Function at 0x100a116f
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x288
push ebx
fldz
push esi
fstp qword [ebp - 0x19c]
push edi
push 0x26
xor eax, eax
pop ecx
lea edi, [ebp - 0x194]
mov byte [ebp + 0x5b], 1
rep stosd dword es:[edi], eax
xor ebx, ebx
mov esi, 0x100e3d7c
push dword [ebp + 0x78]
lea ecx, [ebp - 0x70]
mov byte [ebp + 0x37], bl
call fcn.100501eb
mov eax, dword [ebp - 0x70]
mov dword [ebp + 0x60], eax
add eax, 0xc
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x48], eax
lea eax, [ebp + 0x48]
push eax
call fcn.10005b74
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.1003f9c4
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
pop ecx
pop ecx
lea ecx, [ebp + 0xf]
sete byte [ebp + 0x67]
call fcn.10013798
push 6
push dword [ebp - 0x20]
push str.__free
call fcn.10040d9e
add esp, 0xc
test al, al
jne 0x100a26f7
lea ecx, [ebp + 0x78]
call fcn.1009e94e
push ebx
lea ecx, [ebp + 0xf]
call fcn.1001379b
lea ecx, [ebp + 0xf]
call fcn.1001378c
neg eax
sbb eax, eax
inc eax
cmp dword [0x100e1850], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x24], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
jge 0x100a12d7
mov eax, dword [0x100e30a4]
cmp eax, ebx
mov dword [0x100e1850], ebx
mov dword [ebp + 0x54], ebx
mov dword [ebp + 0x44], ebx
je 0x100a12ab
lea ecx, [ebp + 0x44]
push ecx
lea ecx, [ebp + 0x54]
push ecx
call eax
cmp dword [ebp + 0x44], ebx
jbe 0x100a12ab
mov eax, dword [ebp + 0x54]
cmp eax, 0x202
jb 0x100a1277
mov dword [0x100e1850], 0x38
jmp 0x100a12ab
cmp eax, 0x184
jb 0x100a128a
mov dword [0x100e1850], 8
jmp 0x100a12ab
cmp eax, 0x160
jb 0x100a129d
mov dword [0x100e1850], 2
jmp 0x100a12ab
cmp eax, ebx
jbe 0x100a12ab
mov dword [0x100e1850], 1
cmp byte [0x100e2e70], bl
je 0x100a12d7
push dword [0x100e30a4]
push dword [0x100e1850]
push dword [ebp + 0x44]
push dword [ebp + 0x54]
push str.DBG:_IMD:_0x_X_0x_X_0x_X__0x_p_r_n
push 0x100e3108
call fcn.10011029
add esp, 0x18
push 3
push dword [ebp - 0x20]
push 0x100cfb24
call fcn.10040d9e
add esp, 0xc
test al, al
je 0x100a12f4
mov dword [ebp + 0x24], 0xfff00000
push 5
lea eax, [ebp - 0x20]
push eax
push str.__ins
mov byte [ebp + 0x6f], bl
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a1314
mov byte [ebp + 0x6f], 5
jmp 0x100a132f
push 6
lea eax, [ebp - 0x20]
push eax
push str.__fins
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a132f
mov byte [ebp + 0x6f], 6
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.10046141
lea ecx, [ebp + 0x18]
call fcn.10046123
lea ecx, [ebp - 0xa8]
call fcn.10046123
lea ecx, [ebp + 0x5c]
call fcn.10046123
lea ecx, [ebp - 0x1c]
mov dword [ebp + 0x14], ebx
call fcn.10046123
lea ecx, [ebp + 4]
call fcn.10046123
lea ecx, [ebp + 0x50]
call fcn.10046123
lea ecx, [ebp - 0xc]
call fcn.10046123
lea ecx, [ebp - 0x3c]
call fcn.10046123
lea ecx, [ebp + 0x3c]
call fcn.10046123
lea ecx, [ebp - 0x28]
call fcn.10046123
lea ecx, [ebp + 0x28]
call fcn.10046123
or eax, 0xffffffff
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov eax, 0x100c6a64
push 0xc8
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
call fcn.10046141
cmp byte [ebp + 0x67], bl
mov eax, dword [ebp + 0x48]
mov cx, word [eax]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0xd8], eax
mov word [ebp - 0x7c], cx
mov dword [ebp + 0x30], eax
je 0x100a1522
add dword [ebp + 0x68], 2
mov word [eax], bx
mov eax, dword [ebp + 0x68]
mov edx, eax
jmp 0x100a1417
cmp cx, 0x2a
je 0x100a141f
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, bx
jne 0x100a140c
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x18]
call fcn.10046247
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
je 0x100a1442
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.10046168
cmp word [ebp - 0x7c], bx
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x30], eax
je 0x100a1454
add eax, 2
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
call fcn.1003f9c4
pop ecx
