Function at 0x1400e8c44
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x428
xorpd xmm0, xmm0
mov rbx, rcx
mov rsi, rdx
lea rcx, [rax - 0x180]
xor edx, edx
mov r8d, 0xf0
movsd qword [rax - 0x188], xmm0
mov edi, 1
call fcn.140101f00
lea r12, [0x14013e190]
mov r15d, 6
lea rcx, [rsp + 0x208]
xor ebp, ebp
mov rdx, rbx
lea r13d, [r15 + 0x1a]
lea r14d, [r15 + 3]
mov byte [rsp + 0x128], bpl
call fcn.14006ff14
mov r11, qword [rsp + 0x208]
mov qword [rsp + 0x80], r11
add r11, 0xc
mov qword [rsp + 0x70], r11
jmp 0x1400e8ced
cmp r14w, ax
ja 0x1400e8ce3
cmp ax, 0xd
jbe 0x1400e8cfe
cmp r13w, ax
je 0x1400e8cfe
add r11, 2
mov qword [rsp + 0xb0], r11
movzx eax, word [r11]
cmp ax, bp
jne 0x1400e8cd7
lea rcx, [rsp + 0x168]
mov qword [rsp + 0x168], r11
call fcn.14005aec8
mov rax, qword [rsp + 0x70]
mov ecx, 0x2a
cmp cx, word [rax]
lea rcx, [rsp + 0x480]
sete r13b
call fcn.140062ca8
mov rdx, qword [rsp + 0x168]
lea rcx, str.__free
mov r8d, r15d
call fcn.14005c480
mov rcx, r12
cmp al, bpl
jne 0x1400eb1fd
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x14013e240], edi
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x480]
xor edx, edx
call fcn.14001c4a8
lea rcx, [rsp + 0x480]
call fcn.14001c498
mov ecx, ebp
mov dword [rsp + 0x148], ebp
cmp eax, ebp
mov dword [rsp + 0x190], ebp
sete cl
cmp dword [0x14013a854], ebp
mov dword [rsp + 0x138], ecx
jge 0x1400e8e82
mov rax, qword [0x14013d0e8]
mov ecx, ebp
mov rdx, rbp
mov r8, rbp
mov qword [rsp + 0x220], rbp
mov dword [0x14013a854], ecx
mov qword [rsp + 0x1e8], rdx
cmp rax, rbp
je 0x1400e8e50
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x1e8]
call rax
mov r8, qword [rsp + 0x220]
mov rdx, qword [rsp + 0x1e8]
cmp r8, rbp
jbe 0x1400e8e4a
cmp rdx, 0x202
jb 0x1400e8e16
mov eax, 0x38
mov ecx, eax
mov dword [0x14013a854], eax
jmp 0x1400e8e50
cmp rdx, 0x184
jb 0x1400e8e26
mov ecx, 8
jmp 0x1400e8e34
cmp rdx, 0x160
jb 0x1400e8e3c
mov ecx, 2
mov dword [0x14013a854], ecx
jmp 0x1400e8e50
mov ecx, dword [0x14013a854]
cmp rdx, rbp
cmova ecx, edi
jmp 0x1400e8e34
mov ecx, dword [0x14013a854]
cmp byte [0x14013ccb1], bpl
je 0x1400e8e82
mov rax, qword [0x14013d0e8]
mov r9d, r8d
mov r8d, edx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea rcx, [0x14013d130]
lea rdx, str.DBG:_IMD:_0x_X_0x_X_0x_X__0x_p_r_n
call fcn.140018dd8
mov rdx, qword [rsp + 0x168]
lea rcx, [0x140126e14]
mov r8d, 3
call fcn.14005c480
mov ebx, ebp
lea rdx, [rsp + 0x168]
cmp al, bpl
mov eax, 0xfff00000
lea rcx, str.__ins
cmovne ebx, eax
mov r8d, 5
mov dword [rsp + 0x90], ebx
call fcn.140065d7c
cmp al, bpl
je 0x1400e8ed4
mov r12b, 5
jmp 0x1400e8ef6
lea rdx, [rsp + 0x168]
lea rcx, str.__fins
mov r8d, r15d
call fcn.140065d7c
movzx r12d, bpl
cmp al, bpl
cmovne r12d, r15d
lea rcx, [rsp + 0x100]
mov edx, 0x3e8
call fcn.140063314
lea rcx, [rsp + 0xa8]
call fcn.1400632a0
lea rcx, [rsp + 0x178]
call fcn.1400632a0
lea rcx, [rsp + 0x78]
call fcn.1400632a0
lea rcx, [rsp + 0xd8]
mov qword [rsp + 0xc8], rbp
call fcn.1400632a0
lea rcx, [rsp + 0xb8]
call fcn.1400632a0
lea rcx, [rsp + 0x88]
call fcn.1400632a0
lea rcx, [rsp + 0xe8]
call fcn.1400632a0
lea rcx, [rsp + 0x120]
call fcn.1400632a0
lea rcx, [rsp + 0x98]
call fcn.1400632a0
lea rcx, [rsp + 0xf8]
call fcn.1400632a0
lea rcx, [rsp + 0xa0]
call fcn.1400632a0
or qword [rsp + 0x1a8], 0xffffffffffffffff
or qword [rsp + 0x1b8], 0xffffffffffffffff
lea rax, [0x14011c618]
lea rcx, [rsp + 0xf0]
mov r15d, ebp
mov edx, 0xc8
mov qword [rsp + 0x118], rbp
mov qword [rsp + 0x150], rbp
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x238], rax
mov r14, rbp
mov qword [rsp + 0x240], rbp
mov qword [rsp + 0x110], r15
call fcn.140063314
mov rax, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0x168]
movzx ebx, word [rax]
mov qword [rsp + 0x250], rax
mov qword [rsp + 0xc0], rax
mov word [rsp + 0x488], bx
cmp r13b, bpl
je 0x1400e91de
add qword [rsp + 0x70], 2
mov word [rax], bp
mov r8, qword [rsp + 0x70]
movzx eax, word [r8]
mov rdx, r8
cmp ax, bp
je 0x1400e9067
mov ecx, 0x2a
cmp ax, cx
je 0x1400e9067
add r8, 2
mov qword [rsp + 0x70], r8
mov ax, word [r8]
cmp ax, bp
jne 0x1400e9050
sub r8, rdx
lea rcx, [rsp + 0xa8]
sar r8, 1
call fcn.140063508
mov r11, qword [rsp + 0xa8]
cmp word [r11], bp
je 0x1400e909a
lea rcx, [rsp + 0x100]
mov edx, 0x3e8
call fcn.1400633a0
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xc0], rax
cmp bx, bp
je 0x1400e90bb
add rax, 2
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0xc0]
call fcn.14005aec8
mov ebx, 1
lea rdi, [0x14011c618]
mov esi, 0xfff00000
lea rdx, [rsp + 0xc0]
