Function at 0x46f993
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x284
push ebx
fldz
push esi
fstp qword [ebp - 0x198]
push edi
push 0x28
xor eax, eax
pop ecx
lea edi, [ebp - 0x190]
mov byte [ebp + 0x5b], 1
rep stosd dword es:[edi], eax
xor ebx, ebx
push dword [ebp + 0x78]
lea ecx, [ebp - 0x78]
mov esi, 0x4a6658
mov byte [ebp + 0x3b], bl
call fcn.0043ccfc
mov eax, dword [ebp - 0x78]
mov dword [ebp + 0x60], eax
add eax, 0xc
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x4c], eax
lea eax, [ebp + 0x4c]
push eax
call fcn.0040415a
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0042dd40
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
pop ecx
pop ecx
lea ecx, [ebp + 0x1c]
sete byte [ebp + 0x67]
call fcn.0040eed5
push 6
push dword [ebp - 0x10]
push str.__free
call fcn.0042ec66
add esp, 0xc
test al, al
jne 0x470e36
lea ecx, [ebp + 0x78]
call fcn.0046df92
push ebx
lea ecx, [ebp + 0x1c]
call fcn.0040eed8
lea ecx, [ebp + 0x1c]
call fcn.0040eec9
mov esi, eax
neg esi
push 3
push dword [ebp - 0x10]
sbb esi, esi
inc esi
push 0x497c70
mov dword [ebp - 0x18], esi
mov dword [ebp + 0x28], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x90], ebx
call fcn.0042ec66
add esp, 0xc
test al, al
je 0x46fa71
mov dword [ebp + 0x28], 0xfff00000
push 5
lea eax, [ebp - 0x10]
push eax
push str.__ins
mov byte [ebp + 0x6f], bl
call fcn.004349fd
add esp, 0xc
test al, al
je 0x46fa91
mov byte [ebp + 0x6f], 5
jmp 0x46faac
push 6
lea eax, [ebp - 0x10]
push eax
push str.__fins
call fcn.004349fd
add esp, 0xc
test al, al
je 0x46faac
mov byte [ebp + 0x6f], 6
push 0x3e8
lea ecx, [ebp - 0x1c]
call fcn.00432cd5
lea ecx, [ebp + 0x24]
call fcn.00432cb7
lea ecx, [ebp - 0xa4]
call fcn.00432cb7
lea ecx, [ebp + 0x5c]
call fcn.00432cb7
lea ecx, [ebp]
mov dword [ebp + 0x18], ebx
call fcn.00432cb7
lea ecx, [ebp + 0x10]
call fcn.00432cb7
lea ecx, [ebp + 0x50]
call fcn.00432cb7
lea ecx, [ebp + 4]
call fcn.00432cb7
lea ecx, [ebp - 0x38]
call fcn.00432cb7
lea ecx, [ebp + 0x44]
call fcn.00432cb7
lea ecx, [ebp - 0x28]
call fcn.00432cb7
lea ecx, [ebp + 0x30]
call fcn.00432cb7
or eax, 0xffffffff
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov eax, 0x48e984
push 0xc8
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x40], eax
mov dword [ebp - 8], eax
call fcn.00432cd5
cmp byte [ebp + 0x67], bl
mov eax, dword [ebp + 0x4c]
mov cx, word [eax]
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0xd4], eax
mov word [ebp - 0x70], cx
mov dword [ebp + 0x3c], eax
je 0x46fc9f
add dword [ebp + 0x68], 2
mov word [eax], bx
mov eax, dword [ebp + 0x68]
mov edx, eax
jmp 0x46fb94
cmp cx, 0x2a
je 0x46fb9c
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, bx
jne 0x46fb89
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x24]
call fcn.00432ddd
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
je 0x46fbbf
push 0x3e8
lea ecx, [ebp - 0x1c]
call fcn.00432cfe
cmp word [ebp - 0x70], bx
mov eax, dword [ebp + 0x4c]
mov dword [ebp + 0x3c], eax
je 0x46fbd1
add eax, 2
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x3c]
push eax
call fcn.0042dd40
pop ecx
mov edi, 0x48e984
push 4
lea eax, [ebp + 0x3c]
push eax
push str._mem
call fcn.00434a40
add esp, 0xc
test al, al
jne 0x46fc0e
push 2
lea eax, [ebp + 0x3c]
push eax
push 0x49223c
call fcn.00434a40
add esp, 0xc
test al, al
je 0x46fc13
mov dword [ebp + 0x40], edi
jmp 0x46fbe0
push 3
lea eax, [ebp + 0x3c]
push eax
push 0x49592c
call fcn.00434a40
add esp, 0xc
test al, al
je 0x46fc33
mov dword [ebp + 0x40], 0x497c50
jmp 0x46fbe0
push 4
lea eax, [ebp + 0x3c]
push eax
push str._map
call fcn.00434a40
add esp, 0xc
test al, al
je 0x46fc56
mov dword [ebp - 0xd0], 1
jmp 0x46fbe0
push 4
lea eax, [ebp + 0x3c]
push eax
push str._exe
