Function at 0x470ea3
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x284
push ebx
fldz
push esi
fstp qword [ebp - 0x198]
push edi
push 0x28
xor eax, eax
pop ecx
lea edi, [ebp - 0x190]
mov byte [ebp + 0x5b], 1
rep stosd dword es:[edi], eax
xor ebx, ebx
push dword [ebp + 0x78]
lea ecx, [ebp - 0x78]
mov esi, 0x4a7658
mov byte [ebp + 0x3b], bl
call fcn.0043ddc9
mov eax, dword [ebp - 0x78]
mov dword [ebp + 0x60], eax
add eax, 0xc
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x4c], eax
lea eax, [ebp + 0x4c]
push eax
call fcn.00404167
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
pop ecx
pop ecx
lea ecx, [ebp + 0x14]
sete byte [ebp + 0x67]
call fcn.0040f0d5
push 6
push dword [ebp - 0x18]
push str.__free
call fcn.0042fa9d
add esp, 0xc
test al, al
jne 0x472349
lea ecx, [ebp + 0x78]
call fcn.0046f4a1
push ebx
lea ecx, [ebp + 0x14]
call fcn.0040f0d8
lea ecx, [ebp + 0x14]
call fcn.0040f0c9
mov esi, eax
neg esi
push 3
push dword [ebp - 0x18]
sbb esi, esi
inc esi
push 0x498d60
mov dword [ebp - 0x10], esi
mov dword [ebp + 0x2c], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x90], ebx
call fcn.0042fa9d
add esp, 0xc
test al, al
je 0x470f81
mov dword [ebp + 0x2c], 0xfff00000
push 5
lea eax, [ebp - 0x18]
push eax
push str.__ins
mov byte [ebp + 0x6f], bl
call fcn.00435950
add esp, 0xc
test al, al
je 0x470fa1
mov byte [ebp + 0x6f], 5
jmp 0x470fbc
push 6
lea eax, [ebp - 0x18]
push eax
push str.__fins
call fcn.00435950
add esp, 0xc
test al, al
je 0x470fbc
mov byte [ebp + 0x6f], 6
push 0x3e8
lea ecx, [ebp - 0x1c]
call fcn.00433c42
lea ecx, [ebp + 0x24]
call fcn.00433c24
lea ecx, [ebp - 0xa4]
call fcn.00433c24
lea ecx, [ebp + 0x5c]
call fcn.00433c24
lea ecx, [ebp]
mov dword [ebp + 0x18], ebx
call fcn.00433c24
lea ecx, [ebp + 0x1c]
call fcn.00433c24
lea ecx, [ebp + 0x50]
call fcn.00433c24
lea ecx, [ebp + 4]
call fcn.00433c24
lea ecx, [ebp - 0x38]
call fcn.00433c24
lea ecx, [ebp + 0x44]
call fcn.00433c24
lea ecx, [ebp - 0x28]
call fcn.00433c24
lea ecx, [ebp + 0x30]
call fcn.00433c24
or eax, 0xffffffff
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov eax, 0x496134
push 0xc8
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x40], eax
mov dword [ebp - 8], eax
call fcn.00433c42
cmp byte [ebp + 0x67], bl
mov eax, dword [ebp + 0x4c]
mov cx, word [eax]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0xd4], eax
mov word [ebp - 0x70], cx
mov dword [ebp + 0x34], eax
je 0x4711af
add dword [ebp + 0x68], 2
mov word [eax], bx
mov eax, dword [ebp + 0x68]
mov edx, eax
jmp 0x4710a4
cmp cx, 0x2a
je 0x4710ac
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, bx
jne 0x471099
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x24]
call fcn.00433d4a
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
je 0x4710cf
push 0x3e8
lea ecx, [ebp - 0x1c]
call fcn.00433c6b
cmp word [ebp - 0x70], bx
mov eax, dword [ebp + 0x4c]
mov dword [ebp + 0x34], eax
je 0x4710e1
add eax, 2
mov dword [ebp + 0x34], eax
lea eax, [ebp + 0x34]
push eax
call fcn.0042ebab
pop ecx
mov edi, 0x496134
push 4
lea eax, [ebp + 0x34]
push eax
push str._mem
call fcn.00435993
add esp, 0xc
test al, al
jne 0x47111e
push 2
lea eax, [ebp + 0x34]
push eax
push 0x493284
call fcn.00435993
add esp, 0xc
test al, al
je 0x471123
mov dword [ebp + 0x40], edi
jmp 0x4710f0
push 3
lea eax, [ebp + 0x34]
push eax
push 0x496a2c
call fcn.00435993
add esp, 0xc
test al, al
je 0x471143
mov dword [ebp + 0x40], 0x498d40
jmp 0x4710f0
push 4
lea eax, [ebp + 0x34]
push eax
push str._map
call fcn.00435993
add esp, 0xc
test al, al
je 0x471166
mov dword [ebp - 0xd0], 1
jmp 0x4710f0
push 4
lea eax, [ebp + 0x34]
push eax
push str._exe
call fcn.00435993
add esp, 0xc
test al, al
je 0x471189
mov dword [ebp + 0x2c], 1
