Function at 0x49abd6
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x284
push ebx
fldz
push esi
fstp qword [ebp - 0x198]
push edi
push 0x26
xor eax, eax
pop ecx
lea edi, [ebp - 0x190]
mov byte [ebp + 0x5b], 1
rep stosd dword es:[edi], eax
xor ebx, ebx
mov esi, 0x4dbd30
push dword [ebp + 0x78]
lea ecx, [ebp - 0x88]
mov byte [ebp + 0x37], bl
call fcn.0044df7a
mov eax, dword [ebp - 0x88]
mov dword [ebp + 0x60], eax
add eax, 0xc
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x48], eax
lea eax, [ebp + 0x48]
push eax
call fcn.00405a01
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e425
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
pop ecx
pop ecx
lea ecx, [ebp + 0xf]
sete byte [ebp + 0x67]
call fcn.0041357a
push 6
push dword [ebp - 0x20]
push str.__free
call fcn.0043f82d
add esp, 0xc
test al, al
jne 0x49c146
lea ecx, [ebp + 0x78]
call fcn.00498677
push ebx
lea ecx, [ebp + 0xf]
call fcn.0041357d
lea ecx, [ebp + 0xf]
call fcn.0041356e
neg eax
sbb eax, eax
inc eax
cmp dword [0x4d9840], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x24], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x8c], ebx
jge 0x49ad39
mov eax, dword [0x4db07c]
cmp eax, ebx
mov dword [0x4d9840], ebx
mov dword [ebp + 0x54], ebx
mov dword [ebp + 0x44], ebx
je 0x49ad15
lea ecx, [ebp + 0x44]
push ecx
lea ecx, [ebp + 0x54]
push ecx
call eax
cmp dword [ebp + 0x44], ebx
jbe 0x49ad15
mov eax, dword [ebp + 0x54]
cmp eax, 0x202
jb 0x49ace1
mov dword [0x4d9840], 0x38
jmp 0x49ad15
cmp eax, 0x184
jb 0x49acf4
mov dword [0x4d9840], 8
jmp 0x49ad15
cmp eax, 0x160
jb 0x49ad07
mov dword [0x4d9840], 2
jmp 0x49ad15
cmp eax, ebx
jbe 0x49ad15
mov dword [0x4d9840], 1
push dword [0x4db07c]
push dword [0x4d9840]
push dword [ebp + 0x44]
push dword [ebp + 0x54]
push str.DBG:_IMD:_0x_X_0x_X_0x_X__0x_p_r_n
push 0x4db0e0
call fcn.00410fbb
add esp, 0x18
push 3
push dword [ebp - 0x20]
push 0x4c886c
call fcn.0043f82d
add esp, 0xc
test al, al
je 0x49ad56
mov dword [ebp + 0x24], 0xfff00000
push 5
lea eax, [ebp - 0x20]
push eax
push str.__ins
mov byte [ebp + 0x6f], bl
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49ad76
mov byte [ebp + 0x6f], 5
jmp 0x49ad91
push 6
lea eax, [ebp - 0x20]
push eax
push str.__fins
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49ad91
mov byte [ebp + 0x6f], 6
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.00444a2e
lea ecx, [ebp + 0x18]
call fcn.00444a10
lea ecx, [ebp - 0xac]
call fcn.00444a10
lea ecx, [ebp + 0x5c]
call fcn.00444a10
lea ecx, [ebp - 0x1c]
mov dword [ebp + 0x14], ebx
call fcn.00444a10
lea ecx, [ebp + 4]
call fcn.00444a10
lea ecx, [ebp + 0x50]
call fcn.00444a10
lea ecx, [ebp - 0xc]
call fcn.00444a10
lea ecx, [ebp - 0x3c]
call fcn.00444a10
lea ecx, [ebp + 0x3c]
call fcn.00444a10
lea ecx, [ebp - 0x28]
call fcn.00444a10
lea ecx, [ebp + 0x28]
call fcn.00444a10
or eax, 0xffffffff
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov eax, 0x4bfa2c
push 0xc8
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
call fcn.00444a2e
cmp byte [ebp + 0x67], bl
mov eax, dword [ebp + 0x48]
mov cx, word [eax]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0xd4], eax
mov word [ebp - 0x84], cx
mov dword [ebp + 0x30], eax
je 0x49af8a
add dword [ebp + 0x68], 2
mov word [eax], bx
mov eax, dword [ebp + 0x68]
mov edx, eax
jmp 0x49ae7c
cmp cx, 0x2a
je 0x49ae84
inc eax
inc eax
mov dword [ebp + 0x68], eax
mov cx, word [eax]
cmp cx, bx
jne 0x49ae71
sub eax, edx
sar eax, 1
push eax
push edx
lea ecx, [ebp + 0x18]
call fcn.00444b34
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
je 0x49aea7
push 0x3e8
lea ecx, [ebp - 0x24]
call fcn.00444a55
cmp word [ebp - 0x84], bx
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x30], eax
je 0x49aebc
add eax, 2
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
call fcn.0043e425
pop ecx
mov edi, 0x4bfa2c
push 4
lea eax, [ebp + 0x30]
push eax
push str._mem
call fcn.00446aa9
add esp, 0xc
test al, al
jne 0x49aef9
push 2
lea eax, [ebp + 0x30]
