Function at 0x48cd14
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x288
push ebx
fldz
push esi
fstp qword [ebp - 0x19c]
push edi
push 0x26
xor eax, eax
pop ecx
lea edi, [ebp - 0x194]
mov byte [ebp + 0x5b], 1
rep stosd dword es:[edi], eax
xor ebx, ebx
mov esi, 0x4c9c14
push dword [ebp + 0x78]
lea ecx, [ebp - 0x70]
mov byte [ebp + 0x37], bl
call fcn.00448399
mov eax, dword [ebp - 0x70]
mov dword [ebp + 0x60], eax
add eax, 0xc
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x48], eax
lea eax, [ebp + 0x48]
push eax
call fcn.0040549b
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.00439c95
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
pop ecx
pop ecx
lea ecx, [ebp + 0xf]
sete byte [ebp + 0x67]
call fcn.00412400
push 6
push dword [ebp - 0x20]
push str.__free
call fcn.0043af01
add esp, 0xc
test al, al
jne 0x48e28c
lea ecx, [ebp + 0x78]
call fcn.0048afe2
push ebx
lea ecx, [ebp + 0xf]
call fcn.00412403
lea ecx, [ebp + 0xf]
call fcn.004123f4
neg eax
sbb eax, eax
inc eax
cmp dword [0x4c7804], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x24], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
jge 0x48ce74
mov eax, dword [0x4c8fe4]
cmp eax, ebx
mov dword [0x4c7804], ebx
mov dword [ebp + 0x54], ebx
mov dword [ebp + 0x44], ebx
je 0x48ce50
lea ecx, [ebp + 0x44]
push ecx
lea ecx, [ebp + 0x54]
push ecx
call eax
cmp dword [ebp + 0x44], ebx
jbe 0x48ce50
mov eax, dword [ebp + 0x54]
cmp eax, 0x202
jb 0x48ce1c
mov dword [0x4c7804], 0x38
jmp 0x48ce50
cmp eax, 0x184
jb 0x48ce2f
mov dword [0x4c7804], 8
jmp 0x48ce50
cmp eax, 0x160
jb 0x48ce42
mov dword [0x4c7804], 2
jmp 0x48ce50
cmp eax, ebx
jbe 0x48ce50
mov dword [0x4c7804], 1
push dword [0x4c8fe4]
push dword [0x4c7804]
push dword [ebp + 0x44]
push dword [ebp + 0x54]
push str.DBG:_IMD:_0x_X_0x_X_0x_X__0x_p_r_n
push 0x4c9048
call fcn.0041009a
add esp, 0x18
push 3
push dword [ebp - 0x20]
push 0x4b6d64
call fcn.0043af01
add esp, 0xc
test al, al
je 0x48ce91
mov dword [ebp + 0x24], 0xfff00000
push 5
lea eax, [ebp - 0x20]
push eax
push str.__ins
mov byte [ebp + 0x6f], bl
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48ceb1
mov byte [ebp + 0x6f], 5
jmp 0x48cecc
push 6
lea eax, [ebp - 0x20]
push eax
push str.__fins
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48cecc
mov byte [ebp + 0x6f], 6
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.0043fdb8
lea ecx, [ebp + 0x18]
call fcn.0043fd9a
lea ecx, [ebp - 0xa8]
call fcn.0043fd9a
lea ecx, [ebp + 0x5c]
call fcn.0043fd9a
lea ecx, [ebp - 0x1c]
mov dword [ebp + 0x14], ebx
call fcn.0043fd9a
lea ecx, [ebp + 4]
call fcn.0043fd9a
lea ecx, [ebp + 0x50]
call fcn.0043fd9a
lea ecx, [ebp - 0xc]
call fcn.0043fd9a
lea ecx, [ebp - 0x3c]
call fcn.0043fd9a
lea ecx, [ebp + 0x3c]
call fcn.0043fd9a
lea ecx, [ebp - 0x28]
call fcn.0043fd9a
lea ecx, [ebp + 0x28]
call fcn.0043fd9a
or eax, 0xffffffff
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov eax, 0x4ae9fc
push 0xc8
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
call fcn.0043fdb8
cmp byte [ebp + 0x67], bl
mov eax, dword [ebp + 0x48]
mov cx, word [eax]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0xd8], eax
mov word [ebp - 0x7c], cx
mov dword [ebp + 0x30], eax
je 0x48d0bf
add dword [ebp + 0x68], 2
mov word [eax], bx
mov eax, dword [ebp + 0x68]
mov edx, eax
jmp 0x48cfb4
cmp cx, 0x2a
je 0x48cfbc
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, bx
jne 0x48cfa9
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x18]
call fcn.0043febe
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
je 0x48cfdf
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.0043fddf
cmp word [ebp - 0x7c], bx
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x30], eax
je 0x48cff1
add eax, 2
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
call fcn.00439c95
pop ecx
mov edi, 0x4ae9fc
push 4
lea eax, [ebp + 0x30]
push eax
push str._mem
call fcn.00441c39
add esp, 0xc