jmp 0x4710f0
push 5
lea eax, [ebp + 0x34]
push eax
push str._nexe
call fcn.00435993
add esp, 0xc
test al, al
je 0x4711ac
mov dword [ebp + 0x2c], 0xfff00000
jmp 0x4710f0
mov edi, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x7c]
push 0x498d18
push str.ERRORLEVEL
call fcn.004335ed
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
push 0xffffffffffffffff
lea ecx, [ebp + 0x18]
push 0xffffffffffffffff
je 0x4711f4
push 0x498d14
call fcn.00433ce1
push dword [ebp + 0x24]
lea ecx, [ebp + 0x18]
call fcn.00433c92
push str.Imdisk
lea ecx, [ebp + 0x18]
call fcn.00433c92
jmp 0x4711fe
push str._Imdisk
call fcn.00433ce1
push 9
push edi
push str.__version
call fcn.0042fa9d
push 2
push edi
push 0x498ce4
mov byte [ebp + 0x66], al
call fcn.0042fa9d
push 2
push edi
push 0x498ce0
mov byte [ebp + 0xf], al
call fcn.0042fa9d
add esp, 0x24
cmp byte [ebp + 0x66], bl
jne 0x471240
cmp byte [ebp + 0xf], bl
jne 0x471240
cmp al, bl
jne 0x471240
xor al, al
jmp 0x471242
mov al, 1
cmp esi, ebx
je 0x47124f
cmp al, bl
je 0x471259
cmp byte [ebp + 0x6f], bl
jne 0x471259
cmp byte [ebp + 0x6f], 6
jl 0x471396
cmp esi, ebx
mov dword [ebp - 0x10], 0x498cd8
jne 0x4712c1
cmp byte [ebp + 0x6f], 6
jl 0x4712c1
lea ecx, [ebp - 0x88]
call fcn.00433c24
mov eax, 0x498cd0
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xdc]
push eax
push 2
call fcn.0041e76e
mov eax, dword [ebp - 0x88]
add esp, 0xc
cmp word [eax], bx
je 0x4712b6
cmp word [eax + 2], bx
je 0x4712b6
mov dword [ebp - 0x10], 0x498cc8
lea ecx, [ebp - 0x88]
call fcn.0042eb98
mov edi, 0x4a7658
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
sub dword [0x4a7a50], 1
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x4a7a50], ebx
jle 0x4712fe
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 0x7c]
push ebx
push 1
call fcn.0040ce12
jmp 0x4712db
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
call fcn.0040f0d8
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
call fcn.0040f0d8
push str.28:INDATA
lea ecx, [ebp - 0x24]
call fcn.0043ddc9
cmp esi, ebx
mov eax, 0x498cc8
jne 0x471334
mov eax, 0x498cd8
push eax
lea ecx, [ebp - 0x24]
call fcn.00433c92
push dword [ebp - 0x10]
lea ecx, [ebp - 0x24]
call fcn.00433c92
push dword [ebp + 0x4c]
lea ecx, [ebp - 0x24]
call fcn.00433c92
push dword [ebp - 0x24]
mov ecx, dword [ebp + 0x7c]
call fcn.0042065b
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x4a7a50], 1
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
lea ecx, [ebp + 0x14]
call fcn.0040f0d8
lea ecx, [ebp + 0x14]
call fcn.0040f0c9
mov esi, eax
neg esi
sbb esi, esi
inc esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x10], esi
call fcn.0042eb98
cmp byte [ebp + 0x67], bl
push 2
pop edi
je 0x471c87
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x48], eax
jmp 0x4713cd
push edi
lea eax, [ebp - 0x48]
push eax
push 0x493284
call fcn.00435950
add esp, 0xc
test al, al
jne 0x4713d4
lea eax, [ebp - 0x48]
push eax
call fcn.0040418b
mov eax, dword [ebp - 0x48]
pop ecx
cmp word [eax], bx
jne 0x4713aa
jmp 0x4713da
mov eax, dword [ebp - 0x48]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
jne 0x471c75
add dword [ebp + 0x68], edi
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
cmp word [eax], 0x40
mov byte [ebp + 0x67], bl
jne 0x471409
add dword [ebp + 0x68], edi
mov byte [ebp + 0x67], 1
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004385d3
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x471423
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004385d3
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x47143d
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004385d3
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x471459
inc edi
inc edi