push eax
push 0x4c4b0c
call fcn.00446aa9
add esp, 0xc
test al, al
je 0x49aefe
mov dword [ebp + 0x44], edi
jmp 0x49aecb
push 3
lea eax, [ebp + 0x30]
push eax
push 0x4c8e08
call fcn.00446aa9
add esp, 0xc
test al, al
je 0x49af1e
mov dword [ebp + 0x44], 0x4cc92c
jmp 0x49aecb
push 4
lea eax, [ebp + 0x30]
push eax
push str._map
call fcn.00446aa9
add esp, 0xc
test al, al
je 0x49af41
mov dword [ebp - 0xdc], 1
jmp 0x49aecb
push 4
lea eax, [ebp + 0x30]
push eax
push str._exe
call fcn.00446aa9
add esp, 0xc
test al, al
je 0x49af64
mov dword [ebp + 0x24], 1
jmp 0x49aecb
push 5
lea eax, [ebp + 0x30]
push eax
push str._nexe
call fcn.00446aa9
add esp, 0xc
test al, al
je 0x49af87
mov dword [ebp + 0x24], 0xfff00000
jmp 0x49aecb
mov edi, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x7c]
push 0x4cc904
push 0x4cbdf4
call fcn.0044414b
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
push 0xffffffffffffffff
lea ecx, [ebp + 0x14]
push 0xffffffffffffffff
je 0x49afcf
push 0x4cc900
call fcn.00444acb
push dword [ebp + 0x18]
lea ecx, [ebp + 0x14]
call fcn.00444a7c
push str.Imdisk
lea ecx, [ebp + 0x14]
call fcn.00444a7c
jmp 0x49afd9
push str._Imdisk
call fcn.00444acb
push 9
push edi
push str.__version
call fcn.0043f82d
push 2
push edi
push 0x4cc8d0
mov byte [ebp + 0x66], al
call fcn.0043f82d
push 2
push edi
push 0x4cc8cc
mov byte [ebp + 0xe], al
call fcn.0043f82d
push 3
push edi
push 0x4c886c
mov byte [ebp + 0x13], al
call fcn.0043f82d
add esp, 0x30
cmp byte [ebp + 0x66], bl
jne 0x49b030
cmp byte [ebp + 0xe], bl
jne 0x49b030
cmp byte [ebp + 0x13], bl
jne 0x49b030
cmp al, bl
jne 0x49b030
mov cl, 1
jmp 0x49b032
xor cl, cl
cmp dword [ebp - 0x18], ebx
jne 0x49b049
mov eax, dword [0x4d9840]
cmp eax, ebx
jle 0x49b049
push 2
pop edi
cmp eax, edi
jge 0x49b055
jmp 0x49b04c
push 2
pop edi
cmp cl, bl
jne 0x49b05f
cmp byte [ebp + 0x6f], bl
jne 0x49b05f
cmp byte [ebp + 0x6f], 6
jl 0x49b1e4
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x10], 0x4cc8c4
jne 0x49b0b5
lea ecx, [ebp - 0x78]
call fcn.00444a10
mov eax, 0x4cc8bc
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xe4]
push eax
push edi
call fcn.0042549e
mov eax, dword [ebp - 0x78]
add esp, 0xc
cmp word [eax], bx
je 0x49b0ad
cmp word [eax + 2], bx
je 0x49b0ad
mov dword [ebp - 0x10], 0x4cc8b4
lea ecx, [ebp - 0x78]
call fcn.0043e48d
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov edi, dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
sub dword [0x4dbd88], 1
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
cmp dword [0x4dbd88], ebx
jle 0x49b0ec
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.00415f6a
jmp 0x49b0cc
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.0041357d
push esi
call edi
movsx ax, byte [ebp + 0x6f]
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
mov word [ebp - 0xbe], 0x20
mov word [ebp - 0xbc], bx
add eax, 0x30
mov word [ebp - 0xc0], ax
call fcn.0041357d
push str.28:INDATA
lea ecx, [ebp + 8]
call fcn.0044df7a
cmp dword [ebp - 0x18], ebx
mov eax, 0x4cc8b4
jne 0x49b13e
mov eax, 0x4cc8c4
push eax
lea ecx, [ebp + 8]
call fcn.00444a7c
push dword [ebp - 0x10]
lea ecx, [ebp + 8]
call fcn.00444a7c
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp + 8]
call fcn.00444a7c
push dword [ebp + 0x48]
lea ecx, [ebp + 8]
call fcn.00444a7c
push dword [ebp + 8]
push str.Install_IMD__s__r_n
push 0x4db0e0
call fcn.00410fbb
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push dword [ebp + 8]
call fcn.00422182
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
add dword [0x4dbd88], 1
push esi
mov dword [0x4d9840], 0xffffffc0
call edi
push ebx
lea ecx, [ebp + 0xf]
call fcn.0041357d
lea ecx, [ebp + 0xf]
call fcn.0041356e
neg eax
sbb eax, eax
inc eax
push esi
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
cmp dword [ebp - 0x18], ebx
jne 0x49b1d6
mov dword [0x4d9840], 0x38
push esi
call edi
lea ecx, [ebp + 8]
call fcn.0043e48d
push 2
pop edi
cmp byte [ebp + 0x67], bl
je 0x49ba77
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x4c], eax