test al, al
jne 0x48d02e
push 2
lea eax, [ebp + 0x30]
push eax
push 0x4b1e74
call fcn.00441c39
add esp, 0xc
test al, al
je 0x48d033
mov dword [ebp + 0x44], edi
jmp 0x48d000
push 3
lea eax, [ebp + 0x30]
push eax
push 0x4b7218
call fcn.00441c39
add esp, 0xc
test al, al
je 0x48d053
mov dword [ebp + 0x44], 0x4bab5c
jmp 0x48d000
push 4
lea eax, [ebp + 0x30]
push eax
push str._map
call fcn.00441c39
add esp, 0xc
test al, al
je 0x48d076
mov dword [ebp - 0xe0], 1
jmp 0x48d000
push 4
lea eax, [ebp + 0x30]
push eax
push str._exe
call fcn.00441c39
add esp, 0xc
test al, al
je 0x48d099
mov dword [ebp + 0x24], 1
jmp 0x48d000
push 5
lea eax, [ebp + 0x30]
push eax
push str._nexe
call fcn.00441c39
add esp, 0xc
test al, al
je 0x48d0bc
mov dword [ebp + 0x24], 0xfff00000
jmp 0x48d000
mov edi, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x7c]
push 0x4bab34
push 0x4ba0ec
call fcn.0043f62b
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
push 0xffffffffffffffff
je 0x48d104
push 0x4bab30
call fcn.0043fe55
push dword [ebp + 0x18]
lea ecx, [ebp + 0x14]
call fcn.0043fe06
push str.Imdisk
lea ecx, [ebp + 0x14]
call fcn.0043fe06
jmp 0x48d10e
push str._Imdisk
call fcn.0043fe55
push 9
push edi
push str.__version
call fcn.0043af01
push 2
push edi
push 0x4bab00
mov byte [ebp + 0x66], al
call fcn.0043af01
push 2
push edi
push 0x4baafc
mov byte [ebp + 0xe], al
call fcn.0043af01
push 3
push edi
push 0x4b6d64
mov byte [ebp + 0x13], al
call fcn.0043af01
add esp, 0x30
cmp byte [ebp + 0x66], bl
jne 0x48d165
cmp byte [ebp + 0xe], bl
jne 0x48d165
cmp byte [ebp + 0x13], bl
jne 0x48d165
cmp al, bl
jne 0x48d165
mov cl, 1
jmp 0x48d167
xor cl, cl
cmp dword [ebp - 0x18], ebx
jne 0x48d17e
mov eax, dword [0x4c7804]
cmp eax, ebx
jle 0x48d17e
push 2
pop edi
cmp eax, edi
jge 0x48d18a
jmp 0x48d181
push 2
pop edi
cmp cl, bl
jne 0x48d194
cmp byte [ebp + 0x6f], bl
jne 0x48d194
cmp byte [ebp + 0x6f], 6
jl 0x48d319
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x10], 0x4baaf4
jne 0x48d1ea
lea ecx, [ebp - 0x74]
call fcn.0043fd9a
mov eax, 0x4baaec
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xe8]
push eax
push edi
call fcn.004260eb
mov eax, dword [ebp - 0x74]
add esp, 0xc
cmp word [eax], bx
je 0x48d1e2
cmp word [eax + 2], bx
je 0x48d1e2
mov dword [ebp - 0x10], 0x4baae4
lea ecx, [ebp - 0x74]
call fcn.00439cfd
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov edi, dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
sub dword [0x4c9c74], 1
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
cmp dword [0x4c9c74], ebx
jle 0x48d221
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.00414c28
jmp 0x48d201
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.00412403
push esi
call edi
movsx ax, byte [ebp + 0x6f]
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
mov word [ebp - 0xbe], 0x20
mov word [ebp - 0xbc], bx
add eax, 0x30
mov word [ebp - 0xc0], ax
call fcn.00412403
push str.28:INDATA
lea ecx, [ebp + 8]
call fcn.00448399
cmp dword [ebp - 0x18], ebx
mov eax, 0x4baae4
jne 0x48d273
mov eax, 0x4baaf4
push eax
lea ecx, [ebp + 8]
call fcn.0043fe06
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.0043fe06
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp + 8]
call fcn.0043fe06
push dword [ebp + 0x48]
lea ecx, [ebp + 8]
call fcn.0043fe06
push dword [ebp + 8]
push str.Install_IMD__s__r_n
push 0x4c9048
call fcn.0041009a
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push dword [ebp + 8]
call fcn.004309f9
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
add dword [0x4c9c74], 1
push esi
mov dword [0x4c7804], 0xffffffc0
call edi
push ebx
lea ecx, [ebp + 0xf]
call fcn.00412403
lea ecx, [ebp + 0xf]
call fcn.004123f4
neg eax
sbb eax, eax
inc eax
push esi
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
cmp dword [ebp - 0x18], ebx
jne 0x48d30b
mov dword [0x4c7804], 0x38
push esi
call edi
lea ecx, [ebp + 8]
call fcn.00439cfd
