Function at 0x4c54e0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x150c
call fcn.0050c860
mov eax, dword [0x579aa4]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x150c], ecx
cmp dword [ebp + 8], 0
jne 0x4c550a
xor eax, eax
jmp 0x4c652f
push 0x208
push 0
lea eax, [ebp - 0x1088]
push eax
call fcn.0050c770
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x1088]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetClassNameW]
push ecx
mov ecx, esp
lea eax, [ebp - 0x1088]
push eax
call fcn.00405520
mov ecx, dword [ebp - 0x150c]
call fcn.004b0c70
test eax, eax
je 0x4c555b
xor eax, eax
jmp 0x4c652f
lea ecx, [ebp - 0xe74]
call fcn.004a52f0
push 1
push 0
lea ecx, [ebp - 0xe74]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004d3e90
add esp, 0x10
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0xa1c], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0xe58], eax
cmp dword [ebp - 0xa1c], 0
je 0x4c562e
cmp dword [ebp - 0xe58], 0
je 0x4c562e
mov eax, dword [ebp - 0x150c]
mov dword [eax + 0x52c], 1
mov eax, dword [ebp - 0xe58]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0xa1c]
cdq
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x14c0]
call fcn.004a52c0
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0x14d0], ecx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0x14cc], edx
mov eax, dword [ebp - 0x14cc]
push eax
mov ecx, dword [ebp - 0x14d0]
push ecx
lea ecx, [ebp - 0xe74]
call fcn.004a53d0
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4c562e
mov edx, dword [ebp - 0x150c]
mov dword [edx + 0x52c], 0
mov dword [ebp - 0xa30], 0
lea eax, [ebp - 0xa30]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 0x208
push 0
lea edx, [ebp - 0xe50]
push edx
call fcn.0050c770
add esp, 0xc
push 0x104
lea eax, [ebp - 0xe50]
push eax
mov ecx, dword [ebp - 0xa30]
push ecx
call fcn.0048d490
add esp, 0xc
mov dword [ebp - 0xa2c], eax
push 0x552f3c
lea ecx, [ebp - 0x14b8]
call fcn.00405520
lea edx, [ebp - 0x14b8]
push edx
mov eax, dword [ebp - 0xa30]
push eax
call fcn.0048d120
add esp, 8
test eax, eax
jne 0x4c56ba
push 0x552f40
lea ecx, [ebp - 0x14b8]
call fcn.004057e0
xor ecx, ecx
mov word [ebp - 0xc40], cx
push 0x206
push 0
lea edx, [ebp - 0xc3e]
push edx
call fcn.0050c770
add esp, 0xc
push 0x104
lea eax, [ebp - 0xc40]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xa30]
push ecx
call fcn.0048f440
add esp, 0x14
test eax, eax
je 0x4c5780
push ecx
mov ecx, esp
lea edx, [ebp - 0xe50]
push edx
call fcn.00405520
push ecx
mov ecx, esp
lea eax, [ebp - 0xc40]
push eax
call fcn.00405520
lea ecx, [ebp - 0x14c4]
push ecx
mov ecx, dword [ebp - 0x150c]
call fcn.004c52a0
lea ecx, [ebp - 0x14c4]
call fcn.00405620
movzx edx, al
test edx, edx
jne 0x4c5775
push 0x104
push 0
lea eax, [ebp - 0xe50]
push eax
call fcn.0050c770
add esp, 0xc
lea ecx, [ebp - 0x14c4]
call fcn.00406010
push eax
push 0x104
lea ecx, [ebp - 0xe50]
push ecx
call fcn.0049c340
lea ecx, [ebp - 0x14c4]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406250
xor edx, edx
mov word [ebp - 0xa18], dx
push 0x7fe
push 0
lea eax, [ebp - 0xa16]
push eax
call fcn.0050c770
add esp, 0xc
cmp dword [ebp - 0xa2c], 0
jbe 0x4c5807