jmp 0x49b218
push edi
lea eax, [ebp - 0x4c]
push eax
push 0x4c4b0c
call fcn.00446a34
add esp, 0xc
test al, al
jne 0x49b21f
lea eax, [ebp - 0x4c]
push eax
call fcn.00409168
mov eax, dword [ebp - 0x4c]
pop ecx
cmp word [eax], bx
jne 0x49b1f5
jmp 0x49b225
mov eax, dword [ebp - 0x4c]
mov dword [ebp + 0x54], eax
mov eax, dword [ebp + 0x68]
cmp word [eax], 0x2a
jne 0x49ba62
add dword [ebp + 0x68], edi
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
cmp word [eax], 0x40
mov byte [ebp + 0x67], bl
jne 0x49b254
add dword [ebp + 0x68], edi
mov byte [ebp + 0x67], 1
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a0e0
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x49b26e
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a0e0
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x49b288
add dword [ebp + 0x68], edi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a0e0
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x49b2a4
inc edi
inc edi
mov dword [ebp + 0x68], edi
mov al, byte [ebp - 0x48]
and al, 1
mov byte [ebp + 0x6f], al
push 0x2a
lea eax, [ebp + 0x68]
call fcn.004a3a6c
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x28]
call fcn.00444b34
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x49b2d4
add dword [ebp + 0x68], 2
mov edi, dword [ebp + 0x68]
push 0x2a
lea eax, [ebp + 0x68]
call fcn.004a3a6c
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp + 0x3c]
call fcn.00444b34
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
je 0x49b2ff
add dword [ebp + 0x68], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a0e0
mov edi, dword [ebp + 0x68]
cmp word [edi], bx
pop ecx
pop ecx
je 0x49b31b
inc edi
inc edi
mov dword [ebp + 0x68], edi
push 0x2a
lea eax, [ebp + 0x68]
call fcn.004a3a6c
mov eax, dword [ebp + 0x68]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00444b34
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x68]
push eax
call fcn.0044a0e0
mov eax, dword [ebp + 0x68]
cmp word [eax], bx
pop ecx
pop ecx
je 0x49b352
add dword [ebp + 0x68], 2
cmp byte [ebp + 0x67], bl
mov edx, dword [ebp - 0x64]
mov edi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
je 0x49b397
add eax, edx
adc ecx, edi
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
cmp dword [ebp - 0x58], ebx
jl 0x49b3b9
jg 0x49b3a3
cmp dword [ebp - 0x5c], ebx
jbe 0x49b3b9
cmp dword [ebp - 0x34], ebx
jg 0x49b3b9
jl 0x49b3af
cmp dword [ebp - 0x38], ebx
ja 0x49b3b9
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], ebx
push 0x318
lea ecx, [ebp - 0x2c]
call fcn.00444a2e
mov eax, dword [ebp - 0x2c]
lea esi, [eax + 0x6a]
mov dword [ebp - 8], eax
lea eax, [esi + 0x6a]
push ebx
lea edi, [eax + 0x6a]
mov word [edi], bx
push 0x200
mov word [eax], bx
push dword [ebp - 0x60]
lea ecx, [edi + 0x6a]
push dword [ebp - 0x64]
mov dword [ebp - 0xa8], esi
mov dword [ebp - 4], ecx
call fcn.004acfc0
push edx
push eax
push dword [ebp - 8]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
call fcn.0049a8ca
add esp, 0xc
push ebx
push 0x200
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.004acfc0
push edx
push eax
push esi
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
call fcn.0049a8ca
add esp, 0xc
mov word [edi], bx
cmp dword [ebp - 0x58], ebx
jl 0x49b44b
jg 0x49b43c
cmp dword [ebp - 0x5c], ebx
jbe 0x49b44b
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push edi
call fcn.0049a8ca
add esp, 0xc
mov ecx, dword [ebp + 0x48]
xor eax, eax
cmp word [ebp - 0x84], bx
setne al
lea eax, [ecx + eax*2]
mov dword [ebp + 0x38], eax
lea eax, [ebp + 0x38]
push eax
call fcn.0043e425
push 4
push dword [ebp + 0x38]
mov dword [ebp - 0x7c], ebx
push str.__w:
call fcn.0043f884
add esp, 0x10
test al, al
je 0x49b495
add dword [ebp + 0x38], 8
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.004515da
pop ecx
pop ecx
push 0xffffffffffffffff
lea eax, [ebp + 0x38]
push eax
push 0x4cc86c
call fcn.00446a34
add esp, 0xc
cmp dword [0x4d9840], 1
jl 0x49b4bd
cmp dword [ebp + 0x24], ebx