call fcn.00434a40
add esp, 0xc
test al, al
je 0x46fc79
mov dword [ebp + 0x28], 1
jmp 0x46fbe0
push 5
lea eax, [ebp + 0x3c]
push eax
push str._nexe
call fcn.00434a40
add esp, 0xc
test al, al
je 0x46fc9c
mov dword [ebp + 0x28], 0xfff00000
jmp 0x46fbe0
mov edi, dword [ebp + 0x3c]
mov ecx, dword [ebp + 0x7c]
push 0x497c28
push 0x4972d8
call fcn.00432698
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
push 0xffffffffffffffff
lea ecx, [ebp + 0x18]
push 0xffffffffffffffff
je 0x46fce4
push 0x497c24
call fcn.00432d74
push dword [ebp + 0x24]
lea ecx, [ebp + 0x18]
call fcn.00432d25
push str.Imdisk
lea ecx, [ebp + 0x18]
call fcn.00432d25
jmp 0x46fcee
push str._Imdisk
call fcn.00432d74
push 9
push edi
push str.__version
call fcn.0042ec66
push 2
push edi
push 0x497bf4
mov byte [ebp + 0x66], al
call fcn.0042ec66
push 2
push edi
push 0x497bf0
mov byte [ebp + 0xf], al
call fcn.0042ec66
add esp, 0x24
cmp byte [ebp + 0x66], bl
jne 0x46fd30
cmp byte [ebp + 0xf], bl
jne 0x46fd30
cmp al, bl
jne 0x46fd30
xor al, al
jmp 0x46fd32
mov al, 1
cmp esi, ebx
je 0x46fd3f
cmp al, bl
je 0x46fd49
cmp byte [ebp + 0x6f], bl
jne 0x46fd49
cmp byte [ebp + 0x6f], 6
jl 0x46fe85
cmp esi, ebx
mov dword [ebp - 0x18], 0x497be8
jne 0x46fdb1
cmp byte [ebp + 0x6f], 6
jl 0x46fdb1
lea ecx, [ebp - 0x88]
call fcn.00432cb7
mov eax, 0x497be0
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xdc]
push eax
push 2
call fcn.0041df5a
mov eax, dword [ebp - 0x88]
add esp, 0xc
cmp word [eax], bx
je 0x46fda6
cmp word [eax + 2], bx
je 0x46fda6
mov dword [ebp - 0x18], 0x497bd8
lea ecx, [ebp - 0x88]
call fcn.0042dd2d
mov edi, 0x4a6658
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub dword [0x4a6a50], 1
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x4a6a50], ebx
jle 0x46fded
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 0x7c]
push 1
call fcn.0040ce62
jmp 0x46fdcb
push 0xffffffffffffffff
lea ecx, [ebp + 0x1c]
call fcn.0040eed8
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0xffffffffffffffff
lea ecx, [ebp + 0x1c]
call fcn.0040eed8
push str.28:INDATA
lea ecx, [ebp - 0x24]
call fcn.0043ccfc
cmp esi, ebx
mov eax, 0x497bd8
jne 0x46fe23
mov eax, 0x497be8
push eax
lea ecx, [ebp - 0x24]
call fcn.00432d25
push dword [ebp - 0x18]
lea ecx, [ebp - 0x24]
call fcn.00432d25
push dword [ebp + 0x4c]
lea ecx, [ebp - 0x24]
call fcn.00432d25
push dword [ebp - 0x24]
mov ecx, dword [ebp + 0x7c]
call fcn.0041fd16
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x4a6a50], 1
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
lea ecx, [ebp + 0x1c]
call fcn.0040eed8
lea ecx, [ebp + 0x1c]
call fcn.0040eec9
mov esi, eax
neg esi
sbb esi, esi
inc esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x18], esi
call fcn.0042dd2d
cmp byte [ebp + 0x67], bl
push 2
pop edi
je 0x470775
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x48], eax
jmp 0x46febc
push edi
lea eax, [ebp - 0x48]
push eax
push 0x49223c
call fcn.004349fd
add esp, 0xc
test al, al
jne 0x46fec3
lea eax, [ebp - 0x48]
push eax
call fcn.0040417e
mov eax, dword [ebp - 0x48]
pop ecx
cmp word [eax], bx
jne 0x46fe99
jmp 0x46fec9
mov eax, dword [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
jne 0x470763
add dword [ebp + 0x68], edi
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
cmp word [eax], 0x40
mov byte [ebp + 0x67], bl
jne 0x46fef8
add dword [ebp + 0x68], edi
mov byte [ebp + 0x67], 1
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004374f6
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x46ff12
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004374f6
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x46ff2c
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004374f6
