Function at 0x4256fa
Capabilities:
Get memory capacity

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x1b0
push ebx
xor ebx, ebx
cmp dword [0x4dd088], ebx
jne 0x425718
or eax, 0xffffffff
jmp 0x426691
xor eax, eax
or dword [ebp + 0x4c], 0xffffffff
push esi
push edi
mov dword [ebp + 0x34], ebx
mov esi, dword [ebp + 0x78]
lea edi, [ebp + 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
cmp dword [ebp + 0x74], 2
mov dword [ebp + 0x50], ebx
lea edi, [ebp + 0x54]
stosd dword es:[edi], eax
mov edi, dword [ebp + 0x7c]
mov byte [ebp + 0x63], al
mov eax, dword [edi]
mov ax, word [eax]
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x68], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x18], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x10], ebx
mov word [ebp], ax
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x1c], 0xfa0
jne 0x425844
push 0x4c6734
push dword [esi + 4]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x42584e
mov eax, dword [0x4dd08c]
cmp eax, ebx
mov dword [ebp - 4], ebx
mov dword [ebp], ebx
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x18], ebx
je 0x4257b4
lea ecx, [ebp + 0x14]
push ecx
lea ecx, [ebp - 4]
push ecx
call eax
lea ecx, [ebp + 0x24]
call fcn.00444f6c
push 0x3f
lea eax, [ebp + 0x24]
push eax
push 1
call fcn.00413bfe
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
add esp, 0xc
cmp eax, 2
mov esi, 0x4c672c
jne 0x4257e3
mov esi, str.NotLoad
jmp 0x4257fe
cmp eax, 0xffffffff
jne 0x4257ef
mov esi, str.CannotControl
jmp 0x4257fe
cmp ecx, ebx
ja 0x4257fe
jb 0x4257f9
cmp edx, ebx
ja 0x4257fe
mov esi, str.NotInstall
movzx eax, dl
shrd edx, ecx, 8
push esi
push eax
movsx eax, dx
push eax
movzx eax, byte [ebp - 4]
push eax
mov eax, dword [ebp]
shr ecx, 8
mov ecx, dword [ebp - 4]
shrd ecx, eax, 8
shr eax, 8
movsx eax, cx
push eax
push str._X._02X___X._X__s
push dword [edi]
mov dword [ebp + 0x2c], ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
lea ecx, [ebp + 0x24]
call fcn.0043e825
jmp case.0x425ba5.114
cmp dword [ebp + 0x74], 1
jle 0x42630c
dec dword [ebp + 0x74]
add esi, 4
push str.__id
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x42586f
or dword [ebp + 0x5c], 2
jmp 0x4262b4
push 0x4c66a4
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x42588a
or dword [ebp + 0x5c], 1
jmp 0x4262b4
push str.__remove
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x4258a5
or dword [ebp + 0x5c], 4
jmp 0x4262b4
push 0x4c6688
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x4258c3
mov dword [ebp + 0x64], 5
jmp 0x4262b4
push str.__hide
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x4258de
or dword [ebp + 0x5c], 0x10
jmp 0x4262b4
push dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 2
pop edi
cmp eax, edi
jne 0x4258fc
mov eax, dword [esi]
xor ecx, ecx
cmp word [eax], 0x2d
sete cl
mov eax, ecx
jmp 0x4258fe
xor eax, eax
cmp eax, ebx
je case.0x425ba5.114
mov eax, dword [esi]
mov cx, word [eax + 2]
movzx eax, cx
cmp eax, 0x6d
jg 0x425b99
je 0x425b53
cmp eax, 0x62
jg 0x425aa4
je 0x4259b3
sub eax, 0x44
je 0x425b26
