Function at 0x49c4c4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x288
push ebx
fldz
push esi
fstp qword [ebp - 0x19c]
push edi
push 0x26
xor eax, eax
pop ecx
lea edi, [ebp - 0x194]
mov byte [ebp + 0x5b], 1
rep stosd dword es:[edi], eax
xor ebx, ebx
mov esi, 0x4ddd50
push dword [ebp + 0x78]
lea ecx, [ebp - 0x70]
mov byte [ebp + 0x37], bl
call fcn.0044e827
mov eax, dword [ebp - 0x70]
mov dword [ebp + 0x60], eax
add eax, 0xc
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x48], eax
lea eax, [ebp + 0x48]
push eax
call fcn.00405b76
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e7bd
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
pop ecx
pop ecx
lea ecx, [ebp + 0xf]
sete byte [ebp + 0x67]
call fcn.0041379f
push 6
push dword [ebp - 0x20]
push str.__free
call fcn.0043fbc2
add esp, 0xc
test al, al
jne 0x49da3c
lea ecx, [ebp + 0x78]
call fcn.00499f5d
push ebx
lea ecx, [ebp + 0xf]
call fcn.004137a2
lea ecx, [ebp + 0xf]
call fcn.00413793
neg eax
sbb eax, eax
inc eax
cmp dword [0x4db840], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x24], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
jge 0x49c624
mov eax, dword [0x4dd08c]
cmp eax, ebx
mov dword [0x4db840], ebx
mov dword [ebp + 0x54], ebx
mov dword [ebp + 0x44], ebx
je 0x49c600
lea ecx, [ebp + 0x44]
push ecx
lea ecx, [ebp + 0x54]
push ecx
call eax
cmp dword [ebp + 0x44], ebx
jbe 0x49c600
mov eax, dword [ebp + 0x54]
cmp eax, 0x202
jb 0x49c5cc
mov dword [0x4db840], 0x38
jmp 0x49c600
cmp eax, 0x184
jb 0x49c5df
mov dword [0x4db840], 8
jmp 0x49c600
cmp eax, 0x160
jb 0x49c5f2
mov dword [0x4db840], 2
jmp 0x49c600
cmp eax, ebx
jbe 0x49c600
mov dword [0x4db840], 1
push dword [0x4dd08c]
push dword [0x4db840]
push dword [ebp + 0x44]
push dword [ebp + 0x54]
push str.DBG:_IMD:_0x_X_0x_X_0x_X__0x_p_r_n
push 0x4dd0f0
call fcn.004111e0
add esp, 0x18
push 3
push dword [ebp - 0x20]
push 0x4ca994
call fcn.0043fbc2
add esp, 0xc
test al, al
je 0x49c641
mov dword [ebp + 0x24], 0xfff00000
push 5
lea eax, [ebp - 0x20]
push eax
push str.__ins
mov byte [ebp + 0x6f], bl
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49c661
mov byte [ebp + 0x6f], 5
jmp 0x49c67c
push 6
lea eax, [ebp - 0x20]
push eax
push str.__fins
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49c67c
mov byte [ebp + 0x6f], 6
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.00444f8a
lea ecx, [ebp + 0x18]
call fcn.00444f6c
lea ecx, [ebp - 0xa8]
call fcn.00444f6c
lea ecx, [ebp + 0x5c]
call fcn.00444f6c
lea ecx, [ebp - 0x1c]
mov dword [ebp + 0x14], ebx
call fcn.00444f6c
lea ecx, [ebp + 4]
call fcn.00444f6c
lea ecx, [ebp + 0x50]
call fcn.00444f6c
lea ecx, [ebp - 0xc]
call fcn.00444f6c
lea ecx, [ebp - 0x3c]
call fcn.00444f6c
lea ecx, [ebp + 0x3c]
call fcn.00444f6c
lea ecx, [ebp - 0x28]
call fcn.00444f6c
lea ecx, [ebp + 0x28]
call fcn.00444f6c
or eax, 0xffffffff
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov eax, 0x4c1a3c
push 0xc8
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
call fcn.00444f8a
cmp byte [ebp + 0x67], bl
mov eax, dword [ebp + 0x48]
mov cx, word [eax]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0xd8], eax
mov word [ebp - 0x7c], cx
mov dword [ebp + 0x30], eax
je 0x49c86f
add dword [ebp + 0x68], 2
mov word [eax], bx
mov eax, dword [ebp + 0x68]
mov edx, eax
jmp 0x49c764
cmp cx, 0x2a
je 0x49c76c
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, bx
jne 0x49c759
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x18]
call fcn.00445090
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
je 0x49c78f
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.00444fb1
cmp word [ebp - 0x7c], bx
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x30], eax
je 0x49c7a1
add eax, 2
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
call fcn.0043e7bd
pop ecx
mov edi, 0x4c1a3c
push 4