mov edi, 0x100c6a64
push 4
lea eax, [ebp + 0x30]
push eax
push str._mem
call fcn.1004820a
add esp, 0xc
test al, al
jne 0x100a1491
push 2
lea eax, [ebp + 0x30]
push eax
push 0x100cbca4
call fcn.1004820a
add esp, 0xc
test al, al
je 0x100a1496
mov dword [ebp + 0x44], edi
jmp 0x100a1463
push 3
lea eax, [ebp + 0x30]
push eax
push 0x100d0220
call fcn.1004820a
add esp, 0xc
test al, al
je 0x100a14b6
mov dword [ebp + 0x44], 0x100d400c
jmp 0x100a1463
push 4
lea eax, [ebp + 0x30]
push eax
push str._map
call fcn.1004820a
add esp, 0xc
test al, al
je 0x100a14d9
mov dword [ebp - 0xe0], 1
jmp 0x100a1463
push 4
lea eax, [ebp + 0x30]
push eax
push str._exe
call fcn.1004820a
add esp, 0xc
test al, al
je 0x100a14fc
mov dword [ebp + 0x24], 1
jmp 0x100a1463
push 5
lea eax, [ebp + 0x30]
push eax
push str._nexe
call fcn.1004820a
add esp, 0xc
test al, al
je 0x100a151f
mov dword [ebp + 0x24], 0xfff00000
jmp 0x100a1463
mov edi, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x7c]
push 0x100d3fe4
push str.ERRORLEVEL
call fcn.100457c2
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
push 0xffffffffffffffff
je 0x100a1567
push 0x100d3fe0
call fcn.100461de
push dword [ebp + 0x18]
lea ecx, [ebp + 0x14]
call fcn.1004618f
push str.Imdisk
lea ecx, [ebp + 0x14]
call fcn.1004618f
jmp 0x100a1571
push str._Imdisk
call fcn.100461de
push 9
push edi
push str.__version
call fcn.10040d9e
push 2
push edi
push 0x100d3fb0
mov byte [ebp + 0x66], al
call fcn.10040d9e
push 2
push edi
push 0x100d3fac
mov byte [ebp + 0xe], al
call fcn.10040d9e
push 3
push edi
push 0x100cfb24
mov byte [ebp + 0x13], al
call fcn.10040d9e
add esp, 0x30
cmp byte [ebp + 0x66], bl
jne 0x100a15c8
cmp byte [ebp + 0xe], bl
jne 0x100a15c8
cmp byte [ebp + 0x13], bl
jne 0x100a15c8
cmp al, bl
jne 0x100a15c8
mov cl, 1
jmp 0x100a15ca
xor cl, cl
cmp dword [ebp - 0x18], ebx
jne 0x100a15e1
mov eax, dword [0x100e1850]
cmp eax, ebx
jle 0x100a15e1
push 2
pop edi
cmp eax, edi
jge 0x100a15ed
jmp 0x100a15e4
push 2
pop edi
cmp cl, bl
jne 0x100a15f7
cmp byte [ebp + 0x6f], bl
jne 0x100a15f7
cmp byte [ebp + 0x6f], 6
jl 0x100a1784
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x10], 0x100d3fa4
jne 0x100a164d
lea ecx, [ebp - 0x74]
call fcn.10046123
mov eax, 0x100d3f9c
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xe8]
push eax
push edi
call fcn.10026d3c
mov eax, dword [ebp - 0x74]
add esp, 0xc
cmp word [eax], bx
je 0x100a1645
cmp word [eax + 2], bx
je 0x100a1645
mov dword [ebp - 0x10], 0x100d3f94
lea ecx, [ebp - 0x74]
call fcn.1003f96c
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
sub dword [0x100e3dd8], 1
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100e3dd8], ebx
jle 0x100a1684
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.10011621
jmp 0x100a1664
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.1001379b
push esi
call edi
movsx ax, byte [ebp + 0x6f]
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
mov word [ebp - 0xbe], 0x20
mov word [ebp - 0xbc], bx
add eax, 0x30
mov word [ebp - 0xc0], ax
call fcn.1001379b
push str._._28:INDATA
lea ecx, [ebp + 8]
call fcn.100501eb
cmp dword [ebp - 0x18], ebx
mov eax, 0x100d3f94
jne 0x100a16d6
mov eax, 0x100d3fa4
push eax
lea ecx, [ebp + 8]
call fcn.1004618f
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.1004618f
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp + 8]
call fcn.1004618f
push dword [ebp + 0x48]
lea ecx, [ebp + 8]
call fcn.1004618f
cmp byte [0x100e2e70], bl
je 0x100a1721
push dword [ebp + 8]
push str.Install_IMD__s__r_n
push 0x100e3108
call fcn.10011029
add esp, 0xc
push dword [ebp + 8]
mov ecx, dword [ebp + 0x7c]
call fcn.1002335d
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x100e3dd8], 1
push esi
mov dword [0x100e1850], 0xffffffc0
call edi
push ebx
lea ecx, [ebp + 0xf]
call fcn.1001379b
lea ecx, [ebp + 0xf]
call fcn.1001378c
neg eax
sbb eax, eax
inc eax
push esi
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [ebp - 0x18], ebx