sub eax, edi
je 0x425acd
sub eax, 0xc
je 0x425b26
dec eax
je 0x425968
sub eax, 0xe
jne case.0x425ba5.114
cmp dword [ebp + 0x64], ebx
jne case.0x425ba5.114
mov dword [ebp + 0x64], 1
jmp 0x4262b4
xor eax, eax
cmp dword [ebp + 0x48], ebx
setne al
xor ecx, ecx
cmp dword [ebp + 0x64], 1
setne cl
or eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
add esi, 4
mov eax, dword [esi]
movzx eax, word [eax]
push eax
call fcn.004af560
test eax, eax
pop ecx
je case.0x425ba5.114
push ebx
push ebx
push dword [esi]
call fcn.004af549
mov dword [ebp + 0x48], eax
jmp 0x4262ae
mov eax, dword [ebp + 0x50]
or eax, dword [ebp + 0x54]
je 0x4259c0
xor eax, eax
inc eax
jmp 0x4259c2
xor eax, eax
xor ecx, ecx
cmp dword [ebp + 0xc], ebx
setne cl
xor edx, edx
cmp dword [ebp + 0x64], 1
setne dl
or ecx, edx
xor edx, edx
cmp dword [ebp + 0x74], 2
setl dl
or ecx, edx
or ecx, eax
jne case.0x425ba5.114
add esi, 4
push 0x4c666c
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425a09
mov dword [ebp + 0xc], 1
jmp 0x4262b1
mov eax, dword [esi]
mov dword [ebp + 0x2c], eax
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x2c]
push eax
call fcn.004483b1
mov eax, dword [ebp + 0x2c]
movzx eax, word [eax]
cmp eax, 0x62
pop ecx
pop ecx
jg 0x426305
je 0x425a8c
sub eax, ebx
je 0x4262b1
sub eax, 0x47
je 0x425a5c
sub eax, 4
je 0x425a7d
dec eax
dec eax
je 0x425a6e
sub eax, 7
jne 0x426305
mov eax, dword [ebp + 0x50]
mov ecx, dword [ebp + 0x54]
shld ecx, eax, 0xa
shl eax, 0xa
jmp 0x425a62
mov ecx, dword [ebp + 0x54]
mov eax, dword [ebp + 0x50]
shld ecx, eax, 0xa
shl eax, 0xa
mov dword [ebp + 0x54], ecx
jmp 0x425a71
mov eax, dword [ebp + 0x50]
mov ecx, dword [ebp + 0x54]
shld ecx, eax, 0xa
shl eax, 0xa
jmp 0x425a83
mov ecx, dword [ebp + 0x54]
mov eax, dword [ebp + 0x50]
shld ecx, eax, 0xa
shl eax, 0xa
jmp 0x425a99
mov eax, dword [ebp + 0x50]
mov ecx, dword [ebp + 0x54]
shld ecx, eax, 9
shl eax, 9
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], ecx
jmp 0x4262b1
sub eax, 0x64
je 0x425b26
dec eax
je 0x425b11
dec eax
je 0x425acd
sub eax, 6
jne case.0x425ba5.114
cmp dword [ebp + 0x64], ebx
jne case.0x425ba5.114
mov dword [ebp + 0x64], 3
jmp 0x4262b4
xor eax, eax
cmp dword [ebp + 0x28], ebx
setne al
xor edx, edx
cmp dword [ebp + 0x64], 1
setne dl
or eax, edx
xor edx, edx
cmp dword [ebp + 0x74], 2
setl dl
or eax, edx
jne case.0x425ba5.114
cmp cx, 0x46
jne 0x425afe
mov dword [ebp + 8], 1
add esi, 4
push dword [esi]
call fcn.004132c6
pop ecx
mov dword [ebp + 0x28], eax
jmp 0x4262b1
cmp dword [ebp + 0x64], ebx
jne case.0x425ba5.114
mov dword [ebp + 0x64], 4
jmp 0x4262b4
xor eax, eax
cmp dword [ebp + 0x64], ebx
jne 0x42668f
inc eax
cmp cx, 0x44
mov dword [ebp + 0x64], edi
jne 0x425b3e
mov dword [ebp + 0x18], eax
cmp cx, 0x52
jne 0x4262b4
mov dword [ebp + 0x18], eax
mov dword [ebp + 4], eax
jmp 0x4262b4
xor eax, eax
cmp dword [ebp + 0x4c], 0xffffffff
setne al
xor ecx, ecx
cmp dword [ebp + 0x64], 4
setne cl
and eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x64], 1
setne cl
and eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x30], ebx
