Function at 0x480750
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x68b52f
mov eax, dword fs:[0]
push eax
mov eax, 0x10a54
call fcn.00593d40
mov eax, dword [0x76c12c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x109dc], ebx
mov edi, ecx
mov dword [ebp - 0x109d8], edi
mov dword [ebp - 0x109d4], ebx
mov dword [ebp - 0x109d0], ebx
mov dword [ebp - 0x109cc], ebx
lea esi, [ebp - 0x4bc]
mov dword [ebp - 4], 1
call fcn.004988b0
lea esi, [ebp - 0x514]
mov byte [ebp - 4], 2
call fcn.00498b10
mov byte [ebp - 4], 3
cmp dword [ebp - 0x504], ebx
je 0x481423
cmp dword [ebp - 0x4ac], ebx
je 0x481423
lea ecx, [ebp - 0x109f4]
call fcn.00409bf0
push str.searchplugins_
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 4
call fcn.00402050
mov edi, eax
lea eax, [ebp - 0x109b8]
push eax
mov esi, str.extensions.
mov byte [ebp - 4], 5
call fcn.00481b00
push ebx
push edi
push eax
lea ecx, [ebp - 0x514]
push ecx
lea edx, [ebp - 0x42c]
push edx
mov byte [ebp - 4], 6
call fcn.00482c30
add esp, 0x14
push eax
lea ecx, [ebp - 0x109f4]
mov byte [ebp - 4], 7
call fcn.004484f0
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 6
call fcn.00401750
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x109b8]
cmp eax, ebx
je 0x480876
dec dword [eax + 0x1c]
jne 0x480876
mov eax, dword [ebp - 0x109b8]
push ebx
push eax
call fcn.0047e1c0
add esp, 8
mov dword [ebp - 0x109b8], ebx
lea ecx, [ebp - 0x109ac]
mov byte [ebp - 4], 5
call fcn.004361b0
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 4
call fcn.00401750
push str.searchplugins_
lea ecx, [ebp - 0x468]
call fcn.00402050
mov edi, eax
lea ecx, [ebp - 0x109b8]
push ecx
mov esi, str.plugins.
mov byte [ebp - 4], 9
call fcn.00481b00
push ebx
push edi
push eax
lea edx, [ebp - 0x4bc]
push edx
lea eax, [ebp - 0x42c]
push eax
mov byte [ebp - 4], 0xa
call fcn.00482c30
add esp, 0x14
push eax
lea ecx, [ebp - 0x109f4]
mov byte [ebp - 4], 0xb
call fcn.004484f0
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xa
call fcn.00401750
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x109b8]
cmp eax, ebx
je 0x480920
dec dword [eax + 0x1c]
jne 0x480920
mov ecx, dword [ebp - 0x109b8]
push ebx
push ecx
call fcn.0047e1c0
add esp, 8
mov dword [ebp - 0x109b8], ebx
lea ecx, [ebp - 0x109ac]
mov byte [ebp - 4], 9
call fcn.004361b0
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 4
call fcn.00401750
push str.browser_searchplugins_
lea ecx, [ebp - 0x468]
call fcn.00402050
mov edi, eax
lea edx, [ebp - 0x109b8]
push edx
mov esi, str.plugins.