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x46ff48
inc edi
inc edi
mov dword [ebp + 0x68], edi
mov al, byte [ebp - 0x50]
and al, 1
mov byte [ebp + 0x6f], al
push 0x2a
lea eax, [ebp + 0x68]
call fcn.0043291a
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x30]
call fcn.00432ddd
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x46ff78
add dword [ebp + 0x68], 2
mov edi, dword [ebp + 0x68]
push 0x2a
lea eax, [ebp + 0x68]
call fcn.0043291a
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x44]
call fcn.00432ddd
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x46ffa3
add dword [ebp + 0x68], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004374f6
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x46ffbf
inc edi
inc edi
mov dword [ebp + 0x68], edi
push 0x2a
lea eax, [ebp + 0x68]
call fcn.0043291a
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00432ddd
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004374f6
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x46fff6
add dword [ebp + 0x68], 2
cmp byte [ebp + 0x67], bl
mov edx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
je 0x47003b
add eax, edx
adc ecx, edi
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0x58], ebx
jl 0x47005d
jg 0x470047
cmp dword [ebp - 0x5c], ebx
jbe 0x47005d
cmp dword [ebp - 0x30], ebx
jg 0x47005d
jl 0x470053
cmp dword [ebp - 0x34], ebx
ja 0x47005d
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x30], ebx
push 0x318
lea ecx, [ebp - 0x2c]
call fcn.00432cd5
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
add eax, 0x6a
mov dword [ebp + 0x14], eax
add eax, 0x6a
push ebx
lea edi, [eax + 0x6a]
mov word [edi], bx
mov esi, 0x200
push esi
mov word [eax], bx
push dword [ebp - 0x60]
lea ecx, [edi + 0x6a]
push dword [ebp - 0x64]
mov dword [ebp + 8], ecx
call fcn.00479d50
push edx
push eax
push dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
call fcn.0046f8a5
add esp, 0xc
push ebx
push esi
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.00479d50
push edx
push eax
push dword [ebp + 0x14]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
call fcn.0046f8a5
add esp, 0xc
mov word [edi], bx
cmp dword [ebp - 0x58], ebx
jl 0x4700eb
jg 0x4700dc
cmp dword [ebp - 0x5c], ebx
jbe 0x4700eb
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push edi
call fcn.0046f8a5
add esp, 0xc
mov ecx, dword [ebp + 0x4c]
xor eax, eax
cmp word [ebp - 0x70], bx
setne al
lea eax, [ecx + eax*2]
mov dword [ebp + 0x34], eax
lea eax, [ebp + 0x34]
push eax
call fcn.0042dd40
push 4
push dword [ebp + 0x34]
mov dword [ebp - 0x74], ebx
push str.__w:
call fcn.0042ecb0
add esp, 0x10
test al, al
je 0x470132
add dword [ebp + 0x34], 8
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp + 0x34]
push eax
call fcn.004358e8
pop ecx
pop ecx
push 0xffffffffffffffff
lea eax, [ebp + 0x34]
push eax
push 0x497bb4
call fcn.004349fd
add esp, 0xc
cmp dword [0x4a47d0], ebx
jge 0x47019a
mov eax, dword [0x4a5eec]
cmp eax, ebx
mov dword [0x4a47d0], ebx
mov dword [ebp + 0x54], ebx
mov dword [ebp - 0x54], ebx
je 0x4701a8
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp + 0x54]
push ecx
call eax
cmp dword [ebp + 0x54], 0x202
jb 0x470181
mov dword [0x4a47d0], 7
jmp 0x47019c
cmp dword [ebp + 0x54], 0x184
jb 0x470194
mov dword [0x4a47d0], 1
cmp dword [0x4a47d0], ebx
jle 0x4701a8
cmp dword [ebp + 0x28], ebx
jne 0x4701a8
mov dword [ebp + 0x28], 0xfff00000
mov eax, dword [ebp + 0x34]
mov edx, 0x48e984
mov dword [ebp + 0x54], eax
xor edi, edi
cmp word [eax], bx
mov byte [ebp + 0x66], bl
mov byte [ebp + 0x67], bl
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x80], edx
je 0x47023c
push 2
lea eax, [ebp + 0x54]
push eax
push 0x495af4
call fcn.004349fd
add esp, 0xc