jne 0x49b4bd
mov dword [ebp + 0x24], 0xfff00000
mov eax, dword [ebp + 0x38]
mov edi, 0x4bfa2c
mov byte [ebp + 0x66], bl
mov byte [ebp + 0x67], bl
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x80], edi
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x2c], ebx
jmp 0x49b548
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x4c8f20
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49b4f9
mov dword [ebp + 0x2c], 1
jmp 0x49b545
cmp dword [ebp + 0x2c], ebx
je 0x49b538
push 2
lea eax, [ebp + 0x4c]
push eax
push 0x4cc868
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49b51b
mov byte [ebp + 0x66], 1
jmp 0x49b545
push 3
lea eax, [ebp + 0x4c]
push eax
push 0x4cc864
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49b538
mov byte [ebp + 0x67], 1
jmp 0x49b545
lea eax, [ebp + 0x4c]
push eax
call fcn.00409168
pop ecx
mov dword [ebp + 0x2c], ebx
mov eax, dword [ebp + 0x4c]
cmp word [eax], bx
jne 0x49b4d9
mov eax, dword [0x4d9840]
test al, 0x10
je 0x49b562
cmp byte [ebp + 0x67], bl
jne 0x49b562
mov dword [ebp - 0x10], str._o_par
mov dword [ebp + 0x4c], eax
and dword [ebp + 0x4c], 0x20
je 0x49b572
mov dword [ebp - 0x80], str._o_shared
cmp dword [ebp + 0x4c], ebx
je 0x49b57a
mov byte [ebp + 0x5b], bl
mov ecx, dword [ebp - 0x48]
mov eax, ecx
and eax, 0x200
or eax, ebx
jne 0x49b5a4
cmp dword [ebp + 0x4c], ebx
jne 0x49b5a4
cmp byte [ebp + 0x6f], bl
je 0x49b5a7
and ecx, 0x100
mov eax, ecx
or eax, ebx
je 0x49b5a7
mov byte [ebp + 0x5b], 1
jmp 0x49b5a7
mov byte [ebp + 0x5b], bl
cmp dword [0x4d9840], 8
jl 0x49b6b8
cmp byte [ebp + 0x6f], bl
je 0x49b5c2
cmp byte [ebp + 0x5b], bl
jne 0x49b6b8
cmp byte [ebp + 0x6f], bl
mov dword [ebp + 0x2c], edi
jne 0x49b5d8
cmp byte [ebp + 0x66], bl
jne 0x49b5e1
mov dword [ebp + 0x2c], str._o_ro
jmp 0x49b5e1
cmp dword [ebp + 0x4c], ebx
jne 0x49b5e1
mov byte [ebp + 0x37], 1
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
push dword [ebp + 0x48]
mov edi, eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea eax, [eax + edi + 0x800]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00444a55
push dword [ebp + 0x28]
push esi
push dword [ebp - 8]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push dword [ebp + 0x2c]
push str.imdisk__a___s__s__s___b__sb__s__sb__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.user32.dll_wsprintfW]
mov eax, dword [ebp + 0x38]
add esp, 0x20
mov dword [ebp + 0x20], eax
cmp word [eax], bx
je 0x49b6a4
push 2
lea eax, [ebp + 0x20]
push eax
push 0x4cc7d8
call fcn.0043f7dc
add esp, 0xc
test al, al
jne 0x49b66a
push 2
lea eax, [ebp + 0x20]
push eax
push 0x4cc7d0
call fcn.0043f7dc
add esp, 0xc
test al, al
jne 0x49b66a
lea eax, [ebp + 0x20]
push eax
call fcn.00409168
jmp 0x49b698
mov ecx, dword [ebp + 0x20]
xor eax, eax
jmp 0x49b687
call fcn.00402d55
test al, al
jne 0x49b68f
mov word [ecx], 0x20
mov ecx, dword [ebp + 0x20]
inc ecx
inc ecx
mov dword [ebp + 0x20], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x49b671
lea eax, [ebp + 0x20]
push eax
call fcn.0043e425
mov eax, dword [ebp + 0x20]
cmp word [eax], bx
pop ecx
jne 0x49b631
mov eax, dword [ebp + 0x38]
push eax
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
jmp 0x49ba42
cmp byte [ebp + 0x6f], bl
je 0x49b6eb
push ebx
push 0xa0000080
push 3
push ebx
push 7
push 0xc0000000
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
cmp eax, 0xffffffff
je 0x49c17e
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [ebp + 0x4c], edi
jmp 0x49b6f2
mov dword [ebp + 0x4c], 0x4cc7c8
cmp dword [ebp - 0x34], ebx
jl 0x49b710
jg 0x49b6fe
cmp dword [ebp - 0x38], ebx
jbe 0x49b710
push dword [ebp - 0x34]
lea eax, [esi + 0x6a]
push dword [ebp - 0x38]
push eax
call fcn.0049a8ca
add esp, 0xc
push 0x5c
push ebx
push dword [ebp + 0x28]
call dword [sym.imp.shlwapi.dll_StrRChrW]
mov esi, eax
cmp esi, ebx
jne 0x49b727
mov esi, dword [ebp + 0x28]
jmp 0x49b729
inc esi
inc esi
mov eax, dword [ebp + 0x3c]
cmp word [eax], bx
jne 0x49b760
push 0x800
lea ecx, [ebp + 0x3c]
call fcn.00444a55