mov dword [ebp + 0x68], edi
mov al, byte [ebp - 0x50]
and al, 1
mov byte [ebp + 0x6f], al
push 0x2a
lea eax, [ebp + 0x68]
call fcn.00433886
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x30]
call fcn.00433d4a
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x471489
add dword [ebp + 0x68], 2
mov edi, dword [ebp + 0x68]
push 0x2a
lea eax, [ebp + 0x68]
call fcn.00433886
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x44]
call fcn.00433d4a
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x4714b4
add dword [ebp + 0x68], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004385d3
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x4714d0
inc edi
inc edi
mov dword [ebp + 0x68], edi
push 0x2a
lea eax, [ebp + 0x68]
call fcn.00433886
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00433d4a
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.004385d3
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x471507
add dword [ebp + 0x68], 2
cmp byte [ebp + 0x67], bl
mov edx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
je 0x47154c
add eax, edx
adc ecx, edi
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0x58], ebx
jl 0x47156e
jg 0x471558
cmp dword [ebp - 0x5c], ebx
jbe 0x47156e
cmp dword [ebp - 0x30], ebx
jg 0x47156e
jl 0x471564
cmp dword [ebp - 0x34], ebx
ja 0x47156e
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x30], ebx
push 0x318
lea ecx, [ebp - 0x2c]
call fcn.00433c42
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
add eax, 0x6a
mov dword [ebp + 0x10], eax
add eax, 0x6a
push ebx
lea edi, [eax + 0x6a]
mov word [edi], bx
mov esi, 0x200
push esi
mov word [eax], bx
push dword [ebp - 0x60]
lea ecx, [edi + 0x6a]
push dword [ebp - 0x64]
mov dword [ebp + 8], ecx
call fcn.0047b270
push edx
push eax
push dword [ebp - 0xc]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
call fcn.00470db5
add esp, 0xc
push ebx
push esi
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.0047b270
push edx
push eax
push dword [ebp + 0x10]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
call fcn.00470db5
add esp, 0xc
mov word [edi], bx
cmp dword [ebp - 0x58], ebx
jl 0x4715fc
jg 0x4715ed
cmp dword [ebp - 0x5c], ebx
jbe 0x4715fc
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push edi
call fcn.00470db5
add esp, 0xc
mov ecx, dword [ebp + 0x4c]
xor eax, eax
cmp word [ebp - 0x70], bx
setne al
lea eax, [ecx + eax*2]
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x3c]
push eax
call fcn.0042ebab
push 4
push dword [ebp + 0x3c]
mov dword [ebp - 0x74], ebx
push str.__w:
call fcn.0042fae7
add esp, 0x10
test al, al
je 0x471643
add dword [ebp + 0x3c], 8
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.004369c5
pop ecx
pop ecx
push 0xffffffffffffffff
lea eax, [ebp + 0x3c]
push eax
push 0x498ca4
call fcn.00435950
add esp, 0xc
cmp dword [0x4a57d0], ebx
jge 0x4716ab
mov eax, dword [0x4a6eec]
cmp eax, ebx
mov dword [0x4a57d0], ebx
mov dword [ebp + 0x54], ebx
mov dword [ebp - 0x54], ebx
je 0x4716b9
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp + 0x54]
push ecx
call eax
cmp dword [ebp + 0x54], 0x202
jb 0x471692
mov dword [0x4a57d0], 7
jmp 0x4716ad
cmp dword [ebp + 0x54], 0x184
jb 0x4716a5
mov dword [0x4a57d0], 1
cmp dword [0x4a57d0], ebx
jle 0x4716b9
cmp dword [ebp + 0x2c], ebx
jne 0x4716b9
mov dword [ebp + 0x2c], 0xfff00000
mov eax, dword [ebp + 0x3c]
mov edx, 0x496134
mov dword [ebp + 0x54], eax
xor edi, edi
cmp word [eax], bx
mov byte [ebp + 0x66], bl
mov byte [ebp + 0x67], bl
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x80], edx
je 0x47174d
push 2
lea eax, [ebp + 0x54]
push eax
push 0x496be4
call fcn.00435950
add esp, 0xc
test al, al
je 0x4716f6
xor edi, edi
inc edi
jmp 0x471740
cmp edi, ebx