lea eax, [ebp + 0x30]
push eax
push str._mem
call fcn.00447021
add esp, 0xc
test al, al
jne 0x49c7de
push 2
lea eax, [ebp + 0x30]
push eax
push 0x4c6ba4
call fcn.00447021
add esp, 0xc
test al, al
je 0x49c7e3
mov dword [ebp + 0x44], edi
jmp 0x49c7b0
push 3
lea eax, [ebp + 0x30]
push eax
push 0x4caf30
call fcn.00447021
add esp, 0xc
test al, al
je 0x49c803
mov dword [ebp + 0x44], 0x4ceacc
jmp 0x49c7b0
push 4
lea eax, [ebp + 0x30]
push eax
push str._map
call fcn.00447021
add esp, 0xc
test al, al
je 0x49c826
mov dword [ebp - 0xe0], 1
jmp 0x49c7b0
push 4
lea eax, [ebp + 0x30]
push eax
push str._exe
call fcn.00447021
add esp, 0xc
test al, al
je 0x49c849
mov dword [ebp + 0x24], 1
jmp 0x49c7b0
push 5
lea eax, [ebp + 0x30]
push eax
push str._nexe
call fcn.00447021
add esp, 0xc
test al, al
je 0x49c86c
mov dword [ebp + 0x24], 0xfff00000
jmp 0x49c7b0
mov edi, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x7c]
push 0x4ceaa4
push 0x4cdf94
call fcn.00444692
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
push 0xffffffffffffffff
je 0x49c8b4
push 0x4ceaa0
call fcn.00445027
push dword [ebp + 0x18]
lea ecx, [ebp + 0x14]
call fcn.00444fd8
push str.Imdisk
lea ecx, [ebp + 0x14]
call fcn.00444fd8
jmp 0x49c8be
push str._Imdisk
call fcn.00445027
push 9
push edi
push str.__version
call fcn.0043fbc2
push 2
push edi
push 0x4cea70
mov byte [ebp + 0x66], al
call fcn.0043fbc2
push 2
push edi
push 0x4cea6c
mov byte [ebp + 0xe], al
call fcn.0043fbc2
push 3
push edi
push 0x4ca994
mov byte [ebp + 0x13], al
call fcn.0043fbc2
add esp, 0x30
cmp byte [ebp + 0x66], bl
jne 0x49c915
cmp byte [ebp + 0xe], bl
jne 0x49c915
cmp byte [ebp + 0x13], bl
jne 0x49c915
cmp al, bl
jne 0x49c915
mov cl, 1
jmp 0x49c917
xor cl, cl
cmp dword [ebp - 0x18], ebx
jne 0x49c92e
mov eax, dword [0x4db840]
cmp eax, ebx
jle 0x49c92e
push 2
pop edi
cmp eax, edi
jge 0x49c93a
jmp 0x49c931
push 2
pop edi
cmp cl, bl
jne 0x49c944
cmp byte [ebp + 0x6f], bl
jne 0x49c944
cmp byte [ebp + 0x6f], 6
jl 0x49cac9
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x10], 0x4cea64
jne 0x49c99a
lea ecx, [ebp - 0x74]
call fcn.00444f6c
mov eax, 0x4cea5c
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xe8]
push eax
push edi
call fcn.004256fa
mov eax, dword [ebp - 0x74]
add esp, 0xc
cmp word [eax], bx
je 0x49c992
cmp word [eax + 2], bx
je 0x49c992
mov dword [ebp - 0x10], 0x4cea54
lea ecx, [ebp - 0x74]
call fcn.0043e825
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub dword [0x4ddda8], 1
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x4ddda8], ebx
jle 0x49c9d1
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.004161d8
jmp 0x49c9b1
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.004137a2
push esi
call edi
movsx ax, byte [ebp + 0x6f]
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
mov word [ebp - 0xbe], 0x20
mov word [ebp - 0xbc], bx
add eax, 0x30
mov word [ebp - 0xc0], ax
call fcn.004137a2
push str.28:INDATA
lea ecx, [ebp + 8]
call fcn.0044e827
cmp dword [ebp - 0x18], ebx
mov eax, 0x4cea54
jne 0x49ca23
mov eax, 0x4cea64
push eax
lea ecx, [ebp + 8]
call fcn.00444fd8
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.00444fd8
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp + 8]
call fcn.00444fd8
push dword [ebp + 0x48]
lea ecx, [ebp + 8]
call fcn.00444fd8
push dword [ebp + 8]
push str.Install_IMD__s__r_n
push 0x4dd0f0
call fcn.004111e0
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push dword [ebp + 8]
call fcn.004223de
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x4ddda8], 1
push esi
mov dword [0x4db840], 0xffffffc0
call edi
push ebx
lea ecx, [ebp + 0xf]
call fcn.004137a2
lea ecx, [ebp + 0xf]
call fcn.00413793
neg eax
sbb eax, eax
inc eax
push esi
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [ebp - 0x18], ebx
jne 0x49cabb
mov dword [0x4db840], 0x38