mov byte [ebp - 4], 0xd
call fcn.00481b00
push ebx
push edi
push eax
lea eax, [ebp - 0x4bc]
push eax
lea ecx, [ebp - 0x42c]
push ecx
mov byte [ebp - 4], 0xe
call fcn.00482c30
add esp, 0x14
push eax
lea ecx, [ebp - 0x109f4]
mov byte [ebp - 4], 0xf
call fcn.004484f0
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xe
call fcn.00401750
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x109b8]
cmp eax, ebx
je 0x4809ca
dec dword [eax + 0x1c]
jne 0x4809ca
mov edx, dword [ebp - 0x109b8]
push ebx
push edx
call fcn.0047e1c0
add esp, 8
mov dword [ebp - 0x109b8], ebx
lea ecx, [ebp - 0x109ac]
mov byte [ebp - 4], 0xd
call fcn.004361b0
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 4
call fcn.00401750
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x109c0], esp
push str.browser.search.selectedEngine
call fcn.00402050
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 4
call fcn.00480030
sub esp, 0x1c
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x109c0], esp
push str.browser.search.defaultenginename
call fcn.00402050
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
call fcn.00480030
sub esp, 0x1c
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x109c0], esp
push str.browser.search.useDBForOrder
call fcn.00402050
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x584]
mov byte [ebp - 4], 0x14
call fcn.00480030
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0x16
call fcn.004031a0
push str.prefs.js
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0x17
call fcn.00402050
mov edi, eax
lea eax, [ebp - 0x109b8]
push eax
mov esi, str.extensions.
mov byte [ebp - 4], 0x18
call fcn.00481b00
mov dword [ebp - 0x109bc], eax
lea esi, [ebp - 0x468]
mov byte [ebp - 4], 0x19
call fcn.00498b10
push ebx
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x109bc]
push edi
push ecx
push eax
lea edx, [ebp - 0x42c]
push edx
call fcn.00482c30
add esp, 0x14
push eax
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0x1b
call fcn.00401690
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x1a
call fcn.00401750
mov ecx, esi
mov byte [ebp - 4], 0x19
call fcn.00401750
mov byte [ebp - 4], 0x1c
mov eax, dword [ebp - 0x109b8]
cmp eax, ebx
je 0x480b27
dec dword [eax + 0x1c]
jne 0x480b27
mov eax, dword [ebp - 0x109b8]
push ebx
push eax
call fcn.0047e1c0
add esp, 8
mov dword [ebp - 0x109b8], ebx
lea ecx, [ebp - 0x109ac]
mov byte [ebp - 4], 0x18
call fcn.004361b0
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0x17
call fcn.00401750
cmp dword [ebp - 0x574], ebx
jne 0x480bc2
call fcn.004402f0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x109c0], esp
push 0x70c3cc
mov esi, eax
call fcn.00402050
sub esp, 0x1c
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x109bc], esp
push str.user_pref__browser.search.useDBForOrder____false___
call fcn.00402050
sub esp, 0x1c
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x109e0], esp
push 0x70c3cc
call fcn.00402050
sub esp, 0x1c
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x4d8]
mov ecx, esp
mov dword [ebp - 0x109c4], esp
push edx
call fcn.00403170
mov byte [ebp - 4], 0x20
jmp 0x480c2f
call fcn.004402f0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x109c4], esp
push 0x70c3cc
mov esi, eax
call fcn.00402050
sub esp, 0x1c
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0x109e0], esp
push str.browser.search.useDBForOrder____false___
call fcn.00402050
sub esp, 0x1c
mov byte [ebp - 4], 0x22
mov ecx, esp
mov dword [ebp - 0x109c0], esp
push str.browser.search.useDBForOrder.