lea rcx, [0x14012b980]
mov r8d, 4
call fcn.140065e18
cmp al, bpl
jne 0x1400e9117
lea rdx, [rsp + 0xc0]
lea rcx, [0x140121f68]
mov r8d, 2
call fcn.140065e18
cmp al, bpl
je 0x1400e9121
mov qword [rsp + 0x1b0], rdi
jmp 0x1400e90d9
lea rdx, [rsp + 0xc0]
lea rcx, [0x140129e60]
mov r8d, 3
call fcn.140065e18
cmp al, bpl
je 0x1400e9151
lea rax, [0x14012b978]
mov qword [rsp + 0x1b0], rax
jmp 0x1400e90d9
lea rdx, [rsp + 0xc0]
lea rcx, str._map
mov r8d, 4
call fcn.140065e18
cmp al, bpl
je 0x1400e9178
mov r14, rbx
jmp 0x1400e90d9
lea rdx, [rsp + 0xc0]
lea rcx, str._exe
mov r8d, 4
call fcn.140065e18
cmp al, bpl
je 0x1400e91a3
mov dword [rsp + 0x90], ebx
jmp 0x1400e90d9
lea rdx, [rsp + 0xc0]
lea rcx, str._nexe
mov r8d, 5
call fcn.140065e18
cmp al, bpl
je 0x1400e91ce
mov dword [rsp + 0x90], esi
jmp 0x1400e90d9
mov rdi, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0x478]
lea r8, [0x14012b950]
lea rdx, str.ERRORLEVEL
mov rcx, rsi
call fcn.140062600
mov r11, qword [rsp + 0xa8]
or rax, 0xffffffffffffffff
lea rcx, [rsp + 0xc8]
mov r9, rax
mov r8, rax
cmp word [r11], bp
je 0x1400e924b
lea rdx, [0x14012b94c]
call fcn.14006345c
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0xc8]
call fcn.1400633dc
lea rdx, str.Imdisk
lea rcx, [rsp + 0xc8]
call fcn.1400633dc
jmp 0x1400e9257
lea rdx, str._Imdisk
call fcn.14006345c
lea rcx, str.__version
mov r8d, 9
mov rdx, rdi
call fcn.14005c480
lea rcx, [0x14012b914]
mov r8d, 2
mov rdx, rdi
mov bl, al
call fcn.14005c480
lea rcx, [0x14012b910]
mov r8d, 2
mov rdx, rdi
mov sil, al
call fcn.14005c480
lea rcx, [0x140126e14]
mov r8d, 3
mov rdx, rdi
mov bpl, al
call fcn.14005c480
xor edi, edi
cmp bl, dil
jne 0x1400e92d1
cmp sil, dil
jne 0x1400e92d1
cmp bpl, dil
jne 0x1400e92d1
cmp al, dil
jne 0x1400e92d1
lea ebp, [rdi + 1]
mov cl, bpl
jmp 0x1400e92d9
mov cl, dil
mov ebp, 1
mov esi, dword [rsp + 0x138]
cmp esi, edi
jne 0x1400e92f3
mov eax, dword [0x14013a854]
cmp eax, edi
jle 0x1400e92f3
cmp eax, 2
jge 0x1400e92fd
cmp cl, dil
jne 0x1400e9307
cmp r12b, dil
jne 0x1400e9307
cmp r12b, 6
jl 0x1400e9589
lea rbx, [0x14012b908]
cmp esi, edi
jne 0x1400e937e
lea rcx, [rsp + 0x200]
call fcn.1400632a0
lea rax, [0x14012b900]
lea r8, [rsp + 0x200]
lea rdx, [rsp + 0x268]
mov ecx, 2
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], rax
call fcn.140036a94
mov r11, qword [rsp + 0x200]
cmp word [r11], di
je 0x1400e9371
cmp word [r11 + 2], di
lea rax, [0x14012b8f8]
cmove rax, rbx
mov rbx, rax
lea rcx, [rsp + 0x200]
call fcn.14005aef8
lea rbp, [0x14013e190]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [0x14013e240]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r11d, dword [0x14013e240]
xor ebp, ebp
cmp r11d, edi
mov rdi, qword [rsp + 0x478]
jle 0x1400e93ff
lea r15d, [rbp + 1]
lea rcx, [0x14013e190]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
mov rcx, rdi
call fcn.14001963c
lea rcx, [0x14013e190]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r11d, dword [0x14013e240]
cmp r11d, ebp
jg 0x1400e93c0
mov r15, qword [rsp + 0x110]
lea rcx, [rsp + 0x480]
or edx, 0xffffffff
call fcn.14001c4a8
lea rcx, [0x14013e190]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movsx r11d, r12b
mov eax, 0x20
add r11w, 0x30
lea rcx, [rsp + 0x480]
or edx, 0xffffffff
mov word [rsp + reloc.OLEAUT32.dll_OleCreatePictureIndirect], ax
mov word [rsp + 0x1a4], bp
mov word [rsp + 0x1a0], r11w
call fcn.14001c4a8
lea rdx, str.28:INDATA
lea rcx, [rsp + 0x130]
call fcn.14006ff14
lea rax, [0x14012b8f8]
lea rdx, [0x14012b908]
cmp esi, ebp
lea rcx, [rsp + 0x130]
cmovne rdx, rax
call fcn.1400633dc
lea rcx, [rsp + 0x130]
mov rdx, rbx
call fcn.1400633dc
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x130]
call fcn.1400633dc
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0x130]
call fcn.1400633dc
cmp byte [0x14013ccb1], bpl
je 0x1400e94e6
mov r8, qword [rsp + 0x130]
lea rdx, str.Install_IMD__s__r_n
lea rcx, [0x14013d130]
call fcn.140018dd8
mov rdx, qword [rsp + 0x130]
mov rcx, rdi
call fcn.140031518
lea r12, [0x14013e190]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebp, 1
mov rcx, r12
add dword [0x14013e240], ebp
mov dword [0x14013a854], 0xffffffc0
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x480]
xor edx, edx
call fcn.14001c4a8
lea rcx, [rsp + 0x480]
call fcn.14001c498
xor edi, edi
mov rcx, r12
cmp eax, edi
mov esi, edi
sete sil
mov dword [rsp + 0x138], esi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r11d, dword [0x14013a854]
lea eax, [rbp + 0x37]
cmp esi, edi
mov rcx, r12
cmove r11d, eax
