Function at 0x50ff48
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x6d
push 0
push 0
dec ecx
jne 0x50ff50
push ebx
push esi
push edi
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x51135b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x2c]
call fcn.0050bd18
mov eax, dword [0x5391a0]
cmp byte [eax], 0
je 0x50ff96
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
call fcn.0050c1b8
mov eax, dword [0x538d74]
cmp dword [eax], 6
jne 0x50ffaa
mov eax, dword [0x539034]
cmp dword [eax], 0
je 0x50ffbe
mov eax, dword [0x538d74]
cmp dword [eax], 5
jne 0x50ffc9
mov eax, dword [0x539034]
cmp dword [eax], 2
jne 0x50ffc9
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
call fcn.0050c654
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c]
call fcn.0050d2c4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x40]
call fcn.0050d5a0
lea eax, [ebp - 0x148]
xor ecx, ecx
mov edx, 0x11c
call fcn.00403a70
mov dword [ebp - 0x148], 0x11c
lea eax, [ebp - 0x148]
call fcn.00481534
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x144]
mov dword [eax + 8], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x140]
mov dword [eax + 0xc], edx
movzx eax, word [ebp - 0x13c]
mov edx, dword [ebp - 8]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x138]
sub eax, 1
jb 0x51003d
je 0x510046
dec eax
je 0x51004f
jmp 0x510056
mov eax, dword [ebp - 8]
mov byte [eax + 0x10], 0
jmp 0x510056
mov eax, dword [ebp - 8]
mov byte [eax + 0x10], 1
jmp 0x510056
mov eax, dword [ebp - 8]
mov byte [eax + 0x10], 2
mov eax, dword [ebp - 8]
add eax, 0x14
lea edx, [ebp - 0x134]
mov ecx, 0x80
call fcn.0040645c
lea eax, [ebp - 0x14c]
push eax
mov eax, dword [ebp - 8]
lea ecx, [eax + 0x64]
mov eax, dword [ebp - 8]
lea edx, [eax + 0x5c]
lea eax, [ebp - 0x148]
call fcn.0050dfcc
mov eax, dword [ebp - 8]
add eax, 0x18
xor edx, edx
call fcn.0040625c
mov eax, dword [ebp - 8]
add eax, 0x20
xor edx, edx
call fcn.0040625c
mov eax, dword [ebp - 8]
add eax, 0x1c
xor edx, edx
call fcn.0040625c
call fcn.0050b8a4
mov dword [ebp - 0x1c], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x1c]
call fcn.004317c8
xor ecx, ecx
mov edx, 0x511378
mov eax, dword [ebp - 0x1c]
call fcn.0043182c
test al, al
je 0x510628
mov edx, 0x5113e0
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x510112
mov edx, 0x5113e0
lea ecx, [ebp - 0x150]
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov edx, dword [ebp - 0x150]
mov eax, dword [ebp - 8]
add eax, 0x20
call fcn.0040625c
mov edx, 0x51141c
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x510147
mov edx, 0x51141c
lea ecx, [ebp - 0x154]
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov edx, dword [ebp - 0x154]
mov eax, dword [ebp - 8]
add eax, 0x18
call fcn.0040625c
mov edx, 0x511448
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x51017c
mov edx, 0x511448
lea ecx, [ebp - 0x158]
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov edx, dword [ebp - 0x158]
mov eax, dword [ebp - 8]
add eax, 0x68
call fcn.0040625c
mov edx, 0x51146c
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x5101b1
mov edx, 0x51146c
lea ecx, [ebp - 0x15c]
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov edx, dword [ebp - 0x15c]
mov eax, dword [ebp - 8]
add eax, 0x1c
call fcn.0040625c
mov edx, 0x51148c
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x5101e6
mov edx, 0x51148c
lea ecx, [ebp - 0x160]
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 8]
add eax, 0x48
call fcn.0040625c
mov edx, 0x5114b0
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x51021b
mov edx, 0x5114b0
lea ecx, [ebp - 0x164]
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov edx, dword [ebp - 0x164]
mov eax, dword [ebp - 8]
add eax, 0x60
call fcn.0040625c
mov edx, 0x5114d0
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x510250
mov edx, 0x5114d0
lea ecx, [ebp - 0x168]
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 8]
add eax, 0x60
call fcn.0040625c
mov edx, 0x5114f4
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x510324
xor eax, eax
push ebp
push 0x51028d
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x5114f4
mov eax, dword [ebp - 0x1c]
call fcn.00431d78