test al, al
je 0x4701e5
xor edi, edi
inc edi
jmp 0x47022f
cmp edi, ebx
je 0x470223
push 2
lea eax, [ebp + 0x54]
push eax
push 0x497bb0
call fcn.004349fd
add esp, 0xc
test al, al
je 0x470206
mov byte [ebp + 0x66], 1
jmp 0x47022f
push 3
lea eax, [ebp + 0x54]
push eax
push 0x497bac
call fcn.004349fd
add esp, 0xc
test al, al
je 0x470223
mov byte [ebp + 0x67], 1
jmp 0x47022f
lea eax, [ebp + 0x54]
push eax
call fcn.0040417e
pop ecx
xor edi, edi
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x4701c9
mov edx, 0x48e984
mov eax, dword [0x4a47d0]
test al, 2
je 0x470254
cmp byte [ebp + 0x67], bl
jne 0x470254
mov dword [ebp - 0x8c], str._o_par
mov edi, eax
and edi, 4
je 0x470262
mov dword [ebp - 0x80], str._o_shared
cmp edi, ebx
je 0x470269
mov byte [ebp + 0x5b], bl
mov ecx, dword [ebp - 0x50]
mov eax, ecx
and eax, esi
or eax, ebx
jne 0x47028f
cmp edi, ebx
jne 0x47028f
cmp byte [ebp + 0x6f], bl
je 0x470292
and ecx, 0x100
mov eax, ecx
or eax, ebx
je 0x470292
mov byte [ebp + 0x5b], 1
jmp 0x470292
mov byte [ebp + 0x5b], bl
cmp dword [0x4a47d0], ebx
jle 0x4703a7
cmp byte [ebp + 0x6f], bl
je 0x4702ac
cmp byte [ebp + 0x5b], bl
jne 0x4703a7
cmp byte [ebp + 0x6f], bl
mov dword [ebp + 0x40], edx
jne 0x4702c2
cmp byte [ebp + 0x66], bl
jne 0x4702ca
mov dword [ebp + 0x40], str._o_ro
jmp 0x4702ca
cmp edi, ebx
jne 0x4702ca
mov byte [ebp + 0x3b], 1
push dword [ebp + 0x4c]
mov edi, dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + esi + 0x800]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00432cfe
push dword [ebp + 0x30]
push dword [ebp + 0x14]
push dword [ebp - 0xc]
push dword [ebp - 0x80]
push dword [ebp - 0x8c]
push dword [ebp + 0x40]
push str.imdisk__a___s__s__s___b__sb__s__sb__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp + 0x34]
add esp, 0x20
mov dword [ebp + 0x20], eax
cmp word [eax], bx
je 0x470393
push 2
lea eax, [ebp + 0x20]
push eax
push 0x49729c
call fcn.00434a40
add esp, 0xc
test al, al
jne 0x470359
push 2
lea eax, [ebp + 0x20]
push eax
push 0x4923ec
call fcn.00434a40
add esp, 0xc
test al, al
jne 0x470359
lea eax, [ebp + 0x20]
push eax
call fcn.0040417e
jmp 0x470387
mov ecx, dword [ebp + 0x20]
xor eax, eax
jmp 0x470376
call fcn.00402b57
test al, al
jne 0x47037e
mov word [ecx], 0x20
mov ecx, dword [ebp + 0x20]
inc ecx
inc ecx
mov dword [ebp + 0x20], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x470360
lea eax, [ebp + 0x20]
push eax
call fcn.0042dd40
mov eax, dword [ebp + 0x20]
cmp word [eax], bx
pop ecx
jne 0x470320
mov eax, dword [ebp + 0x34]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00432d25
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
jmp 0x470745
cmp byte [ebp + 0x6f], bl
je 0x4703de
push ebx
push 0xa0000080
push 3
push ebx
push 7
push 0xc0000000
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x470e6c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x54], 0x48e984
jmp 0x4703e5
mov dword [ebp - 0x54], 0x497b20
cmp dword [ebp - 0x30], ebx
jl 0x470406
jg 0x4703f1
cmp dword [ebp - 0x34], ebx
jbe 0x470406
push dword [ebp - 0x30]
mov eax, dword [ebp + 0x14]
push dword [ebp - 0x34]
add eax, 0x6a
push eax
call fcn.0046f8a5
add esp, 0xc
push 0x5c
push ebx
push dword [ebp + 0x30]
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
cmp esi, ebx
jne 0x47041d
mov esi, dword [ebp + 0x30]
jmp 0x47041f
inc esi
inc esi
mov eax, dword [ebp + 0x44]
cmp word [eax], bx
jne 0x470453
push 0x800
lea ecx, [ebp + 0x44]
call fcn.00432cfe
mov edi, dword [ebp + 0x44]
call fcn.0042fa40
push eax
push dword [ebp + 0x14]
push dword [ebp - 0xc]
push esi
push str._s_s_s__u
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
mov eax, 0x400
cmp esi, eax
jle 0x470473
mov esi, eax
mov eax, dword [ebp + 0x44]