je 0x471734
push 2
lea eax, [ebp + 0x54]
push eax
push 0x498ca0
call fcn.00435950
add esp, 0xc
test al, al
je 0x471717
mov byte [ebp + 0x66], 1
jmp 0x471740
push 3
lea eax, [ebp + 0x54]
push eax
push 0x498c9c
call fcn.00435950
add esp, 0xc
test al, al
je 0x471734
mov byte [ebp + 0x67], 1
jmp 0x471740
lea eax, [ebp + 0x54]
push eax
call fcn.0040418b
pop ecx
xor edi, edi
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x4716da
mov edx, 0x496134
mov eax, dword [0x4a57d0]
test al, 2
je 0x471765
cmp byte [ebp + 0x67], bl
jne 0x471765
mov dword [ebp - 0x8c], str._o_par
mov edi, eax
and edi, 4
je 0x471773
mov dword [ebp - 0x80], str._o_shared
cmp edi, ebx
je 0x47177a
mov byte [ebp + 0x5b], bl
mov ecx, dword [ebp - 0x50]
mov eax, ecx
and eax, esi
or eax, ebx
jne 0x4717a0
cmp edi, ebx
jne 0x4717a0
cmp byte [ebp + 0x6f], bl
je 0x4717a3
and ecx, 0x100
mov eax, ecx
or eax, ebx
je 0x4717a3
mov byte [ebp + 0x5b], 1
jmp 0x4717a3
mov byte [ebp + 0x5b], bl
cmp dword [0x4a57d0], ebx
jle 0x4718b8
cmp byte [ebp + 0x6f], bl
je 0x4717bd
cmp byte [ebp + 0x5b], bl
jne 0x4718b8
cmp byte [ebp + 0x6f], bl
mov dword [ebp + 0x40], edx
jne 0x4717d3
cmp byte [ebp + 0x66], bl
jne 0x4717db
mov dword [ebp + 0x40], str._o_ro
jmp 0x4717db
cmp edi, ebx
jne 0x4717db
mov byte [ebp + 0x3b], 1
push dword [ebp + 0x4c]
mov edi, dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax + esi + 0x800]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00433c6b
push dword [ebp + 0x30]
push dword [ebp + 0x10]
push dword [ebp - 0xc]
push dword [ebp - 0x80]
push dword [ebp - 0x8c]
push dword [ebp + 0x40]
push str.imdisk__a___s__s__s___b__sb__s__sb__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp + 0x3c]
add esp, 0x20
mov dword [ebp + 0x28], eax
cmp word [eax], bx
je 0x4718a4
push 2
lea eax, [ebp + 0x28]
push eax
push 0x49838c
call fcn.00435993
add esp, 0xc
test al, al
jne 0x47186a
push 2
lea eax, [ebp + 0x28]
push eax
push 0x493434
call fcn.00435993
add esp, 0xc
test al, al
jne 0x47186a
lea eax, [ebp + 0x28]
push eax
call fcn.0040418b
jmp 0x471898
mov ecx, dword [ebp + 0x28]
xor eax, eax
jmp 0x471887
call fcn.00402b47
test al, al
jne 0x47188f
mov word [ecx], 0x20
mov ecx, dword [ebp + 0x28]
inc ecx
inc ecx
mov dword [ebp + 0x28], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x471871
lea eax, [ebp + 0x28]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x28]
cmp word [eax], bx
pop ecx
jne 0x471831
mov eax, dword [ebp + 0x3c]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00433c92
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
jmp 0x471c57
cmp byte [ebp + 0x6f], bl
je 0x4718ef
push ebx
push 0xa0000080
push 3
push ebx
push 7
push 0xc0000000
push dword [ebp + 0x30]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x472380
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x54], 0x496134
jmp 0x4718f6
mov dword [ebp - 0x54], 0x498c10
cmp dword [ebp - 0x30], ebx
jl 0x471917
jg 0x471902
cmp dword [ebp - 0x34], ebx
jbe 0x471917
push dword [ebp - 0x30]
mov eax, dword [ebp + 0x10]
push dword [ebp - 0x34]
add eax, 0x6a
push eax
call fcn.00470db5
add esp, 0xc
push 0x5c
push ebx
push dword [ebp + 0x30]
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov esi, eax
cmp esi, ebx
jne 0x47192e
mov esi, dword [ebp + 0x30]
jmp 0x471930
inc esi
inc esi
mov eax, dword [ebp + 0x44]
cmp word [eax], bx
jne 0x471964
push 0x800
lea ecx, [ebp + 0x44]
call fcn.00433c6b
mov edi, dword [ebp + 0x44]
call fcn.004308d6
push eax
push dword [ebp + 0x10]
push dword [ebp - 0xc]
push esi
push str._s_s_s__u
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
mov eax, 0x400
cmp esi, eax
jle 0x471984
mov esi, eax
mov eax, dword [ebp + 0x44]
mov word [eax + 0x800], bx
push str.Global_
