 0x4957d1
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xc0]
push ecx
mov ecx, dword [ebp - 0xfc]
push edx
mov edx, dword [ebp - 0x100]
push edi
mov edi, dword [ebp - 0xa4]
push ebx
push eax
mov eax, dword [ebp - 0xc8]
push ecx
mov ecx, dword [ebp - 0xcc]
push edx
push eax
push ecx
push edi
push str.MoveFileRegionWithMarking_for_file___s__to__I64d___I64d:_I64d_finished__hr0x_08x_._Cluster__I64d_is_not_free.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e659c
mov dword [ebp - 0xb4], 0xcb1
mov dword [ebp - 0xb0], 1
call fcn.00409c10
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xcc]
add esp, 0x2c
push ebx
push edx
push eax
push ecx
push esi
call fcn.0044afc0
mov ebx, 3
mov dword [ebp - 0xb0], ebx
test al, al
je 0x49643e
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xfc]
push edx
mov edx, dword [ebp - 0x100]
push eax
mov eax, dword [ebp - 0x104]
push ecx
mov ecx, dword [ebp - 0x108]
push edx
push eax
push ecx
push edi
push str.Destination_block_is_still_free__marking_fragment____s____I64d___I64d___I64d__as_unmovable.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e66c8
mov dword [ebp - 0xb4], 0xcb7
call fcn.00409c10
add esp, 0x20
lea edx, [ebp - 0x108]
push edx
add esi, 0x118
push esi
call fcn.0044b720
jmp 0x4964a3
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xfc]
push eax
mov eax, dword [ebp - 0x100]
push ecx
mov ecx, dword [ebp - 0x104]
push edx
mov edx, dword [ebp - 0x108]
push eax
push ecx
push edx
push edi
push str.Marking_fragment____s____I64d___I64d___I64d__as_suspicious.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e67b8
mov dword [ebp - 0xb4], 0xcbc
call fcn.00409c10
add esp, 0x20
lea eax, [ebp - 0x108]
push eax
add esi, 0x118
push esi
call fcn.0044b7e0
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0xa8]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [ebp - 0xac]
sub edx, eax
sbb esi, ecx
push esi
push edx
push ecx
push eax
push str.MakeFreeSpace_finished_for__I64d:_I64d__requested__I64d.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], str.DefragVolumeSinglePassHelper::MakeFreeSpaceUsingZones
mov dword [ebp - 0xb4], 0xcc0
mov dword [ebp - 0xb0], ebx
call fcn.00409c10
add esp, 0x1c
lea esi, [ebp - 0x38]
call fcn.00423eb0
mov eax, dword [ebp - 0x110]
test eax, eax
je 0x49653e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x49653e
push str.Unomvable_fragment.
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x4e6188
mov dword [ebp - 0xb4], 0xc31
mov dword [ebp - 0xb0], 3
call fcn.00409c10
add esp, 4
lea ecx, [ebp - 0xa4]
call fcn.00406510
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0
call fcn.00436a90
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0xac]
mov ecx, dword [ebp + 0xc]
sbb ecx, dword [ebp - 0xa8]
or eax, ecx
je 0x4955c4
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp + 0x3c]
test esi, esi
je 0x4965aa
lea eax, [esi + 4]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x4965aa
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
lea ecx, [esi + 8]
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x4965aa
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00453be1
mov esp, ebp
pop ebp
ret 0x44