call fcn.00402050
sub esp, 0x1c
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x4d8]
mov ecx, esp
mov dword [ebp - 0x109bc], esp
push edx
call fcn.00403170
mov byte [ebp - 4], 0x24
mov eax, dword [esi]
mov eax, dword [eax + 0x34]
mov ecx, esi
mov byte [ebp - 4], 0x17
call eax
cmp dword [ebp - 0x438], ebx
jne 0x480cc2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x109c4], esp
push str.browser.search.order.1
call fcn.00402050
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x17
call fcn.00480030
push eax
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x26
call fcn.00401690
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x17
call fcn.00401750
cmp dword [ebp - 0x438], ebx
jne 0x480cc2
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x5a0]
push ecx
lea ecx, [ebp - 0x448]
call fcn.004018e0
cmp dword [ebp - 0x438], ebx
jne 0x480cc2
push 6
push str.Google
lea ecx, [ebp - 0x448]
call fcn.00401f00
lea esi, [ebp - 0x10a28]
call fcn.00498d70
push 0x70c3cc
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x27
call fcn.00402050
mov edi, eax
lea edx, [ebp - 0x109b8]
push edx
mov esi, 0x713930
mov byte [ebp - 4], 0x28
call fcn.00481b00
push ebx
push edi
push eax
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x42c]
push ecx
mov byte [ebp - 4], 0x29
call fcn.00482c30
add esp, 0x14
push eax
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x2a
call fcn.00401690
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x29
call fcn.00401750
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x109b8]
cmp eax, ebx
je 0x480d57
dec dword [eax + 0x1c]
jne 0x480d57
mov edx, dword [ebp - 0x109b8]
push ebx
push edx
call fcn.0047e1c0
add esp, 8
mov dword [ebp - 0x109b8], ebx
lea ecx, [ebp - 0x109ac]
mov byte [ebp - 4], 0x28
call fcn.004361b0
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x27
call fcn.00401750
mov eax, dword [ebp - 0x109f4]
mov dword [ebp - 0x109bc], eax
cmp eax, dword [ebp - 0x109f0]
je 0x481318
mov edi, vtable.OpenSearchDesc.0
mov eax, dword [ebp - 0x109bc]
push eax
lea ecx, [ebp - 0x484]
call fcn.00403170
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x470], 8
mov eax, dword [ebp - 0x484]
jae 0x480dc3
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x410]
push str._s.
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x958]
push edx
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0x109c0], esi
cmp esi, 0xffffffff
je 0x4812ee
mov edi, edi
lea ecx, [ebp - 0x92c]
push ecx
lea ecx, [ebp - 0x4a0]
call fcn.00402050
push 1
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x490]
push 0x70f018
push edx
push ebx
lea ecx, [ebp - 0x4a0]
call fcn.00403060
test eax, eax
je 0x4812c2
mov eax, dword [ebp - 0x490]
push 2
push 0x713d18
push eax
push ebx
lea ecx, [ebp - 0x4a0]
call fcn.00403060
test eax, eax
je 0x4812c2
cmp dword [ebp - 0x470], 8
mov eax, dword [ebp - 0x484]
jae 0x480e6f
lea eax, [ebp - 0x484]
lea ecx, [ebp - 0x92c]
push ecx
push eax
lea edx, [ebp - 0x410]
push str._s_s
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
mov eax, dword [ebp - 0x958]
shr eax, 4
add esp, 0x10
and eax, 1
jne 0x4812c2
lea ecx, [ebp - 0x10968]
mov eax, ecx
neg eax
and eax, 3
lea edx, [ebp + eax - 0x10968]
lea eax, [ebp - 0x968]
mov dword [ebp - 0x109a8], edi
mov dword [ebp - 0x109a4], ebx
mov dword [ebp - 0x109a0], ebx
mov dword [ebp - 0x10994], ebx
mov dword [ebp - 0x10990], ebx
mov dword [ebp - 0x1098c], ebx
mov dword [ebp - 0x10984], ebx