mov edi, dword [ebp + 0x3c]
call fcn.00440b02
push eax
push dword [ebp - 0xa8]
push dword [ebp - 8]
push esi
push str._s_s_s__u
push edi
call dword [sym.imp.user32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x3c]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov esi, eax
mov eax, 0x400
cmp esi, eax
jle 0x49b780
mov esi, eax
mov eax, dword [ebp + 0x3c]
mov word [eax + 0x800], bx
push str.Global_
lea ecx, [ebp - 0x14]
call fcn.0044e03e
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x14]
call fcn.00444a7c
push str._devio_Ack
lea ecx, [ebp - 0x14]
call fcn.00444a7c
mov eax, dword [ebp - 4]
mov word [eax], bx
mov eax, dword [ebp - 0x48]
and eax, 0x30
or eax, ebx
mov word [ebp - 0x1d4], bx
jne 0x49b7d3
cmp byte [ebp + 0x6f], bl
je 0x49b885
mov eax, dword [ebp - 0x48]
and eax, 0x40
or eax, ebx
jne 0x49b885
mov edi, dword [ebp - 4]
push 0x10
push str.__kill:
push edi
call fcn.004143a0
add esp, 0xc
push 0x104
add edi, 0x27e
push edi
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
mov eax, dword [ebp - 4]
push 0x104
add eax, 0xe
push eax
push edi
call dword [sym.imp.KERNEL32.DLL_GetShortPathNameW]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov edi, dword [ebp + 0x54]
cmp word [edi], 0x22
mov dword [ebp - 0x70], eax
mov dword [ebp + 0x2c], edi
jne 0x49b83c
add dword [ebp + 0x54], 2
jmp 0x49b832
cmp ax, 0x22
je 0x49b849
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x49b82a
jmp 0x49b849
lea eax, [ebp + 0x2c]
push eax
call fcn.00405a01
mov edi, dword [ebp + 0x2c]
pop ecx
mov ax, word [edi]
mov word [ebp + 0x2c], ax
mov word [edi], bx
mov eax, dword [ebp - 0x48]
and eax, 0x20
or eax, ebx
mov eax, str._LOAD_25_poweroff
jne 0x49b867
mov eax, str._RAMD_ImdiskV__D__m__s_
push dword [ebp + 0x54]
mov ecx, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 4]
lea eax, [eax + ecx*2]
push eax
call dword [sym.imp.user32.dll_wsprintfW]
mov ax, word [ebp + 0x2c]
add esp, 0xc
mov word [edi], ax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov cl, 1
call fcn.004ad2b0
and eax, 3
je 0x49b8ad
push eax
lea eax, [ebp - 0x1d4]
push str._nrc:_d
push eax
call dword [sym.imp.user32.dll_wsprintfW]
add esp, 0xc
push ebx
mov edi, 0x200
push edi
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.004acfc0
push edx
push eax
push dword [ebp - 8]
call fcn.0049a8ca
add esp, 0xc
push ebx
push edi
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
call fcn.004acfc0
mov edi, dword [ebp - 0xa8]
push edx
push eax
push edi
call fcn.0049a8ca
mov ecx, dword [ebp + 0x7c]
add esp, 0xc
push 0x4c37c0
push str.__ImdMapPid
call fcn.0044414b
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
push dword [ebp + 0x28]
mov dword [ebp - 0x70], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
add eax, dword [ebp - 0x70]
lea ecx, [ebp - 0x30]
lea eax, [eax + esi + 0x940]
push eax
call fcn.00444a2e
push str.Global_
lea ecx, [ebp - 0x40]
call fcn.0044df7a
push dword [ebp + 0x3c]
lea ecx, [ebp - 0x40]
call fcn.00444a7c
push dword [ebp - 0x40]
push ebx
push 2
call dword [sym.imp.KERNEL32.DLL_OpenFileMappingW]
cmp eax, ebx
jne 0x49c190
lea ecx, [ebp - 0x40]
call fcn.0043e48d
lea eax, [edi + 0x6a]
lea ecx, [eax + 0x6a]
push ecx
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x1d4]
push edi
push dword [ebp + 0x28]
push dword [ebp + 0x3c]
push dword [ebp + 0x4c]
push eax
push dword [ebp - 0x28]
push dword [ebp - 4]
push dword [ebp + 0x44]
push str.EXEC___pid:__ImdMapPid____exe:_s10INDATA___nfb___MyName0____s__w:60000__s__s__s_shm:_s___s__s__s__s__s
push dword [ebp - 0x30]
call dword [sym.imp.user32.dll_wsprintfW]
add esp, 0x34
add esi, 0x800
push esi
lea ecx, [ebp + 0x5c]
call fcn.00444a55
mov eax, dword [ebp - 8]
mov word [eax], bx
mov word [edi], bx
push dword [ebp + 0x3c]
push dword [ebp - 0x80]
push dword [ebp - 0x10]
push 0x4bfa2c
push str.imdisk__a__t_proxy__s__s__s__o_shm__f__s
push dword [ebp + 0x5c]
call dword [sym.imp.user32.dll_wsprintfW]
add esp, 0x18
push dword [ebp + 0x38]