jne 0x100a1776
mov dword [0x100e1850], 0x38
push esi
call edi
lea ecx, [ebp + 8]
call fcn.1003f96c
push 2
pop edi
cmp byte [ebp + 0x67], bl
je 0x100a2025
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x4c], eax
jmp 0x100a17b8
push edi
lea eax, [ebp - 0x4c]
push eax
push 0x100cbca4
call fcn.10048195
add esp, 0xc
test al, al
jne 0x100a17bf
lea eax, [ebp - 0x4c]
push eax
call fcn.10008e60
mov eax, dword [ebp - 0x4c]
pop ecx
cmp word [eax], bx
jne 0x100a1795
jmp 0x100a17c5
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
jne 0x100a2013
add dword [ebp + 0x68], edi
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
cmp word [eax], 0x40
mov byte [ebp + 0x67], bl
jne 0x100a17f4
add dword [ebp + 0x68], edi
mov byte [ebp + 0x67], 1
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.1004bbf7
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x100a180e
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.1004bbf7
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x100a1828
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.1004bbf7
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x100a1844
inc edi
inc edi
mov dword [ebp + 0x68], edi
mov al, byte [ebp - 0x48]
and al, 1
mov byte [ebp + 0x6f], al
push 0x2a
lea eax, [ebp + 0x68]
call fcn.100a1095
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x28]
call fcn.10046247
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x100a1874
add dword [ebp + 0x68], 2
mov edi, dword [ebp + 0x68]
push 0x2a
lea eax, [ebp + 0x68]
call fcn.100a1095
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x3c]
call fcn.10046247
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x100a189f
add dword [ebp + 0x68], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.1004bbf7
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x100a18bb
inc edi
inc edi
mov dword [ebp + 0x68], edi
push 0x2a
lea eax, [ebp + 0x68]
call fcn.100a1095
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.10046247
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.1004bbf7
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x100a18f2
add dword [ebp + 0x68], 2
cmp byte [ebp + 0x67], bl
mov edx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
je 0x100a1937
add eax, edx
adc ecx, edi
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0x58], ebx
jl 0x100a1959
jg 0x100a1943
cmp dword [ebp - 0x5c], ebx
jbe 0x100a1959
cmp dword [ebp - 0x34], ebx
jg 0x100a1959
jl 0x100a194f
cmp dword [ebp - 0x38], ebx
ja 0x100a1959
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], ebx
push 0x318
lea ecx, [ebp - 0x2c]
call fcn.10046141
mov eax, dword [ebp - 0x2c]
lea esi, [eax + 0x6a]
mov dword [ebp - 8], eax
lea eax, [esi + 0x6a]
lea edi, [eax + 0x6a]
push ebx
mov word [edi], bx
push 0x200
mov word [eax], bx
push dword [ebp - 0x60]
lea ecx, [edi + 0x6a]
push dword [ebp - 0x64]
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 4], ecx
call fcn.100b4150
push edx
push eax
push dword [ebp - 8]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
call fcn.100a0e43
add esp, 0xc
push ebx
push 0x200
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.100b4150
push edx
push eax
push esi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
call fcn.100a0e43
add esp, 0xc
mov word [edi], bx
cmp dword [ebp - 0x58], ebx
jl 0x100a19f1
jg 0x100a19e2
cmp dword [ebp - 0x5c], ebx
jbe 0x100a19f1
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push edi
call fcn.100a0e43
add esp, 0xc
mov ecx, dword [ebp + 0x48]
xor eax, eax
cmp word [ebp - 0x7c], bx
setne al
lea eax, [ecx + eax*2]
mov dword [ebp + 0x38], eax
lea eax, [ebp + 0x38]
push eax
call fcn.1003f9c4
push 4
push dword [ebp + 0x38]
mov dword [ebp - 0x78], ebx
push str.__w:
call fcn.10040df5
add esp, 0x10
test al, al
je 0x100a1a38
add dword [ebp + 0x38], 8
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.10053a89
pop ecx
pop ecx