mov dword [0x14013a854], r11d
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x130]
call fcn.14005aef8
jmp 0x1400e9590
lea r12, [0x14013e190]
cmp r13b, dil
je 0x1400ea255
mov rax, qword [rsp + 0xc0]
xor r13d, r13d
mov qword [rsp + 0x170], rax
cmp word [rax], r13w
je 0x1400e9641
lea ebx, [r13 + 0x20]
lea rdx, [rsp + 0x170]
lea rcx, [0x140121f68]
mov r8d, 2
call fcn.140065d7c
cmp al, r13b
jne 0x1400e9631
mov rcx, qword [rsp + 0x170]
movzx eax, word [rcx]
cmp ax, r13w
je 0x1400e9614
mov edx, 9
cmp dx, ax
ja 0x1400e95fa
cmp ax, 0xd
jbe 0x1400e9614
cmp bx, ax
je 0x1400e9614
add rcx, 2
mov qword [rsp + 0x170], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400e95ef
lea rcx, [rsp + 0x170]
call fcn.14005aec8
mov r11, qword [rsp + 0x170]
cmp word [r11], r13w
jne 0x1400e95ba
jmp 0x1400e9641
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x70]
mov edi, 0x2a
cmp di, word [rax]
jne 0x1400ea239
add rax, 2
mov qword [rsp + 0x1f0], r13
mov qword [rsp + 0x1c8], r13
mov qword [rsp + 0x70], rax
cmp word [rax], 0x40
mov bl, r13b
jne 0x1400e9682
add rax, 2
mov bl, bpl
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x70]
call fcn.14006a4a0
mov r11, qword [rsp + 0x70]
cmp word [r11], r13w
je 0x1400e96a8
add r11, 2
mov qword [rsp + 0x70], r11
lea rdx, [rsp + 0x1b8]
lea rcx, [rsp + 0x70]
call fcn.14006a4a0
mov r11, qword [rsp + 0x70]
cmp word [r11], r13w
je 0x1400e96ce
add r11, 2
mov qword [rsp + 0x70], r11
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x70]
call fcn.14006a4a0
mov r11, qword [rsp + 0x70]
cmp word [r11], r13w
je 0x1400e96f4
add r11, 2
mov qword [rsp + 0x70], r11
mov r12b, byte [rsp + 0x150]
lea rcx, [rsp + 0x70]
mov edx, edi
and r12b, bpl
call fcn.1400e8c3c
mov r8, qword [rsp + 0x70]
sub r8, r11
lea rcx, [rsp + 0xa0]
mov rdx, r11
sar r8, 1
call fcn.140063508
mov r11, qword [rsp + 0x70]
cmp word [r11], r13w
je 0x1400e973a
add r11, 2
mov qword [rsp + 0x70], r11
lea rcx, [rsp + 0x70]
mov edx, edi
call fcn.1400e8c3c
mov r8, qword [rsp + 0x70]
lea rcx, [rsp + 0x98]
sub r8, r11
mov rdx, r11
sar r8, 1
call fcn.140063508
mov r11, qword [rsp + 0x70]
cmp word [r11], r13w
je 0x1400e9775
add r11, 2
mov qword [rsp + 0x70], r11
lea rdx, [rsp + 0x1f0]
lea rcx, [rsp + 0x70]
call fcn.14006a4a0
mov r11, qword [rsp + 0x70]
cmp word [r11], r13w
je 0x1400e979b
add r11, 2
mov qword [rsp + 0x70], r11
lea rcx, [rsp + 0x70]
mov edx, edi
call fcn.1400e8c3c
mov r8, qword [rsp + 0x70]
lea rcx, [rsp + 0xf8]
sub r8, r11
mov rdx, r11
sar r8, 1
call fcn.140063508
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0x70]
call fcn.14006a4a0
mov r11, qword [rsp + 0x70]
cmp word [r11], r13w
je 0x1400e97e8
add r11, 2
mov qword [rsp + 0x70], r11
mov rax, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x1b8]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x218], rcx
cmp bl, r13b
je 0x1400e9820
add rcx, rax
mov qword [rsp + 0x228], r13
mov qword [rsp + 0x218], rcx
cmp qword [rsp + 0x1f0], r13
jle 0x1400e9841
mov rax, qword [rsp + 0x1c8]
cmp rax, r13
cmovle rax, rbp
mov qword [rsp + 0x1c8], rax
lea rcx, [rsp + 0x198]
mov edx, 0x318
call fcn.140063314
mov rbp, qword [rsp + 0x198]
mov esi, 0x1ff
lea rdi, [rbp + 0x6a]
mov rcx, rbp
mov qword [rsp + 0x1e0], rbp
lea rax, [rdi + 0x6a]
mov qword [rsp + 0x248], rdi
lea rbx, [rax + 0x6a]
mov qword [rsp + 0x258], rax
mov word [rbx], r13w
mov word [rax], r13w
mov rax, qword [rsp + 0x1a8]
cqo
lea r14, [rbx + 0x6a]
and rdx, rsi
add rax, rdx
sar rax, 9
mov rdx, rax
mov qword [rsp + 0x1a8], rax
call fcn.1400e62a0
mov rax, qword [rsp + 0x1b8]
mov rcx, rdi
cqo
and rdx, rsi
add rax, rdx
sar rax, 9
mov rdx, rax
mov qword [rsp + 0x1b8], rax
call fcn.1400e62a0
mov word [rbx], r13w
mov rdx, qword [rsp + 0x1f0]
cmp rdx, r13
jle 0x1400e98f7
mov rcx, rbx
call fcn.1400e62a0
mov rax, qword [rsp + 0xb0]
cmp word [rsp + 0x488], r13w
mov rcx, r13
setne cl
lea rcx, [rax + rcx*2]
mov qword [rsp + 0xd0], rcx
lea rcx, [rsp + 0xd0]
call fcn.14005aec8
mov rdx, qword [rsp + 0xd0]
lea rcx, str.__w:
mov r8d, 4
mov dword [rsp + 0x194], r13d
call fcn.14005c4dc
cmp al, r13b
je 0x1400e996c
add qword [rsp + 0xd0], 8
lea rdx, [rsp + 0x194]
lea rcx, [rsp + 0xd0]
call fcn.140074498
lea rdx, [rsp + 0xd0]
lea rcx, [0x14012b8a8]
or r8d, 0xffffffff
call fcn.140065d7c
mov r11d, dword [0x14013a854]
mov edx, 1
cmp r11d, edx
jl 0x1400e99ae
mov eax, dword [rsp + 0x90]
mov ecx, 0xfff00000
cmp eax, r13d
cmove eax, ecx
mov dword [rsp + 0x90], eax
mov rax, qword [rsp + 0xd0]
lea r8, [0x14011c618]
mov sil, r13b
mov qword [rsp + 0x140], rax
mov dil, r13b