setne cl
or eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
add esi, 4
mov eax, dword [esi]
mov dword [ebp + 0x30], eax
jmp 0x4262b1
sub eax, 0x6e
cmp eax, 0xb
ja case.0x425ba5.114
jmp dword [eax*4 + 0x42669a]
mov dword [ebp + 0x1c], 1
jmp 0x4262b4
mov eax, dword [ebp + 0x68]
and eax, 0xf00
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp dword [ebp + 0x64], 1
setne cl
or eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
add esi, 4
push 0x4c6660
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425bff
or byte [ebp + 0x69], 1
jmp 0x4262b1
push 0x4c6658
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425c1a
or byte [ebp + 0x69], 2
jmp 0x4262b1
push str.proxy
push dword [esi]
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne case.0x425ba5.114
or byte [ebp + 0x69], 3
jmp 0x4262b1
mov dword [ebp + 0x24], 1
jmp 0x4262b4
xor eax, eax
cmp dword [ebp + 0x64], 4
setne al
xor ecx, ecx
cmp dword [ebp + 0x64], 1
setne cl
and eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
add esi, 4
push 0x4c2d58
push dword [esi]
jmp 0x425f29
push 0x4c6644
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425ca0
test byte [ebp + 0x58], 1
jne case.0x425ba5.114
or dword [ebp + 0x58], 1
or dword [ebp + 0x68], 1
jmp 0x425f23
push 0x4c663c
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425cc8
test byte [ebp + 0x58], 1
jne case.0x425ba5.114
or dword [ebp + 0x58], 1
and dword [ebp + 0x68], 0xfffffffe
jmp 0x425f23
push 0x4c6634
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425cf0
test byte [ebp + 0x58], 2
jne case.0x425ba5.114
or dword [ebp + 0x58], 2
or dword [ebp + 0x68], 2
jmp 0x425f23
push 0x4c662c
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425d18
test byte [ebp + 0x58], 2
jne case.0x425ba5.114
or dword [ebp + 0x58], 2
and dword [ebp + 0x68], 0xfffffffd
jmp 0x425f23
push str.saved
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425d44
cmp dword [ebp + 0x64], 4
jne case.0x425ba5.114
or byte [ebp + 0x5a], 1
and byte [ebp + 0x6a], 0xfe
or dword [ebp + 0x5c], 8
jmp 0x425f23
cmp dword [ebp + 0x64], 1
jne case.0x425ba5.114
push 0x4c6618
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425d99
mov eax, dword [ebp + 0x68]
mov ecx, dword [ebp + 0x68]
and eax, 0xf000
neg eax
sbb eax, eax
and ecx, 0xf00
xor edx, edx
neg eax
cmp ecx, 0x300
setne dl
or eax, edx
jne case.0x425ba5.114
or byte [ebp + 0x69], 0x20
mov dword [ebp + 8], 1
jmp 0x425f23
push str.comm
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425de4
mov eax, dword [ebp + 0x68]
mov ecx, dword [ebp + 0x68]
and eax, 0xf000
neg eax
sbb eax, eax
and ecx, 0xf00
xor edx, edx
neg eax
cmp ecx, 0x300
setne dl
or eax, edx
jne case.0x425ba5.114
or byte [ebp + 0x69], 0x10
mov dword [ebp + 8], 1
jmp 0x425f23
push 0x4c6604
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425e28
mov eax, dword [ebp + 0x68]
mov ecx, dword [ebp + 0x68]
and eax, 0xf000
neg eax
sbb eax, eax
and ecx, 0xf00
xor edx, edx
neg eax
cmp ecx, 0x300
setne dl
or eax, edx
jne case.0x425ba5.114
or byte [ebp + 0x69], 0x30