push 0xffffffffffffffff
lea eax, [ebp + 0x38]
push eax
push 0x100d3f44
call fcn.10048195
add esp, 0xc
cmp dword [0x100e1850], 1
jl 0x100a1a60
cmp dword [ebp + 0x24], ebx
jne 0x100a1a60
mov dword [ebp + 0x24], 0xfff00000
mov eax, dword [ebp + 0x38]
mov edi, 0x100c6a64
mov byte [ebp + 0x66], bl
mov byte [ebp + 0x67], bl
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x80], edi
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x2c], ebx
jmp 0x100a1aeb
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x100d033c
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a1a9c
mov dword [ebp + 0x2c], 1
jmp 0x100a1ae8
cmp dword [ebp + 0x2c], ebx
je 0x100a1adb
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x100d3f40
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a1abe
mov byte [ebp + 0x66], 1
jmp 0x100a1ae8
push 3
lea eax, [ebp + 0x4c]
push eax
push 0x100d3f3c
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a1adb
mov byte [ebp + 0x67], 1
jmp 0x100a1ae8
lea eax, [ebp + 0x4c]
push eax
call fcn.10008e60
pop ecx
mov dword [ebp + 0x2c], ebx
mov eax, dword [ebp + 0x4c]
cmp word [eax], bx
jne 0x100a1a7c
mov eax, dword [0x100e1850]
test al, 0x10
je 0x100a1b05
cmp byte [ebp + 0x67], bl
jne 0x100a1b05
mov dword [ebp - 0x10], str._o_par
mov dword [ebp + 0x4c], eax
and dword [ebp + 0x4c], 0x20
je 0x100a1b15
mov dword [ebp - 0x80], str._o_shared
cmp dword [ebp + 0x4c], ebx
je 0x100a1b1d
mov byte [ebp + 0x5b], bl
mov ecx, dword [ebp - 0x48]
mov eax, ecx
and eax, 0x200
or eax, ebx
jne 0x100a1b47
cmp dword [ebp + 0x4c], ebx
jne 0x100a1b47
cmp byte [ebp + 0x6f], bl
je 0x100a1b4a
and ecx, 0x100
mov eax, ecx
or eax, ebx
je 0x100a1b4a
mov byte [ebp + 0x5b], 1
jmp 0x100a1b4a
mov byte [ebp + 0x5b], bl
cmp dword [0x100e1850], 8
jl 0x100a1c5b
cmp byte [ebp + 0x6f], bl
je 0x100a1b65
cmp byte [ebp + 0x5b], bl
jne 0x100a1c5b
cmp byte [ebp + 0x6f], bl
mov dword [ebp + 0x2c], edi
jne 0x100a1b7b
cmp byte [ebp + 0x66], bl
jne 0x100a1b84
mov dword [ebp + 0x2c], str._o_ro
jmp 0x100a1b84
cmp dword [ebp + 0x4c], ebx
jne 0x100a1b84
mov byte [ebp + 0x37], 1
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x48]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + edi + 0x800]
push eax
lea ecx, [ebp + 0x5c]
call fcn.10046168
push dword [ebp + 0x28]
push esi
push dword [ebp - 8]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push dword [ebp + 0x2c]
push str.imdisk__a___s__s__s___b__sb__s__sb__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp + 0x38]
add esp, 0x20
mov dword [ebp + 0x20], eax
cmp word [eax], bx
je 0x100a1c47
push 2
lea eax, [ebp + 0x20]
push eax
push 0x100d3eb0
call fcn.10040d4d
add esp, 0xc
test al, al
jne 0x100a1c0d
push 2
lea eax, [ebp + 0x20]
push eax
push 0x100d3ea8
call fcn.10040d4d
add esp, 0xc
test al, al
jne 0x100a1c0d
lea eax, [ebp + 0x20]
push eax
call fcn.10008e60
jmp 0x100a1c3b
mov ecx, dword [ebp + 0x20]
xor eax, eax
jmp 0x100a1c2a
call fcn.10002df6
test al, al
jne 0x100a1c32
mov word [ecx], 0x20
mov ecx, dword [ebp + 0x20]
inc ecx
inc ecx
mov dword [ebp + 0x20], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x100a1c14
lea eax, [ebp + 0x20]
push eax
call fcn.1003f9c4
mov eax, dword [ebp + 0x20]
cmp word [eax], bx
pop ecx
jne 0x100a1bd4
mov eax, dword [ebp + 0x38]
push eax
lea ecx, [ebp + 0x5c]
call fcn.1004618f
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
jmp 0x100a1ff3
cmp byte [ebp + 0x6f], bl
je 0x100a1c8e
push ebx
push 0xa0000080
push 3
push ebx
push 7
push 0xc0000000
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x100a272f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0x4c], edi
jmp 0x100a1c95
mov dword [ebp + 0x4c], 0x100d3ea0
cmp dword [ebp - 0x34], ebx
jl 0x100a1cb3
jg 0x100a1ca1
cmp dword [ebp - 0x38], ebx
jbe 0x100a1cb3
push dword [ebp - 0x34]
lea eax, [esi + 0x6a]
push dword [ebp - 0x38]
push eax
call fcn.100a0e43
add esp, 0xc
push 0x5c
push ebx
push dword [ebp + 0x28]