lea ecx, [ebp - 0x14]
call fcn.0043de8d
push dword [ebp + 0x44]
lea ecx, [ebp - 0x14]
call fcn.00433c92
push str._devio_Ack
lea ecx, [ebp - 0x14]
call fcn.00433c92
mov eax, dword [ebp + 8]
mov word [eax], bx
mov eax, dword [ebp - 0x50]
and eax, 0x30
or eax, ebx
mov word [ebp - 0x1d4], bx
jne 0x4719d7
cmp byte [ebp + 0x6f], bl
je 0x471a91
mov eax, dword [ebp - 0x50]
and eax, 0x40
or eax, ebx
jne 0x471a91
mov edi, dword [ebp + 8]
push 0x10
push str.__kill:
push edi
call fcn.0047b530
add esp, 0xc
push 0x104
add edi, 0x27e
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp + 8]
push 0x104
add eax, 0xe
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, dword [ebp - 8]
mov dword [ebp - 0x84], eax
mov eax, edi
cmp word [eax], 0x22
mov dword [ebp + 0x54], edi
jne 0x471a45
add dword [ebp - 8], 2
jmp 0x471a3b
cmp ax, 0x22
je 0x471a52
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x471a33
jmp 0x471a52
lea eax, [ebp + 0x54]
push eax
call fcn.00404167
mov edi, dword [ebp + 0x54]
pop ecx
mov ax, word [edi]
mov word [ebp + 0x54], ax
mov word [edi], bx
mov eax, dword [ebp - 0x50]
and eax, 0x20
or eax, ebx
mov eax, str._LOAD_25_poweroff
jne 0x471a70
mov eax, str._RAMD_ImdiskV__D__m__s_
push dword [ebp - 8]
mov ecx, dword [ebp - 0x84]
push eax
mov eax, dword [ebp + 8]
lea eax, [eax + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ax, word [ebp + 0x54]
add esp, 0xc
mov word [edi], ax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov cl, 1
call fcn.0047bca0
and eax, 3
je 0x471ab9
push eax
lea eax, [ebp - 0x1d4]
push str._nrc:_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push ebx
mov edi, 0x200
push edi
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.0047b270
push edx
push eax
push dword [ebp - 0xc]
call fcn.00470db5
add esp, 0xc
push ebx
push edi
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.0047b270
push edx
push eax
push dword [ebp + 0x10]
call fcn.00470db5
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push 0x492484
push str.__ImdMapPid
call fcn.004335ed
push dword [ebp + 0x30]
mov edi, dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x20]
lea eax, [eax + esi + 0x940]
push eax
call fcn.00433c42
push str.Global_
lea ecx, [ebp - 0x44]
call fcn.0043ddc9
push dword [ebp + 0x44]
lea ecx, [ebp - 0x44]
call fcn.00433c92
push dword [ebp - 0x44]
push ebx
push 2
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
cmp eax, ebx
jne 0x472392
lea ecx, [ebp - 0x44]
call fcn.0042eb98
mov edx, dword [ebp + 0x10]
lea eax, [edx + 0x6a]
lea ecx, [eax + 0x6a]
push ecx
push eax
push dword [ebp - 0xc]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push edx
push dword [ebp + 0x30]
lea eax, [ebp - 0x1d4]
push dword [ebp + 0x44]
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x28]
push dword [ebp + 8]
push dword [ebp + 0x40]
push str.EXEC___pid:__ImdMapPid____exe:_s10INDATA___nfb___MyName0____s__w:60000__s__s__s_shm:_s___s__s__s__s__s
push dword [ebp - 0x20]
call edi
add esp, 0x34
add esi, 0x800
push esi
lea ecx, [ebp + 0x5c]
call fcn.00433c6b
mov eax, dword [ebp - 0xc]
mov word [eax], bx
mov eax, dword [ebp + 0x10]
mov word [eax], bx
push dword [ebp + 0x44]
push dword [ebp - 0x80]
push dword [ebp - 0x8c]
push 0x496134
push str.imdisk__a__t_proxy__s__s__s__o_shm__f__s
push dword [ebp + 0x5c]
call edi
add esp, 0x18
push dword [ebp + 0x3c]
lea ecx, [ebp + 0x5c]
call fcn.00433c92
push dword [ebp - 0x14]
mov eax, dword [ebp + 0x5c]
push ebx
push ebx
push ebx
mov dword [ebp + 0x60], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push ebx
push dword [ebp - 0x20]
mov esi, eax
call fcn.00424fb6
push 0xea60
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
jne 0x4723bb
push 0x32
pop esi