push esi
call edi
lea ecx, [ebp + 8]
call fcn.0043e825
push 2
pop edi
cmp byte [ebp + 0x67], bl
je 0x49d36a
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x4c], eax
jmp 0x49cafd
push edi
lea eax, [ebp - 0x4c]
push eax
push 0x4c6ba4
call fcn.00446fac
add esp, 0xc
test al, al
jne 0x49cb04
lea eax, [ebp - 0x4c]
push eax
call fcn.00409344
mov eax, dword [ebp - 0x4c]
pop ecx
cmp word [eax], bx
jne 0x49cada
jmp 0x49cb0a
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
jne 0x49d358
add dword [ebp + 0x68], edi
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
cmp word [eax], 0x40
mov byte [ebp + 0x67], bl
jne 0x49cb39
add dword [ebp + 0x68], edi
mov byte [ebp + 0x67], 1
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a93d
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x49cb53
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a93d
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x49cb6d
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a93d
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x49cb89
inc edi
inc edi
mov dword [ebp + 0x68], edi
mov al, byte [ebp - 0x48]
and al, 1
mov byte [ebp + 0x6f], al
push 0x2a
lea eax, [ebp + 0x68]
call fcn.00405bbb
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x28]
call fcn.00445090
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x49cbb9
add dword [ebp + 0x68], 2
mov edi, dword [ebp + 0x68]
push 0x2a
lea eax, [ebp + 0x68]
call fcn.00405bbb
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x3c]
call fcn.00445090
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x49cbe4
add dword [ebp + 0x68], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a93d
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x49cc00
inc edi
inc edi
mov dword [ebp + 0x68], edi
push 0x2a
lea eax, [ebp + 0x68]
call fcn.00405bbb
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00445090
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a93d
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x49cc37
add dword [ebp + 0x68], 2
cmp byte [ebp + 0x67], bl
mov edx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
je 0x49cc7c
add eax, edx
adc ecx, edi
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0x58], ebx
jl 0x49cc9e
jg 0x49cc88
cmp dword [ebp - 0x5c], ebx
jbe 0x49cc9e
cmp dword [ebp - 0x34], ebx
jg 0x49cc9e
jl 0x49cc94
cmp dword [ebp - 0x38], ebx
ja 0x49cc9e
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], ebx
push 0x318
lea ecx, [ebp - 0x2c]
call fcn.00444f8a
mov eax, dword [ebp - 0x2c]
lea esi, [eax + 0x6a]
mov dword [ebp - 8], eax
lea eax, [esi + 0x6a]
lea edi, [eax + 0x6a]
push ebx
mov word [edi], bx
push 0x200
mov word [eax], bx
push dword [ebp - 0x60]
lea ecx, [edi + 0x6a]
push dword [ebp - 0x64]
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 4], ecx
call fcn.004ae880
push edx
push eax
push dword [ebp - 8]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
call fcn.0049c1b8
add esp, 0xc
push ebx
push 0x200
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.004ae880
push edx
push eax
push esi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
call fcn.0049c1b8
add esp, 0xc
mov word [edi], bx
cmp dword [ebp - 0x58], ebx
jl 0x49cd36
jg 0x49cd27
cmp dword [ebp - 0x5c], ebx
jbe 0x49cd36
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push edi
call fcn.0049c1b8
add esp, 0xc
mov ecx, dword [ebp + 0x48]
xor eax, eax
cmp word [ebp - 0x7c], bx
setne al
lea eax, [ecx + eax*2]
mov dword [ebp + 0x38], eax
lea eax, [ebp + 0x38]
push eax
call fcn.0043e7bd
push 4
push dword [ebp + 0x38]
mov dword [ebp - 0x78], ebx
push str.__w:
call fcn.0043fc19
add esp, 0x10
test al, al
je 0x49cd7d
add dword [ebp + 0x38], 8
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.00451e7f
pop ecx
pop ecx
push 0xffffffffffffffff
lea eax, [ebp + 0x38]
push eax
push 0x4cea0c