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
cmp esi, ebx
jne 0x100a1cca
mov esi, dword [ebp + 0x28]
jmp 0x100a1ccc
inc esi
inc esi
mov eax, dword [ebp + 0x3c]
cmp word [eax], bx
jne 0x100a1d03
push 0x800
lea ecx, [ebp + 0x3c]
call fcn.10046168
mov edi, dword [ebp + 0x3c]
call fcn.1004217a
push eax
push dword [ebp - 0xa0]
push dword [ebp - 8]
push esi
push str._s_s_s__u
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x3c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
mov eax, 0x400
cmp esi, eax
jle 0x100a1d23
mov esi, eax
mov eax, dword [ebp + 0x3c]
mov word [eax + 0x800], bx
push str.Global_
lea ecx, [ebp - 0x14]
call fcn.100502c8
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x14]
call fcn.1004618f
push str._devio_Ack
lea ecx, [ebp - 0x14]
call fcn.1004618f
mov eax, dword [ebp - 4]
mov word [eax], bx
mov eax, dword [ebp - 0x48]
and eax, 0x30
or eax, ebx
mov word [ebp - 0x1d8], bx
jne 0x100a1d76
cmp byte [ebp + 0x6f], bl
je 0x100a1e2e
mov eax, dword [ebp - 0x48]
and eax, 0x40
or eax, ebx
jne 0x100a1e2e
mov edi, dword [ebp - 4]
push 0x10
push str.__kill:
push edi
call fcn.100144ff
add esp, 0xc
push 0x104
add edi, 0x27e
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp - 4]
push 0x104
add eax, 0xe
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, dword [ebp + 0x54]
cmp word [edi], 0x22
mov dword [ebp - 0x84], eax
mov dword [ebp + 0x2c], edi
jne 0x100a1de2
add dword [ebp + 0x54], 2
jmp 0x100a1dd8
cmp ax, 0x22
je 0x100a1def
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x100a1dd0
jmp 0x100a1def
lea eax, [ebp + 0x2c]
push eax
call fcn.10005b74
mov edi, dword [ebp + 0x2c]
pop ecx
mov ax, word [edi]
mov word [ebp + 0x2c], ax
mov word [edi], bx
mov eax, dword [ebp - 0x48]
and eax, 0x20
or eax, ebx
mov eax, str._LOAD_25_poweroff
jne 0x100a1e0d
mov eax, str._RAMD_ImdiskV__D__m__s_
push dword [ebp + 0x54]
mov ecx, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 4]
lea eax, [eax + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ax, word [ebp + 0x2c]
add esp, 0xc
mov word [edi], ax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov cl, 1
call fcn.100b4440
and eax, 3
je 0x100a1e56
push eax
lea eax, [ebp - 0x1d8]
push str._nrc:_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
mov edi, 0x200
push edi
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.100b4150
push edx
push eax
push dword [ebp - 8]
call fcn.100a0e43
add esp, 0xc
push ebx
push edi
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.100b4150
mov edi, dword [ebp - 0xa0]
push edx
push eax
push edi
call fcn.100a0e43
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push 0x100ca904
push str.__ImdMapPid
call fcn.100457c2
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x28]
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x30]
lea eax, [eax + esi + 0x940]
push eax
call fcn.10046141
push str.Global_
lea ecx, [ebp - 0x40]
call fcn.100501eb
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x40]
call fcn.1004618f
push dword [ebp - 0x40]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
cmp eax, ebx
jne 0x100a2741
lea ecx, [ebp - 0x40]
call fcn.1003f96c
push dword [ebp - 0xcc]
lea eax, [edi + 0x6a]
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x1d8]
push edi
push dword [ebp + 0x28]
push dword [ebp + 0x3c]
push dword [ebp + 0x4c]
push eax
push dword [ebp - 0x28]
push dword [ebp - 4]
push dword [ebp + 0x44]
push str.EXEC___pid:__ImdMapPid____exe:_s10INDATA___nfb___MyName0____s__w:60000__s__s__s_shm:_s___s__s__s__s__s
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
add esi, 0x800
push esi
lea ecx, [ebp + 0x5c]
call fcn.10046168
mov eax, dword [ebp - 8]
mov word [eax], bx
mov word [edi], bx
push dword [ebp + 0x3c]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push 0x100c6a64
push str.imdisk__a__t_proxy__s__s__s__o_shm__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x38]
lea ecx, [ebp + 0x5c]
