Function at 0x475328
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1a
push 0
push 0
dec ecx
jne 0x475330
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x47627f
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
mov eax, dword [ebp - 0x24]
mov ecx, 3
mov edx, 1
call fcn.004048d4
mov eax, dword [ebp - 0x20]
call fcn.004089e4
test al, al
jne 0x475391
mov edx, 0x476298
mov eax, dword [ebp - 4]
call fcn.00475170
jmp 0x476203
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
mov eax, dword [ebp - 0x10]
call fcn.0040467c
cmp eax, 3
jle 0x4753e3
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x10]
call fcn.00408434
mov eax, dword [ebp - 0x28]
mov edx, 0x4762b4
call fcn.004047c0
je 0x4753e3
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
call fcn.00408434
mov eax, dword [ebp - 0x2c]
mov edx, 0x4762d0
call fcn.004047c0
jne 0x47541e
mov edx, dword [ebp - 0x10]
mov eax, 0x4762e4
call fcn.004049b8
test eax, eax
jg 0x47541e
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x300]
mov eax, ebx
call fcn.00439380
lea eax, [ebp - 0x30]
mov edx, 0x4762e4
call fcn.00404684
mov edx, dword [ebp - 0x30]
mov eax, ebx
call fcn.004393b0
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
mov eax, dword [ebp - 0x34]
call fcn.004089e4
test al, al
jne 0x47552e
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0xc]
call fcn.00408684
lea eax, [ebp - 8]
call fcn.004043c4
jmp 0x4754f4
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x4762f4
call fcn.004049b8
mov ecx, eax
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.004048d4
mov edx, dword [ebp - 0x3c]
lea eax, [ebp - 8]
call fcn.00404684
mov eax, dword [ebp - 8]
call fcn.004089e4
test al, al
jne 0x4754bd
mov eax, dword [ebp - 8]
call fcn.00408dac
test al, al
jne 0x4754bd
mov edx, 0x476300
mov eax, dword [ebp - 4]
call fcn.00475170
jmp 0x476203
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x4762f4
call fcn.004049b8
push eax
mov eax, dword [ebp - 0xc]
call fcn.0040467c
pop edx
sub eax, edx
push eax
mov edx, dword [ebp - 0xc]
mov eax, 0x4762f4
call fcn.004049b8
mov edx, eax
inc edx
mov eax, dword [ebp - 0xc]
pop ecx
call fcn.004048d4
mov edx, dword [ebp - 0xc]
mov eax, 0x4762f4
call fcn.004049b8
test eax, eax
jg 0x475468
cmp dword [ebp - 0xc], 0
je 0x47552e
lea eax, [ebp - 8]
mov edx, dword [ebp - 0xc]
call fcn.00404684
mov eax, dword [ebp - 8]
call fcn.004089e4
test al, al
jne 0x47552e
mov eax, dword [ebp - 8]
call fcn.00408dac
lea eax, [ebp - 0x40]
push eax
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
mov eax, dword [ebp - 0x44]
call fcn.0040467c
push eax
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
mov eax, dword [ebp - 0x48]
mov ecx, 1
pop edx
call fcn.004048d4
mov eax, dword [ebp - 0x40]
mov edx, 0x4762f4
call fcn.004047c0
je 0x4755a4
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x300]
mov eax, ebx
call fcn.00439380
lea eax, [ebp - 0x4c]
mov edx, 0x4762f4
call fcn.00404684
mov edx, dword [ebp - 0x4c]
mov eax, ebx
call fcn.004393b0
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x476328
push 0x476334
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x50]
mov edx, 0x476340
call fcn.00404684
mov edx, dword [ebp - 0x50]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x54]
mov edx, 0x476358
call fcn.00404684
mov eax, dword [ebp - 0x54]
call fcn.00408dac
lea edx, [ebp - 0x58]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x58]
mov edx, 0x47636c
call fcn.00404684
mov eax, dword [ebp - 0x58]
call fcn.00408dac
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x5c]
mov edx, 0x47637c
call fcn.00404684
mov eax, dword [ebp - 0x5c]
call fcn.00408dac
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x60]
mov edx, 0x476388
call fcn.00404684
mov eax, dword [ebp - 0x60]
call fcn.00408dac
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x64]
mov edx, 0x476398
call fcn.00404684
mov eax, dword [ebp - 0x64]
call fcn.00408dac
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x68]
mov edx, 0x4763a8
call fcn.00404684
mov eax, dword [ebp - 0x68]
call fcn.00408dac
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x6c]
mov edx, 0x4763b8
call fcn.00404684
mov eax, dword [ebp - 0x6c]
call fcn.00408dac
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0xa
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
mov eax, 0xff
call fcn.0040273c
mov ebx, eax
push 0xff
push ebx
call sub.kernel32.dll_GetSystemDirectoryA
lea eax, [ebp - 0x14]
mov edx, ebx
call fcn.004045b4
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 0x14]
call fcn.00408684
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0x14]
call fcn.0040445c
xor eax, eax
push ebp
push 0x4757ed
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x74]
mov ecx, 0x4763c8
mov edx, dword [ebp - 0x14]
call fcn.004046c8
mov eax, dword [ebp - 0x74]
call fcn.004089d4
test al, al
jne 0x4757e3
push 0x4763dc
push 0x4763e0
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea eax, [ebp - 0x78]
mov ecx, 0x4763c8
mov edx, dword [ebp - 0x14]
call fcn.004046c8
mov edx, dword [ebp - 0x78]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4757f7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0xf
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x14
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
xor eax, eax
push ebp
push 0x4758a8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x7c]
mov ecx, 0x4763ec
mov edx, dword [ebp - 0x14]
call fcn.004046c8
mov eax, dword [ebp - 0x7c]
call fcn.004089d4
test al, al
jne 0x47589e
push 0x476400
push 0x4763e0
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea eax, [ebp - 0x80]
mov ecx, 0x4763ec
mov edx, dword [ebp - 0x14]
call fcn.004046c8
mov edx, dword [ebp - 0x80]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4758b2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x19
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x47640c
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x84]
mov edx, 0x476420
call fcn.00404684