mov dword [ebp - 0x968], ebx
mov dword [ebp - 0x964], ebx
mov dword [ebp - 0x10974], ecx
mov dword [ebp - 0x10970], edx
mov dword [ebp - 0x1096c], eax
mov dword [ebp - 0x960], ebx
lea ecx, [ebp - 0x708]
push ecx
mov byte [ebp - 4], 0x2e
call fcn.0047e910
lea edx, [ebp - 0x484]
push edx
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x2f
call fcn.00403170
lea ecx, [ebp - 0x4a0]
push ecx
push eax
lea edx, [ebp - 0x54c]
push edx
mov byte [ebp - 4], 0x30
call fcn.004179e0
add esp, 0xc
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x32
call fcn.00401750
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x109a8]
push ecx
call fcn.0047eda0
test al, al
je 0x4810ed
lea ebx, [ebp - 0x530]
lea ecx, [ebp - 0x109a8]
call fcn.0047ee10
lea edx, [ebp - 0x42c]
lea ecx, [ebp - 0x109a8]
mov byte [ebp - 4], 0x33
call fcn.0047f010
lea edx, [ebp - 0x10a40]
push edx
lea eax, [ebp - 0x954]
push eax
mov byte [ebp - 4], 0x34
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x481419
lea ecx, [ebp - 0x10a40]
push ecx
lea ebx, [ebp - 0x109e4]
call fcn.0047e880
lea edx, [ebp - 0x530]
push edx
lea ecx, [ebp - 0x10a60]
call fcn.00403170
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x10a60]
push eax
lea ecx, [ebp - 0x704]
mov byte [ebp - 4], 0x35
call fcn.004018e0
mov bl, 0x34
lea ecx, [ebp - 0x10a60]
mov byte [ebp - 4], bl
call fcn.00401750
lea ecx, [ebp - 0x42c]
push ecx
lea ecx, [ebp - 0x4f8]
call fcn.00403170
push 0xffffffffffffffff
push 0
lea edx, [ebp - 0x4f8]
push edx
lea ecx, [ebp - 0x5f8]
mov byte [ebp - 4], 0x36
call fcn.004018e0
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], bl
call fcn.00401750
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x468]
call fcn.00403170
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x468]
push ecx
lea ecx, [ebp - 0x63c]
mov byte [ebp - 4], 0x37
call fcn.004018e0
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], bl
call fcn.00401750
cmp dword [ebp - 0x434], 8
mov eax, dword [ebp - 0x109e0]
mov edx, dword [ebp - 0x109e4]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x620], edx
jae 0x4810a6
lea eax, [ebp - 0x448]
mov ecx, dword [ebp - 0x438]
push ecx
push 0
push eax
lea ecx, [ebp - 0x530]
call fcn.00409980
xor edx, edx
cmp eax, 0xffffffff
setne dl
lea ecx, [ebp - 0x42c]
lea edx, [edx + edx + 7]
mov dword [ebp - 0x6e8], edx
mov byte [ebp - 4], 0x33
call fcn.00401750
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x32
call fcn.00401750
xor ebx, ebx
push str._app__
lea ecx, [ebp - 0x568]
call fcn.00402050
lea eax, [ebp - 0x92c]
mov byte [ebp - 4], 0x38
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x481110
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x92c]
push eax
lea ecx, [ebp - 0x568]
call fcn.00401290
mov al, byte [ebp - 0x10a20]
cmp al, bl
je 0x481144
cmp al, 7
jne 0x48123d
mov esi, 0xffffff00
and dword [ebp - 0x10a00], esi
and dword [ebp - 0x10a00], 0xfffffeff
mov dword [ebp - 0x109fc], ebx
lea ecx, [ebp - 0x568]
push ecx
lea edx, [ebp - 0x5d8]
push edx
mov byte [ebp - 4], 0x3a
call fcn.00561bf0
add esp, 8
push eax
lea eax, [ebp - 0x10a38]
push eax
lea ecx, [ebp - 0x10a28]
push ecx
lea ecx, [ebp - 0x10a08]
mov byte [ebp - 4], 0x3b
call fcn.0046aa00
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0x3d
call fcn.00404b20
lea ecx, [ebp - 0x10a08]
mov byte [ebp - 4], 0x3e
call fcn.00469540
mov al, byte [ebp - 0x10a30]
cmp al, bl
je 0x4811c3
cmp al, 7
jne 0x48122e
and dword [ebp - 0x109b0], esi
and dword [ebp - 0x109b0], 0xfffffeff
