Function at 0xc2ab40
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xc49a3d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa08
mov eax, dword [0xc57104]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
mov dword [ebp - 0x998], ecx
lea eax, [ebp - 0x12c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea ecx, [ebp - 0x19c]
call fcn.00c04800
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x12c]
push ecx
lea ecx, [ebp - 0x19c]
call fcn.00c04f80
lea ecx, [ebp - 0x19c]
call fcn.00c04a50
lea edx, [ebp - 0x79d]
mov dword [ebp - 0x79c], edx
push 0
lea ecx, [ebp - 0x20]
call fcn.00c2bda0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x998]
add ecx, 0x148
call fcn.00c1f080
test eax, eax
jne 0xc2ac43
push 0xc4d2a0
call fcn.00c332d0
add esp, 4
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x7a4]
push eax
push 0xc4d2a0
mov ecx, dword [ebp - 0x998]
add ecx, 0x23c
call fcn.00c01c50
mov dword [ebp - 0x5c0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x5c0]
jmp 0xc2ba0c
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x998]
add ecx, 0x150
push ecx
push 0xc5837c
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x998]
add eax, 0x148
push eax
lea ecx, [ebp - 0x19c]
call fcn.00c05060
test eax, eax
je 0xc2b9c1
mov dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1c], 0
jne 0xc2ac9b
mov dword [ebp - 0x99c], 0
jmp 0xc2acaf
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
cdq
mov ecx, 0x50
idiv ecx
mov dword [ebp - 0x99c], eax
mov edx, dword [ebp - 0x99c]
mov dword [ebp - 0x1b4], edx
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x7a8], eax
mov ecx, dword [ebp - 0x7a8]
mov dword [ebp - 0x5c4], ecx
mov edx, dword [ebp - 0x5c4]
mov dword [ebp - 0x1a4], edx
jmp 0xc2ad19
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x7ac], eax
mov ecx, dword [ebp - 0x1a4]
add ecx, 0x50
mov dword [ebp - 0x1a4], ecx
mov edx, dword [ebp - 0x7ac]
mov dword [ebp - 0x5c8], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x7b0]
mov dword [ebp - 0x5cc], ecx
mov edx, dword [ebp - 0x1a4]
sub edx, dword [ebp - 0x5cc]
neg edx
sbb edx, edx
inc edx
movzx eax, dl
neg eax
sbb eax, eax
inc eax
movzx ecx, al
test ecx, ecx
je 0xc2ae3f
mov edx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x20]
add eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1b0]
xor edx, edx
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x9a4], ecx
mov dword [ebp - 0x9a0], edx
mov dword [ebp - 0x9a8], eax
mov ecx, dword [ebp - 0x9a8]
mov edx, dword [ebp - 0x9a0]
cmp edx, dword [ecx + 0x24]
ja 0xc2adba
jb 0xc2adab
mov eax, dword [ebp - 0x9a8]
mov ecx, dword [ebp - 0x9a4]
cmp ecx, dword [eax + 0x20]
jae 0xc2adba
mov edx, dword [ebp - 0x1a4]
mov eax, dword [edx + 0x20]
mov dword [ebp - 0x1b0], eax
push 0xc581f8
push 0xc4b588
lea ecx, [ebp - 0x5ec]
push ecx
call fcn.00c2bf10
add esp, 0xc
mov dword [ebp - 0x9ac], eax
mov edx, dword [ebp - 0x9ac]
mov dword [ebp - 0x7bc], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x1a4]
add eax, 0x2c
mov dword [ebp - 0x7b8], eax
mov ecx, dword [ebp - 0x7b8]
push ecx
mov ecx, dword [ebp - 0x7bc]
call fcn.00c1cca0
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x5cd], al
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x5ec]
call fcn.00c01f20