mov ebx, r13d
mov r15, r8
cmp word [rax], r13w
je 0x1400e9ace
mov rbp, rdx
lea rdx, [rsp + 0x140]
lea rcx, [0x1401275c8]
mov r8d, 2
call fcn.140065d7c
cmp al, r13b
je 0x1400e9a04
mov ebx, ebp
jmp 0x1400e9aa1
cmp ebx, r13d
je 0x1400e9a51
lea rdx, [rsp + 0x140]
lea rcx, [0x14012b8a4]
mov r8d, 2
call fcn.140065d7c
cmp al, r13b
je 0x1400e9a2d
mov sil, bpl
jmp 0x1400e9aa1
lea rdx, [rsp + 0x140]
lea rcx, [0x14012b8a0]
mov r8d, 3
call fcn.140065d7c
cmp al, r13b
je 0x1400e9a51
mov dil, bpl
jmp 0x1400e9aa1
mov rcx, qword [rsp + 0x140]
movzx eax, word [rcx]
cmp ax, r13w
je 0x1400e9a91
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x1400e9a77
cmp ax, 0xd
jbe 0x1400e9a91
cmp dx, ax
je 0x1400e9a91
add rcx, 2
mov qword [rsp + 0x140], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400e9a6b
lea rcx, [rsp + 0x140]
call fcn.14005aec8
mov ebx, r13d
mov rax, qword [rsp + 0x140]
cmp word [rax], r13w
jne 0x1400e99de
mov rbp, qword [rsp + 0x1e0]
mov r11d, dword [0x14013a854]
mov edx, 1
lea r8, [0x14011c618]
test r11b, 0x10
je 0x1400e9ae5
lea rax, str._o_par
cmp dil, r13b
cmovne rax, r15
mov r15, rax
mov ecx, r11d
lea r13, str._o_shared
mov al, 1
and ecx, 0x20
movzx eax, al
cmove r13, r8
xor ebx, ebx
cmp ecx, ebx
cmovne eax, ebx
bt qword [rsp + 0x150], 9
jb 0x1400e9b27
cmp ecx, ebx
jne 0x1400e9b27
cmp r12b, bl
je 0x1400e9b29
bt qword [rsp + 0x150], 8
jae 0x1400e9b29
mov al, dl
jmp 0x1400e9b29
mov al, bl
cmp r11d, 8
jl 0x1400e9d08
cmp r12b, bl
je 0x1400e9b40
cmp al, bl
jne 0x1400e9d08
mov rdi, r8
cmp r12b, bl
jne 0x1400e9b56
cmp sil, bl
jne 0x1400e9b6c
lea rdi, str._o_ro
jmp 0x1400e9b6c
mov eax, dword [rsp + 0x128]
cmp ecx, ebx
movzx eax, al
cmove eax, edx
mov dword [rsp + 0x128], eax
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, qword [rsp + 0xb0]
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rcx, eax
lea rdx, [rcx + rbx + 0x800]
lea rcx, [rsp + 0x78]
call fcn.1400633a0
mov r11, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x38], r11
lea rax, [rbp + 0x6a]
lea rdx, str.imdisk__a___s__s__s___b__sb__s__sb__f__s
mov qword [rsp + 0x30], rax
mov r9, r15
mov r8, rdi
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0xd0]
xor r13d, r13d
mov qword [rsp + 0xe0], rdx
cmp word [rdx], r13w
je 0x1400e9ce7
lea rdx, [rsp + 0xe0]
lea rcx, [0x14012b808]
mov r8d, 2
call fcn.14005c40c
cmp al, r13b
jne 0x1400e9c75
lea rdx, [rsp + 0xe0]
lea rcx, [0x14012b800]
mov r8d, 2
call fcn.14005c40c
cmp al, r13b
jne 0x1400e9c75
mov rcx, qword [rsp + 0xe0]
movzx eax, word [rcx]
cmp ax, r13w
je 0x1400e9cc0
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, ax
ja 0x1400e9c59
cmp ax, 0xd
jbe 0x1400e9cc0
cmp dx, ax
je 0x1400e9cc0
add rcx, 2
mov qword [rsp + 0xe0], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400e9c4d
jmp 0x1400e9cc0
mov rax, qword [rsp + 0xe0]
movzx ecx, word [rax]
cmp cx, r13w
je 0x1400e9cc0
mov edx, 0x20
lea r8d, [rdx - 0x17]
cmp r8w, cx
ja 0x1400e9c9b
cmp cx, 0xd
jbe 0x1400e9cc0
cmp dx, cx
je 0x1400e9cc0
mov word [rax], dx
mov rax, qword [rsp + 0xe0]
add rax, 2
mov qword [rsp + 0xe0], rax
mov cx, word [rax]
cmp cx, r13w
jne 0x1400e9c8f
lea rcx, [rsp + 0xe0]
call fcn.14005aec8
mov rax, qword [rsp + 0xe0]
cmp word [rax], r13w
jne 0x1400e9bf5
mov rdx, qword [rsp + 0xd0]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov r11, qword [rsp + 0x78]
mov ebp, 1
mov qword [rsp + 0x80], r11
jmp 0x1400ea20d
cmp r12b, bl
je 0x1400e9d56
mov rcx, qword [rsp + 0xa0]
xor r9d, r9d
mov qword [rsp + 0x30], rbx
lea r8d, [r9 + 7]
mov edx, 0xc0000000
mov dword [rsp + 0x28], 0xa0000080
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400eac6b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r8, [0x14011c618]
mov rdx, qword [rsp + 0x1c8]
cmp r12b, bl
lea rbp, [0x14012b7f8]
cmovne rbp, r8
cmp rdx, rbx
jle 0x1400e9d7e
mov rcx, qword [rsp + 0x258]
call fcn.1400e62a0
mov rcx, qword [rsp + 0xa0]
xor edx, edx
lea r8d, [rdx + 0x5c]
call qword [sym.imp.SHLWAPI.dll_StrRChrW]
mov rdi, rax
cmp rax, rbx
jne 0x1400e9da4
mov rdi, qword [rsp + 0xa0]
jmp 0x1400e9da8
add rdi, 2
mov rcx, qword [rsp + 0x98]
cmp word [rcx], bx
jne 0x1400e9e0a
lea rcx, [rsp + 0x98]
mov edx, 0x800
call fcn.1400633a0
mov rbx, qword [rsp + 0x98]
call fcn.14005dcb4
mov r9, qword [rsp + 0x1e0]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x248]
lea rdx, str._s_s_s__u
mov r8, rdi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov rcx, qword [rsp + 0x98]
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
mov eax, 0x400
cmp esi, eax
jle 0x1400e9e2c
mov esi, eax