call fcn.00446fac
add esp, 0xc
cmp dword [0x4db840], 1
jl 0x49cda5
cmp dword [ebp + 0x24], ebx
jne 0x49cda5
mov dword [ebp + 0x24], 0xfff00000
mov eax, dword [ebp + 0x38]
mov edi, 0x4c1a3c
mov byte [ebp + 0x66], bl
mov byte [ebp + 0x67], bl
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x80], edi
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x2c], ebx
jmp 0x49ce30
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x4cb048
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49cde1
mov dword [ebp + 0x2c], 1
jmp 0x49ce2d
cmp dword [ebp + 0x2c], ebx
je 0x49ce20
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x4cea08
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49ce03
mov byte [ebp + 0x66], 1
jmp 0x49ce2d
push 3
lea eax, [ebp + 0x4c]
push eax
push 0x4cea04
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49ce20
mov byte [ebp + 0x67], 1
jmp 0x49ce2d
lea eax, [ebp + 0x4c]
push eax
call fcn.00409344
pop ecx
mov dword [ebp + 0x2c], ebx
mov eax, dword [ebp + 0x4c]
cmp word [eax], bx
jne 0x49cdc1
mov eax, dword [0x4db840]
test al, 0x10
je 0x49ce4a
cmp byte [ebp + 0x67], bl
jne 0x49ce4a
mov dword [ebp - 0x10], str._o_par
mov dword [ebp + 0x4c], eax
and dword [ebp + 0x4c], 0x20
je 0x49ce5a
mov dword [ebp - 0x80], str._o_shared
cmp dword [ebp + 0x4c], ebx
je 0x49ce62
mov byte [ebp + 0x5b], bl
mov ecx, dword [ebp - 0x48]
mov eax, ecx
and eax, 0x200
or eax, ebx
jne 0x49ce8c
cmp dword [ebp + 0x4c], ebx
jne 0x49ce8c
cmp byte [ebp + 0x6f], bl
je 0x49ce8f
and ecx, 0x100
mov eax, ecx
or eax, ebx
je 0x49ce8f
mov byte [ebp + 0x5b], 1
jmp 0x49ce8f
mov byte [ebp + 0x5b], bl
cmp dword [0x4db840], 8
jl 0x49cfa0
cmp byte [ebp + 0x6f], bl
je 0x49ceaa
cmp byte [ebp + 0x5b], bl
jne 0x49cfa0
cmp byte [ebp + 0x6f], bl
mov dword [ebp + 0x2c], edi
jne 0x49cec0
cmp byte [ebp + 0x66], bl
jne 0x49cec9
mov dword [ebp + 0x2c], str._o_ro
jmp 0x49cec9
cmp dword [ebp + 0x4c], ebx
jne 0x49cec9
mov byte [ebp + 0x37], 1
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x48]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + edi + 0x800]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00444fb1
push dword [ebp + 0x28]
push esi
push dword [ebp - 8]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push dword [ebp + 0x2c]
push str.imdisk__a___s__s__s___b__sb__s__sb__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp + 0x38]
add esp, 0x20
mov dword [ebp + 0x20], eax
cmp word [eax], bx
je 0x49cf8c
push 2
lea eax, [ebp + 0x20]
push eax
push 0x4ce978
call fcn.0043fb71
add esp, 0xc
test al, al
jne 0x49cf52
push 2
lea eax, [ebp + 0x20]
push eax
push 0x4ce970
call fcn.0043fb71
add esp, 0xc
test al, al
jne 0x49cf52
lea eax, [ebp + 0x20]
push eax
call fcn.00409344
jmp 0x49cf80
mov ecx, dword [ebp + 0x20]
xor eax, eax
jmp 0x49cf6f
call fcn.0043e785
test al, al
jne 0x49cf77
mov word [ecx], 0x20
mov ecx, dword [ebp + 0x20]
inc ecx
inc ecx
mov dword [ebp + 0x20], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x49cf59
lea eax, [ebp + 0x20]
push eax
call fcn.0043e7bd
mov eax, dword [ebp + 0x20]
cmp word [eax], bx
pop ecx
jne 0x49cf19
mov eax, dword [ebp + 0x38]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
jmp 0x49d338
cmp byte [ebp + 0x6f], bl
je 0x49cfd3
push ebx
push 0xa0000080
push 3
push ebx
push 7
push 0xc0000000
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x49da74
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0x4c], edi
jmp 0x49cfda
mov dword [ebp + 0x4c], 0x4ce968
cmp dword [ebp - 0x34], ebx
jl 0x49cff8
jg 0x49cfe6
cmp dword [ebp - 0x38], ebx
jbe 0x49cff8
push dword [ebp - 0x34]
lea eax, [esi + 0x6a]
push dword [ebp - 0x38]
push eax
call fcn.0049c1b8
add esp, 0xc
push 0x5c
push ebx
push dword [ebp + 0x28]
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
cmp esi, ebx
jne 0x49d00f
mov esi, dword [ebp + 0x28]