movzx edx, byte [ebp - 0x5cd]
test edx, edx
je 0xc2ae3a
mov dword [ebp - 0x10], 1
jmp 0xc2acf2
cmp dword [ebp - 0x10], 0
jne 0xc2ae51
push 1
mov ecx, 0xc581b0
call fcn.00c23250
mov eax, dword [ebp - 0x998]
add eax, 0x150
mov dword [ebp - 0x7c0], eax
mov ecx, dword [ebp - 0x7c0]
cmp dword [ecx + 0x18], 0x10
jb 0xc2ae7f
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx + 4]
mov dword [ebp - 0x9b0], eax
jmp 0xc2ae8e
mov ecx, dword [ebp - 0x7c0]
add ecx, 4
mov dword [ebp - 0x9b0], ecx
mov esi, dword [ebp - 0x1ac]
xor edi, edi
mov edx, dword [ebp - 0x9b0]
push edx
call fcn.00c02a90
add esp, 4
mov dword [ebp - 0x9b8], esi
mov dword [ebp - 0x9b4], edi
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], edx
mov eax, dword [ebp - 0x9b4]
cmp eax, dword [ebp - 0x9bc]
jb 0xc2af3e
ja 0xc2aedb
mov ecx, dword [ebp - 0x9b8]
cmp ecx, dword [ebp - 0x9c0]
jbe 0xc2af3e
push str.Disk
call fcn.00c332d0
add esp, 4
mov dword [ebp - 0x7c4], eax
mov edx, dword [ebp - 0x7c4]
push edx
push str.Disk
mov ecx, dword [ebp - 0x998]
add ecx, 0x23c
call fcn.00c01c50
mov dword [ebp - 0x5f0], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x5f0]
jmp 0xc2ba0c
mov dword [ebp - 0x5f4], 7
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1ac]
push edx
mov ecx, dword [ebp - 0x998]
add ecx, 4
call fcn.00c2aa90
mov dword [ebp - 0x1a0], 0
cmp dword [0xc5838c], 0
je 0xc2b016
mov eax, dword [ebp - 0x998]
add eax, 0x190
mov dword [ebp - 0x7d0], eax
lea ecx, [ebp - 0x1b0]
push ecx
mov ecx, dword [ebp - 0x7d0]
add ecx, 0x28
mov edx, dword [ebp - 0x7d0]
mov eax, dword [edx + 0x28]
call dword [eax + 0x30]
test eax, eax
jne 0xc2b016
push 0xc4d244
call fcn.00c332d0
add esp, 4
mov dword [ebp - 0x7d4], eax
mov ecx, dword [ebp - 0x7d4]
push ecx
push 0xc4d244
mov ecx, dword [ebp - 0x998]
add ecx, 0x23c
call fcn.00c01c50
mov dword [ebp - 0x5f8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x5f8]
jmp 0xc2ba0c
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x7d8], edx
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x5fc]
mov dword [ebp - 0x1a4], ecx
jmp 0xc2b060
mov edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x7dc], edx
mov eax, dword [ebp - 0x1a4]
add eax, 0x50
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0x7dc]
mov dword [ebp - 0x600], ecx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x7e0], edx
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x604], eax
mov ecx, dword [ebp - 0x1a4]
sub ecx, dword [ebp - 0x604]
neg ecx
sbb ecx, ecx
inc ecx
movzx edx, cl
neg edx
sbb edx, edx
inc edx
movzx eax, dl
test eax, eax
je 0xc2b9bf
mov ecx, dword [ebp - 0x1a0]
add ecx, 1
mov dword [ebp - 0x1a0], ecx
mov edx, dword [ebp - 0x1a4]
add edx, 0x2c
push edx
mov eax, dword [ebp - 0x998]
add eax, 0x150
push eax
lea ecx, [ebp - 0x620]
push ecx
call fcn.00c02330
add esp, 0xc
mov dword [ebp - 0x9c4], eax
mov edx, dword [ebp - 0x9c4]
mov dword [ebp - 0x7e4], edx
mov byte [ebp - 4], 3
mov eax, dword [0xc4b560]
push eax
push 0
mov ecx, dword [ebp - 0x7e4]
push ecx
mov ecx, dword [ebp - 0x998]
add ecx, 0x1cc
call fcn.00c01b30
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x620]
call fcn.00c01f20
mov byte [ebp - 0x621], 0x5c
push 0xc4d23c
push 0xc58230
lea edx, [ebp - 0x640]
push edx