push 2
pop edi
cmp byte [ebp + 0x67], bl
je 0x48dbba
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x4c], eax
jmp 0x48d34d
push edi
lea eax, [ebp - 0x4c]
push eax
push 0x4b1e74
call fcn.00441bc4
add esp, 0xc
test al, al
jne 0x48d354
lea eax, [ebp - 0x4c]
push eax
call fcn.00405444
mov eax, dword [ebp - 0x4c]
pop ecx
cmp word [eax], bx
jne 0x48d32a
jmp 0x48d35a
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
jne 0x48dba8
add dword [ebp + 0x68], edi
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
cmp word [eax], 0x40
mov byte [ebp + 0x67], bl
jne 0x48d389
add dword [ebp + 0x68], edi
mov byte [ebp + 0x67], 1
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00444a3d
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x48d3a3
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00444a3d
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x48d3bd
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00444a3d
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x48d3d9
inc edi
inc edi
mov dword [ebp + 0x68], edi
mov al, byte [ebp - 0x48]
and al, 1
mov byte [ebp + 0x6f], al
push 0x2a
lea eax, [ebp + 0x68]
call fcn.0043f8e8
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x28]
call fcn.0043febe
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x48d409
add dword [ebp + 0x68], 2
mov edi, dword [ebp + 0x68]
push 0x2a
lea eax, [ebp + 0x68]
call fcn.0043f8e8
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x3c]
call fcn.0043febe
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x48d434
add dword [ebp + 0x68], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00444a3d
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x48d450
inc edi
inc edi
mov dword [ebp + 0x68], edi
push 0x2a
lea eax, [ebp + 0x68]
call fcn.0043f8e8
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.0043febe
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.00444a3d
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x48d487
add dword [ebp + 0x68], 2
cmp byte [ebp + 0x67], bl
mov edx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
je 0x48d4cc
add eax, edx
adc ecx, edi
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0x58], ebx
jl 0x48d4ee
jg 0x48d4d8
cmp dword [ebp - 0x5c], ebx
jbe 0x48d4ee
cmp dword [ebp - 0x34], ebx
jg 0x48d4ee
jl 0x48d4e4
cmp dword [ebp - 0x38], ebx
ja 0x48d4ee
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], ebx
push 0x318
lea ecx, [ebp - 0x2c]
call fcn.0043fdb8
mov eax, dword [ebp - 0x2c]
lea esi, [eax + 0x6a]
mov dword [ebp - 8], eax
lea eax, [esi + 0x6a]
lea edi, [eax + 0x6a]
push ebx
mov word [edi], bx
push 0x200
mov word [eax], bx
push dword [ebp - 0x60]
lea ecx, [edi + 0x6a]
push dword [ebp - 0x64]
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 4], ecx
call fcn.0049a840
push edx
push eax
push dword [ebp - 8]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
call fcn.0048ca08
add esp, 0xc
push ebx
push 0x200
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.0049a840
push edx
push eax
push esi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
call fcn.0048ca08
add esp, 0xc
mov word [edi], bx
cmp dword [ebp - 0x58], ebx
jl 0x48d586
jg 0x48d577
cmp dword [ebp - 0x5c], ebx
jbe 0x48d586
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push edi
call fcn.0048ca08
add esp, 0xc
mov ecx, dword [ebp + 0x48]
xor eax, eax
cmp word [ebp - 0x7c], bx
setne al
lea eax, [ecx + eax*2]
mov dword [ebp + 0x38], eax
lea eax, [ebp + 0x38]
push eax
call fcn.00439c95
push 4
push dword [ebp + 0x38]
mov dword [ebp - 0x78], ebx
push str.__w:
call fcn.0043af58
add esp, 0x10
test al, al
je 0x48d5cd
add dword [ebp + 0x38], 8
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.0044b46e
pop ecx
pop ecx
push 0xffffffffffffffff
lea eax, [ebp + 0x38]
push eax
push 0x4baa9c
call fcn.00441bc4
add esp, 0xc
cmp dword [0x4c7804], 1
jl 0x48d5f5
cmp dword [ebp + 0x24], ebx
jne 0x48d5f5