jmp 0x425f23
push 0x4c65fc
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425e73
mov eax, dword [ebp + 0x68]
and eax, 0xf00
xor ecx, ecx
cmp eax, 0x100
setne cl
xor edx, edx
cmp eax, ebx
mov eax, dword [ebp + 0x68]
setne dl
and eax, 0xf000
and ecx, edx
neg eax
sbb eax, eax
neg eax
or ecx, eax
jne case.0x425ba5.114
or byte [ebp + 0x69], 0x11
jmp 0x425f23
push 0x4c65f4
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425ebb
mov eax, dword [ebp + 0x68]
and eax, 0xf00
xor ecx, ecx
cmp eax, 0x100
setne cl
xor edx, edx
cmp eax, ebx
mov eax, dword [ebp + 0x68]
setne dl
and eax, 0xf000
and ecx, edx
neg eax
sbb eax, eax
neg eax
or ecx, eax
jne case.0x425ba5.114
or byte [ebp + 0x69], 0x21
jmp 0x425f23
push 0x4c65e4
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425ed2
or byte [ebp + 0x6a], 2
jmp 0x425f23
test byte [ebp + 0x68], 0xf0
jne case.0x425ba5.114
push 0x4c65dc
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425ef3
or dword [ebp + 0x68], 0x10
jmp 0x425f23
push 0x4c65d4
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x425f0a
or dword [ebp + 0x68], 0x20
jmp 0x425f23
push 0x4c65cc
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne case.0x425ba5.114
or dword [ebp + 0x68], 0x30
push 0x4c2d58
push ebx
call fcn.004af2ae
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
jne 0x425c78
jmp 0x4262b1
mov eax, dword [ebp + 0x34]
or eax, dword [ebp + 0x38]
je 0x425f4c
xor eax, eax
inc eax
jmp 0x425f4e
xor eax, eax
xor ecx, ecx
cmp dword [ebp + 0x64], 4
setne cl
xor edx, edx
cmp dword [ebp + 0x64], 1
setne dl
and ecx, edx
xor edx, edx
cmp dword [ebp + 0x74], 2
setl dl
or ecx, edx
or ecx, eax
jne case.0x425ba5.114
add esi, 4
mov eax, dword [esi]
mov dword [ebp + 0x2c], eax
lea eax, [ebp + 0x34]
push eax
lea eax, [ebp + 0x2c]
push eax
call fcn.004483b1
mov eax, dword [ebp + 0x2c]
movzx eax, word [eax]
cmp eax, 0x54
pop ecx
pop ecx
jg 0x42605c
je 0x42601c
sub eax, ebx
je 0x4260e6
sub eax, 0x25
je 0x425fc5
sub eax, 0x22
je 0x42602b
sub eax, 4
je 0x42604a
dec eax
dec eax
jne 0x426305
mov eax, dword [ebp + 0x34]
jmp 0x42603b
cmp dword [ebp + 0x38], ebx
jg 0x425fd6
jl 0x425fd1
cmp dword [ebp + 0x34], ebx
ja 0x425fd6
xor ecx, ecx
inc ecx
jmp 0x425fd8
xor ecx, ecx
cmp dword [ebp + 0x38], ebx
jl 0x425fea
jg 0x425fe5
cmp dword [ebp + 0x34], 0x64
jb 0x425fea
xor eax, eax
inc eax
jmp 0x425fec
xor eax, eax
or eax, ecx
jne case.0x425ba5.114
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push dword [ebp + 0x38]
push dword [ebp + 0x34]
push ebx
push dword [ebp - 0x18]
call fcn.004ae930
push ebx
push 0x64
push edx
push eax
call fcn.004ae880
jmp 0x4260ce
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x38]
shld ecx, eax, 0xa
shl eax, 0xa
jmp 0x426031
mov ecx, dword [ebp + 0x38]
mov eax, dword [ebp + 0x34]
shld ecx, eax, 0xa
shl eax, 0xa
mov dword [ebp + 0x38], ecx
mov ecx, dword [ebp + 0x38]
shld ecx, eax, 0xa
shl eax, 0xa
mov dword [ebp + 0x38], ecx
jmp 0x42604d
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x38]
shld ecx, eax, 0xa
shl eax, 0xa
jmp 0x4260e0