call fcn.1004618f
push dword [ebp - 0x14]
mov eax, dword [ebp + 0x5c]
push ebx
push ebx
push ebx
mov dword [ebp + 0x60], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push ebx
push dword [ebp - 0x30]
mov esi, eax
call fcn.10034bed
push 0xea60
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
jne 0x100a276a
push 0x32
pop esi
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
jne 0x100a1fcf
cmp dword [ebp - 0x78], ebx
jle 0x100a1feb
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push dword [ebp - 0x78]
call fcn.10011621
lea ecx, [ebp - 0x30]
call fcn.1003f96c
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x48], eax
lea ecx, [ebp - 0x2c]
mov word [eax], bx
mov dword [ebp - 0xe0], 1
call fcn.1003f96c
mov esi, 0x100e3d7c
mov ax, word [ebp - 0x7c]
mov ecx, dword [ebp - 0xd8]
mov word [ecx], ax
jmp 0x100a24a0
push 4
lea eax, [ebp + 0x48]
push eax
push str._exe
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a2043
mov dword [ebp + 0x24], 1
push 5
lea eax, [ebp + 0x48]
push eax
push str._nexe
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a2061
mov dword [ebp + 0x24], 0xfff00000
push 6
lea eax, [ebp + 0x48]
push eax
push str._nexe1
call fcn.10048195
add esp, 0xc
test al, al
je 0x100a2089
mov dword [ebp + 0x24], 0xfff00000
mov dword [ebp - 0x8c], 1
push 0x2c
pop esi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.1004907a
mov eax, dword [ebp - 0x1c]
mov word [eax], bx
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x100a2156
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.1004907a
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x100a2156
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.1004907a
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x100a2156
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.1004907a
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x100a2156
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.1004907a
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x100a2156
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.1004907a
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x100a2156
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.10049277
add esp, 0xc
push 6
lea ecx, [ebp + 0x50]
mov byte [ebp + 0x66], bl
call fcn.10046168
mov eax, dword [ebp + 0x50]
mov word [eax + 2], 0x3a
mov eax, dword [ebp + 0x50]
mov word [eax + 4], bx
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x100a21f2
push eax
call fcn.100b36d9
test eax, eax
pop ecx
je 0x100a21ea
mov eax, dword [ebp + 0x50]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xfc], str.imdisk
mov dword [ebp - 0xf8], 0x100d3f9c
mov dword [ebp - 0xf4], 0x100d3c74
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ebx
call fcn.10046123
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xfc]
push eax
push 4
call fcn.10026d3c
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0xa4]
mov byte [ebp + 0x66], al
call fcn.1003f96c
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
jne 0x100a220b
push 0x100cb6f0
lea ecx, [ebp + 0x50]
call fcn.1005026c
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x100a278b
push 0x3c
lea ecx, [ebp]
call fcn.10046141
mov eax, dword [ebp - 0x1c]
or esi, 0xffffffff
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], esi
mov dword [ebp + 0x40], eax
cmp word [eax], bx
mov edi, esi
je 0x100a2783
lea eax, [ebp + 0x40]
push eax
call fcn.1003f9c4
mov eax, dword [ebp + 0x40]
mov ax, word [eax]
or ax, 0x20
cmp ax, 0x70
pop ecx
jne 0x100a226f
lea eax, [ebp - 0x9c]
jmp 0x100a2289
cmp ax, 0x6c
jne 0x100a227d
lea eax, [ebp - 0x94]
jmp 0x100a2289
cmp ax, 0x68
jne 0x100a22a1
lea eax, [ebp - 0xc8]
add dword [ebp + 0x40], 2
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.100539de
mov eax, dword [ebp + 0x40]
cmp word [eax], bx
pop ecx
pop ecx
jne 0x100a224d
cmp dword [ebp - 0x98], ebx
jl 0x100a22e3
jg 0x100a22b3
cmp dword [ebp - 0x9c], ebx