mov dword [ebp + 0x24], 0xfff00000
mov eax, dword [ebp + 0x38]
mov edi, 0x4ae9fc
mov byte [ebp + 0x66], bl
mov byte [ebp + 0x67], bl
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x80], edi
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x2c], ebx
jmp 0x48d680
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x4b7698
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48d631
mov dword [ebp + 0x2c], 1
jmp 0x48d67d
cmp dword [ebp + 0x2c], ebx
je 0x48d670
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x4baa98
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48d653
mov byte [ebp + 0x66], 1
jmp 0x48d67d
push 3
lea eax, [ebp + 0x4c]
push eax
push 0x4baa94
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48d670
mov byte [ebp + 0x67], 1
jmp 0x48d67d
lea eax, [ebp + 0x4c]
push eax
call fcn.00405444
pop ecx
mov dword [ebp + 0x2c], ebx
mov eax, dword [ebp + 0x4c]
cmp word [eax], bx
jne 0x48d611
mov eax, dword [0x4c7804]
test al, 0x10
je 0x48d69a
cmp byte [ebp + 0x67], bl
jne 0x48d69a
mov dword [ebp - 0x10], str._o_par
mov dword [ebp + 0x4c], eax
and dword [ebp + 0x4c], 0x20
je 0x48d6aa
mov dword [ebp - 0x80], str._o_shared
cmp dword [ebp + 0x4c], ebx
je 0x48d6b2
mov byte [ebp + 0x5b], bl
mov ecx, dword [ebp - 0x48]
mov eax, ecx
and eax, 0x200
or eax, ebx
jne 0x48d6dc
cmp dword [ebp + 0x4c], ebx
jne 0x48d6dc
cmp byte [ebp + 0x6f], bl
je 0x48d6df
and ecx, 0x100
mov eax, ecx
or eax, ebx
je 0x48d6df
mov byte [ebp + 0x5b], 1
jmp 0x48d6df
mov byte [ebp + 0x5b], bl
cmp dword [0x4c7804], 8
jl 0x48d7f0
cmp byte [ebp + 0x6f], bl
je 0x48d6fa
cmp byte [ebp + 0x5b], bl
jne 0x48d7f0
cmp byte [ebp + 0x6f], bl
mov dword [ebp + 0x2c], edi
jne 0x48d710
cmp byte [ebp + 0x66], bl
jne 0x48d719
mov dword [ebp + 0x2c], str._o_ro
jmp 0x48d719
cmp dword [ebp + 0x4c], ebx
jne 0x48d719
mov byte [ebp + 0x37], 1
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
push dword [ebp + 0x48]
mov edi, eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea eax, [eax + edi + 0x800]
push eax
lea ecx, [ebp + 0x5c]
call fcn.0043fddf
push dword [ebp + 0x28]
push esi
push dword [ebp - 8]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push dword [ebp + 0x2c]
push str.imdisk__a___s__s__s___b__sb__s__sb__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp + 0x38]
add esp, 0x20
mov dword [ebp + 0x20], eax
cmp word [eax], bx
je 0x48d7dc
push 2
lea eax, [ebp + 0x20]
push eax
push 0x4baa08
call fcn.0043aeb0
add esp, 0xc
test al, al
jne 0x48d7a2
push 2
lea eax, [ebp + 0x20]
push eax
push 0x4baa00
call fcn.0043aeb0
add esp, 0xc
test al, al
jne 0x48d7a2
lea eax, [ebp + 0x20]
push eax
call fcn.00405444
jmp 0x48d7d0
mov ecx, dword [ebp + 0x20]
xor eax, eax
jmp 0x48d7bf
call fcn.0040ea2b
test al, al
jne 0x48d7c7
mov word [ecx], 0x20
mov ecx, dword [ebp + 0x20]
inc ecx
inc ecx
mov dword [ebp + 0x20], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x48d7a9
lea eax, [ebp + 0x20]
push eax
call fcn.00439c95
mov eax, dword [ebp + 0x20]
cmp word [eax], bx
pop ecx
jne 0x48d769
mov eax, dword [ebp + 0x38]
push eax
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
jmp 0x48db88
cmp byte [ebp + 0x6f], bl
je 0x48d823
push ebx
push 0xa0000080
push 3
push ebx
push 7
push 0xc0000000
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
cmp eax, 0xffffffff
je 0x48e2c4
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebp + 0x4c], edi
jmp 0x48d82a
mov dword [ebp + 0x4c], 0x4ba9f8
cmp dword [ebp - 0x34], ebx
jl 0x48d848
jg 0x48d836
cmp dword [ebp - 0x38], ebx
jbe 0x48d848
push dword [ebp - 0x34]
lea eax, [esi + 0x6a]
push dword [ebp - 0x38]
push eax
call fcn.0048ca08
add esp, 0xc
push 0x5c
push ebx
push dword [ebp + 0x28]
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
cmp esi, ebx
jne 0x48d85f
mov esi, dword [ebp + 0x28]
jmp 0x48d861
inc esi
inc esi
mov eax, dword [ebp + 0x3c]
cmp word [eax], bx
jne 0x48d898
push 0x800
lea ecx, [ebp + 0x3c]