mov dword [ebp - 0x10], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x510300
lea eax, [ebp - 0x18]
push eax
movzx eax, word [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x10]
shr eax, 0x10
push eax
call sub.kernel32.dll_DosDateTimeToFileTime
lea eax, [ebp - 0x18]
call fcn.004807cc
mov eax, dword [ebp - 8]
fstp qword [eax + 0x50]
wait
mov edx, 0x51152c
mov eax, dword [ebp - 0x1c]
call fcn.00431e98
test al, al
je 0x510365
push 1
lea eax, [ebp - 0x16c]
push eax
mov ecx, 0x51152c
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 8]
call fcn.0050db08
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 8]
add eax, 0x38
call fcn.0040625c
lea ecx, [ebp - 0x174]
mov edx, 0x511550
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov ecx, dword [ebp - 0x174]
lea eax, [ebp - 0x170]
mov edx, 0x51157c
call fcn.00406730
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x17c]
mov edx, 0x5115a4
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov ecx, dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
mov edx, 0x5115d0
call fcn.00406730
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x184]
mov edx, 0x5115f8
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov ecx, dword [ebp - 0x184]
lea eax, [ebp - 0x180]
mov edx, 0x51161c
call fcn.00406730
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x18c]
mov edx, 0x511638
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov ecx, dword [ebp - 0x18c]
lea eax, [ebp - 0x188]
mov edx, 0x511664
call fcn.00406730
mov edx, dword [ebp - 0x188]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x194]
mov edx, 0x51168c
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov ecx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
mov edx, 0x5116ac
call fcn.00406730
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x19c]
mov edx, 0x5116c8
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov edx, 0x5116ec
call fcn.00406730
mov edx, dword [ebp - 0x198]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x1a4]
mov edx, 0x511708
mov eax, dword [ebp - 0x1c]
call fcn.00431cf8
mov ecx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x1a0]
mov edx, 0x511730
call fcn.00406730
mov edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x1c]
call fcn.00431798
xor ecx, ecx
mov edx, 0x511754
mov eax, dword [ebp - 0x1c]
call fcn.0043182c
test al, al
je 0x510628
mov edx, 0x5117bc
mov eax, dword [ebp - 0x1c]
call fcn.00431ca8
mov dword [ebp - 0x10], eax
mov edx, 0x5117bc
mov eax, dword [ebp - 0x1c]
call fcn.00431cd0
sub al, 4
jne 0x510598
mov eax, dword [ebp - 0x10]
call fcn.004030b0
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x510591
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x10]
push eax
mov edx, 0x5117bc
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
call fcn.00431dc0
lea edx, [ebp - 0x2b]
mov eax, dword [ebp - 0xc]
add eax, 0x34
mov ecx, 0xf
call fcn.00403280
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x510598
mov eax, dword [ebp - 0xc]
call fcn.004030e4
ret
lea ecx, [ebp - 0x1a8]
lea edx, [ebp - 0x2b]
mov eax, dword [ebp - 8]
call fcn.0050dadc
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 8]
add eax, 0x48
call fcn.0040625c
mov edx, 0x5117ec
mov eax, dword [ebp - 0x1c]
call fcn.00431d78
mov dword [ebp - 0x10], eax
mov cx, 1
mov dx, 1
mov ax, 0x7b2
call fcn.0040f734
add esp, 0xfffffff4
fstp xword [esp]
wait
call fcn.0040355c
mov eax, dword [ebp - 8]
fstp qword [eax + 0x50]
wait
mov eax, dword [ebp - 8]
fld qword [eax + 0x50]
fmul dword [0x511804]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x1ac], eax
fild qword [ebp - 0x1b0]
faddp st(1)
fdiv dword [0x511804]
mov eax, dword [ebp - 8]
fstp qword [eax + 0x50]
wait
mov eax, dword [ebp - 0x1c]
call fcn.00431798
mov eax, dword [ebp - 0x1c]
call fcn.004044a0
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 5
jge 0x51070f
mov dword [ebp - 0x10], 0x104
mov eax, dword [ebp - 0x10]
call fcn.0040ddd4
mov ebx, eax
mov eax, dword [ebp - 0x10]
push eax
push ebx
call sub.kernel32.dll_GetWindowsDirectoryW
lea eax, [ebp - 0x1b8]
mov edx, ebx
call fcn.00406408
mov ecx, dword [ebp - 0x1b8]
lea eax, [ebp - 0x1b4]