jmp 0x49d011
inc esi
inc esi
mov eax, dword [ebp + 0x3c]
cmp word [eax], bx
jne 0x49d048
push 0x800
lea ecx, [ebp + 0x3c]
call fcn.00444fb1
mov edi, dword [ebp + 0x3c]
call fcn.00440ef7
push eax
push dword [ebp - 0xa0]
push dword [ebp - 8]
push esi
push str._s_s_s__u
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x3c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
mov eax, 0x400
cmp esi, eax
jle 0x49d068
mov esi, eax
mov eax, dword [ebp + 0x3c]
mov word [eax + 0x800], bx
push str.Global_
lea ecx, [ebp - 0x14]
call fcn.0044e8eb
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x14]
call fcn.00444fd8
push str._devio_Ack
lea ecx, [ebp - 0x14]
call fcn.00444fd8
mov eax, dword [ebp - 4]
mov word [eax], bx
mov eax, dword [ebp - 0x48]
and eax, 0x30
or eax, ebx
mov word [ebp - 0x1d8], bx
jne 0x49d0bb
cmp byte [ebp + 0x6f], bl
je 0x49d173
mov eax, dword [ebp - 0x48]
and eax, 0x40
or eax, ebx
jne 0x49d173
mov edi, dword [ebp - 4]
push 0x10
push str.__kill:
push edi
call fcn.004145c5
add esp, 0xc
push 0x104
add edi, 0x27e
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp - 4]
push 0x104
add eax, 0xe
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, dword [ebp + 0x54]
cmp word [edi], 0x22
mov dword [ebp - 0x84], eax
mov dword [ebp + 0x2c], edi
jne 0x49d127
add dword [ebp + 0x54], 2
jmp 0x49d11d
cmp ax, 0x22
je 0x49d134
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x49d115
jmp 0x49d134
lea eax, [ebp + 0x2c]
push eax
call fcn.00405b76
mov edi, dword [ebp + 0x2c]
pop ecx
mov ax, word [edi]
mov word [ebp + 0x2c], ax
mov word [edi], bx
mov eax, dword [ebp - 0x48]
and eax, 0x20
or eax, ebx
mov eax, str._LOAD_25_poweroff
jne 0x49d152
mov eax, str._RAMD_ImdiskV__D__m__s_
push dword [ebp + 0x54]
mov ecx, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 4]
lea eax, [eax + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ax, word [ebp + 0x2c]
add esp, 0xc
mov word [edi], ax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov cl, 1
call fcn.004aeb70
and eax, 3
je 0x49d19b
push eax
lea eax, [ebp - 0x1d8]
push str._nrc:_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
mov edi, 0x200
push edi
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.004ae880
push edx
push eax
push dword [ebp - 8]
call fcn.0049c1b8
add esp, 0xc
push ebx
push edi
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.004ae880
mov edi, dword [ebp - 0xa0]
push edx
push eax
push edi
call fcn.0049c1b8
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push 0x4c5858
push str.__ImdMapPid
call fcn.00444692
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x28]
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x30]
lea eax, [eax + esi + 0x940]
push eax
call fcn.00444f8a
push str.Global_
lea ecx, [ebp - 0x40]
call fcn.0044e827
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x40]
call fcn.00444fd8
push dword [ebp - 0x40]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
cmp eax, ebx
jne 0x49da86
lea ecx, [ebp - 0x40]
call fcn.0043e825
push dword [ebp - 0xcc]
lea eax, [edi + 0x6a]
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x1d8]
push edi
push dword [ebp + 0x28]
push dword [ebp + 0x3c]
push dword [ebp + 0x4c]
push eax
push dword [ebp - 0x28]
push dword [ebp - 4]
push dword [ebp + 0x44]
push str.EXEC___pid:__ImdMapPid____exe:_s10INDATA___nfb___MyName0____s__w:60000__s__s__s_shm:_s___s__s__s__s__s
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
add esi, 0x800
push esi
lea ecx, [ebp + 0x5c]
call fcn.00444fb1
mov eax, dword [ebp - 8]
mov word [eax], bx
mov word [edi], bx
push dword [ebp + 0x3c]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push 0x4c1a3c
push str.imdisk__a__t_proxy__s__s__s__o_shm__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x38]
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
push dword [ebp - 0x14]