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
push dword [ebp - 0x14]
mov eax, dword [ebp + 0x5c]
push ebx
push ebx
push ebx
mov dword [ebp + 0x60], eax
call dword [sym.imp.KERNEL32.DLL_CreateEventW]
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push ebx
push dword [ebp - 0x30]
mov esi, eax
call fcn.00433da9
push 0xea60
push esi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp edi, ebx
jne 0x49c1b9
push 0x32
pop esi
push ebx
call dword [sym.imp.KERNEL32.DLL_Sleep]
dec esi
jne 0x49ba1e
cmp dword [ebp - 0x7c], ebx
jle 0x49ba3a
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push dword [ebp - 0x7c]
call fcn.00415f6a
lea ecx, [ebp - 0x30]
call fcn.0043e48d
mov eax, dword [ebp + 0x38]
mov dword [ebp + 0x48], eax
lea ecx, [ebp - 0x2c]
mov word [eax], bx
mov dword [ebp - 0xdc], 1
call fcn.0043e48d
mov esi, 0x4dbd30
mov ax, word [ebp - 0x84]
mov ecx, dword [ebp - 0xd4]
mov word [ecx], ax
jmp 0x49bef2
push 4
lea eax, [ebp + 0x48]
push eax
push str._exe
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49ba95
mov dword [ebp + 0x24], 1
push 5
lea eax, [ebp + 0x48]
push eax
push str._nexe
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49bab3
mov dword [ebp + 0x24], 0xfff00000
push 6
lea eax, [ebp + 0x48]
push eax
push str._nexe1
call fcn.00446a34
add esp, 0xc
test al, al
je 0x49badb
mov dword [ebp + 0x24], 0xfff00000
mov dword [ebp - 0x8c], 1
push 0x2c
pop esi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044785b
mov eax, dword [ebp - 0x1c]
mov word [eax], bx
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49bba8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044785b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49bba8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044785b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49bba8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044785b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49bba8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044785b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49bba8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044785b
mov eax, dword [ebp + 0x60]
add esp, 0xc
cmp word [eax], bx
je 0x49bba8
add dword [ebp + 0x60], edi
push esi
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00447a2c
add esp, 0xc
push 6
lea ecx, [ebp + 0x50]
mov byte [ebp + 0x66], bl
call fcn.00444a55
mov eax, dword [ebp + 0x50]
mov word [eax + 2], 0x3a
mov eax, dword [ebp + 0x50]
mov word [eax + 4], bx
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49bc44
push eax
call fcn.004ac5b9
test eax, eax
pop ecx
je 0x49bc3c
mov eax, dword [ebp + 0x50]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xf8], str.imdisk
mov dword [ebp - 0xf4], 0x4cc8bc
mov dword [ebp - 0xf0], 0x4cc59c
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], ebx
call fcn.00444a10
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xf8]
push eax
push 4
call fcn.0042549e
add esp, 0xc
neg eax
sbb al, al
inc al
lea ecx, [ebp - 0xb0]
mov byte [ebp + 0x66], al
call fcn.0043e48d
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
jne 0x49bc5d
push 0x4c4514
lea ecx, [ebp + 0x50]
call fcn.0044dfe2
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49c1da
push 0x3c
lea ecx, [ebp]
call fcn.00444a2e
mov eax, dword [ebp - 0x1c]
or esi, 0xffffffff
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], esi
mov dword [ebp + 0x40], eax
cmp word [eax], bx
mov edi, esi
je 0x49c1d2
lea eax, [ebp + 0x40]
push eax
call fcn.0043e425
mov eax, dword [ebp + 0x40]
mov ax, word [eax]
or ax, 0x20
cmp ax, 0x70
pop ecx
jne 0x49bcc1
lea eax, [ebp - 0x94]
jmp 0x49bcdb
cmp ax, 0x6c
jne 0x49bccf
lea eax, [ebp - 0x9c]
jmp 0x49bcdb
cmp ax, 0x68
jne 0x49bcf3
lea eax, [ebp - 0xc8]
add dword [ebp + 0x40], 2
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.0045152f
mov eax, dword [ebp + 0x40]
cmp word [eax], bx
pop ecx
pop ecx
jne 0x49bc9f
cmp dword [ebp - 0x90], ebx
jl 0x49bd35
jg 0x49bd05
cmp dword [ebp - 0x94], ebx