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
jne 0x471c34
cmp dword [ebp - 0x74], ebx
jle 0x471c4f
mov ecx, dword [ebp + 0x7c]
push ebx
push dword [ebp - 0x74]
call fcn.0040ce12
lea ecx, [ebp - 0x20]
call fcn.0042eb98
mov eax, dword [ebp + 0x3c]
mov dword [ebp + 0x4c], eax
lea ecx, [ebp - 0x2c]
mov word [eax], bx
mov dword [ebp - 0xd0], 1
call fcn.0042eb98
mov esi, dword [ebp - 0x10]
mov ax, word [ebp - 0x70]
mov ecx, dword [ebp - 0xd4]
mov word [ecx], ax
jmp 0x472100
push 4
lea eax, [ebp + 0x4c]
push eax
push str._exe
call fcn.00435950
add esp, 0xc
test al, al
je 0x471ca5
mov dword [ebp + 0x2c], 1
push 5
lea eax, [ebp + 0x4c]
push eax
push str._nexe
call fcn.00435950
add esp, 0xc
test al, al
je 0x471cc3
mov dword [ebp + 0x2c], 0xfff00000
push 6
lea eax, [ebp + 0x4c]
push eax
push str._nexe1
call fcn.00435950
add esp, 0xc
test al, al
je 0x471ceb
mov dword [ebp + 0x2c], 0xfff00000
mov dword [ebp - 0x90], 1
push 0x2c
pop esi
push esi
lea eax, [ebp]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004364f8
mov eax, dword [ebp]
mov word [eax], bx
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x471db8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004364f8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x471db8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004364f8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x471db8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004364f8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x471db8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004364f8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x471db8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004364f8
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x471db8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004366ae
add esp, 0xc
push 6
lea ecx, [ebp + 0x50]
mov byte [ebp + 0x66], bl
call fcn.00433c6b
mov eax, dword [ebp + 0x50]
mov word [eax + 2], 0x3a
mov eax, dword [ebp + 0x50]
mov word [eax + 4], bx
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x471e54
push eax
call fcn.0047ab2d
test eax, eax
pop ecx
je 0x471e4c
mov eax, dword [ebp + 0x50]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xf0], str.imdisk
mov dword [ebp - 0xec], 0x498cd0
mov dword [ebp - 0xe8], 0x4989e8
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], ebx
call fcn.00433c24
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xf0]
push eax
push 4
call fcn.0041e76e
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0xa8]
mov byte [ebp + 0x66], al
call fcn.0042eb98
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
jne 0x471e6d
push 0x492f00
lea ecx, [ebp + 0x50]
call fcn.0043de31
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x4723dc
push 0x3c
lea ecx, [ebp - 4]
call fcn.00433c42
mov eax, dword [ebp]
or esi, 0xffffffff
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp + 0x48], eax
cmp word [eax], bx
mov edi, esi
je 0x4723d4
lea eax, [ebp + 0x48]
push eax
call fcn.0042ebab
mov eax, dword [ebp + 0x48]
mov ax, word [eax]
or ax, 0x20
cmp ax, 0x70
pop ecx
jne 0x471ed1
lea eax, [ebp - 0xa0]
jmp 0x471eeb
cmp ax, 0x6c
jne 0x471edf
lea eax, [ebp - 0x98]
jmp 0x471eeb
cmp ax, 0x68
jne 0x471f03
lea eax, [ebp - 0xc0]
add dword [ebp + 0x48], 2
push eax
lea eax, [ebp + 0x48]
push eax
call fcn.004369a1
mov eax, dword [ebp + 0x48]
cmp word [eax], bx
pop ecx
pop ecx
jne 0x471eaf
cmp dword [ebp - 0x9c], ebx
jl 0x471f45
jg 0x471f15
cmp dword [ebp - 0xa0], ebx
jbe 0x471f45
push 1
call fcn.0041082c
pop ecx
push dword [ebp - 0x9c]
push dword [ebp - 0xa0]
push edx
push eax
call fcn.0047b320
push ebx
push 0x64
push edx
push eax
call fcn.0047b270
mov cl, 0x14
call fcn.0047bca0
mov edi, eax
mov esi, edx
cmp esi, dword [ebp - 0x94]