mov rax, qword [rsp + 0x98]
mov word [rax + 0x800], bx
lea rdx, str.Global_
lea rcx, [rsp + 0xf0]
call fcn.140070048
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0xf0]
call fcn.1400633dc
lea rdx, str._devio_Ack
lea rcx, [rsp + 0xf0]
call fcn.1400633dc
mov word [r14], bx
mov rax, qword [rsp + 0x150]
mov ecx, 0x30
mov word [rsp + 0x2a0], bx
test cl, al
jne 0x1400e9e97
cmp r12b, bl
je 0x1400e9f7d
test al, 0x40
jne 0x1400e9f7d
lea rdx, str.__kill:
mov r8d, 0x10
mov rcx, r14
call fcn.14001d7d8
mov edi, 0x104
lea rdx, [r14 + 0x27e]
mov r8d, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [r14 + 0xe]
lea rcx, [r14 + 0x27e]
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, qword [rsp + 0x238]
mov r9d, 0x22
movzx ecx, word [r8]
xor edx, edx
mov rdi, r8
cmp r9w, cx
jne 0x1400e9f17
add r8, 2
jmp 0x1400e9f0d
cmp r9w, cx
je 0x1400e9f42
add rdi, 2
movzx ecx, word [rdi]
cmp cx, dx
jne 0x1400e9f03
jmp 0x1400e9f42
cmp cx, dx
je 0x1400e9f42
mov ebx, 0x20
lea r9d, [rbx - 0x17]
cmp r9w, cx
ja 0x1400e9f31
cmp cx, 0xd
jbe 0x1400e9f42
cmp bx, cx
je 0x1400e9f42
add rdi, 2
mov cx, word [rdi]
cmp cx, dx
jne 0x1400e9f25
movzx ebx, word [rdi]
mov word [rdi], dx
mov ecx, 0x20
test byte [rsp + 0x150], cl
lea rcx, str._LOAD_25_poweroff
cdqe
lea rdx, str._RAMD_ImdiskV__D__m__s_
cmovne rdx, rcx
lea rcx, [r14 + rax*2]
call qword [sym.imp.USER32.dll_wsprintfW]
mov word [rdi], bx
mov rax, qword [rsp + 0x150]
sar rax, 1
and eax, 3
je 0x1400e9f9d
lea rdx, str._nrc:_d
lea rcx, [rsp + 0x2a0]
mov r8d, eax
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [rsp + 0x228]
mov rdi, qword [rsp + 0x1e0]
mov ebx, 0x1ff
cqo
mov rcx, rdi
and rdx, rbx
add rdx, rax
sar rdx, 9
call fcn.1400e62a0
mov rax, qword [rsp + 0x218]
lea r12, [rdi + 0x6a]
cqo
mov rcx, r12
and rdx, rbx
add rdx, rax
sar rdx, 9
call fcn.1400e62a0
mov rcx, qword [rsp + 0x478]
lea r8, [0x140120930]
lea rdx, str.__ImdMapPid
call fcn.140062600
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, qword [rsp + 0xa0]
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd rdx, esi
movsxd rcx, eax
lea rax, [rbx + rcx]
lea rcx, [rsp + 0x188]
lea rdx, [rdx + rax + 0x940]
call fcn.140063314
lea rdx, str.Global_
lea rcx, [rsp + 0x1d0]
call fcn.14006ff14
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0x1d0]
call fcn.1400633dc
mov r8, qword [rsp + 0x1d0]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
test rax, rax
jne 0x1400eacbb
lea rcx, [rsp + 0x1d0]
call fcn.14005aef8
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x188]
lea rax, [r12 + 0x6a]
lea rdx, str.EXEC___pid:__ImdMapPid____exe:_s10INDATA___nfb___MyName0____s__w:60000__s__s__s_shm:_s___s__s__s__s__s
mov r9, r14
lea r11, [rax + 0x6a]
mov qword [rsp + 0x60], r11
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x20], rax
call qword [sym.imp.USER32.dll_wsprintfW]
lea r11d, [rsi + 0x800]
lea rcx, [rsp + 0x78]
movsxd rdx, r11d
call fcn.1400633a0
xor esi, esi
lea r8, [0x14011c618]
mov word [rdi], si
mov word [r12], si
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, str.imdisk__a__t_proxy__s__s__s__o_shm__f__s
mov r9, r15
mov qword [rsp + 0x20], r13
call qword [sym.imp.USER32.dll_wsprintfW]
mov rdx, qword [rsp + 0xd0]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov r11, qword [rsp + 0x78]
mov r9, qword [rsp + 0xf0]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], r11
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov r13, qword [rsp + 0x478]
mov rdx, qword [rsp + 0x188]
mov rcx, r13
xor r9d, r9d
xor r8d, r8d
mov rdi, rax
mov qword [rsp + 0x20], rsi
call fcn.14004c180
mov edx, 0xea60
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, esi
jne 0x1400eac97
lea ebx, [rsi + 0x31]
lea ebp, [rsi + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
sub ebx, ebp
jns 0x1400ea1d4
movsxd rax, dword [rsp + 0x194]
cmp eax, esi
jle 0x1400ea1fd
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call fcn.14001963c
lea rcx, [rsp + 0x188]
call fcn.14005aef8
xor r13d, r13d
mov rax, qword [rsp + 0xd0]
lea rcx, [rsp + 0x198]
mov r14, rbp
mov qword [rsp + 0xb0], rax
mov word [rax], r13w
call fcn.14005aef8
mov r15, qword [rsp + 0x110]
mov rax, qword [rsp + 0x250]
mov cx, word [rsp + 0x488]
or rsi, 0xffffffffffffffff
mov word [rax], cx
jmp 0x1400ea85b
mov esi, 4
lea rdx, [rsp + 0xb0]
lea rcx, str._exe
mov r8d, esi
call fcn.140065d7c
mov ebx, dword [rsp + 0x90]
xor r13d, r13d
cmp al, r13b
lea r8d, [rsi + 1]
lea rdx, [rsp + 0xb0]
lea rcx, str._nexe
cmovne ebx, ebp
call fcn.140065d7c
mov edi, 0xfff00000
lea rdx, [rsp + 0xb0]