sub eax, 0x62
je 0x4260d3
sub eax, 5
je 0x42608f
sub eax, 4
je 0x4260bd
dec eax
dec eax
je 0x4260a6
sub eax, 7
jne 0x426305
push ebx
push 0x3e8
push dword [ebp + 0x38]
push dword [ebp + 0x34]
call fcn.004ae930
mov dword [ebp + 0x34], eax
mov dword [ebp + 0x38], edx
push ebx
push 0x3e8
push dword [ebp + 0x38]
push dword [ebp + 0x34]
call fcn.004ae930
mov dword [ebp + 0x34], eax
mov dword [ebp + 0x38], edx
push ebx
push 0x3e8
push dword [ebp + 0x38]
push dword [ebp + 0x34]
call fcn.004ae930
mov dword [ebp + 0x34], eax
mov dword [ebp + 0x38], edx
push ebx
push 0x3e8
push dword [ebp + 0x38]
push dword [ebp + 0x34]
call fcn.004ae930
mov dword [ebp + 0x38], edx
jmp 0x4260e3
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x38]
shld ecx, eax, 9
shl eax, 9
mov dword [ebp + 0x38], ecx
mov dword [ebp + 0x34], eax
cmp dword [ebp + 0x38], ebx
jg 0x4262b1
jl 0x4260fa
cmp dword [ebp + 0x34], ebx
jae 0x4262b1
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov eax, dword [ebp + 0x34]
add eax, dword [ebp - 0x38]
adc dword [ebp + 0x38], ebx
mov dword [ebp + 0x34], eax
js 0x426120
jg 0x4262b1
cmp eax, ebx
jae 0x4262b1
push 0xb
jmp 0x4264bf
xor eax, eax
cmp dword [ebp + 0x44], ebx
setne al
xor ecx, ecx
cmp dword [ebp + 0x64], 1
setne cl
or eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
add esi, 4
mov eax, dword [esi]
movzx eax, word [eax]
push eax
call fcn.004af560
test eax, eax
pop ecx
je case.0x425ba5.114
push ebx
push ebx
push dword [esi]
call fcn.004af549
mov dword [ebp + 0x44], eax
jmp 0x4262ae
xor eax, eax
cmp dword [ebp + 0x40], ebx
setne al
xor ecx, ecx
cmp dword [ebp + 0x64], 1
setne cl
or eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
add esi, 4
mov eax, dword [esi]
movzx eax, word [eax]
push eax
call fcn.004af560
test eax, eax
pop ecx
je case.0x425ba5.114
push ebx
push ebx
push dword [esi]
call fcn.004af549
mov dword [ebp + 0x40], eax
jmp 0x4262ae
xor eax, eax
cmp byte [ebp + 0x63], al
setne al
xor ecx, ecx
cmp dword [ebp + 0x64], 1
setne cl
or eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
xor edx, edx
add esi, 4
mov eax, dword [esi]
xor ecx, ecx
mov cx, word [eax]
mov dx, 0x38
cmp dx, cx
sbb edx, edx
neg edx
cmp cx, 0x31
sbb ecx, ecx
neg ecx
or edx, ecx
jne case.0x425ba5.114
cmp word [eax + 2], bx
jne case.0x425ba5.114
mov al, byte [eax]
sub al, 0x30
mov byte [ebp + 0x63], al
jmp 0x4262b1
xor eax, eax
inc eax
cmp dword [ebp + 0x64], eax
je 0x42622b
cmp dword [ebp + 0x64], 4
jne 0x42622d
xor eax, eax
xor ecx, ecx
cmp dword [ebp + 0x20], ebx
setne cl
xor edx, edx
cmp dword [ebp + 0x74], 2
setl dl
or ecx, edx
or ecx, eax
jne case.0x425ba5.114
add esi, 4
mov eax, dword [esi]
mov dword [ebp + 0x20], eax
jmp 0x4262b1
xor eax, eax
cmp dword [ebp + 0x30], ebx
setne al
xor ecx, ecx
cmp dword [ebp + 0x64], 4
setne cl
and eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x64], 1
setne cl
and eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x4c], 0xffffffff
setne cl
or eax, ecx
xor ecx, ecx
cmp dword [ebp + 0x74], edi
setl cl
or eax, ecx
jne case.0x425ba5.114
add esi, 4