mov dword [ebp - 0x109ac], ebx
lea edx, [ebp - 0x109b8]
push edx
mov eax, str.hidden
lea esi, [ebp - 0x10a18]
lea ecx, [ebp - 0x10a38]
mov byte [ebp - 4], 0x40
call fcn.0046a9d0
lea ecx, [ebp - 0x109b8]
mov byte [ebp - 4], 0x42
call fcn.00469540
cmp byte [ebp - 0x10a10], 5
jne 0x48121f
mov eax, esi
call fcn.00469ce0
mov byte [ebp - 0x5dc], al
lea ecx, [ebp - 0x10a18]
mov byte [ebp - 4], 0x3e
call fcn.00469540
lea ecx, [ebp - 0x10a38]
mov byte [ebp - 4], 0x38
call fcn.00469540
lea ecx, [ebp - 0x568]
mov byte [ebp - 4], 0x32
call fcn.00401750
lea ecx, [ebp - 0x708]
lea ebx, [ebp - 0x109d4]
call fcn.00481dd0
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 0x2f
call fcn.00401750
lea esi, [ebp - 0x708]
mov byte [ebp - 4], 0x2e
call fcn.0047ea30
mov bl, 0x2d
mov byte [ebp - 4], bl
mov dword [ebp - 0x109a8], edi
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x960]
test eax, eax
je 0x48129d
push eax
call fcn.0058d051
add esp, 4
lea eax, [ebp - 0x109a4]
mov byte [ebp - 4], bl
mov dword [ebp - 0x109c4], eax
lea esi, [ebp - 0x10974]
mov byte [ebp - 4], bl
call fcn.00482150
mov esi, dword [ebp - 0x109c0]
xor ebx, ebx
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x2c
call fcn.00401750
lea ecx, [ebp - 0x958]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x480e00
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0x27
call fcn.00401750
mov eax, dword [ebp - 0x109bc]
add eax, 0x1c
mov dword [ebp - 0x109bc], eax
cmp eax, dword [ebp - 0x109f0]
jne 0x480d98
mov esi, dword [ebp - 0x109d8]
lea edx, [ebp - 0x109d4]
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
cmp esi, edx
je 0x48135c
mov eax, dword [ebp - 0x109d4]
mov ecx, dword [ebp - 0x109d0]
mov edx, dword [ebp - 0x109cc]
mov dword [esi], eax
mov dword [esi + 4], ecx
mov dword [esi + 8], edx
mov dword [ebp - 0x109d4], ebx
mov dword [ebp - 0x109d0], ebx
mov dword [ebp - 0x109cc], ebx
lea ecx, [ebp - 0x10a28]
mov dword [ebp - 0x109dc], 1
mov byte [ebp - 4], 0x17
call fcn.00469540
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0x16
call fcn.00401750
lea ecx, [ebp - 0x584]
mov byte [ebp - 4], 0x14
call fcn.00401750
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x12
call fcn.00401750
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 4
call fcn.00401750
lea ecx, [ebp - 0x109f4]
mov byte [ebp - 4], 3
call fcn.00409ce0
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 2
call fcn.00401750
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 1
call fcn.00401750
mov byte [ebp - 4], bl
cmp dword [ebp - 0x109d4], ebx
je 0x481415
mov eax, dword [ebp - 0x109c4]
mov esi, dword [ebp - 0x109d4]
mov edi, dword [ebp - 0x109d0]
push eax
mov eax, esi
call fcn.00483bd0
add esp, 4
push esi
call fcn.0058d051
mov esi, dword [ebp - 0x109d8]
add esp, 4
mov eax, esi
jmp 0x48147c
push 0x80070057
call fcn.0047e6f0
lea ecx, [ebp - 0x109d4]
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
cmp edi, ecx
je 0x48144f
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [ebp - 0x109d4], ebx
mov dword [ebp - 0x109d0], ebx
mov dword [ebp - 0x109cc], ebx
lea ecx, [ebp - 0x514]
mov dword [ebp - 0x109dc], 1
mov byte [ebp - 4], 2
call fcn.00401750
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 1
call fcn.00401750
mov byte [ebp - 4], bl
mov eax, edi
mov dword [ebp - 0x109cc], ebx
mov dword [ebp - 0x109d0], ebx
mov dword [ebp - 0x109d4], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058cf08
mov esp, ebp
pop ebp
ret