call fcn.00c1cb70
add esp, 0xc
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1a4]
add ecx, 0x2c
push ecx
mov edx, dword [ebp - 0x9cc]
push edx
lea eax, [ebp - 0x65c]
push eax
call fcn.00c02330
add esp, 0xc
mov dword [ebp - 0x9d0], eax
mov ecx, dword [ebp - 0x9d0]
mov dword [ebp - 0x9d4], ecx
mov byte [ebp - 4], 5
push 0x2f
lea edx, [ebp - 0x621]
push edx
mov eax, dword [ebp - 0x9d4]
push eax
lea ecx, [ebp - 0x678]
push ecx
call fcn.00c02950
add esp, 0x10
mov dword [ebp - 0x9d8], eax
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x7e8], edx
mov byte [ebp - 4], 6
mov eax, dword [0xc4b560]
push eax
push 0
mov ecx, dword [ebp - 0x7e8]
push ecx
mov ecx, dword [ebp - 0x998]
add ecx, 0x198
call fcn.00c01b30
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x678]
call fcn.00c01f20
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x65c]
call fcn.00c01f20
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x640]
call fcn.00c01f20
mov edx, dword [ebp - 0x998]
add edx, 0x190
mov dword [ebp - 0x7f0], edx
mov eax, dword [ebp - 0x7f0]
mov dword [eax + 4], 0
mov dword [ebp - 0x7ec], 0
lea ecx, [ebp - 0x7ec]
push ecx
mov ecx, dword [ebp - 0x7f0]
add ecx, 0x28
mov edx, dword [ebp - 0x7f0]
mov eax, dword [edx + 0x28]
call dword [eax + 0x24]
cmp dword [0xc5838c], 0
je 0xc2b801
mov dword [ebp - 0x1b8], 0
mov ecx, 1
test ecx, ecx
je 0xc2b5ea
mov edx, dword [ebp - 0x1b8]
add edx, 1
mov dword [ebp - 0x1b8], edx
mov eax, dword [ebp - 0x998]
add eax, 0x190
push eax
mov ecx, dword [ebp - 0x998]
call fcn.00c29cc0
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0x1a4]
add eax, 0x2c
mov dword [ebp - 0x7f4], eax
mov ecx, dword [ebp - 0x7f4]
cmp dword [ecx + 0x18], 0x10
jb 0xc2b2e0
mov edx, dword [ebp - 0x7f4]
mov eax, dword [edx + 4]
mov dword [ebp - 0x9dc], eax
jmp 0xc2b2ef
mov ecx, dword [ebp - 0x7f4]
add ecx, 4
mov dword [ebp - 0x9dc], ecx
lea edx, [ebp - 0x67c]
push edx
mov eax, dword [ebp - 0x9dc]
push eax
mov ecx, dword [ebp - 0x998]
add ecx, 4
call fcn.00c1fc90
cmp dword [ebp - 0x1a8], 0
jne 0xc2b3f4
mov ecx, dword [ebp - 0x998]
add ecx, 0x1e8
mov dword [ebp - 0x7f8], ecx
mov edx, dword [ebp - 0x7f8]
cmp dword [edx + 0x18], 0x10
jb 0xc2b347
mov eax, dword [ebp - 0x7f8]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x9e0], ecx
jmp 0xc2b356
mov edx, dword [ebp - 0x7f8]
add edx, 4
mov dword [ebp - 0x9e0], edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [ebp - 0x9e0]
push eax
push 0xc4d1f0
lea ecx, [ebp - 0x698]
push ecx
call fcn.00c1fda0
add esp, 0x10
mov dword [ebp - 0x9e4], eax
mov edx, dword [ebp - 0x9e4]
mov dword [ebp - 0x7fc], edx
mov byte [ebp - 4], 7
mov eax, dword [0xc4b560]
push eax
push 0
mov ecx, dword [ebp - 0x7fc]
push ecx
mov ecx, dword [ebp - 0x998]
add ecx, 0x23c
call fcn.00c01b30
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x698]
call fcn.00c01f20
mov dword [ebp - 0x69c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x69c]
jmp 0xc2ba0c
mov byte [ebp - 0x5bc], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x5bb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edx, dword [ebp - 0x998]
add edx, 0x1b8
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x800]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0x800]
add ecx, dword [edx + 0x10]