call fcn.0043fddf
mov edi, dword [ebp + 0x3c]
call fcn.0043c0b2
push eax
push dword [ebp - 0xa0]
push dword [ebp - 8]
push esi
push str._s_s_s__u
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x3c]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov esi, eax
mov eax, 0x400
cmp esi, eax
jle 0x48d8b8
mov esi, eax
mov eax, dword [ebp + 0x3c]
mov word [eax + 0x800], bx
push str.Global_
lea ecx, [ebp - 0x14]
call fcn.0044845d
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x14]
call fcn.0043fe06
push str._devio_Ack
lea ecx, [ebp - 0x14]
call fcn.0043fe06
mov eax, dword [ebp - 4]
mov word [eax], bx
mov eax, dword [ebp - 0x48]
and eax, 0x30
or eax, ebx
mov word [ebp - 0x1d8], bx
jne 0x48d90b
cmp byte [ebp + 0x6f], bl
je 0x48d9c3
mov eax, dword [ebp - 0x48]
and eax, 0x40
or eax, ebx
jne 0x48d9c3
mov edi, dword [ebp - 4]
push 0x10
push str.__kill:
push edi
call fcn.00413203
add esp, 0xc
push 0x104
add edi, 0x27e
push edi
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
mov eax, dword [ebp - 4]
push 0x104
add eax, 0xe
push eax
push edi
call dword [sym.imp.KERNEL32.DLL_GetShortPathNameW]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov edi, dword [ebp + 0x54]
cmp word [edi], 0x22
mov dword [ebp - 0x84], eax
mov dword [ebp + 0x2c], edi
jne 0x48d977
add dword [ebp + 0x54], 2
jmp 0x48d96d
cmp ax, 0x22
je 0x48d984
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x48d965
jmp 0x48d984
lea eax, [ebp + 0x2c]
push eax
call fcn.0040549b
mov edi, dword [ebp + 0x2c]
pop ecx
mov ax, word [edi]
mov word [ebp + 0x2c], ax
mov word [edi], bx
mov eax, dword [ebp - 0x48]
and eax, 0x20
or eax, ebx
mov eax, str._LOAD_25_poweroff
jne 0x48d9a2
mov eax, str._RAMD_ImdiskV__D__m__s_
push dword [ebp + 0x54]
mov ecx, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 4]
lea eax, [eax + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ax, word [ebp + 0x2c]
add esp, 0xc
mov word [edi], ax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov cl, 1
call fcn.0049ab30
and eax, 3
je 0x48d9eb
push eax
lea eax, [ebp - 0x1d8]
push str._nrc:_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
mov edi, 0x200
push edi
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.0049a840
push edx
push eax
push dword [ebp - 8]
call fcn.0048ca08
add esp, 0xc
push ebx
push edi
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.0049a840
mov edi, dword [ebp - 0xa0]
push edx
push eax
push edi
call fcn.0048ca08
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push 0x4b2878
push str.__ImdMapPid
call fcn.0043f62b
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
push dword [ebp + 0x28]
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
add eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x30]
lea eax, [eax + esi + 0x940]
push eax
call fcn.0043fdb8
push str.Global_
lea ecx, [ebp - 0x40]
call fcn.00448399
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x40]
call fcn.0043fe06
push dword [ebp - 0x40]
push ebx
push 2
call dword [sym.imp.KERNEL32.DLL_OpenFileMappingW]
cmp eax, ebx
jne 0x48e2d6
lea ecx, [ebp - 0x40]
call fcn.00439cfd
push dword [ebp - 0xcc]
lea eax, [edi + 0x6a]
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x1d8]
push edi
push dword [ebp + 0x28]
push dword [ebp + 0x3c]
push dword [ebp + 0x4c]
push eax
push dword [ebp - 0x28]
push dword [ebp - 4]
push dword [ebp + 0x44]
push str.EXEC___pid:__ImdMapPid____exe:_s10INDATA___nfb___MyName0____s__w:60000__s__s__s_shm:_s___s__s__s__s__s
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
add esi, 0x800
push esi
lea ecx, [ebp + 0x5c]
call fcn.0043fddf
mov eax, dword [ebp - 8]
mov word [eax], bx
mov word [edi], bx
push dword [ebp + 0x3c]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push 0x4ae9fc
push str.imdisk__a__t_proxy__s__s__s__o_shm__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x38]
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