mov word [eax + 0x800], bx
push str.Global_
lea ecx, [ebp - 0x14]
call fcn.0043cdc0
push dword [ebp + 0x44]
lea ecx, [ebp - 0x14]
call fcn.00432d25
push str._devio_Ack
lea ecx, [ebp - 0x14]
call fcn.00432d25
mov eax, dword [ebp + 8]
mov word [eax], bx
mov eax, dword [ebp - 0x50]
and eax, 0x30
or eax, ebx
mov word [ebp - 0x1d4], bx
jne 0x4704c6
cmp byte [ebp + 0x6f], bl
je 0x470580
mov eax, dword [ebp - 0x50]
and eax, 0x40
or eax, ebx
jne 0x470580
mov edi, dword [ebp + 8]
push 0x10
push str.__kill:
push edi
call fcn.0047a010
add esp, 0xc
push 0x104
add edi, 0x27e
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp + 8]
push 0x104
add eax, 0xe
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, dword [ebp - 8]
mov dword [ebp - 0x84], eax
mov eax, edi
cmp word [eax], 0x22
mov dword [ebp + 0x54], edi
jne 0x470534
add dword [ebp - 8], 2
jmp 0x47052a
cmp ax, 0x22
je 0x470541
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x470522
jmp 0x470541
lea eax, [ebp + 0x54]
push eax
call fcn.0040415a
mov edi, dword [ebp + 0x54]
pop ecx
mov ax, word [edi]
mov word [ebp + 0x54], ax
mov word [edi], bx
mov eax, dword [ebp - 0x50]
and eax, 0x20
or eax, ebx
mov eax, str._LOAD_25_poweroff
jne 0x47055f
mov eax, str._RAMD_ImdiskV__D__m__s_
push dword [ebp - 8]
mov ecx, dword [ebp - 0x84]
push eax
mov eax, dword [ebp + 8]
lea eax, [eax + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ax, word [ebp + 0x54]
add esp, 0xc
mov word [edi], ax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov cl, 1
call fcn.0047a780
and eax, 3
je 0x4705a8
push eax
lea eax, [ebp - 0x1d4]
push str._nrc:_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
mov edi, 0x200
push edi
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.00479d50
push edx
push eax
push dword [ebp - 0xc]
call fcn.0046f8a5
add esp, 0xc
push ebx
push edi
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.00479d50
push edx
push eax
push dword [ebp + 0x14]
call fcn.0046f8a5
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push 0x4903a0
push str.__ImdMapPid
call fcn.00432698
push dword [ebp + 0x30]
mov edi, dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x20]
lea eax, [eax + esi + 0x940]
push eax
call fcn.00432cd5
push str.Global_
lea ecx, [ebp - 0x44]
call fcn.0043ccfc
push dword [ebp + 0x44]
lea ecx, [ebp - 0x44]
call fcn.00432d25
push dword [ebp - 0x44]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
cmp eax, ebx
jne 0x470e7e
lea ecx, [ebp - 0x44]
call fcn.0042dd2d
mov edx, dword [ebp + 0x14]
lea eax, [edx + 0x6a]
lea ecx, [eax + 0x6a]
push ecx
push eax
push dword [ebp - 0xc]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push edx
push dword [ebp + 0x30]
lea eax, [ebp - 0x1d4]
push dword [ebp + 0x44]
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x28]
push dword [ebp + 8]
push dword [ebp + 0x40]
push str.EXEC___pid:__ImdMapPid____exe:_s10INDATA___nfb___MyName0____s__w:60000__s__s__s_shm:_s___s__s__s__s__s
push dword [ebp - 0x20]
call edi
add esp, 0x34
add esi, 0x800
push esi
lea ecx, [ebp + 0x5c]
call fcn.00432cfe
mov eax, dword [ebp - 0xc]
mov word [eax], bx
mov eax, dword [ebp + 0x14]
mov word [eax], bx
push dword [ebp + 0x44]
push dword [ebp - 0x80]
push dword [ebp - 0x8c]
push 0x48e984
push str.imdisk__a__t_proxy__s__s__s__o_shm__f__s
push dword [ebp + 0x5c]
call edi
add esp, 0x18
push dword [ebp + 0x34]
lea ecx, [ebp + 0x5c]
call fcn.00432d25
push dword [ebp - 0x14]
mov eax, dword [ebp + 0x5c]
push ebx
push ebx
push ebx
mov dword [ebp + 0x60], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push ebx
push dword [ebp - 0x20]
mov esi, eax
call fcn.0042442a
push 0xea60
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
jne 0x470ea7
push 0x32
pop esi