cmp al, r13b
lea rcx, str._nexe1
cmovne ebx, edi
mov dword [rsp + 0x90], ebx
lea ebx, [rsi + 2]
mov r8d, ebx
call fcn.140065d7c
cmp al, r13b
je 0x1400ea2d8
mov dword [rsp + 0x90], edi
mov dword [rsp + 0x190], ebp
mov edi, 0x2c
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x80]
mov r8d, edi
call fcn.140067288
mov rax, qword [rsp + 0xd8]
mov word [rax], r13w
mov rax, qword [rsp + 0x80]
cmp word [rax], r13w
je 0x1400ea43d
add rax, 2
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x80]
mov r8d, edi
mov qword [rsp + 0x80], rax
call fcn.140067288
mov r11, qword [rsp + 0x80]
cmp word [r11], r13w
je 0x1400ea43d
add r11, 2
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x80]
mov r8d, edi
mov qword [rsp + 0x80], r11
call fcn.140067288
mov r11, qword [rsp + 0x80]
cmp word [r11], r13w
je 0x1400ea43d
add r11, 2
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x80]
mov r8d, edi
mov qword [rsp + 0x80], r11
call fcn.140067288
mov r11, qword [rsp + 0x80]
cmp word [r11], r13w
je 0x1400ea43d
add r11, 2
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x80]
mov r8d, edi
mov qword [rsp + 0x80], r11
call fcn.140067288
mov r11, qword [rsp + 0x80]
cmp word [r11], r13w
je 0x1400ea43d
add r11, 2
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x80]
mov r8d, edi
mov qword [rsp + 0x80], r11
call fcn.140067288
mov r11, qword [rsp + 0x80]
cmp word [r11], r13w
je 0x1400ea43d
add r11, 2
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x80]
mov r8d, edi
mov qword [rsp + 0x80], r11
call fcn.1400675c0
lea rcx, [rsp + 0x88]
mov rdx, rbx
mov dil, r13b
call fcn.1400633a0
mov rax, qword [rsp + 0x88]
mov r11d, 0x3a
mov word [rax + 2], r11w
mov rax, qword [rsp + 0x88]
mov word [rax + 4], r13w
mov rcx, qword [rsp + 0x88]
cmp word [rcx], r13w
je 0x1400ea517
call fcn.1401011a0
cmp eax, r13d
je 0x1400ea509
lea rax, str.imdisk
lea rcx, [rsp + 0x210]
mov qword [rsp + 0x298], r13
mov qword [rsp + 0x278], rax
lea rax, [0x14012b900]
mov qword [rsp + 0x280], rax
lea rax, [0x14012b5b8]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x290], rax
call fcn.1400632a0
lea r8, [rsp + 0x210]
lea rdx, [rsp + 0x278]
mov ecx, esi
call fcn.140036a94
lea rcx, [rsp + 0x210]
cmp eax, r13d
sete dil
call fcn.14005aef8
mov rax, qword [rsp + 0x88]
cmp word [rax], r13w
jne 0x1400ea53d
lea rdx, [0x140121904]
lea rcx, [rsp + 0x88]
call fcn.14006ffb0
mov r11, qword [rsp + 0x88]
cmp word [r11], r13w
je 0x1400eb10a
lea rcx, [rsp + 0x180]
mov edx, 0x3c
call fcn.140063314
mov rax, qword [rsp + 0xd8]
or rsi, 0xffffffffffffffff
mov qword [rsp + 0x1d8], rsi
mov qword [rsp + 0x1f8], rsi
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x108], rax
mov rbx, rsi
cmp word [rax], r13w
je 0x1400eb029
lea ebp, [rsi + 0x21]
lea rcx, [rsp + 0x108]
call fcn.14005aec8
mov r11, qword [rsp + 0x108]
mov ecx, 0x70
movzx eax, word [r11]
or ax, bp
cmp cx, ax
jne 0x1400ea5bb
lea rdx, [rsp + 0x1d8]
jmp 0x1400ea5e1
mov ecx, 0x6c
cmp cx, ax
jne 0x1400ea5cf
lea rdx, [rsp + 0x1f8]
jmp 0x1400ea5e1
mov ecx, 0x68
cmp cx, ax
jne 0x1400ea608
lea rdx, [rsp + 0x230]
add r11, 2
lea rcx, [rsp + 0x108]
mov qword [rsp + 0x108], r11
call fcn.1400743ac
mov rax, qword [rsp + 0x108]
cmp word [rax], r13w
jne 0x1400ea58b
cmp qword [rsp + 0x1d8], r13
mov ebp, 1
jle 0x1400ea64d
mov ecx, ebp
call fcn.14001e8e0
mov r11, rax
movabs rax, 0xa3d70a3d70a3d70b
imul r11, qword [rsp + 0x1d8]
imul r11
lea rbx, [r11 + rdx]
sar rbx, 6
mov rax, rbx
shr rax, 0x3f
add rbx, rax
sar rbx, 0x14
cmp rbx, qword [rsp + 0x1f8]
mov rax, qword [rsp + 0x230]
cmovl rbx, qword [rsp + 0x1f8]
cmp rax, r13
jle 0x1400ea679
cmp rbx, rax
cmovg rbx, rax
cmp rbx, r13
cmovle rbx, rax
cmp rbx, r13
jl 0x1400eb029
mov rax, qword [rsp + 0x88]
cmp word [rax], r13w
je 0x1400eb029
mov rcx, qword [rsp + 0x180]
cmp rbx, r13
cmovle rbx, rbp
mov rdx, rbx
call fcn.1400e62ac
lea rdx, [0x14012b5b0]
lea rcx, [rsp + 0x180]
call fcn.1400633dc
lea rax, str.imdisk___e
lea rdx, str.imdisk___a
cmp dil, r13b
lea rcx, [rsp + 0x78]
cmovne rdx, rax
call fcn.14006ffb0
test byte [rsp + 0x240], bpl
je 0x1400ea6f9
lea rdx, str.__o_awe
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rax, qword [rsp + 0x180]
cmp word [rax], r13w
je 0x1400ea72a
lea rdx, [0x14012b558]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rax, qword [rsp + 0x88]
cmp word [rax], r13w
je 0x1400ea75b
lea rdx, [0x14012b548]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rdx, qword [rsp + 0x88]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rax, qword [rsp + 0xb8]
cmp word [rax], r13w