push dword [ebp - 0x14]
mov eax, dword [ebp + 0x5c]
push ebx
push ebx
push ebx
mov dword [ebp + 0x60], eax
call dword [sym.imp.KERNEL32.DLL_CreateEventW]
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push ebx
push dword [ebp - 0x30]
mov esi, eax
call fcn.0042e6e7
push 0xea60
push esi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp edi, ebx
jne 0x48e2ff
push 0x32
pop esi
push ebx
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec esi
jne 0x48db64
cmp dword [ebp - 0x78], ebx
jle 0x48db80
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push dword [ebp - 0x78]
call fcn.00414c28
lea ecx, [ebp - 0x30]
call fcn.00439cfd
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x48], eax
lea ecx, [ebp - 0x2c]
mov word [eax], bx
mov dword [ebp - 0xe0], 1
call fcn.00439cfd
mov esi, 0x4c9c14
mov ax, word [ebp - 0x7c]
mov ecx, dword [ebp - 0xd8]
mov word [ecx], ax
jmp 0x48e035
push 4
lea eax, [ebp + 0x48]
push eax
push str._exe
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48dbd8
mov dword [ebp + 0x24], 1
push 5
lea eax, [ebp + 0x48]
push eax
push str._nexe
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48dbf6
mov dword [ebp + 0x24], 0xfff00000
push 6
lea eax, [ebp + 0x48]
push eax
push str._nexe1
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x48dc1e
mov dword [ebp + 0x24], 0xfff00000
mov dword [ebp - 0x8c], 1
push 0x2c
pop esi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004429d8
mov eax, dword [ebp - 0x1c]
mov word [eax], bx
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x48dceb
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004429d8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x48dceb
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004429d8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x48dceb
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004429d8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x48dceb
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004429d8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x48dceb
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004429d8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x48dceb
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00442b8e
add esp, 0xc
push 6
lea ecx, [ebp + 0x50]
mov byte [ebp + 0x66], bl
call fcn.0043fddf
mov eax, dword [ebp + 0x50]
mov word [eax + 2], 0x3a
mov eax, dword [ebp + 0x50]
mov word [eax + 4], bx
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x48dd87
push eax
call fcn.00499edd
test eax, eax
pop ecx
je 0x48dd7f
mov eax, dword [ebp + 0x50]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xfc], str.imdisk
mov dword [ebp - 0xf8], 0x4baaec
mov dword [ebp - 0xf4], 0x4ba7d0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ebx
call fcn.0043fd9a
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xfc]
push eax
push 4
call fcn.004260eb
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0xa4]
mov byte [ebp + 0x66], al
call fcn.00439cfd
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
jne 0x48dda0
push 0x4b3850
lea ecx, [ebp + 0x50]
call fcn.00448401
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x48e320
push 0x3c
lea ecx, [ebp]
call fcn.0043fdb8
mov eax, dword [ebp - 0x1c]
or esi, 0xffffffff
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], esi
mov dword [ebp + 0x40], eax
cmp word [eax], bx
mov edi, esi
je 0x48e318
lea eax, [ebp + 0x40]
push eax
call fcn.00439c95
mov eax, dword [ebp + 0x40]
mov ax, word [eax]
or ax, 0x20
cmp ax, 0x70
pop ecx
jne 0x48de04
lea eax, [ebp - 0x9c]
jmp 0x48de1e
cmp ax, 0x6c
jne 0x48de12
lea eax, [ebp - 0x94]
jmp 0x48de1e
cmp ax, 0x68
jne 0x48de36
lea eax, [ebp - 0xc8]
add dword [ebp + 0x40], 2
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.0044b3c3
mov eax, dword [ebp + 0x40]
cmp word [eax], bx
pop ecx
pop ecx
jne 0x48dde2
cmp dword [ebp - 0x98], ebx
jl 0x48de78
jg 0x48de48
cmp dword [ebp - 0x9c], ebx