jbe 0x49bd35
push 1
call fcn.00415188
pop ecx
push dword [ebp - 0x90]
push dword [ebp - 0x94]
push edx
push eax
call fcn.004ad070
push ebx
push 0x64
push edx
push eax
call fcn.004acfc0
mov cl, 0x14
call fcn.004ad2b0
mov edi, eax
mov esi, edx
cmp esi, dword [ebp - 0x98]
jg 0x49bd53
jl 0x49bd47
cmp edi, dword [ebp - 0x9c]
jae 0x49bd53
mov edi, dword [ebp - 0x9c]
mov esi, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xc4]
cmp ecx, ebx
jl 0x49bd85
mov eax, dword [ebp - 0xc8]
jg 0x49bd69
cmp eax, ebx
jbe 0x49bd85
cmp esi, ecx
jl 0x49bd77
jg 0x49bd73
cmp edi, eax
jbe 0x49bd77
mov edi, eax
mov esi, ecx
cmp esi, ebx
jg 0x49bd97
jl 0x49bd81
cmp edi, ebx
ja 0x49bd85
mov edi, eax
mov esi, ecx
cmp esi, ebx
jl 0x49c1d2
jg 0x49bd97
cmp edi, ebx
jb 0x49c1d2
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49c1d2
cmp esi, ebx
jg 0x49bdb2
jl 0x49bdad
cmp edi, ebx
ja 0x49bdb2
xor edi, edi
inc edi
xor esi, esi
push esi
push edi
push dword [ebp]
call fcn.0049a8e4
add esp, 0xc
push 0x4cc594
lea ecx, [ebp]
call fcn.00444a7c
cmp byte [ebp + 0x66], bl
mov eax, str.imdisk___e
jne 0x49bddb
mov eax, str.imdisk___a
push eax
lea ecx, [ebp + 0x5c]
call fcn.0044dfe2
mov eax, dword [ebp - 0xd0]
and eax, 1
xor ecx, ecx
or eax, ecx
je 0x49be00
push str.__o_awe
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
mov eax, dword [ebp]
cmp word [eax], bx
je 0x49be20
push str.___s
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
push dword [ebp]
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
mov eax, dword [ebp + 0x50]
cmp word [eax], bx
je 0x49be40
push str.___m
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
push dword [ebp + 0x50]
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
mov eax, dword [ebp + 4]
cmp word [eax], bx
jne 0x49be54
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x49bedf
push str.___p__
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
mov eax, dword [ebp + 4]
cmp word [eax], bx
je 0x49be81
push str.__FS:
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
push dword [ebp + 4]
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
mov eax, dword [ebp - 0xc]
cmp word [eax], bx
je 0x49bea1
push str.__V:
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
push dword [ebp - 0xc]
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
push dword [ebp + 4]
push str.NTFS
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x49bed2
mov eax, dword [ebp - 0x3c]
mov ax, word [eax]
cmp ax, bx
je 0x49bed2
cmp ax, 0x30
je 0x49bed2
push 0x4c89f4
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
push str.___Q__Y__X__
lea ecx, [ebp + 0x5c]
call fcn.00444a7c
mov eax, dword [ebp + 0x5c]
lea ecx, [ebp]
mov dword [ebp + 0x60], eax
call fcn.0043e48d
mov esi, 0x4dbd30
lea eax, [ebp + 0x48]
push eax
call fcn.0043e425
push 4
push dword [ebp + 0x48]
push str._gui
call fcn.0043f82d
add esp, 0x10
test al, al
jne 0x49c1e1
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edi, eax
mov eax, dword [ebp + 0x60]
mov dword [ebp + 0x44], eax
lea eax, [ebp + 0x44]
push eax
sub edi, 0xc8
call fcn.00405a01
pop ecx
push dword [ebp + 0x44]
lea ecx, [ebp - 0x54]
call fcn.0044e03e
mov eax, dword [ebp - 0x54]
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], eax
jmp 0x49bf9b
push 6
lea eax, [ebp + 0x54]
push eax
push str.__nbrd
call fcn.00446aa9
add esp, 0xc
test al, al
jne 0x49bf98
push 6
lea eax, [ebp + 0x54]
push eax
push 0x4c093c
call fcn.00446aa9
add esp, 0xc
test al, al
jne 0x49bf98
push 2
lea eax, [ebp + 0x54]
push eax
push 0x4c4af4
call fcn.00446aa9
add esp, 0xc
test al, al
jne 0x49bf98
lea eax, [ebp + 0x54]
push eax
call fcn.00409168
pop ecx
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x49bf49
cmp dword [ebp - 0x18], ebx
jne 0x49c0ad
cmp dword [ebp + 0x24], ebx
jg 0x49c0ad
push ebx
push dword [ebp + 0x60]
lea ecx, [ebp - 0x198]
call fcn.00450d54
cmp dword [ebp - 0x160], 1
jle 0x49c1f8
mov eax, dword [ebp - 0x15c]
mov dword [eax], str.imdisk
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x15c]