jbe 0x100a22e3
push 1
call fcn.10015433
pop ecx
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
push edx
push eax
call fcn.100b4200
push ebx
push 0x64
push edx
push eax
call fcn.100b4150
mov cl, 0x14
call fcn.100b4440
mov edi, eax
mov esi, edx
cmp esi, dword [ebp - 0x90]
jg 0x100a2301
jl 0x100a22f5
cmp edi, dword [ebp - 0x94]
jae 0x100a2301
mov edi, dword [ebp - 0x94]
mov esi, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xc4]
cmp ecx, ebx
jl 0x100a2333
mov eax, dword [ebp - 0xc8]
jg 0x100a2317
cmp eax, ebx
jbe 0x100a2333
cmp esi, ecx
jl 0x100a2325
jg 0x100a2321
cmp edi, eax
jbe 0x100a2325
mov edi, eax
mov esi, ecx
cmp esi, ebx
jg 0x100a2345
jl 0x100a232f
cmp edi, ebx
ja 0x100a2333
mov edi, eax
mov esi, ecx
cmp esi, ebx
jl 0x100a2783
jg 0x100a2345
cmp edi, ebx
jb 0x100a2783
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x100a2783
cmp esi, ebx
jg 0x100a2360
jl 0x100a235b
cmp edi, ebx
ja 0x100a2360
xor edi, edi
inc edi
xor esi, esi
push esi
push edi
push dword [ebp]
call fcn.100a0e5d
add esp, 0xc
push 0x100d3c6c
lea ecx, [ebp]
call fcn.1004618f
cmp byte [ebp + 0x66], bl
mov eax, str.imdisk___e
jne 0x100a2389
mov eax, str.imdisk___a
push eax
lea ecx, [ebp + 0x5c]
call fcn.1005026c
mov eax, dword [ebp - 0xd4]
and eax, 1
xor ecx, ecx
or eax, ecx
je 0x100a23ae
push str.__o_awe
lea ecx, [ebp + 0x5c]
call fcn.1004618f
mov eax, dword [ebp]
cmp word [eax], bx
je 0x100a23ce
push 0x100d3c1c
lea ecx, [ebp + 0x5c]
call fcn.1004618f
push dword [ebp]
lea ecx, [ebp + 0x5c]
call fcn.1004618f
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x100a23ee
push 0x100d3c10
lea ecx, [ebp + 0x5c]
call fcn.1004618f
push dword [ebp + 0x50]
lea ecx, [ebp + 0x5c]
call fcn.1004618f
mov eax, dword [ebp + 4]
cmp word [eax], bx
jne 0x100a2402
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x100a248d
push str.___p__
lea ecx, [ebp + 0x5c]
call fcn.1004618f
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x100a242f
push str.__FS:
lea ecx, [ebp + 0x5c]
call fcn.1004618f
push dword [ebp + 4]
lea ecx, [ebp + 0x5c]
call fcn.1004618f
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x100a244f
push str.__V:
lea ecx, [ebp + 0x5c]
call fcn.1004618f
push dword [ebp - 0xc]
lea ecx, [ebp + 0x5c]
call fcn.1004618f
push dword [ebp + 4]
push 0x100cfddc
call fcn.10040e34
test al, al
pop ecx
pop ecx
je 0x100a2480
mov eax, dword [ebp - 0x3c]
mov ax, word [eax]
cmp ax, bx
je 0x100a2480
cmp ax, 0x30
je 0x100a2480
push 0x100cfdd4
lea ecx, [ebp + 0x5c]
call fcn.1004618f
push str.___Q__Y__X__
lea ecx, [ebp + 0x5c]
call fcn.1004618f
mov eax, dword [ebp + 0x5c]
lea ecx, [ebp]
mov dword [ebp + 0x60], eax
call fcn.1003f96c
mov esi, 0x100e3d7c
lea eax, [ebp + 0x48]
push eax
call fcn.1003f9c4
push 4
push dword [ebp + 0x48]
push str._gui
call fcn.10040d9e
add esp, 0x10
test al, al
jne 0x100a2792
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x44], eax
lea eax, [ebp + 0x44]
push eax
sub edi, 0xc8
call fcn.10005b74
pop ecx
push dword [ebp + 0x44]
lea ecx, [ebp - 0x54]
call fcn.100502c8
mov eax, dword [ebp - 0x54]
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
jmp 0x100a2549
push 6
lea eax, [ebp + 0x54]
push eax
push str.__nbrd
call fcn.1004820a
add esp, 0xc
test al, al
jne 0x100a2546
push 6
lea eax, [ebp + 0x54]
push eax
push 0x100c79f4
call fcn.1004820a
add esp, 0xc
test al, al
jne 0x100a2546
push 2
lea eax, [ebp + 0x54]
push eax
push 0x100cbc8c
call fcn.1004820a
add esp, 0xc
test al, al
jne 0x100a2546
lea eax, [ebp + 0x54]
push eax
call fcn.10008e60
pop ecx
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x100a24f7
cmp dword [ebp - 0x18], ebx
jne 0x100a265b
cmp dword [ebp + 0x24], ebx
jg 0x100a265b
push ebx
push dword [ebp + 0x60]
lea ecx, [ebp - 0x19c]
call fcn.10053203
cmp dword [ebp - 0x164], 1
jle 0x100a27a9
mov eax, dword [ebp - 0x160]
mov dword [eax], str.imdisk
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x160]
push dword [ebp - 0x164]