mov eax, dword [esi]
movzx eax, word [eax]
push eax
call fcn.004af560
test eax, eax
pop ecx
je case.0x425ba5.114
push ebx
push ebx
push dword [esi]
call fcn.004af549
mov dword [ebp + 0x4c], eax
add esp, 0xc
dec dword [ebp + 0x74]
cmp dword [ebp + 0x74], 1
jg 0x42584e
cmp dword [ebp + 0x64], 5
jne 0x42630c
mov eax, dword [ebp + 0x5c]
shr eax, 2
xor ecx, ecx
inc ecx
not eax
and eax, ecx
test byte [ebp + 0x5c], cl
je 0x4262d9
mov dword [ebp + 0x1c], ecx
mov ecx, dword [ebp + 0x30]
cmp ecx, ebx
je case.0x425ba5.114
mov cx, word [ecx]
cmp cx, bx
je case.0x425ba5.114
push dword [ebp + 0x1c]
push eax
movzx eax, cx
push eax
call fcn.00413a74
add esp, 0xc
jmp case.0x425ba5.114
push 0xa
jmp 0x4264bf
mov eax, dword [ebp + 0x64]
xor esi, esi
dec eax
mov dword [ebp + 0x2c], esi
mov ebx, 0x4dd0f0
je 0x42643e
dec eax
je 0x426407
dec eax
je 0x4263b6
dec eax
jne case.0x425ba5.114
mov esi, dword [ebp + 0x4c]
mov edi, dword [ebp + 0x30]
xor eax, eax
cmp esi, 0xffffffff
sete al
xor ecx, ecx
test edi, edi
sete cl
test ecx, eax
jne case.0x425ba5.114
cmp dword [ebp + 0x58], 0
jne 0x42635c
test edi, edi
je 0x42636f
push dword [ebp + 0x68]
push dword [ebp + 0x58]
push edi
push esi
call fcn.004140f7
add esp, 0x10
mov dword [ebp + 0x10], eax
cmp dword [ebp + 0x38], 0
jl 0x426390
jg 0x42637d
cmp dword [ebp + 0x34], 0
jbe 0x426390
push dword [ebp + 0x38]
push dword [ebp + 0x34]
push edi
push esi
call fcn.004142cc
add esp, 0x10
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x42668f
cmp dword [ebp + 0x20], eax
je 0x42668f
push dword [ebp + 0x20]
push edi
push esi
call fcn.0041c56a
add esp, 0xc
jmp 0x4265ac
mov ecx, dword [ebp + 0x7c]
push 0x4c2f70
call fcn.0044e88f
xor eax, eax
cmp dword [ebp + 0x4c], 0xffffffff
sete al
xor ecx, ecx
cmp dword [ebp + 0x30], esi
sete cl
test ecx, eax
je 0x4263ee
push dword [ebp]
push dword [ebp + 0x7c]
push dword [ebp + 0x24]
call fcn.00413bfe
add esp, 0xc
jmp 0x42668f
push dword [ebp + 0x5c]
push dword [ebp + 0x7c]
push dword [ebp + 0x30]
push dword [ebp + 0x4c]
call fcn.00413db8
add esp, 0x10
jmp 0x42668f
xor eax, eax
cmp dword [ebp + 0x30], esi
sete al
xor ecx, ecx
or eax, dword [ebp + 4]
cmp dword [ebp + 0x4c], 0xffffffff
sete cl
test ecx, eax
jne case.0x425ba5.114
push dword [ebp + 0x5c]
push dword [ebp + 0x1c]
push dword [ebp + 4]
push dword [ebp + 0x18]
push dword [ebp + 0x30]
push dword [ebp + 0x4c]
call fcn.0041c836
add esp, 0x18
jmp 0x42668f
cmp dword [ebp + 0xc], esi
je 0x42645c
cmp dword [ebp + 0x28], esi
jne 0x42644f
xor eax, eax
jmp 0x42668f
lea eax, [ebp + 0x50]
push eax
push dword [ebp + 0x28]
call dword [0x4dd06c]
push 0x4c1a3c
push str.CurRamDisk
mov ecx, ebx
call fcn.00444692
cmp byte [ebp + 0x63], 0
je 0x4264d6
movzx esi, byte [ebp + 0x63]
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp + 0x50]
push eax
push dword [ebp + 0x48]
shl esi, 5
push dword [ebp + 0x28]
lea esi, [ebp + esi - 0x164]
call dword [0x4dd070]
test eax, eax
je 0x4264bd
mov ecx, dword [esi]
mov edx, dword [esi + 4]
mov eax, ecx
xor edi, edi
or eax, edx
jne 0x4264aa
inc edi