mov eax, dword [ebp + 0x5c]
push ebx
push ebx
push ebx
mov dword [ebp + 0x60], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push ebx
push dword [ebp - 0x30]
mov esi, eax
call fcn.00434146
push 0xea60
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
jne 0x49daaf
push 0x32
pop esi
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
jne 0x49d314
cmp dword [ebp - 0x78], ebx
jle 0x49d330
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push dword [ebp - 0x78]
call fcn.004161d8
lea ecx, [ebp - 0x30]
call fcn.0043e825
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x48], eax
lea ecx, [ebp - 0x2c]
mov word [eax], bx
mov dword [ebp - 0xe0], 1
call fcn.0043e825
mov esi, 0x4ddd50
mov ax, word [ebp - 0x7c]
mov ecx, dword [ebp - 0xd8]
mov word [ecx], ax
jmp 0x49d7e5
push 4
lea eax, [ebp + 0x48]
push eax
push str._exe
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49d388
mov dword [ebp + 0x24], 1
push 5
lea eax, [ebp + 0x48]
push eax
push str._nexe
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49d3a6
mov dword [ebp + 0x24], 0xfff00000
push 6
lea eax, [ebp + 0x48]
push eax
push str._nexe1
call fcn.00446fac
add esp, 0xc
test al, al
je 0x49d3ce
mov dword [ebp + 0x24], 0xfff00000
mov dword [ebp - 0x8c], 1
push 0x2c
pop esi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00447e0d
mov eax, dword [ebp - 0x1c]
mov word [eax], bx
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49d49b
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00447e0d
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49d49b
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00447e0d
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49d49b
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00447e0d
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49d49b
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00447e0d
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49d49b
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00447e0d
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49d49b
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044800a
add esp, 0xc
push 6
lea ecx, [ebp + 0x50]
mov byte [ebp + 0x66], bl
call fcn.00444fb1
mov eax, dword [ebp + 0x50]
mov word [eax + 2], 0x3a
mov eax, dword [ebp + 0x50]
mov word [eax + 4], bx
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49d537
push eax
call fcn.004ade73
test eax, eax
pop ecx
je 0x49d52f
mov eax, dword [ebp + 0x50]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xfc], str.imdisk
mov dword [ebp - 0xf8], 0x4cea5c
mov dword [ebp - 0xf4], 0x4ce73c
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ebx
call fcn.00444f6c
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xfc]
push eax
push 4
call fcn.004256fa
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0xa4]
mov byte [ebp + 0x66], al
call fcn.0043e825
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
jne 0x49d550
push 0x4c65ac
lea ecx, [ebp + 0x50]
call fcn.0044e88f
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49dad0
push 0x3c
lea ecx, [ebp]
call fcn.00444f8a
mov eax, dword [ebp - 0x1c]
or esi, 0xffffffff
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], esi
mov dword [ebp + 0x40], eax
cmp word [eax], bx
mov edi, esi
je 0x49dac8
lea eax, [ebp + 0x40]
push eax
call fcn.0043e7bd
mov eax, dword [ebp + 0x40]
mov ax, word [eax]
or ax, 0x20
cmp ax, 0x70
pop ecx
jne 0x49d5b4
lea eax, [ebp - 0x9c]
jmp 0x49d5ce
cmp ax, 0x6c
jne 0x49d5c2
lea eax, [ebp - 0x94]
jmp 0x49d5ce
cmp ax, 0x68
jne 0x49d5e6
lea eax, [ebp - 0xc8]
add dword [ebp + 0x40], 2
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.00451dd4
mov eax, dword [ebp + 0x40]
cmp word [eax], bx
pop ecx
pop ecx
jne 0x49d592
cmp dword [ebp - 0x98], ebx
jl 0x49d628
jg 0x49d5f8
cmp dword [ebp - 0x9c], ebx
jbe 0x49d628
push 1