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
jne 0x470723
cmp dword [ebp - 0x74], ebx
jle 0x47073d
push dword [ebp - 0x74]
mov ecx, dword [ebp + 0x7c]
call fcn.0040ce62
lea ecx, [ebp - 0x20]
call fcn.0042dd2d
mov eax, dword [ebp + 0x34]
mov dword [ebp + 0x4c], eax
lea ecx, [ebp - 0x2c]
mov word [eax], bx
mov dword [ebp - 0xd0], 1
call fcn.0042dd2d
mov esi, dword [ebp - 0x18]
mov ax, word [ebp - 0x70]
mov ecx, dword [ebp - 0xd4]
mov word [ecx], ax
jmp 0x470bee
push 4
lea eax, [ebp + 0x4c]
push eax
push str._exe
call fcn.004349fd
add esp, 0xc
test al, al
je 0x470793
mov dword [ebp + 0x28], 1
push 5
lea eax, [ebp + 0x4c]
push eax
push str._nexe
call fcn.004349fd
add esp, 0xc
test al, al
je 0x4707b1
mov dword [ebp + 0x28], 0xfff00000
push 6
lea eax, [ebp + 0x4c]
push eax
push str._nexe1
call fcn.004349fd
add esp, 0xc
test al, al
je 0x4707d9
mov dword [ebp + 0x28], 0xfff00000
mov dword [ebp - 0x90], 1
push 0x2c
pop esi
push esi
lea eax, [ebp]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0043541b
mov eax, dword [ebp]
mov word [eax], bx
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x4708a6
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0043541b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x4708a6
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0043541b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x4708a6
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0043541b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x4708a6
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0043541b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x4708a6
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0043541b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x4708a6
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004355d1
add esp, 0xc
push 6
lea ecx, [ebp + 0x50]
mov byte [ebp + 0x66], bl
call fcn.00432cfe
mov eax, dword [ebp + 0x50]
mov word [eax + 2], 0x3a
mov eax, dword [ebp + 0x50]
mov word [eax + 4], bx
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x470942
push eax
call fcn.00479608
test eax, eax
pop ecx
je 0x47093a
mov eax, dword [ebp + 0x50]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xf0], str.imdisk
mov dword [ebp - 0xec], 0x497be0
mov dword [ebp - 0xe8], 0x4978f8
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], ebx
call fcn.00432cb7
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xf0]
push eax
push 4
call fcn.0041df5a
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0xa8]
mov byte [ebp + 0x66], al
call fcn.0042dd2d
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
jne 0x47095b
push 0x491eb8
lea ecx, [ebp + 0x50]
call fcn.0043cd64
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x470ec8
push 0x3c
lea ecx, [ebp - 4]
call fcn.00432cd5
mov eax, dword [ebp]
or esi, 0xffffffff
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp + 0x48], eax
cmp word [eax], bx
mov edi, esi
je 0x470ec0
lea eax, [ebp + 0x48]
push eax
call fcn.0042dd40
mov eax, dword [ebp + 0x48]
mov ax, word [eax]
or ax, 0x20
cmp ax, 0x70
pop ecx
jne 0x4709bf
lea eax, [ebp - 0xa0]
jmp 0x4709d9
cmp ax, 0x6c
jne 0x4709cd
lea eax, [ebp - 0x98]
jmp 0x4709d9
cmp ax, 0x68
jne 0x4709f1
lea eax, [ebp - 0xc0]
add dword [ebp + 0x48], 2
push eax
lea eax, [ebp + 0x48]
push eax
call fcn.004358c4
mov eax, dword [ebp + 0x48]
cmp word [eax], bx
pop ecx
pop ecx
jne 0x47099d
cmp dword [ebp - 0x9c], ebx
jl 0x470a33
jg 0x470a03
cmp dword [ebp - 0xa0], ebx
jbe 0x470a33
push 1
call fcn.00410675
pop ecx
push dword [ebp - 0x9c]
push dword [ebp - 0xa0]
push edx
push eax
call fcn.00479e00
push ebx
push 0x64
push edx
push eax
call fcn.00479d50
mov cl, 0x14
call fcn.0047a780
mov edi, eax
mov esi, edx