call fcn.10026d3c
add esp, 0xc
cmp byte [ebp + 0x37], bl
mov dword [ebp + 0x1c], eax
mov dword [ebp - 0x88], ebx
jle 0x100a26b1
cmp eax, 3
jne 0x100a26b1
cmp dword [ebp - 0x8c], ebx
jne 0x100a26b1
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x5b], 1
call fcn.1003f96c
lea ecx, [ebp - 0x54]
call fcn.1003f96c
lea ecx, [ebp + 0x28]
call fcn.1003f96c
lea ecx, [ebp - 0x28]
call fcn.1003f96c
lea ecx, [ebp + 0x3c]
call fcn.1003f96c
lea ecx, [ebp - 0x3c]
call fcn.1003f96c
lea ecx, [ebp - 0xc]
call fcn.1003f96c
lea ecx, [ebp + 0x50]
call fcn.1003f96c
lea ecx, [ebp + 4]
call fcn.1003f96c
lea ecx, [ebp - 0x1c]
call fcn.1003f96c
lea ecx, [ebp + 0x14]
call fcn.1003f96c
lea ecx, [ebp + 0x5c]
call fcn.1003f96c
lea ecx, [ebp - 0xa8]
call fcn.1003f96c
lea ecx, [ebp + 0x18]
call fcn.1003f96c
lea ecx, [ebp - 0x24]
call fcn.1003f96c
lea ecx, [ebp + 0x78]
call fcn.1009e971
lea ecx, [ebp - 0x70]
call fcn.1003f96c
jmp 0x100a119d
cmp dword [ebp - 0x8c], ebx
jne 0x100a26b1
push dword [ebp + 0x14]
lea ecx, [ebp - 0x50]
call fcn.100501eb
push dword [ebp + 0x44]
lea ecx, [ebp - 0x50]
call fcn.1004618f
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
mov ecx, dword [ebp + 0x7c]
mov dword [ebp - 0x88], 1
je 0x100a269e
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x50]
push ecx
push ebx
call fcn.1000a5c9
jmp 0x100a26a6
push dword [ebp - 0x50]
call fcn.10002f35
lea ecx, [ebp - 0x50]
mov dword [ebp + 0x1c], eax
call fcn.1003f96c
mov ecx, dword [ebp - 0xe0]
xor eax, eax
or ecx, eax
je 0x100a27b0
cmp dword [ebp + 0x1c], 3
jne 0x100a27b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x1388
jae 0x100a27b0
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 0xc8
call fcn.10011621
mov esi, 0x100e3d7c
jmp 0x100a254e
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x100e3dd8], ebx
jle 0x100a271d
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.10011621
jmp 0x100a26fd
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.1001379b
push esi
call edi
jmp 0x100a2884
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jne 0x100a273c
xor eax, eax
inc eax
mov dword [ebp + 0x1c], eax
jmp 0x100a2779
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x40]
call fcn.1003f96c
lea ecx, [ebp - 0x30]
call fcn.1003f96c
lea ecx, [ebp - 0x2c]
call fcn.1003f96c
mov ebx, 0xb7
jmp 0x100a2801
lea ecx, [ebp - 0x30]
mov dword [ebp + 0x1c], 1
call fcn.1003f96c
lea ecx, [ebp - 0x2c]
call fcn.1003f96c
jmp 0x100a27b0
lea ecx, [ebp]
call fcn.1003f96c
mov ebx, 0x80070057
jmp 0x100a2801
mov ecx, dword [ebp + 0x7c]
push 0xffffffffffffff9c
push 0x100c6a64
push ebx
push str.imdisk.cpl_
call fcn.1005d124
jmp 0x100a2801
mov dword [ebp + 0x1c], 0x80070057
mov eax, dword [ebp - 0x15c]
cmp eax, ebx
je 0x100a27cb
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
mov dword [ebp - 0x15c], ebx
call fcn.1003f96c
mov edx, dword [ebp + 0x18]
cmp word [edx], bx
je 0x100a27fe
cmp dword [ebp - 0x88], ebx
jne 0x100a27fe
mov ecx, dword [ebp - 0x24]
mov word [ebp - 0x218], bx
cmp word [ecx], 0x2a
lea eax, [ebp - 0x218]
jne 0x100a27f4
lea eax, [ecx + 2]
mov ecx, dword [ebp + 0x7c]
push eax
push edx
call fcn.100457c2
mov ebx, dword [ebp + 0x1c]
lea ecx, [ebp - 0x14]
call fcn.1003f96c
lea ecx, [ebp - 0x54]
call fcn.1003f96c
lea ecx, [ebp + 0x28]
call fcn.1003f96c
lea ecx, [ebp - 0x28]
call fcn.1003f96c
lea ecx, [ebp + 0x3c]
call fcn.1003f96c
lea ecx, [ebp - 0x3c]
call fcn.1003f96c
lea ecx, [ebp - 0xc]
call fcn.1003f96c
lea ecx, [ebp + 0x50]
call fcn.1003f96c
lea ecx, [ebp + 4]
call fcn.1003f96c
lea ecx, [ebp - 0x1c]
call fcn.1003f96c
lea ecx, [ebp + 0x14]
call fcn.1003f96c
lea ecx, [ebp + 0x5c]
call fcn.1003f96c
lea ecx, [ebp - 0xa8]
call fcn.1003f96c
lea ecx, [ebp + 0x18]
call fcn.1003f96c
lea ecx, [ebp - 0x24]
call fcn.1003f96c
lea ecx, [ebp + 0x78]
call fcn.1009e971
lea ecx, [ebp - 0x70]
call fcn.1003f96c
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x70
leave
ret