call fcn.00415401
pop ecx
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
push edx
push eax
call fcn.004ae930
push ebx
push 0x64
push edx
push eax
call fcn.004ae880
mov cl, 0x14
call fcn.004aeb70
mov edi, eax
mov esi, edx
cmp esi, dword [ebp - 0x90]
jg 0x49d646
jl 0x49d63a
cmp edi, dword [ebp - 0x94]
jae 0x49d646
mov edi, dword [ebp - 0x94]
mov esi, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xc4]
cmp ecx, ebx
jl 0x49d678
mov eax, dword [ebp - 0xc8]
jg 0x49d65c
cmp eax, ebx
jbe 0x49d678
cmp esi, ecx
jl 0x49d66a
jg 0x49d666
cmp edi, eax
jbe 0x49d66a
mov edi, eax
mov esi, ecx
cmp esi, ebx
jg 0x49d68a
jl 0x49d674
cmp edi, ebx
ja 0x49d678
mov edi, eax
mov esi, ecx
cmp esi, ebx
jl 0x49dac8
jg 0x49d68a
cmp edi, ebx
jb 0x49dac8
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49dac8
cmp esi, ebx
jg 0x49d6a5
jl 0x49d6a0
cmp edi, ebx
ja 0x49d6a5
xor edi, edi
inc edi
xor esi, esi
push esi
push edi
push dword [ebp]
call fcn.0049c1d2
add esp, 0xc
push 0x4ce734
lea ecx, [ebp]
call fcn.00444fd8
cmp byte [ebp + 0x66], bl
mov eax, str.imdisk___e
jne 0x49d6ce
mov eax, str.imdisk___a
push eax
lea ecx, [ebp + 0x5c]
call fcn.0044e88f
mov eax, dword [ebp - 0xd4]
and eax, 1
xor ecx, ecx
or eax, ecx
je 0x49d6f3
push str.__o_awe
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
mov eax, dword [ebp]
cmp word [eax], bx
je 0x49d713
push str.___s
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
push dword [ebp]
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49d733
push str.___m
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
push dword [ebp + 0x50]
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
mov eax, dword [ebp + 4]
cmp word [eax], bx
jne 0x49d747
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x49d7d2
push str.___p__
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x49d774
push str.__FS:
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
push dword [ebp + 4]
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x49d794
push str.__V:
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
push dword [ebp - 0xc]
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
push dword [ebp + 4]
push 0x4cab24
call fcn.0043fc58
test al, al
pop ecx
pop ecx
je 0x49d7c5
mov eax, dword [ebp - 0x3c]
mov ax, word [eax]
cmp ax, bx
je 0x49d7c5
cmp ax, 0x30
je 0x49d7c5
push 0x4cab1c
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
push str.___Q__Y__X__
lea ecx, [ebp + 0x5c]
call fcn.00444fd8
mov eax, dword [ebp + 0x5c]
lea ecx, [ebp]
mov dword [ebp + 0x60], eax
call fcn.0043e825
mov esi, 0x4ddd50
lea eax, [ebp + 0x48]
push eax
call fcn.0043e7bd
push 4
push dword [ebp + 0x48]
push 0x4c6bec
call fcn.0043fbc2
add esp, 0x10
test al, al
jne 0x49dad7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x44], eax
lea eax, [ebp + 0x44]
push eax
sub edi, 0xc8
call fcn.00405b76
pop ecx
push dword [ebp + 0x44]
lea ecx, [ebp - 0x54]
call fcn.0044e8eb
mov eax, dword [ebp - 0x54]
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
jmp 0x49d88e
push 6
lea eax, [ebp + 0x54]
push eax
push str.__nbrd
call fcn.00447021
add esp, 0xc
test al, al
jne 0x49d88b
push 6
lea eax, [ebp + 0x54]
push eax
push 0x4c29c4
call fcn.00447021
add esp, 0xc
test al, al
jne 0x49d88b
push 2
lea eax, [ebp + 0x54]
push eax
push 0x4c6b8c
call fcn.00447021
add esp, 0xc
test al, al
jne 0x49d88b
lea eax, [ebp + 0x54]
push eax
call fcn.00409344
pop ecx
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x49d83c
cmp dword [ebp - 0x18], ebx
jne 0x49d9a0
cmp dword [ebp + 0x24], ebx
jg 0x49d9a0
push ebx
push dword [ebp + 0x60]
lea ecx, [ebp - 0x19c]
call fcn.004515f9
cmp dword [ebp - 0x164], 1
jle 0x49daee
mov eax, dword [ebp - 0x160]
mov dword [eax], str.imdisk
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x160]
push dword [ebp - 0x164]
call fcn.004256fa
add esp, 0xc