jbe 0x48de78
push 1
call fcn.00413fa0
pop ecx
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
push edx
push eax
call fcn.0049a8f0
push ebx
push 0x64
push edx
push eax
call fcn.0049a840
mov cl, 0x14
call fcn.0049ab30
mov edi, eax
mov esi, edx
cmp esi, dword [ebp - 0x90]
jg 0x48de96
jl 0x48de8a
cmp edi, dword [ebp - 0x94]
jae 0x48de96
mov edi, dword [ebp - 0x94]
mov esi, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xc4]
cmp ecx, ebx
jl 0x48dec8
mov eax, dword [ebp - 0xc8]
jg 0x48deac
cmp eax, ebx
jbe 0x48dec8
cmp esi, ecx
jl 0x48deba
jg 0x48deb6
cmp edi, eax
jbe 0x48deba
mov edi, eax
mov esi, ecx
cmp esi, ebx
jg 0x48deda
jl 0x48dec4
cmp edi, ebx
ja 0x48dec8
mov edi, eax
mov esi, ecx
cmp esi, ebx
jl 0x48e318
jg 0x48deda
cmp edi, ebx
jb 0x48e318
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x48e318
cmp esi, ebx
jg 0x48def5
jl 0x48def0
cmp edi, ebx
ja 0x48def5
xor edi, edi
inc edi
xor esi, esi
push esi
push edi
push dword [ebp]
call fcn.0048ca22
add esp, 0xc
push 0x4ba7c8
lea ecx, [ebp]
call fcn.0043fe06
cmp byte [ebp + 0x66], bl
mov eax, str.imdisk___e
jne 0x48df1e
mov eax, str.imdisk___a
push eax
lea ecx, [ebp + 0x5c]
call fcn.00448401
mov eax, dword [ebp - 0xd4]
and eax, 1
xor ecx, ecx
or eax, ecx
je 0x48df43
push str.__o_awe
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
mov eax, dword [ebp]
cmp word [eax], bx
je 0x48df63
push str.___s
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
push dword [ebp]
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x48df83
push str.___m
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
push dword [ebp + 0x50]
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
mov eax, dword [ebp + 4]
cmp word [eax], bx
jne 0x48df97
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x48e022
push str.___p__
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x48dfc4
push str.__FS:
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
push dword [ebp + 4]
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x48dfe4
push str.__V:
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
push dword [ebp - 0xc]
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
push dword [ebp + 4]
push str.NTFS
call fcn.0043af97
test al, al
pop ecx
pop ecx
je 0x48e015
mov eax, dword [ebp - 0x3c]
mov ax, word [eax]
cmp ax, bx
je 0x48e015
cmp ax, 0x30
je 0x48e015
push 0x4b6eb4
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
push str.___Q__Y__X__
lea ecx, [ebp + 0x5c]
call fcn.0043fe06
mov eax, dword [ebp + 0x5c]
lea ecx, [ebp]
mov dword [ebp + 0x60], eax
call fcn.00439cfd
mov esi, 0x4c9c14
lea eax, [ebp + 0x48]
push eax
call fcn.00439c95
push 4
push dword [ebp + 0x48]
push str._gui
call fcn.0043af01
add esp, 0x10
test al, al
jne 0x48e327
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edi, eax
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x44], eax
lea eax, [ebp + 0x44]
push eax
sub edi, 0xc8
call fcn.0040549b
pop ecx
push dword [ebp + 0x44]
lea ecx, [ebp - 0x54]
call fcn.0044845d
mov eax, dword [ebp - 0x54]
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
jmp 0x48e0de
push 6
lea eax, [ebp + 0x54]
push eax
push str.__nbrd
call fcn.00441c39
add esp, 0xc
test al, al
jne 0x48e0db
push 6
lea eax, [ebp + 0x54]
push eax
push 0x4af73c
call fcn.00441c39
add esp, 0xc
test al, al
jne 0x48e0db
push 2
lea eax, [ebp + 0x54]
push eax
push 0x4b1e64
call fcn.00441c39
add esp, 0xc
test al, al
jne 0x48e0db
lea eax, [ebp + 0x54]
push eax
call fcn.00405444
pop ecx
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x48e08c
cmp dword [ebp - 0x18], ebx
jne 0x48e1f0
cmp dword [ebp + 0x24], ebx
jg 0x48e1f0
push ebx
push dword [ebp + 0x60]
lea ecx, [ebp - 0x19c]
call fcn.0044adac
cmp dword [ebp - 0x164], 1
jle 0x48e33e
mov eax, dword [ebp - 0x160]
mov dword [eax], str.imdisk
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x160]
push dword [ebp - 0x164]
call fcn.004260eb