mov edx, 0x511814
call fcn.00406730
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x10]
push eax
push ebx
call sub.kernel32.dll_GetSystemDirectoryW
lea eax, [ebp - 0x1c0]
mov edx, ebx
call fcn.00406408
mov ecx, dword [ebp - 0x1c0]
lea eax, [ebp - 0x1bc]
mov edx, 0x511834
call fcn.00406730
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push ebx
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_GetTempPathW
lea eax, [ebp - 0x1c8]
mov edx, ebx
call fcn.00406408
mov ecx, dword [ebp - 0x1c8]
lea eax, [ebp - 0x1c4]
mov edx, 0x511850
call fcn.00406730
mov edx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, ebx
call fcn.0040de14
call sub.user32.dll_GetDesktopWindow
mov ebx, eax
lea ecx, [ebp - 0x1d0]
mov edx, 0x30
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x1d0]
lea eax, [ebp - 0x1cc]
mov edx, 0x511868
call fcn.00406730
mov edx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x1d8]
mov edx, 0x1d
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x1d8]
lea eax, [ebp - 0x1d4]
mov edx, 0x51188c
call fcn.00406730
mov edx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x1e0]
mov edx, 0x1a
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x1dc]
mov edx, 0x5118b0
call fcn.00406730
mov edx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x1e8]
mov edx, 0x3b
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x1e8]
lea eax, [ebp - 0x1e4]
mov edx, 0x5118d0
call fcn.00406730
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x1f0]
mov edx, 0x2f
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x1f0]
lea eax, [ebp - 0x1ec]
mov edx, 0x5118f4
call fcn.00406730
mov edx, dword [ebp - 0x1ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x1f8]
mov edx, 0x19
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x1f8]
lea eax, [ebp - 0x1f4]
mov edx, 0x511924
call fcn.00406730
mov edx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x200]
mov edx, 0x1e
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x200]
lea eax, [ebp - 0x1fc]
mov edx, 0x511954
call fcn.00406730
mov edx, dword [ebp - 0x1fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x208]
mov edx, 0x23
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x208]
lea eax, [ebp - 0x204]
mov edx, 0x511984
call fcn.00406730
mov edx, dword [ebp - 0x204]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x210]
mov edx, 0x2e
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
mov edx, 0x5119b0
call fcn.00406730
mov edx, dword [ebp - 0x20c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x218]
mov edx, 0x1f
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x218]
lea eax, [ebp - 0x214]
mov edx, 0x5119e0
call fcn.00406730
mov edx, dword [ebp - 0x214]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x220]
mov edx, 0x35
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x220]
lea eax, [ebp - 0x21c]
mov edx, 0x511a10
call fcn.00406730
mov edx, dword [ebp - 0x21c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x228]
mov edx, 0x36
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x224]
mov edx, 0x511a38
call fcn.00406730
mov edx, dword [ebp - 0x224]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x230]
mov edx, 0x16
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x230]
lea eax, [ebp - 0x22c]
mov edx, 0x511a64
call fcn.00406730
mov edx, dword [ebp - 0x22c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x238]
mov edx, 0x18
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x238]
lea eax, [ebp - 0x234]
mov edx, 0x511a94
call fcn.00406730
mov edx, dword [ebp - 0x234]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x240]
mov edx, 0x2d
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x240]
lea eax, [ebp - 0x23c]
mov edx, 0x511ac0
call fcn.00406730
mov edx, dword [ebp - 0x23c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x248]
mov edx, 0x37
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x248]
lea eax, [ebp - 0x244]
mov edx, 0x511af0
call fcn.00406730
mov edx, dword [ebp - 0x244]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x250]
mov edx, 0x21
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x250]
lea eax, [ebp - 0x24c]