mov dword [ebp - 0x804], ecx
mov ecx, dword [ebp - 0x998]
add ecx, 0x1b8
mov eax, dword [ebp - 0x998]
mov edx, dword [eax + 0x1b8]
call dword [edx + 0x18]
push eax
mov eax, dword [ebp - 0x804]
push eax
lea ecx, [ebp - 0x5bc]
push ecx
call fcn.00c05450
add esp, 0xc
mov edx, dword [ebp - 0x1a4]
cmp dword [edx + 0x18], 0x10
jb 0xc2b486
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x9e8], ecx
jmp 0xc2b495
mov edx, dword [ebp - 0x1a4]
add edx, 4
mov dword [ebp - 0x9e8], edx
mov eax, dword [ebp - 0x9e8]
push eax
lea ecx, [ebp - 0x5bc]
push ecx
call fcn.00c33e60
add esp, 8
test eax, eax
jne 0xc2b50a
mov ecx, dword [ebp - 0x998]
add ecx, 0x1b8
mov edx, dword [ebp - 0x998]
mov eax, dword [edx + 0x1b8]
call dword [eax + 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x9ec], edx
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x9f0], ecx
mov eax, dword [ebp - 0x9ec]
mov ecx, dword [eax + 0x20]
cmp ecx, dword [ebp - 0x9f4]
jne 0xc2b50a
mov edx, dword [ebp - 0x9ec]
mov eax, dword [edx + 0x24]
cmp eax, dword [ebp - 0x9f0]
je 0xc2b5ea
cmp dword [ebp - 0x1b8], 5
jge 0xc2b518
jmp 0xc2b26c
mov ecx, dword [ebp - 0x1a4]
add ecx, 0x2c
mov dword [ebp - 0x808], ecx
mov edx, dword [ebp - 0x808]
cmp dword [edx + 0x18], 0x10
jb 0xc2b544
mov eax, dword [ebp - 0x808]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x9f8], ecx
jmp 0xc2b553
mov edx, dword [ebp - 0x808]
add edx, 4
mov dword [ebp - 0x9f8], edx
mov eax, dword [ebp - 0x9f8]
push eax
push 0xc4d1a8
lea ecx, [ebp - 0x6b8]
push ecx
call fcn.00c1fda0
add esp, 0xc
mov dword [ebp - 0x9fc], eax
mov edx, dword [ebp - 0x9fc]
mov dword [ebp - 0x80c], edx
mov byte [ebp - 4], 8
mov eax, dword [0xc4b560]
push eax
push 0
mov ecx, dword [ebp - 0x80c]
push ecx
mov ecx, dword [ebp - 0x998]
add ecx, 0x23c
call fcn.00c01b30
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x6b8]
call fcn.00c01f20
mov dword [ebp - 0x6bc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x6bc]
jmp 0xc2ba0c
mov edx, dword [ebp - 0x1a4]
add edx, 0x2c
push edx
mov eax, dword [ebp - 0x998]
add eax, 0x150
push eax
lea ecx, [ebp - 0x6d8]
push ecx
call fcn.00c02330
add esp, 0xc
mov dword [ebp - 0xa00], eax
mov edx, dword [ebp - 0xa00]
mov dword [ebp - 0x834], edx
mov byte [ebp - 4], 9
mov eax, dword [0xc4b560]
push eax
push 0
mov ecx, dword [ebp - 0x834]
push ecx
mov ecx, dword [ebp - 0x998]
add ecx, 0x1cc
call fcn.00c01b30
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x6d8]
call fcn.00c01f20
push 0xc4b588
lea ecx, [ebp - 0x6f4]
call fcn.00c01920
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x1a4]
add edx, 0x2c
mov dword [ebp - 0x86c], edx
lea eax, [ebp - 0x85d]
mov dword [ebp - 0x85c], eax
push 0
push 0
lea ecx, [ebp - 0x710]
call fcn.00c01f20
mov ecx, dword [0xc4b560]
push ecx
push 0
mov edx, dword [ebp - 0x86c]
push edx
lea ecx, [ebp - 0x710]
call fcn.00c01b30
lea eax, [ebp - 0x710]
mov dword [ebp - 0xa04], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6f4]
push ecx
mov edx, dword [ebp - 0xa04]
push edx
mov eax, dword [ebp - 0x998]
add eax, 0x150
push eax
call fcn.00c2ba30
add esp, 0xc
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x710]
call fcn.00c01f20
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x6f4]