push dword [ebp - 0x160]
call fcn.0042549e
add esp, 0xc
cmp byte [ebp + 0x37], bl
mov dword [ebp + 0x1c], eax
mov dword [ebp - 0x74], ebx
jle 0x49c100
cmp eax, 3
jne 0x49c100
cmp dword [ebp - 0x8c], ebx
jne 0x49c100
lea ecx, [ebp - 0x14]
mov byte [ebp + 0x5b], 1
call fcn.0043e48d
lea ecx, [ebp - 0x54]
call fcn.0043e48d
lea ecx, [ebp + 0x28]
call fcn.0043e48d
lea ecx, [ebp - 0x28]
call fcn.0043e48d
lea ecx, [ebp + 0x3c]
call fcn.0043e48d
lea ecx, [ebp - 0x3c]
call fcn.0043e48d
lea ecx, [ebp - 0xc]
call fcn.0043e48d
lea ecx, [ebp + 0x50]
call fcn.0043e48d
lea ecx, [ebp + 4]
call fcn.0043e48d
lea ecx, [ebp - 0x1c]
call fcn.0043e48d
lea ecx, [ebp + 0x14]
call fcn.0043e48d
lea ecx, [ebp + 0x5c]
call fcn.0043e48d
lea ecx, [ebp - 0xac]
call fcn.0043e48d
lea ecx, [ebp + 0x18]
call fcn.0043e48d
lea ecx, [ebp - 0x24]
call fcn.0043e48d
lea ecx, [ebp + 0x78]
call fcn.0049869a
lea ecx, [ebp - 0x88]
call fcn.0043e48d
jmp 0x49ac04
cmp dword [ebp - 0x8c], ebx
jne 0x49c100
push dword [ebp + 0x14]
lea ecx, [ebp - 0x50]
call fcn.0044df7a
push dword [ebp + 0x44]
lea ecx, [ebp - 0x50]
call fcn.00444a7c
mov eax, dword [ebp + 0x18]
cmp word [eax], bx
mov ecx, dword [ebp + 0x7c]
mov dword [ebp - 0x74], 1
je 0x49c0ed
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x50]
push ecx
push ebx
call fcn.0040a660
jmp 0x49c0f5
push dword [ebp - 0x50]
call fcn.00402ec9
lea ecx, [ebp - 0x50]
mov dword [ebp + 0x1c], eax
call fcn.0043e48d
mov ecx, dword [ebp - 0xdc]
xor eax, eax
or ecx, eax
je 0x49c1ff
cmp dword [ebp + 0x1c], 3
jne 0x49c1ff
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
sub eax, edi
cmp eax, 0x1388
jae 0x49c1ff
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 0xc8
call fcn.00415f6a
mov esi, 0x4dbd30
jmp 0x49bfa0
mov edi, dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
cmp dword [0x4dbd88], ebx
jle 0x49c16c
push esi
call edi
mov ecx, dword [ebp + 0x7c]
push ebx
push ebx
push 1
call fcn.00415f6a
jmp 0x49c14c
push 0xffffffffffffffff
lea ecx, [ebp + 0xf]
call fcn.0041357d
push esi
call edi
jmp 0x49c2d0
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, ebx
jne 0x49c18b
xor eax, eax
inc eax
mov dword [ebp + 0x1c], eax
jmp 0x49c1c8
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
lea ecx, [ebp - 0x40]
call fcn.0043e48d
lea ecx, [ebp - 0x30]
call fcn.0043e48d
lea ecx, [ebp - 0x2c]
call fcn.0043e48d
mov ebx, 0xb7
jmp 0x49c24d
lea ecx, [ebp - 0x30]
mov dword [ebp + 0x1c], 1
call fcn.0043e48d
lea ecx, [ebp - 0x2c]
call fcn.0043e48d
jmp 0x49c1ff
lea ecx, [ebp]
call fcn.0043e48d
mov ebx, 0x80070057
jmp 0x49c24d
mov ecx, dword [ebp + 0x7c]
push 0xffffffffffffff9c
push 0x4bfa2c
push ebx
push str.imdisk.cpl_
call fcn.00459b67
jmp 0x49c24d
mov dword [ebp + 0x1c], 0x80070057
mov eax, dword [ebp - 0x158]
cmp eax, ebx
je 0x49c21a
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
mov dword [ebp - 0x158], ebx
call fcn.0043e48d
mov edx, dword [ebp + 0x18]
cmp word [edx], bx
je 0x49c24a
cmp dword [ebp - 0x74], ebx
jne 0x49c24a
mov ecx, dword [ebp - 0x24]
mov word [ebp - 0x214], bx
cmp word [ecx], 0x2a
lea eax, [ebp - 0x214]
jne 0x49c240
lea eax, [ecx + 2]
mov ecx, dword [ebp + 0x7c]
push eax
push edx
call fcn.0044414b
mov ebx, dword [ebp + 0x1c]
lea ecx, [ebp - 0x14]
call fcn.0043e48d
lea ecx, [ebp - 0x54]
call fcn.0043e48d
lea ecx, [ebp + 0x28]
call fcn.0043e48d
lea ecx, [ebp - 0x28]
call fcn.0043e48d
lea ecx, [ebp + 0x3c]
call fcn.0043e48d
lea ecx, [ebp - 0x3c]
call fcn.0043e48d
lea ecx, [ebp - 0xc]
call fcn.0043e48d
lea ecx, [ebp + 0x50]
call fcn.0043e48d
lea ecx, [ebp + 4]
call fcn.0043e48d
lea ecx, [ebp - 0x1c]
call fcn.0043e48d
lea ecx, [ebp + 0x14]
call fcn.0043e48d
lea ecx, [ebp + 0x5c]
call fcn.0043e48d
lea ecx, [ebp - 0xac]
call fcn.0043e48d
lea ecx, [ebp + 0x18]
call fcn.0043e48d
lea ecx, [ebp - 0x24]
call fcn.0043e48d
lea ecx, [ebp + 0x78]
call fcn.0049869a
lea ecx, [ebp - 0x88]
call fcn.0043e48d
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x70
leave
ret