mov edx, 0x511b18
call fcn.00406730
mov edx, dword [ebp - 0x24c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x258]
mov edx, 3
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x258]
lea eax, [ebp - 0x254]
mov edx, 0x511b38
call fcn.00406730
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x260]
xor edx, edx
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x25c]
mov edx, 0x511b58
call fcn.00406730
mov edx, dword [ebp - 0x25c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x268]
mov edx, 0x10
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x268]
lea eax, [ebp - 0x264]
mov edx, 0x511b78
call fcn.00406730
mov edx, dword [ebp - 0x264]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x270]
mov edx, 6
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x270]
lea eax, [ebp - 0x26c]
mov edx, 0x511b9c
call fcn.00406730
mov edx, dword [ebp - 0x26c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x278]
mov edx, 0x11
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x278]
lea eax, [ebp - 0x274]
mov edx, 0x511bc0
call fcn.00406730
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x280]
mov edx, 0x14
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x280]
lea eax, [ebp - 0x27c]
mov edx, 0x511bdc
call fcn.00406730
mov edx, dword [ebp - 0x27c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x288]
mov edx, 0x22
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x284]
mov edx, 0x511bf8
call fcn.00406730
mov edx, dword [ebp - 0x284]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x290]
mov edx, 1
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x290]
lea eax, [ebp - 0x28c]
mov edx, 0x511c18
call fcn.00406730
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x298]
mov edx, 0x20
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x298]
lea eax, [ebp - 0x294]
mov edx, 0x511c38
call fcn.00406730
mov edx, dword [ebp - 0x294]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2a0]
mov edx, 0x1c
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2a0]
lea eax, [ebp - 0x29c]
mov edx, 0x511c64
call fcn.00406730
mov edx, dword [ebp - 0x29c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2a8]
mov edx, 0x12
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2a8]
lea eax, [ebp - 0x2a4]
mov edx, 0x511c8c
call fcn.00406730
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2b0]
mov edx, 0x13
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2b0]
lea eax, [ebp - 0x2ac]
mov edx, 0x511cac
call fcn.00406730
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2b8]
mov edx, 5
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2b8]
lea eax, [ebp - 0x2b4]
mov edx, 0x511ccc
call fcn.00406730
mov edx, dword [ebp - 0x2b4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2c0]
mov edx, 0xd
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2c0]
lea eax, [ebp - 0x2bc]
mov edx, 0x511cf4
call fcn.00406730
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2c8]
mov edx, 0x27
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2c8]
lea eax, [ebp - 0x2c4]
mov edx, 0x511d14
call fcn.00406730
mov edx, dword [ebp - 0x2c4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2d0]
mov edx, 0xe
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2d0]
lea eax, [ebp - 0x2cc]
mov edx, 0x511d38
call fcn.00406730
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2d8]
mov edx, 5
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2d8]
lea eax, [ebp - 0x2d4]
mov edx, 0x511d58
call fcn.00406730
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2e0]
mov edx, 0x1b
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2e0]
lea eax, [ebp - 0x2dc]
mov edx, 0x511d78
call fcn.00406730
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2e8]
mov edx, 4
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2e8]
lea eax, [ebp - 0x2e4]
mov edx, 0x511d9c
call fcn.00406730
mov edx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2f0]
mov edx, 2
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2f0]
lea eax, [ebp - 0x2ec]
mov edx, 0x511dbc
call fcn.00406730
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x2f8]
mov edx, 0x28