cmp esi, dword [ebp - 0x94]
jg 0x470a51
jl 0x470a45
cmp edi, dword [ebp - 0x98]
jae 0x470a51
mov edi, dword [ebp - 0x98]
mov esi, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xbc]
cmp ecx, ebx
jl 0x470a83
mov eax, dword [ebp - 0xc0]
jg 0x470a67
cmp eax, ebx
jbe 0x470a83
cmp esi, ecx
jl 0x470a75
jg 0x470a71
cmp edi, eax
jbe 0x470a75
mov edi, eax
mov esi, ecx
cmp esi, ebx
jg 0x470a95
jl 0x470a7f
cmp edi, ebx
ja 0x470a83
mov edi, eax
mov esi, ecx
cmp esi, ebx
jl 0x470ec0
jg 0x470a95
cmp edi, ebx
jb 0x470ec0
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x470ec0
cmp esi, ebx
jg 0x470ab0
jl 0x470aab
cmp edi, ebx
ja 0x470ab0
xor edi, edi
inc edi
xor esi, esi
push esi
push edi
push dword [ebp - 4]
call fcn.0046f8bf
add esp, 0xc
push 0x4978f0
lea ecx, [ebp - 4]
call fcn.00432d25
cmp byte [ebp + 0x66], bl
mov eax, str.imdisk___e
jne 0x470ad9
mov eax, str.imdisk___a
push eax
lea ecx, [ebp + 0x5c]
call fcn.0043cd64
mov eax, dword [ebp - 0xc8]
and eax, 1
xor ecx, ecx
or eax, ecx
je 0x470afe
push str.__o_awe
lea ecx, [ebp + 0x5c]
call fcn.00432d25
mov eax, dword [ebp - 4]
cmp word [eax], bx
je 0x470b1e
push 0x4978a0
lea ecx, [ebp + 0x5c]
call fcn.00432d25
push dword [ebp - 4]
lea ecx, [ebp + 0x5c]
call fcn.00432d25
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x470b3e
push str.___m
lea ecx, [ebp + 0x5c]
call fcn.00432d25
push dword [ebp + 0x50]
lea ecx, [ebp + 0x5c]
call fcn.00432d25
mov eax, dword [ebp + 0x10]
cmp word [eax], bx
jne 0x470b52
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x470bdd
push str.___p__
lea ecx, [ebp + 0x5c]
call fcn.00432d25
mov eax, dword [ebp + 0x10]
cmp word [eax], bx
je 0x470b7f
push str.__FS:
lea ecx, [ebp + 0x5c]
call fcn.00432d25
push dword [ebp + 0x10]
lea ecx, [ebp + 0x5c]
call fcn.00432d25
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x470b9f
push str.__V:
lea ecx, [ebp + 0x5c]
call fcn.00432d25
push dword [ebp + 4]
lea ecx, [ebp + 0x5c]
call fcn.00432d25
push dword [ebp + 0x10]
push 0x495700
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x470bd0
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
cmp ax, bx
je 0x470bd0
cmp ax, 0x30
je 0x470bd0
push 0x4956f8
lea ecx, [ebp + 0x5c]
call fcn.00432d25
push str.___Q__Y__X__
lea ecx, [ebp + 0x5c]
call fcn.00432d25
mov eax, dword [ebp + 0x5c]
lea ecx, [ebp - 4]
mov dword [ebp + 0x60], eax
call fcn.0042dd2d
mov esi, dword [ebp - 0x18]
lea eax, [ebp + 0x4c]
push eax
call fcn.0042dd40
push 4
push dword [ebp + 0x4c]
push str._gui
call fcn.0042ec66
add esp, 0x10
test al, al
jne 0x470ecf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x40], eax
lea eax, [ebp + 0x40]
push eax
sub edi, 0xc8
call fcn.0040415a
pop ecx
push dword [ebp + 0x40]
lea ecx, [ebp - 0x40]
call fcn.0043cdc0
mov eax, dword [ebp - 0x40]
mov dword [ebp + 0x40], eax
mov dword [ebp + 0x54], eax
jmp 0x470c97
push 6
lea eax, [ebp + 0x54]
push eax
push str.__nbrd
call fcn.00434a40
add esp, 0xc
test al, al
jne 0x470c94
push 6
lea eax, [ebp + 0x54]
push eax
push 0x48efd4
call fcn.00434a40
add esp, 0xc
test al, al
jne 0x470c94
push 2
lea eax, [ebp + 0x54]
push eax
push 0x492230
call fcn.00434a40
add esp, 0xc
test al, al
jne 0x470c94
lea eax, [ebp + 0x54]
push eax
call fcn.0040417e
pop ecx
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x470c45
cmp esi, ebx
jne 0x470da5
cmp dword [ebp + 0x28], ebx
jg 0x470da5
push ebx
push dword [ebp + 0x60]
lea ecx, [ebp - 0x198]
call fcn.004401d6
cmp dword [ebp - 0x15c], 1
jle 0x470ee6
mov eax, dword [ebp - 0x158]
mov dword [eax], str.imdisk
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x158]
push dword [ebp - 0x15c]
call fcn.0041df5a
add esp, 0xc
cmp byte [ebp + 0x3b], bl
mov dword [ebp + 0x2c], eax
mov dword [ebp - 0x7c], ebx