jne 0x1400ea77b
mov rax, qword [rsp + 0xe8]
cmp word [rax], r13w
je 0x1400ea841
lea rdx, str.___p__
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov r11, qword [rsp + 0xb8]
cmp word [r11], r13w
je 0x1400ea7bd
lea rdx, str.__FS:
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rdx, qword [rsp + 0xb8]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rax, qword [rsp + 0xe8]
cmp word [rax], r13w
je 0x1400ea7ee
lea rdx, str.__V:
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rdx, qword [rsp + 0xe8]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rdx, qword [rsp + 0xb8]
lea rcx, [0x1401270c8]
call fcn.14005c518
cmp al, r13b
je 0x1400ea830
mov rax, qword [rsp + 0x120]
cmp word [rax], r13w
je 0x1400ea830
mov ecx, 0x30
cmp cx, word [rax]
je 0x1400ea830
lea rdx, [0x1401270c0]
lea rcx, [rsp + 0x78]
call fcn.1400633dc
lea rdx, str.___Q__Y__X__
lea rcx, [rsp + 0x78]
call fcn.1400633dc
mov rax, qword [rsp + 0x78]
lea rcx, [rsp + 0x180]
mov qword [rsp + 0x80], rax
call fcn.14005aef8
lea rcx, [rsp + 0xb0]
call fcn.14005aec8
mov rdx, qword [rsp + 0xb0]
lea rcx, str._gui
mov r8d, 4
call fcn.14005c480
cmp al, r13b
jne 0x1400eaf25
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rdx, qword [rsp + 0x80]
mov ebx, 9
movzx ecx, word [rdx]
lea r12d, [rax - 0xc8]
cmp cx, r13w
je 0x1400ea8ce
lea eax, [rbx + 0x17]
cmp bx, cx
ja 0x1400ea8bc
cmp cx, 0xd
jbe 0x1400ea8ce
cmp ax, cx
je 0x1400ea8ce
add rdx, 2
mov cx, word [rdx]
cmp cx, r13w
jne 0x1400ea8b1
lea rcx, [rsp + 0x118]
call fcn.140070048
mov rbp, qword [rsp + 0x118]
mov qword [rsp + 0x160], rbp
cmp word [rbp], r13w
je 0x1400ea9b1
lea rdx, [rsp + 0x160]
lea rcx, str.__nbrd
mov r8d, 6
call fcn.140065e18
cmp al, r13b
jne 0x1400ea99f
lea rdx, [rsp + 0x160]
lea rcx, [0x14011d438]
mov r8d, 6
call fcn.140065e18
cmp al, r13b
jne 0x1400ea99f
lea rdx, [rsp + 0x160]
lea rcx, [0x140121f4c]
mov r8d, 2
call fcn.140065e18
cmp al, r13b
jne 0x1400ea99f
mov rcx, qword [rsp + 0x160]
movzx eax, word [rcx]
cmp ax, r13w
je 0x1400ea992
mov edx, 0x20
cmp bx, ax
ja 0x1400ea978
cmp ax, 0xd
jbe 0x1400ea992
cmp dx, ax
je 0x1400ea992
add rcx, 2
mov qword [rsp + 0x160], rcx
mov ax, word [rcx]
cmp ax, r13w
jne 0x1400ea96d
lea rcx, [rsp + 0x160]
call fcn.14005aec8
mov rax, qword [rsp + 0x160]
cmp word [rax], r13w
jne 0x1400ea8f6
movsxd rdi, dword [rsp + 0x138]
movsxd rsi, dword [rsp + 0x90]
movsxd rbx, dword [rsp + 0x190]
mov r13, qword [rsp + 0x478]
xor eax, eax
cmp rdi, rax
jne 0x1400eab75
cmp rsi, rax
jg 0x1400eab75
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x2e0]
xor r8d, r8d
call fcn.14007392c
mov eax, 1
cmp dword [rsp + 0x340], eax
jle 0x1400eadcb
mov rax, qword [rsp + 0x348]
lea rcx, str.imdisk
lea r8, [rsp + 0x100]
mov qword [rax], rcx
mov rdx, qword [rsp + 0x348]
mov ecx, dword [rsp + 0x340]
call fcn.140036a94
mov r15d, eax
xor eax, eax
cmp byte [rsp + 0x128], al
mov qword [rsp + 0x110], r15
mov dword [rsp + 0x148], eax
jle 0x1400eac2c
cmp r15d, 3
jne 0x1400eac2c
cmp rbx, rax
jne 0x1400eac2c
lea rcx, [rsp + 0xf0]
lea edi, [rax + 1]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
lea rcx, [rsp + 0xf8]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
lea rcx, [rsp + 0x120]
call fcn.14005aef8
lea rcx, [rsp + 0xe8]
call fcn.14005aef8
lea rcx, [rsp + 0x88]
call fcn.14005aef8
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0x178]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
lea rcx, [rsp + 0x100]
call fcn.14005aef8
lea r12, [0x14013e190]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [0x14013e240]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x208]
call fcn.14005aef8
mov rsi, qword [rsp + 0x478]
mov rbx, qword [rsp + 0x470]
jmp 0x1400e8c94
cmp rbx, rax
jne 0x1400eac2c
mov rdx, qword [rsp + 0xc8]
lea rcx, [rsp + 0x1c0]
call fcn.14006ff14
lea rcx, [rsp + 0x1c0]
mov rdx, rbp
call fcn.1400633dc
mov rax, qword [rsp + 0xa8]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x148], 1
mov r8, r13
mov dword [rsp + 0x20], ecx
cmp word [rax], cx
je 0x1400eabf2
mov r9, qword [rsp + 0x1c0]
xor edx, edx
mov rcx, r13
call fcn.14000e2b8
mov r15, rax
mov qword [rsp + 0x110], rax
jmp 0x1400eac1d
mov rdx, qword [rsp + 0x1c0]
mov word [rsp + 0x158], cx
lea r9, [rsp + 0x158]
mov rcx, r13
call fcn.14000e2b8
mov r15d, eax
mov qword [rsp + 0x110], r15
lea rcx, [rsp + 0x1c0]
call fcn.14005aef8
xor eax, eax
cmp r14, rax
je 0x1400eadd2
cmp r15d, 3
jne 0x1400eadd2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r12d
cmp eax, 0x1388
jae 0x1400eadd2
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc8