call fcn.00c01f20
mov ecx, dword [ebp - 0x998]
add ecx, 0x190
push ecx
mov ecx, dword [ebp - 0x998]
call fcn.00c2a550
test eax, eax
jne 0xc2b7fc
mov edx, dword [ebp - 0x1a4]
add edx, 0x2c
mov dword [ebp - 0x880], edx
mov eax, dword [ebp - 0x880]
cmp dword [eax + 0x18], 0x10
jb 0xc2b755
mov ecx, dword [ebp - 0x880]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xa08], edx
jmp 0xc2b764
mov eax, dword [ebp - 0x880]
add eax, 4
mov dword [ebp - 0xa08], eax
mov ecx, dword [ebp - 0xa08]
push ecx
push 0xc4d150
lea edx, [ebp - 0x72c]
push edx
call fcn.00c1fda0
add esp, 0xc
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0xa0c]
mov dword [ebp - 0x884], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [0xc4b560]
push ecx
push 0
mov edx, dword [ebp - 0x884]
push edx
mov ecx, dword [ebp - 0x998]
add ecx, 0x23c
call fcn.00c01b30
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x72c]
call fcn.00c01f20
mov dword [ebp - 0x730], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x730]
jmp 0xc2ba0c
jmp 0xc2b902
push 0xc4b588
lea ecx, [ebp - 0x74c]
call fcn.00c01920
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x1a4]
add eax, 0x2c
mov dword [ebp - 0x8e8], eax
lea ecx, [ebp - 0x8d9]
mov dword [ebp - 0x8d8], ecx
push 0
push 0
lea ecx, [ebp - 0x768]
call fcn.00c01f20
mov edx, dword [0xc4b560]
push edx
push 0
mov eax, dword [ebp - 0x8e8]
push eax
lea ecx, [ebp - 0x768]
call fcn.00c01b30
lea ecx, [ebp - 0x768]
mov dword [ebp - 0xa10], ecx
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x74c]
push edx
mov eax, dword [ebp - 0xa10]
push eax
mov ecx, dword [ebp - 0x998]
add ecx, 0x150
push ecx
call fcn.00c2ba30
add esp, 0xc
mov byte [ebp - 4], 0xd
push 0
push 1
lea ecx, [ebp - 0x768]
call fcn.00c01f20
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x74c]
call fcn.00c01f20
mov edx, dword [ebp - 0x998]
add edx, 0x190
push edx
mov ecx, dword [ebp - 0x998]
call fcn.00c29dc0
test eax, eax
jne 0xc2b902
mov dword [ebp - 0x76c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x76c]
jmp 0xc2ba0c
mov eax, dword [ebp - 0x1a4]
cmp dword [eax + 0x48], 0
je 0xc2b935
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x770], edx
lea eax, [ebp - 0x770]
push eax
mov ecx, dword [ebp - 0x998]
add ecx, 0x148
call fcn.00c1efd0
push 0xc581f8
push 0xc4b588
lea ecx, [ebp - 0x790]
push ecx
call fcn.00c2bf10
add esp, 0xc
mov dword [ebp - 0xa14], eax
mov edx, dword [ebp - 0xa14]
mov dword [ebp - 0x940], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1a4]
add eax, 0x2c
mov dword [ebp - 0x93c], eax
mov ecx, dword [ebp - 0x93c]
push ecx
mov ecx, dword [ebp - 0x940]
call fcn.00c1cca0
neg eax
sbb eax, eax
inc eax
mov byte [ebp - 0x771], al
mov byte [ebp - 4], 1
push 0
push 1
lea ecx, [ebp - 0x790]
call fcn.00c01f20
movzx edx, byte [ebp - 0x771]
test edx, edx
je 0xc2b9ba
push 1
mov ecx, 0xc581b0
call fcn.00c23250
jmp 0xc2b039
jmp 0xc2b9cd
push 1
mov ecx, 0xc581b0
call fcn.00c23250
mov ecx, dword [ebp - 0x998]
add ecx, 0x148
call fcn.00c1f030
mov dword [ebp - 0x794], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00c2be40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.00c04980
mov eax, dword [ebp - 0x794]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.00c32666
mov esp, ebp
pop ebp
ret