jg 0x471f63
jl 0x471f57
cmp edi, dword [ebp - 0x98]
jae 0x471f63
mov edi, dword [ebp - 0x98]
mov esi, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xbc]
cmp ecx, ebx
jl 0x471f95
mov eax, dword [ebp - 0xc0]
jg 0x471f79
cmp eax, ebx
jbe 0x471f95
cmp esi, ecx
jl 0x471f87
jg 0x471f83
cmp edi, eax
jbe 0x471f87
mov edi, eax
mov esi, ecx
cmp esi, ebx
jg 0x471fa7
jl 0x471f91
cmp edi, ebx
ja 0x471f95
mov edi, eax
mov esi, ecx
cmp esi, ebx
jl 0x4723d4
jg 0x471fa7
cmp edi, ebx
jb 0x4723d4
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x4723d4
cmp esi, ebx
jg 0x471fc2
jl 0x471fbd
cmp edi, ebx
ja 0x471fc2
xor edi, edi
inc edi
xor esi, esi
push esi
push edi
push dword [ebp - 4]
call fcn.00470dcf
add esp, 0xc
push 0x4989e0
lea ecx, [ebp - 4]
call fcn.00433c92
cmp byte [ebp + 0x66], bl
mov eax, str.imdisk___e
jne 0x471feb
mov eax, str.imdisk___a
push eax
lea ecx, [ebp + 0x5c]
call fcn.0043de31
mov eax, dword [ebp - 0xc8]
and eax, 1
xor ecx, ecx
or eax, ecx
je 0x472010
push str.__o_awe
lea ecx, [ebp + 0x5c]
call fcn.00433c92
mov eax, dword [ebp - 4]
cmp word [eax], bx
je 0x472030
push 0x498990
lea ecx, [ebp + 0x5c]
call fcn.00433c92
push dword [ebp - 4]
lea ecx, [ebp + 0x5c]
call fcn.00433c92
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x472050
push str.___m
lea ecx, [ebp + 0x5c]
call fcn.00433c92
push dword [ebp + 0x50]
lea ecx, [ebp + 0x5c]
call fcn.00433c92
mov eax, dword [ebp + 0x1c]
cmp word [eax], bx
jne 0x472064
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x4720ef
push str.___p__
lea ecx, [ebp + 0x5c]
call fcn.00433c92
mov eax, dword [ebp + 0x1c]
cmp word [eax], bx
je 0x472091
push str.__FS:
lea ecx, [ebp + 0x5c]
call fcn.00433c92
push dword [ebp + 0x1c]
lea ecx, [ebp + 0x5c]
call fcn.00433c92
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x4720b1
push str.__V:
lea ecx, [ebp + 0x5c]
call fcn.00433c92
push dword [ebp + 4]
lea ecx, [ebp + 0x5c]
call fcn.00433c92
push dword [ebp + 0x1c]
push 0x496820
call fcn.0042fb17
test al, al
pop ecx
pop ecx
je 0x4720e2
mov eax, dword [ebp - 0x38]
mov ax, word [eax]
cmp ax, bx
je 0x4720e2
cmp ax, 0x30
je 0x4720e2
push 0x496818
lea ecx, [ebp + 0x5c]
call fcn.00433c92
push str.___Q__Y__X__
lea ecx, [ebp + 0x5c]
call fcn.00433c92
mov eax, dword [ebp + 0x5c]
lea ecx, [ebp - 4]
mov dword [ebp + 0x60], eax
call fcn.0042eb98
mov esi, dword [ebp - 0x10]
lea eax, [ebp + 0x4c]
push eax
call fcn.0042ebab
push 4
push dword [ebp + 0x4c]
push str._gui
call fcn.0042fa9d
add esp, 0x10
test al, al
jne 0x4723e3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x40], eax
lea eax, [ebp + 0x40]
push eax
sub edi, 0xc8
call fcn.00404167
pop ecx
push dword [ebp + 0x40]
lea ecx, [ebp - 0x40]
call fcn.0043de8d
mov eax, dword [ebp - 0x40]
mov dword [ebp + 0x40], eax
mov dword [ebp + 0x54], eax
jmp 0x4721a9
push 6
lea eax, [ebp + 0x54]
push eax
push str.__nbrd
call fcn.00435993
add esp, 0xc
test al, al
jne 0x4721a6
push 6
lea eax, [ebp + 0x54]
push eax
push 0x48ffd4
call fcn.00435993
add esp, 0xc
test al, al
jne 0x4721a6
push 2
lea eax, [ebp + 0x54]
push eax
push 0x493278
call fcn.00435993
add esp, 0xc
test al, al
jne 0x4721a6
lea eax, [ebp + 0x54]
push eax
call fcn.0040418b
pop ecx
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x472157
cmp esi, ebx
jne 0x4722b7
cmp dword [ebp + 0x2c], ebx
jg 0x4722b7
push ebx
push dword [ebp + 0x60]
lea ecx, [ebp - 0x198]
call fcn.004411c1
cmp dword [ebp - 0x15c], 1
jle 0x4723fa
mov eax, dword [ebp - 0x158]
mov dword [eax], str.imdisk
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x158]
push dword [ebp - 0x15c]
call fcn.0041e76e
add esp, 0xc
cmp byte [ebp + 0x3b], bl
mov dword [ebp + 0x20], eax
mov dword [ebp - 0x7c], ebx
jle 0x472309