add esp, 0xc
cmp byte [ebp + 0x37], bl
mov dword [ebp + 0x1c], eax
mov dword [ebp - 0x88], ebx
jle 0x48e246
cmp eax, 3
jne 0x48e246
cmp dword [ebp - 0x8c], ebx
jne 0x48e246
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x5b], 1
call fcn.00439cfd
lea ecx, [ebp - 0x54]
call fcn.00439cfd
lea ecx, [ebp + 0x28]
call fcn.00439cfd
lea ecx, [ebp - 0x28]
call fcn.00439cfd
lea ecx, [ebp + 0x3c]
call fcn.00439cfd
lea ecx, [ebp - 0x3c]
call fcn.00439cfd
lea ecx, [ebp - 0xc]
call fcn.00439cfd
lea ecx, [ebp + 0x50]
call fcn.00439cfd
lea ecx, [ebp + 4]
call fcn.00439cfd
lea ecx, [ebp - 0x1c]
call fcn.00439cfd
lea ecx, [ebp + 0x14]
call fcn.00439cfd
lea ecx, [ebp + 0x5c]
call fcn.00439cfd
lea ecx, [ebp - 0xa8]
call fcn.00439cfd
lea ecx, [ebp + 0x18]
call fcn.00439cfd
lea ecx, [ebp - 0x24]
call fcn.00439cfd
lea ecx, [ebp + 0x78]
call fcn.0048b005
lea ecx, [ebp - 0x70]
call fcn.00439cfd
jmp 0x48cd42
cmp dword [ebp - 0x8c], ebx
jne 0x48e246
push dword [ebp + 0x14]
lea ecx, [ebp - 0x50]
call fcn.00448399
push dword [ebp + 0x44]
lea ecx, [ebp - 0x50]
call fcn.0043fe06
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
mov ecx, dword [ebp + 0x7c]
mov dword [ebp - 0x88], 1
je 0x48e233
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x50]
push ecx
push ebx
call fcn.00409c61
jmp 0x48e23b
push dword [ebp - 0x50]
call fcn.00402e40
lea ecx, [ebp - 0x50]
mov dword [ebp + 0x1c], eax
call fcn.00439cfd
mov ecx, dword [ebp - 0xe0]
xor eax, eax
or ecx, eax
je 0x48e345
cmp dword [ebp + 0x1c], 3
jne 0x48e345
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, edi
cmp eax, 0x1388
jae 0x48e345
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 0xc8
call fcn.00414c28
mov esi, 0x4c9c14
jmp 0x48e0e3
mov edi, dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
cmp dword [0x4c9c74], ebx
jle 0x48e2b2
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.00414c28
jmp 0x48e292
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.00412403
push esi
call edi
jmp 0x48e419
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, ebx
jne 0x48e2d1
xor eax, eax
inc eax
mov dword [ebp + 0x1c], eax
jmp 0x48e30e
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
lea ecx, [ebp - 0x40]
call fcn.00439cfd
lea ecx, [ebp - 0x30]
call fcn.00439cfd
lea ecx, [ebp - 0x2c]
call fcn.00439cfd
mov ebx, 0xb7
jmp 0x48e396
lea ecx, [ebp - 0x30]
mov dword [ebp + 0x1c], 1
call fcn.00439cfd
lea ecx, [ebp - 0x2c]
call fcn.00439cfd
jmp 0x48e345
lea ecx, [ebp]
call fcn.00439cfd
mov ebx, 0x80070057
jmp 0x48e396
mov ecx, dword [ebp + 0x7c]
push 0xffffffffffffff9c
push 0x4ae9fc
push ebx
push str.imdisk.cpl_
call fcn.00481dd3
jmp 0x48e396
mov dword [ebp + 0x1c], 0x80070057
mov eax, dword [ebp - 0x15c]
cmp eax, ebx
je 0x48e360
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
mov dword [ebp - 0x15c], ebx
call fcn.00439cfd
mov edx, dword [ebp + 0x18]
cmp word [edx], bx
je 0x48e393
cmp dword [ebp - 0x88], ebx
jne 0x48e393
mov ecx, dword [ebp - 0x24]
mov word [ebp - 0x218], bx
cmp word [ecx], 0x2a
lea eax, [ebp - 0x218]
jne 0x48e389
lea eax, [ecx + 2]
mov ecx, dword [ebp + 0x7c]
push eax
push edx
call fcn.0043f62b
mov ebx, dword [ebp + 0x1c]
lea ecx, [ebp - 0x14]
call fcn.00439cfd
lea ecx, [ebp - 0x54]
call fcn.00439cfd
lea ecx, [ebp + 0x28]
call fcn.00439cfd
lea ecx, [ebp - 0x28]
call fcn.00439cfd
lea ecx, [ebp + 0x3c]
call fcn.00439cfd
lea ecx, [ebp - 0x3c]
call fcn.00439cfd
lea ecx, [ebp - 0xc]
call fcn.00439cfd
lea ecx, [ebp + 0x50]
call fcn.00439cfd
lea ecx, [ebp + 4]
call fcn.00439cfd
lea ecx, [ebp - 0x1c]
call fcn.00439cfd
lea ecx, [ebp + 0x14]
call fcn.00439cfd
lea ecx, [ebp + 0x5c]
call fcn.00439cfd
lea ecx, [ebp - 0xa8]
call fcn.00439cfd
lea ecx, [ebp + 0x18]
call fcn.00439cfd
lea ecx, [ebp - 0x24]
call fcn.00439cfd
lea ecx, [ebp + 0x78]
call fcn.0048b005
lea ecx, [ebp - 0x70]
call fcn.00439cfd
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x70
leave
ret