mov eax, dword [esi + 8]
or eax, dword [esi + 0xc]
jne 0x4264b7
xor eax, eax
inc eax
jmp 0x4264b9
xor eax, eax
or eax, edi
je 0x4264c5
push 0xc
pop eax
jmp 0x42668f
add dword [ebp + 0x50], ecx
mov eax, dword [esi + 8]
mov dword [ebp + 0x34], eax
adc dword [ebp + 0x54], edx
mov eax, dword [esi + 0xc]
jmp 0x42654b
cmp dword [ebp + 0xc], esi
je 0x42654e
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp + 0x50]
push eax
push dword [ebp + 0x48]
push dword [ebp + 0x28]
call dword [0x4dd070]
test eax, eax
je 0x42654e
lea eax, [ebp - 0x144]
mov ecx, dword [eax]
xor edx, edx
or ecx, dword [eax + 4]
je 0x426506
inc edx
mov ecx, dword [eax + 8]
xor esi, esi
or ecx, dword [eax + 0xc]
je 0x426511
inc esi
mov cl, byte [eax + 0x18]
cmp cl, 5
je 0x426523
cmp cl, 0xf
je 0x426523
xor ecx, ecx
inc ecx
jmp 0x426525
xor ecx, ecx
and ecx, esi
test edx, ecx
jne 0x426537
add eax, 0x20
lea ecx, [ebp - 0x44]
cmp eax, ecx
jb 0x4264fc
jmp 0x42654e
mov ecx, dword [eax]
add dword [ebp + 0x50], ecx
mov ecx, dword [eax + 4]
adc dword [ebp + 0x54], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp + 0x34], ecx
mov dword [ebp + 0x38], eax
mov esi, 0x4ddd50
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [ebp + 0x30]
test edi, edi
je 0x42657e
push 0x4c65ac
push edi
call fcn.004aec3d
test eax, eax
pop ecx
pop ecx
jne 0x42657e
call dword [0x4dd05c]
mov word [edi], ax
mov dword [ebp + 0x2c], eax
push dword [ebp + 0x5c]
lea eax, [ebp + 0x50]
push dword [ebp + 0x20]
push edi
push dword [ebp + 8]
push dword [ebp + 0x28]
push dword [ebp + 0x68]
push eax
lea eax, [ebp + 0x34]
push eax
lea eax, [ebp + 0x4c]
push eax
call fcn.004251ed
add esp, 0x24
push esi
mov dword [ebp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
je 0x426613
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
call esi
cmp eax, 2
jne 0x4265ca
xor eax, eax
cmp word [edi + 2], 0x3a
sete al
jmp 0x4265eb
push edi
call esi
cmp eax, 3
jne 0x4265e9
lea eax, [edi + 2]
push 0x4c4a28
push eax
call fcn.004aec3d
neg eax
pop ecx
sbb eax, eax
pop ecx
inc eax
jmp 0x4265eb
xor eax, eax
test eax, eax
je 0x426613
push edi
push str.CurRamDisk
mov ecx, ebx
call fcn.00444692
test byte [ebp + 0x5c], 1
jne 0x426613
push dword [ebp + 0x1c]
movzx eax, word [edi]
push 1
push eax
call fcn.00413a74
add esp, 0xc
mov ebx, dword [ebp + 0x2c]
test bx, bx
je 0x42664e
cmp dword [ebp + 0x24], 0
jne 0x42664e
push 0xffffffffffffffff
push 0x4c65a8
lea ecx, [ebp + 0x18]
call fcn.0044e85d
mov esi, dword [ebp + 0x7c]
lea eax, [ebp + 0x18]
push eax
mov ecx, esi
call fcn.0044e8bd
lea ecx, [ebp + 0x18]
call fcn.0043e825
mov eax, dword [esi]
mov word [eax + 2], bx
jmp 0x42668c
mov edi, dword [ebp + 0x7c]
push 0x42
mov ecx, edi
call fcn.00444fb1
test bx, bx
mov eax, dword [edi]
mov word [eax], 0x2a
je 0x426671
cmp dword [ebp + 0x4c], 0
mov eax, str._d__c:
jge 0x426676
mov eax, 0x4c22c0
movzx ecx, bx
push ecx
push dword [ebp + 0x4c]
push eax
mov eax, dword [edi]
inc eax
inc eax
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp + 0x10]
pop edi
pop esi
pop ebx
add ebp, 0x6c
leave
ret