mov rcx, r13
call fcn.14001963c
jmp 0x1400ea9d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
cmp eax, ebx
cmove eax, ecx
lea rcx, [rsp + 0x198]
mov ebx, eax
call fcn.14005aef8
mov r13, qword [rsp + 0x478]
jmp 0x1400eadda
lea rcx, [rsp + 0x188]
mov ebx, 1
call fcn.14005aef8
lea rcx, [rsp + 0x198]
call fcn.14005aef8
jmp 0x1400eaddc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x1d0]
call fcn.14005aef8
lea rcx, [rsp + 0x188]
call fcn.14005aef8
lea rcx, [rsp + 0x198]
call fcn.14005aef8
lea rcx, [rsp + 0xf0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
lea rcx, [rsp + 0xf8]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
lea rcx, [rsp + 0x120]
call fcn.14005aef8
lea rcx, [rsp + 0xe8]
call fcn.14005aef8
lea rcx, [rsp + 0x88]
call fcn.14005aef8
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0x178]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
lea rcx, [rsp + 0x100]
call fcn.14005aef8
lea r12, [0x14013e190]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [0x14013e240]
mov ebx, 0xb7
jmp 0x1400eb221
mov ebx, 0x80070057
jmp 0x1400eadda
mov rbx, qword [rsp + 0x110]
xor esi, esi
mov rax, qword [rsp + 0x350]
cmp rax, rsi
je 0x1400eae06
lea rcx, [rsp + 0x260]
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x350], rsi
call fcn.14005aef8
mov rdx, qword [rsp + 0xa8]
cmp word [rdx], si
je 0x1400eae4a
cmp dword [rsp + 0x148], esi
jne 0x1400eae4a
mov rax, qword [rsp + 0x100]
mov ecx, 0x2a
mov word [rsp + 0x3e0], si
lea r8, [rsp + 0x3e0]
cmp word [rax], cx
jne 0x1400eae42
lea r8, [rax + 2]
mov rcx, r13
call fcn.140062600
lea rcx, [rsp + 0xf0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
lea rcx, [rsp + 0xf8]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
lea rcx, [rsp + 0x120]
call fcn.14005aef8
lea rcx, [rsp + 0xe8]
call fcn.14005aef8
lea rcx, [rsp + 0x88]
call fcn.14005aef8
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0x178]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
lea rcx, [rsp + 0x100]
call fcn.14005aef8
lea r12, [0x14013e190]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [0x14013e240]
jmp 0x1400eb221
mov rcx, qword [rsp + 0x478]
lea r9, [0x14011c618]
lea rdx, str.imdisk.cpl_
xor r8d, r8d
mov dword [rsp + 0x20], 0xffffff9c
call fcn.1400821a8
lea rcx, [rsp + 0xf0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
lea rcx, [rsp + 0xf8]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
lea rcx, [rsp + 0x120]
call fcn.14005aef8
lea rcx, [rsp + 0xe8]
call fcn.14005aef8
lea rcx, [rsp + 0x88]
call fcn.14005aef8
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0x178]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
lea rcx, [rsp + 0x100]
call fcn.14005aef8
lea r12, [0x14013e190]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x14013e240], esi
mov ebx, r13d
jmp 0x1400eb221
lea rcx, [rsp + 0x180]
call fcn.14005aef8
lea rcx, [rsp + 0xf0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
lea rcx, [rsp + 0xf8]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
lea rcx, [rsp + 0x120]
call fcn.14005aef8
lea rcx, [rsp + 0xe8]
call fcn.14005aef8
lea rcx, [rsp + 0x88]
call fcn.14005aef8
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0x178]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
lea rcx, [rsp + 0x100]
call fcn.14005aef8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x14013e240], esi
jmp 0x1400eb1d9
lea rcx, [rsp + 0xf0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0xa0]
call fcn.14005aef8
lea rcx, [rsp + 0xf8]
call fcn.14005aef8
lea rcx, [rsp + 0x98]
call fcn.14005aef8
lea rcx, [rsp + 0x120]
call fcn.14005aef8
lea rcx, [rsp + 0xe8]
call fcn.14005aef8
lea rcx, [rsp + 0x88]
call fcn.14005aef8
lea rcx, [rsp + 0xb8]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
lea rcx, [rsp + 0xc8]
call fcn.14005aef8
lea rcx, [rsp + 0x78]
call fcn.14005aef8
lea rcx, [rsp + 0x178]
call fcn.14005aef8
lea rcx, [rsp + 0xa8]
call fcn.14005aef8
lea rcx, [rsp + 0x100]
call fcn.14005aef8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
dec dword [0x14013e240]
mov ebx, 0x80070057
jmp 0x1400eb221
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
mov rcx, rsi
call fcn.14001963c
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r11d, dword [0x14013e240]
cmp r11d, ebp
jg 0x1400eb1e0
lea rcx, [rsp + 0x480]
or edx, 0xffffffff
call fcn.14001c4a8
mov ebx, ebp
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rsp + 0x208]
call fcn.14005aef8
mov eax, ebx
add rsp, 0x428
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret