Function at 0x472b70
Capabilities:
Check if file exists

Disassembly:
push 0x270
mov eax, 0x4e26c2
call fcn.004b5417
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
pop ebx
mov dword [ebp - 0x224], ecx
cdq
mov ecx, ebx
idiv ecx
test eax, eax
je 0x4738e9
push 0
mov ecx, esi
call fcn.00481292
push 8
pop edi
cmp dword [eax + 0x18], edi
jb 0x472bb4
mov eax, dword [eax + 4]
jmp 0x472bb7
add eax, 4
push eax
lea ecx, [ebp - 0x250]
call fcn.0044bc85
and dword [ebp - 4], 0
push str.delfile
lea ecx, [ebp - 0x250]
call fcn.0043f457
test eax, eax
jne 0x472e12
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, ebx
cdq
idiv ecx
cmp eax, 3
jne 0x472e12
push 1
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x472c06
mov eax, dword [eax + 4]
jmp 0x472c09
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x24c]
call fcn.00456104
mov byte [ebp - 4], 2
lea eax, [ebp - 0x24c]
push eax
push ecx
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x25c], esp
push eax
call fcn.004420c1
mov byte [ebp - 4], 3
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x224]
call fcn.00470844
xor ebx, ebx
cmp eax, ebx
je 0x472d39
mov eax, dword [ebp - 0x23c]
sub eax, dword [ebp - 0x240]
test eax, 0xfffffffc
je 0x472d39
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x240]
lea ecx, [ebp - 0x22c]
call fcn.00442295
jmp 0x472d02
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.004b47e0
add esp, 0xc
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], 8
jb 0x472cc4
mov edi, dword [eax + 4]
jmp 0x472cc7
lea edi, [eax + 4]
lea ecx, [ebp - 0x22c]
call fcn.0048212d
mov eax, dword [eax]
push edi
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov ecx, dword [ebp - 0x224]
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.00471e67
lea ecx, [ebp - 0x22c]
call fcn.0043cb99
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x234]
call fcn.00442295
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0043cc0e
test al, al
je 0x472c92
jmp 0x472e09
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.0046ba23
pop ecx
pop ecx
test eax, eax
je 0x472d97
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004b47e0
add esp, 0xc
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x472d7d
mov eax, dword [eax + 4]
jmp 0x472d80
add eax, 4
push eax
push dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push ebx
jmp 0x472df7
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x21c]
push eax
call fcn.0046feb5
test al, al
je 0x472e09
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004b47e0
add esp, 0xc
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x472dde
mov eax, dword [eax + 4]
jmp 0x472de1
add eax, 4
push eax
push dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 1
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x218]
push eax
call fcn.00471e67
mov byte [ebp - 4], 1
jmp 0x473092
push str.deldir
lea ecx, [ebp - 0x250]
call fcn.0043f457
test eax, eax
jne 0x4730b0
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, ebx
cdq
idiv ecx
cmp eax, 3
jne 0x4730b0
push 1
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x472e51
mov eax, dword [eax + 4]
jmp 0x472e54
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x24c]
call fcn.00456104
mov byte [ebp - 4], 5
lea eax, [ebp - 0x24c]
push eax
push ecx
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x25c], esp
push eax
call fcn.004420c1
mov byte [ebp - 4], 6
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x224]
call fcn.00470844
xor ebx, ebx
cmp eax, ebx
je 0x472f98
mov eax, dword [ebp - 0x23c]
sub eax, dword [ebp - 0x240]
test eax, 0xfffffffc
je 0x472f98
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x240]
lea ecx, [ebp - 0x22c]
call fcn.00442295
jmp 0x472f61
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.004b47e0
add esp, 0xc
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], 8
jb 0x472f12
mov edi, dword [eax + 4]
jmp 0x472f15
lea edi, [eax + 4]
lea ecx, [ebp - 0x22c]
call fcn.0048212d
mov eax, dword [eax]
push edi
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x472f56
mov ecx, dword [ebp - 0x224]
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.004722ff
lea ecx, [ebp - 0x22c]
call fcn.0043cb99
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x234]
call fcn.00442295
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0043cc0e
test al, al
je 0x472ee0
jmp 0x47308e
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.0046ba23
pop ecx
pop ecx
test eax, eax
je 0x47300b
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004b47e0
add esp, 0xc
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x472fdc
mov eax, dword [eax + 4]
jmp 0x472fdf
add eax, 4
push eax
push dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x47308e
push ebx
jmp 0x47307c
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x21c]
push eax
call fcn.0046feb5
test al, al
je 0x47308e
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call fcn.004b47e0
add esp, 0xc
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x473052
mov eax, dword [eax + 4]
jmp 0x473055
add eax, 4
push eax
push dword [ebp - 0x21c]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x47308e
push 1
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x218]
push eax
call fcn.004722ff
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x24c]
call fcn.00452f5d
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x21c]
call fcn.0040d610
jmp 0x4738da
push str.cpfile
lea ecx, [ebp - 0x250]
call fcn.0043f457
test eax, eax
jne 0x4733b7
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, ebx
cdq
idiv ecx
cmp eax, 5
jne 0x4733b7
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x4730ef
mov eax, dword [eax + 4]
jmp 0x4730f2
add eax, 4
push eax
lea ecx, [ebp - 0x220]
call fcn.0044bc85
mov byte [ebp - 4], 7
push 1
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x473115
mov eax, dword [eax + 4]
jmp 0x473118
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00471c1a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x21c]
call fcn.0040d610
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x220]
call fcn.0040d610
push 4
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x473179
mov eax, dword [eax + 4]
jmp 0x47317c
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 0xc
push 3
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x47319f
mov eax, dword [eax + 4]
jmp 0x4731a2
add eax, 4
push eax
lea ecx, [ebp - 0x220]
call fcn.0044bc85
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.00471c1a
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x220]
call fcn.0040d610
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x21c]
call fcn.0040d610
lea eax, [ebp - 0x27c]
push eax
push dword [ebp - 0x270]
lea ecx, [ebp - 0x22c]
call fcn.00442295
jmp 0x473367
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x240]
lea ecx, [ebp - 0x234]
call fcn.00442295
jmp 0x47332a
call fcn.0048212d
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x473269
lea ecx, [ebp - 0x234]
call fcn.0048212d
mov edi, dword [eax]
lea ecx, [ebp - 0x22c]
call fcn.0048212d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x224]
push 1
push edi
push eax
call fcn.0046f440
jmp 0x47331f
cmp byte [0x53fe3c], 0
je 0x47331f
lea eax, [ebp - 0x25c]
push eax
mov ecx, 0x53fda0
call fcn.0046fad7
mov byte [ebp - 4], 0x11
push 0x4f8b70
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00445250
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 0x12
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], 8
jb 0x4732ba
mov eax, dword [eax + 4]
jmp 0x4732bd
add eax, 4
push eax
lea eax, [ebp - 0x220]
push edi
push eax
call fcn.00445250
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x234]
call fcn.0048212d
mov eax, dword [eax]
mov edi, dword [edi]
mov ecx, dword [ebp - 0x224]
push 1
push eax
push edi
call fcn.0046f440
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x220]
call fcn.0040d610
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x21c]
call fcn.0040d610
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x25c]
call fcn.0040d610
lea ecx, [ebp - 0x234]
call fcn.0043cb99
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x264]
call fcn.00442295
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x234]
call fcn.0043cc0e
lea ecx, [ebp - 0x22c]
test al, al
je 0x47322a
call fcn.0043cb99
lea eax, [ebp - 0x27c]
push eax
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x258]
call fcn.00442295
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0043cc0e
test al, al
je 0x47320d
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x24c]
call fcn.00452f5d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x27c]
jmp 0x4738d5
push str.cpdir
lea ecx, [ebp - 0x250]
call fcn.0043f457
test eax, eax
jne 0x4735d5
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, ebx
cdq
idiv ecx
cmp eax, 5
jne 0x4735d5
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x4733f6
mov eax, dword [eax + 4]
jmp 0x4733f9
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 0x14
push 1
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x47341c
mov eax, dword [eax + 4]
jmp 0x47341f
add eax, 4
push eax
lea ecx, [ebp - 0x220]
call fcn.0044bc85
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.00471c1a
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x220]
call fcn.0040d610
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x21c]
call fcn.0040d610
push 4
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x473480
mov eax, dword [eax + 4]
jmp 0x473483
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 0x19
push 3
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x4734a6
mov eax, dword [eax + 4]
jmp 0x4734a9
add eax, 4
push eax
lea ecx, [ebp - 0x220]
call fcn.0044bc85
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00471c1a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x220]
call fcn.0040d610
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x21c]
call fcn.0040d610
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x240]
lea ecx, [ebp - 0x234]
call fcn.00442295
jmp 0x47359a
lea eax, [ebp - 0x27c]
push eax
push dword [ebp - 0x270]
lea ecx, [ebp - 0x22c]
call fcn.00442295
jmp 0x473561
lea ecx, [ebp - 0x22c]
call fcn.0048212d
mov esi, dword [eax]
lea ecx, [ebp - 0x234]
call fcn.0048212d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x224]
push 1
push esi
push eax
call fcn.0046f74e
lea ecx, [ebp - 0x22c]
call fcn.0043cb99
lea eax, [ebp - 0x27c]
push eax
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x258]
call fcn.00442295
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0043cc0e
test al, al
je 0x47352d
lea ecx, [ebp - 0x234]
call fcn.0043cb99
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x264]
call fcn.00442295
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x234]
call fcn.0043cc0e
test al, al
je 0x473513
mov byte [ebp - 4], 0x18
jmp 0x4738c0
push str.replece
lea ecx, [ebp - 0x250]
call fcn.0043f457
test eax, eax
jne 0x4738da
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
cdq
idiv ebx
cmp eax, 5
jne 0x4738da
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x473612
mov eax, dword [eax + 4]
jmp 0x473615
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 0x1e
push 1
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x473638
mov eax, dword [eax + 4]
jmp 0x47363b
add eax, 4
push eax
lea ecx, [ebp - 0x220]
call fcn.0044bc85
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.00471c1a
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x220]
call fcn.0040d610
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x21c]
call fcn.0040d610
push 4
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x47369c
mov eax, dword [eax + 4]
jmp 0x47369f
add eax, 4
push eax
lea ecx, [ebp - 0x21c]
call fcn.0044bc85
mov byte [ebp - 4], 0x23
push 3
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], edi
jb 0x4736c2
mov eax, dword [eax + 4]
jmp 0x4736c5
add eax, 4
push eax
lea ecx, [ebp - 0x220]
call fcn.0044bc85
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x224]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00471c1a
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x220]
call fcn.0040d610
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x21c]
call fcn.0040d610
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x240]
lea ecx, [ebp - 0x234]
call fcn.00442295
jmp 0x47388a
lea eax, [ebp - 0x27c]
push eax
push dword [ebp - 0x270]
lea ecx, [ebp - 0x22c]
call fcn.00442295
jmp 0x47384d
call fcn.0048212d
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47378c
lea ecx, [ebp - 0x22c]
call fcn.0048212d
mov edi, dword [eax]
lea ecx, [ebp - 0x234]
call fcn.0048212d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x224]
push 1
push edi
push eax
call fcn.0046f440
jmp 0x473842
cmp byte [0x53fe3c], 0
je 0x473842
lea eax, [ebp - 0x21c]
push eax
mov ecx, 0x53fda0
call fcn.0046fad7
mov byte [ebp - 4], 0x28
push 0x4f8b70
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00445250
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 0x29
push 2
mov ecx, esi
call fcn.00481292
cmp dword [eax + 0x18], 8
jb 0x4737dd
mov eax, dword [eax + 4]
jmp 0x4737e0
add eax, 4
push eax
lea eax, [ebp - 0x25c]
push edi
push eax
call fcn.00445250
add esp, 0xc
mov edi, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x22c]
call fcn.0048212d
mov eax, dword [eax]
mov edi, dword [edi]
mov ecx, dword [ebp - 0x224]
push 1
push eax
push edi
call fcn.0046f440
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x25c]
call fcn.0040d610
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x220]
call fcn.0040d610
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x21c]
call fcn.0040d610
lea ecx, [ebp - 0x22c]
call fcn.0043cb99
lea eax, [ebp - 0x27c]
push eax
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x258]
call fcn.00442295
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0043cc0e
lea ecx, [ebp - 0x234]
test al, al
je 0x47374d
call fcn.0043cb99
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x264]
call fcn.00442295
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x234]
call fcn.0043cc0e
test al, al
je 0x473730
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x27c]
call fcn.00452f5d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.00452f5d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.0040d610
xor eax, eax
call fcn.004b549a
ret 4