cmp eax, 3
jne 0x472309
cmp dword [ebp - 0x90], ebx
jne 0x472309
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x5b], 1
call fcn.0042eb98
lea ecx, [ebp - 0x40]
call fcn.0042eb98
lea ecx, [ebp + 0x30]
call fcn.0042eb98
lea ecx, [ebp - 0x28]
call fcn.0042eb98
lea ecx, [ebp + 0x44]
call fcn.0042eb98
lea ecx, [ebp - 0x38]
call fcn.0042eb98
lea ecx, [ebp + 4]
call fcn.0042eb98
lea ecx, [ebp + 0x50]
call fcn.0042eb98
lea ecx, [ebp + 0x1c]
call fcn.0042eb98
lea ecx, [ebp]
call fcn.0042eb98
lea ecx, [ebp + 0x18]
call fcn.0042eb98
lea ecx, [ebp + 0x5c]
call fcn.0042eb98
lea ecx, [ebp - 0xa4]
call fcn.0042eb98
lea ecx, [ebp + 0x24]
call fcn.0042eb98
lea ecx, [ebp - 0x1c]
call fcn.0042eb98
lea ecx, [ebp + 0x78]
call fcn.0046f4c4
lea ecx, [ebp - 0x78]
call fcn.0042eb98
jmp 0x470ecc
cmp dword [ebp - 0x90], ebx
jne 0x472309
push dword [ebp + 0x18]
lea ecx, [ebp - 0x3c]
call fcn.0043ddc9
push dword [ebp + 0x40]
lea ecx, [ebp - 0x3c]
call fcn.00433c92
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
mov ecx, dword [ebp + 0x7c]
mov dword [ebp - 0x7c], 1
je 0x4722f6
push ebx
push ebx
push ebx
push dword [ebp - 0x3c]
push ecx
push ebx
call fcn.00406e56
jmp 0x4722fe
push dword [ebp - 0x3c]
call fcn.0042ed34
lea ecx, [ebp - 0x3c]
mov dword [ebp + 0x20], eax
call fcn.0042eb98
mov ecx, dword [ebp - 0xd0]
xor eax, eax
or ecx, eax
je 0x472401
cmp dword [ebp + 0x20], 3
jne 0x472401
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x1388
jae 0x472401
mov ecx, dword [ebp + 0x7c]
push ebx
push 0xc8
call fcn.0040ce12
jmp 0x4721ae
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x4a7a50], ebx
jle 0x47236e
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push 1
call fcn.0040ce12
jmp 0x47234f
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
call fcn.0040f0d8
push esi
call edi
jmp 0x4724d2
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jne 0x47238d
xor eax, eax
inc eax
mov dword [ebp + 0x20], eax
jmp 0x4723ca
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44]
call fcn.0042eb98
lea ecx, [ebp - 0x20]
call fcn.0042eb98
lea ecx, [ebp - 0x2c]
call fcn.0042eb98
mov ebx, 0xb7
jmp 0x47244f
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x20], 1
call fcn.0042eb98
lea ecx, [ebp - 0x2c]
call fcn.0042eb98
jmp 0x472401
lea ecx, [ebp - 4]
call fcn.0042eb98
mov ebx, 0x80070057
jmp 0x47244f
mov ecx, dword [ebp + 0x7c]
push 0xffffffffffffff9c
push 0x496134
push ebx
push str.imdisk.cpl_
call fcn.0044a23b
jmp 0x47244f
mov dword [ebp + 0x20], 0x80070057
mov eax, dword [ebp - 0x154]
cmp eax, ebx
je 0x47241c
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
mov dword [ebp - 0x154], ebx
call fcn.0042eb98
mov edx, dword [ebp + 0x24]
cmp word [edx], bx
je 0x47244c
cmp dword [ebp - 0x7c], ebx
jne 0x47244c
mov ecx, dword [ebp - 0x1c]
mov word [ebp - 0x214], bx
cmp word [ecx], 0x2a
lea eax, [ebp - 0x214]
jne 0x472442
lea eax, [ecx + 2]
mov ecx, dword [ebp + 0x7c]
push eax
push edx
call fcn.004335ed
mov ebx, dword [ebp + 0x20]
lea ecx, [ebp - 0x14]
call fcn.0042eb98
lea ecx, [ebp - 0x40]
call fcn.0042eb98
lea ecx, [ebp + 0x30]
call fcn.0042eb98
lea ecx, [ebp - 0x28]
call fcn.0042eb98
lea ecx, [ebp + 0x44]
call fcn.0042eb98
lea ecx, [ebp - 0x38]
call fcn.0042eb98
lea ecx, [ebp + 4]
call fcn.0042eb98
lea ecx, [ebp + 0x50]
call fcn.0042eb98
lea ecx, [ebp + 0x1c]
call fcn.0042eb98
lea ecx, [ebp]
call fcn.0042eb98
lea ecx, [ebp + 0x18]
call fcn.0042eb98
lea ecx, [ebp + 0x5c]
call fcn.0042eb98
lea ecx, [ebp - 0xa4]
call fcn.0042eb98
lea ecx, [ebp + 0x24]
call fcn.0042eb98
lea ecx, [ebp - 0x1c]
call fcn.0042eb98
lea ecx, [ebp + 0x78]
call fcn.0046f4c4
lea ecx, [ebp - 0x78]
call fcn.0042eb98
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x70
leave
ret