mov edx, dword [ebp - 0x84]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x47643c
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x88]
mov edx, 0x476450
call fcn.00404684
mov edx, dword [ebp - 0x88]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
push 0x476470
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x8c]
mov edx, 0x47647c
call fcn.00404684
mov edx, dword [ebp - 0x8c]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x476498
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x90]
mov edx, 0x4764ac
call fcn.00404684
mov edx, dword [ebp - 0x90]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x1e
call fcn.0046e4b8
push 0x4764cc
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x94]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x94]
mov edx, 0x4764dc
call fcn.00404684
mov edx, dword [ebp - 0x94]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x21
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x4764f8
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x98]
mov edx, 0x476504
call fcn.00404684
mov edx, dword [ebp - 0x98]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x28
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x476520
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0x9c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0x9c]
mov edx, 0x476534
call fcn.00404684
mov edx, dword [ebp - 0x9c]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x2d
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x47636c
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xa0]
mov edx, 0x476554
call fcn.00404684
mov edx, dword [ebp - 0xa0]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x32
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x476570
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xa4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xa4]
mov edx, 0x476580
call fcn.00404684
mov edx, dword [ebp - 0xa4]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x37
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x4763b8
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xa8]
mov edx, 0x4765a0
call fcn.00404684
mov edx, dword [ebp - 0xa8]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x3c
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x4765bc
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xac]
mov edx, 0x4765d0
call fcn.00404684
mov edx, dword [ebp - 0xac]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x41
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x4765f0
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xb0]
mov edx, 0x476608
call fcn.00404684
mov edx, dword [ebp - 0xb0]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x46
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x47662c
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xb4]
mov edx, 0x476640
call fcn.00404684
mov edx, dword [ebp - 0xb4]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x50
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x476660
push 0x476334
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xb8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xb8]
mov edx, 0x476674
call fcn.00404684
mov edx, dword [ebp - 0xb8]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x55
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x4763a8
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xbc]
mov edx, 0x47668c
call fcn.00404684
mov edx, dword [ebp - 0xbc]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
push 0x47637c
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xc0]
mov edx, 0x4766a8
call fcn.00404684
mov edx, dword [ebp - 0xc0]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x5a
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x476388
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xc4]
mov edx, 0x4766c4
call fcn.00404684
mov edx, dword [ebp - 0xc4]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x60
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x476398
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xc8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xc8]
mov edx, 0x4766e0
call fcn.00404684
mov edx, dword [ebp - 0xc8]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x63
call fcn.0046e4b8
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
push 0x4766fc
push 0x476414
mov ecx, dword [0x47a718]
mov dl, 1
mov eax, dword [0x4125a4]
call fcn.00416cc8
mov ebx, eax
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xcc]
mov edx, 0x47670c
call fcn.00404684
mov edx, dword [ebp - 0xcc]
mov eax, ebx
call fcn.00416afc
mov eax, ebx
call fcn.00403658
mov eax, dword [0x479968]
mov eax, dword [eax]
call fcn.00458968
mov dl, 1
mov eax, dword [0x46d0cc]
call fcn.0046d238
mov dword [ebp - 0x18], eax
mov edx, 0x80000002
mov eax, dword [ebp - 0x18]
call fcn.0046d314
xor eax, eax
push ebp
push 0x4761a1
push dword fs:[eax]
mov dword fs:[eax], esp
mov cl, 1
mov edx, 0x476728
mov eax, dword [ebp - 0x18]
call fcn.0046d37c
test al, al
je 0x47618b
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.00439380
lea eax, [ebp - 0xd0]
mov edx, 0x476340
call fcn.00404684
mov ecx, dword [ebp - 0xd0]
mov edx, 0x476740
mov eax, dword [ebp - 0x18]
call fcn.0046d518
mov ecx, 0x476754
mov edx, 0x476760
mov eax, dword [ebp - 0x18]
call fcn.0046d518
mov eax, dword [ebp - 0x18]
call fcn.0046d2e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4761a8
mov eax, dword [ebp - 0x18]
call fcn.00403658
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x476286
lea eax, [ebp - 0xd4]
mov edx, 0x15
call fcn.004043e8
lea eax, [ebp - 0x80]
mov edx, 5
call fcn.004043e8
lea eax, [ebp - 0x6c]
mov edx, 0xc
call fcn.004043e8
lea eax, [ebp - 0x3c]
call fcn.004043c4
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.004043e8
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.004043e8
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004043e8
lea eax, [ebp - 0x1c]
call fcn.004043c4
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004043e8
ret