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x2f8]
lea eax, [ebp - 0x2f4]
mov edx, 0x511ddc
call fcn.00406730
mov edx, dword [ebp - 0x2f4]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x300]
mov edx, 0x3e
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x300]
lea eax, [ebp - 0x2fc]
mov edx, 0x511dfc
call fcn.00406730
mov edx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x308]
mov edx, 0x26
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x308]
lea eax, [ebp - 0x304]
mov edx, 0x5115d0
call fcn.00406730
mov edx, dword [ebp - 0x304]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x310]
mov edx, 0x2b
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x310]
lea eax, [ebp - 0x30c]
mov edx, 0x511e1c
call fcn.00406730
mov edx, dword [ebp - 0x30c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x318]
mov edx, 0xa
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x318]
lea eax, [ebp - 0x314]
mov edx, 0x511e50
call fcn.00406730
mov edx, dword [ebp - 0x314]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x320]
mov edx, 8
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x320]
lea eax, [ebp - 0x31c]
mov edx, 0x511e74
call fcn.00406730
mov edx, dword [ebp - 0x31c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x328]
mov edx, 9
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x328]
lea eax, [ebp - 0x324]
mov edx, 0x511e90
call fcn.00406730
mov edx, dword [ebp - 0x324]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x330]
mov edx, 0xb
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x330]
lea eax, [ebp - 0x32c]
mov edx, 0x511eac
call fcn.00406730
mov edx, dword [ebp - 0x32c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x338]
mov edx, 7
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x338]
lea eax, [ebp - 0x334]
mov edx, 0x511ed0
call fcn.00406730
mov edx, dword [ebp - 0x334]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x340]
mov edx, 0x25
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x340]
lea eax, [ebp - 0x33c]
mov edx, 0x511834
call fcn.00406730
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x348]
mov edx, 0x24
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x348]
lea eax, [ebp - 0x344]
mov edx, 0x511814
call fcn.00406730
mov edx, dword [ebp - 0x344]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x350]
mov edx, 0x15
mov eax, ebx
call fcn.00480474
mov ecx, dword [ebp - 0x350]
lea eax, [ebp - 0x34c]
mov edx, 0x511ef0
call fcn.00406730
mov edx, dword [ebp - 0x34c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 8]
cmp dword [eax + 8], 5
jge 0x511294
lea ecx, [ebp - 0x354]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov edx, 0x511f14
call fcn.00425154
mov eax, dword [ebp - 0x354]
lea edx, [ebp - 4]
call fcn.0040abfc
lea eax, [ebp - 0x35c]
push eax
mov edx, dword [ebp - 4]
mov eax, 0x511f30
call fcn.00406d20
mov edx, eax
inc edx
mov ecx, 0xff
mov eax, dword [ebp - 4]
call fcn.00406a08
mov eax, dword [ebp - 0x35c]
lea edx, [ebp - 0x358]
call fcn.0040abfc
mov edx, dword [ebp - 0x358]
lea eax, [ebp - 4]
call fcn.004062b0
lea eax, [ebp - 0x360]
mov ecx, dword [ebp - 4]
mov edx, 0x511ddc
call fcn.00406730
mov edx, dword [ebp - 0x360]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x28]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x24]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 8]
add eax, 0x24
call fcn.004c26a0
lea eax, [ebp - 0x364]
push eax
call sub.kernel32.dll_GetSystemDefaultLangID
movzx eax, ax
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 0x1ac], 0
lea edx, [ebp - 0x1b0]
xor ecx, ecx
mov eax, 0x511f40
call fcn.0040e2d4
mov edx, dword [ebp - 0x364]
mov eax, dword [ebp - 8]
add eax, 0x44
call fcn.0040625c
lea eax, [ebp - 0x368]
push eax
mov ecx, 0x511f58
mov edx, 0x511f7c
mov eax, 0x80000002
call fcn.004809d4
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 8]
add eax, 0x6c
call fcn.0040625c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x511362
lea eax, [ebp - 0x368]
mov edx, 0x64
call fcn.00406254
lea eax, [ebp - 0x1d8]
mov edx, 0xa
call fcn.00406254
lea eax, [ebp - 0x1a8]
mov edx, 0x18
call fcn.00406254
lea eax, [ebp - 4]
call fcn.0040624c
ret