cmp byte [ebp + 0x37], bl
mov dword [ebp + 0x1c], eax
mov dword [ebp - 0x88], ebx
jle 0x49d9f6
cmp eax, 3
jne 0x49d9f6
cmp dword [ebp - 0x8c], ebx
jne 0x49d9f6
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x5b], 1
call fcn.0043e825
lea ecx, [ebp - 0x54]
call fcn.0043e825
lea ecx, [ebp + 0x28]
call fcn.0043e825
lea ecx, [ebp - 0x28]
call fcn.0043e825
lea ecx, [ebp + 0x3c]
call fcn.0043e825
lea ecx, [ebp - 0x3c]
call fcn.0043e825
lea ecx, [ebp - 0xc]
call fcn.0043e825
lea ecx, [ebp + 0x50]
call fcn.0043e825
lea ecx, [ebp + 4]
call fcn.0043e825
lea ecx, [ebp - 0x1c]
call fcn.0043e825
lea ecx, [ebp + 0x14]
call fcn.0043e825
lea ecx, [ebp + 0x5c]
call fcn.0043e825
lea ecx, [ebp - 0xa8]
call fcn.0043e825
lea ecx, [ebp + 0x18]
call fcn.0043e825
lea ecx, [ebp - 0x24]
call fcn.0043e825
lea ecx, [ebp + 0x78]
call fcn.00499f80
lea ecx, [ebp - 0x70]
call fcn.0043e825
jmp 0x49c4f2
cmp dword [ebp - 0x8c], ebx
jne 0x49d9f6
push dword [ebp + 0x14]
lea ecx, [ebp - 0x50]
call fcn.0044e827
push dword [ebp + 0x44]
lea ecx, [ebp - 0x50]
call fcn.00444fd8
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
mov ecx, dword [ebp + 0x7c]
mov dword [ebp - 0x88], 1
je 0x49d9e3
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x50]
push ecx
push ebx
call fcn.0040a83c
jmp 0x49d9eb
push dword [ebp - 0x50]
call fcn.00402ed8
lea ecx, [ebp - 0x50]
mov dword [ebp + 0x1c], eax
call fcn.0043e825
mov ecx, dword [ebp - 0xe0]
xor eax, eax
or ecx, eax
je 0x49daf5
cmp dword [ebp + 0x1c], 3
jne 0x49daf5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x1388
jae 0x49daf5
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 0xc8
call fcn.004161d8
mov esi, 0x4ddd50
jmp 0x49d893
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x4ddda8], ebx
jle 0x49da62
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.004161d8
jmp 0x49da42
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.004137a2
push esi
call edi
jmp 0x49dbc9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jne 0x49da81
xor eax, eax
inc eax
mov dword [ebp + 0x1c], eax
jmp 0x49dabe
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x40]
call fcn.0043e825
lea ecx, [ebp - 0x30]
call fcn.0043e825
lea ecx, [ebp - 0x2c]
call fcn.0043e825
mov ebx, 0xb7
jmp 0x49db46
lea ecx, [ebp - 0x30]
mov dword [ebp + 0x1c], 1
call fcn.0043e825
lea ecx, [ebp - 0x2c]
call fcn.0043e825
jmp 0x49daf5
lea ecx, [ebp]
call fcn.0043e825
mov ebx, 0x80070057
jmp 0x49db46
mov ecx, dword [ebp + 0x7c]
push 0xffffffffffffff9c
push 0x4c1a3c
push ebx
push str.imdisk.cpl_
call fcn.0045a521
jmp 0x49db46
mov dword [ebp + 0x1c], 0x80070057
mov eax, dword [ebp - 0x15c]
cmp eax, ebx
je 0x49db10
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
mov dword [ebp - 0x15c], ebx
call fcn.0043e825
mov edx, dword [ebp + 0x18]
cmp word [edx], bx
je 0x49db43
cmp dword [ebp - 0x88], ebx
jne 0x49db43
mov ecx, dword [ebp - 0x24]
mov word [ebp - 0x218], bx
cmp word [ecx], 0x2a
lea eax, [ebp - 0x218]
jne 0x49db39
lea eax, [ecx + 2]
mov ecx, dword [ebp + 0x7c]
push eax
push edx
call fcn.00444692
mov ebx, dword [ebp + 0x1c]
lea ecx, [ebp - 0x14]
call fcn.0043e825
lea ecx, [ebp - 0x54]
call fcn.0043e825
lea ecx, [ebp + 0x28]
call fcn.0043e825
lea ecx, [ebp - 0x28]
call fcn.0043e825
lea ecx, [ebp + 0x3c]
call fcn.0043e825
lea ecx, [ebp - 0x3c]
call fcn.0043e825
lea ecx, [ebp - 0xc]
call fcn.0043e825
lea ecx, [ebp + 0x50]
call fcn.0043e825
lea ecx, [ebp + 4]
call fcn.0043e825
lea ecx, [ebp - 0x1c]
call fcn.0043e825
lea ecx, [ebp + 0x14]
call fcn.0043e825
lea ecx, [ebp + 0x5c]
call fcn.0043e825
lea ecx, [ebp - 0xa8]
call fcn.0043e825
lea ecx, [ebp + 0x18]
call fcn.0043e825
lea ecx, [ebp - 0x24]
call fcn.0043e825
lea ecx, [ebp + 0x78]
call fcn.00499f80
lea ecx, [ebp - 0x70]
call fcn.0043e825
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x70
leave
ret