jle 0x470df7
cmp eax, 3
jne 0x470df7
cmp dword [ebp - 0x90], ebx
jne 0x470df7
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x5b], 1
call fcn.0042dd2d
lea ecx, [ebp - 0x40]
call fcn.0042dd2d
lea ecx, [ebp + 0x30]
call fcn.0042dd2d
lea ecx, [ebp - 0x28]
call fcn.0042dd2d
lea ecx, [ebp + 0x44]
call fcn.0042dd2d
lea ecx, [ebp - 0x38]
call fcn.0042dd2d
lea ecx, [ebp + 4]
call fcn.0042dd2d
lea ecx, [ebp + 0x50]
call fcn.0042dd2d
lea ecx, [ebp + 0x10]
call fcn.0042dd2d
lea ecx, [ebp]
call fcn.0042dd2d
lea ecx, [ebp + 0x18]
call fcn.0042dd2d
lea ecx, [ebp + 0x5c]
call fcn.0042dd2d
lea ecx, [ebp - 0xa4]
call fcn.0042dd2d
lea ecx, [ebp + 0x24]
call fcn.0042dd2d
lea ecx, [ebp - 0x1c]
call fcn.0042dd2d
lea ecx, [ebp + 0x78]
call fcn.0046dfb5
lea ecx, [ebp - 0x78]
call fcn.0042dd2d
jmp 0x46f9bc
cmp dword [ebp - 0x90], ebx
jne 0x470df7
push dword [ebp + 0x18]
lea ecx, [ebp - 0x3c]
call fcn.0043ccfc
push dword [ebp + 0x40]
lea ecx, [ebp - 0x3c]
call fcn.00432d25
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
mov ecx, dword [ebp + 0x7c]
mov dword [ebp - 0x7c], 1
je 0x470de4
push ebx
push ebx
push ebx
push dword [ebp - 0x3c]
push ecx
push ebx
call fcn.00406e39
jmp 0x470dec
push dword [ebp - 0x3c]
call fcn.0042defd
lea ecx, [ebp - 0x3c]
mov dword [ebp + 0x2c], eax
call fcn.0042dd2d
mov ecx, dword [ebp - 0xd0]
xor eax, eax
or ecx, eax
je 0x470eed
cmp dword [ebp + 0x2c], 3
jne 0x470eed
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x1388
jae 0x470eed
mov ecx, dword [ebp + 0x7c]
push 0xc8
call fcn.0040ce62
jmp 0x470c9c
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x4a6a50], ebx
jle 0x470e5a
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push 1
call fcn.0040ce62
jmp 0x470e3c
push 0xffffffffffffffff
lea ecx, [ebp + 0x1c]
call fcn.0040eed8
push esi
call edi
jmp 0x470fbe
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jne 0x470e79
xor eax, eax
inc eax
mov dword [ebp + 0x2c], eax
jmp 0x470eb6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44]
call fcn.0042dd2d
lea ecx, [ebp - 0x20]
call fcn.0042dd2d
lea ecx, [ebp - 0x2c]
call fcn.0042dd2d
mov ebx, 0xb7
jmp 0x470f3b
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x2c], 1
call fcn.0042dd2d
lea ecx, [ebp - 0x2c]
call fcn.0042dd2d
jmp 0x470eed
lea ecx, [ebp - 4]
call fcn.0042dd2d
mov ebx, 0x80070057
jmp 0x470f3b
mov ecx, dword [ebp + 0x7c]
push 0xffffffffffffff9c
push 0x48e984
push ebx
push str.imdisk.cpl_
call fcn.00448c5f
jmp 0x470f3b
mov dword [ebp + 0x2c], 0x80070057
mov eax, dword [ebp - 0x154]
cmp eax, ebx
je 0x470f08
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
mov dword [ebp - 0x154], ebx
call fcn.0042dd2d
mov edx, dword [ebp + 0x24]
cmp word [edx], bx
je 0x470f38
cmp dword [ebp - 0x7c], ebx
jne 0x470f38
mov ecx, dword [ebp - 0x1c]
mov word [ebp - 0x214], bx
cmp word [ecx], 0x2a
lea eax, [ebp - 0x214]
jne 0x470f2e
lea eax, [ecx + 2]
mov ecx, dword [ebp + 0x7c]
push eax
push edx
call fcn.00432698
mov ebx, dword [ebp + 0x2c]
lea ecx, [ebp - 0x14]
call fcn.0042dd2d
lea ecx, [ebp - 0x40]
call fcn.0042dd2d
lea ecx, [ebp + 0x30]
call fcn.0042dd2d
lea ecx, [ebp - 0x28]
call fcn.0042dd2d
lea ecx, [ebp + 0x44]
call fcn.0042dd2d
lea ecx, [ebp - 0x38]
call fcn.0042dd2d
lea ecx, [ebp + 4]
call fcn.0042dd2d
lea ecx, [ebp + 0x50]
call fcn.0042dd2d
lea ecx, [ebp + 0x10]
call fcn.0042dd2d
lea ecx, [ebp]
call fcn.0042dd2d
lea ecx, [ebp + 0x18]
call fcn.0042dd2d
lea ecx, [ebp + 0x5c]
call fcn.0042dd2d
lea ecx, [ebp - 0xa4]
call fcn.0042dd2d
lea ecx, [ebp + 0x24]
call fcn.0042dd2d
lea ecx, [ebp - 0x1c]
call fcn.0042dd2d
lea ecx, [ebp + 0x78]
call fcn.0046dfb5
lea ecx, [ebp - 0x78]
call fcn.0042dd2d
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x70
leave
ret