lea ecx, [ebp - 0xe50]
push ecx
lea ecx, [ebp - 0xe5c]
call fcn.004057e0
push 0
push 0x552f44
lea ecx, [ebp - 0xe5c]
call fcn.00402830
cmp eax, 0xffffffff
je 0x4c5807
push 0x400
lea edx, [ebp - 0xa18]
push edx
lea eax, [ebp - 0xe50]
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea ecx, [ebp - 0xa18]
push ecx
lea ecx, [ebp - 0xe5c]
call fcn.004057e0
lea edx, [ebp - 0xe7c]
push edx
call fcn.00482f60
add esp, 4
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.00482cc0
add esp, 8
lea ecx, [ebp - 0xe7c]
call fcn.00406180
test eax, eax
jg 0x4c5848
lea ecx, [ebp - 0xe78]
push ecx
lea ecx, [ebp - 0xe7c]
call fcn.00404a40
lea edx, [ebp - 0x218]
push edx
call fcn.004e2f80
add esp, 4
lea eax, [ebp - 0x1094]
push eax
call fcn.004e30b0
add esp, 4
lea ecx, [ebp - 0x1090]
call fcn.00406250
lea ecx, [ebp - 0x1090]
push ecx
push ecx
mov ecx, esp
call fcn.00406250
push 0x552f48
call fcn.00496a20
add esp, 0xc
lea ecx, [ebp - 0xa28]
call fcn.00406250
push 0x104
lea ecx, [ebp - 0xa28]
call fcn.004058f0
mov dword [ebp - 0x14b4], eax
push 0x104
mov edx, dword [ebp - 0x14b4]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0x552f8c
mov eax, dword [ebp - 0x14b4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa28]
call fcn.00406060
push str.Progman
lea ecx, [ebp - 0x109c]
call fcn.00405520
push str.CabinetWClass
lea ecx, [ebp - 0xc44]
call fcn.00405520
push str.Shell_TrayWnd
lea ecx, [ebp - 0x108c]
call fcn.00405520
push str.ExploreWClass
lea ecx, [ebp - 0xa34]
call fcn.00405520
push str.NotifyIconOverflowWindow
lea ecx, [ebp - 0x214]
call fcn.00405520
xor ecx, ecx
mov word [ebp - 0x12a8], cx
push 0x206
push 0
lea edx, [ebp - 0x12a6]
push edx
call fcn.0050c770
add esp, 0xc
push 0x104
lea eax, [ebp - 0x12a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push str.Logon.scr
lea ecx, [ebp - 0x12a8]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [ebp - 0x12a8]
push edx
lea ecx, [ebp - 0xa24]
call fcn.00405520
xor eax, eax
mov word [ebp - 0x14b0], ax
push 0x206
push 0
lea ecx, [ebp - 0x14ae]
push ecx
call fcn.0050c770
add esp, 0xc
push 0x104
lea edx, [ebp - 0x14b0]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea eax, [ebp - 0x14b0]
push eax
lea ecx, [ebp - 0xe64]
call fcn.00405520
push str.SystemAppsShellExperienceHost_cw5n1h2txyewyShellExperienceHost.exe
push 0x104
lea ecx, [ebp - 0xe64]
call fcn.004058f0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xe64]
call fcn.00406060
lea ecx, [ebp - 0x14b0]
push ecx
lea ecx, [ebp - 0x1098]
call fcn.00405520
push str.SystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdge.exe
push 0x104
lea ecx, [ebp - 0x1098]
call fcn.004058f0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1098]
call fcn.00406060
lea edx, [ebp - 0x14b0]
push edx
lea ecx, [ebp - 0xe54]
call fcn.00405520
push str.ImmersiveControlPanelSystemSettings.exe
push 0x104
lea ecx, [ebp - 0xe54]
call fcn.004058f0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xe54]
call fcn.00406060
xor eax, eax
mov word [ebp - 0x210], ax
push 0x206
push 0
lea ecx, [ebp - 0x20e]
push ecx
call fcn.0050c770
add esp, 0xc
push 0x104
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0xa20]
call fcn.00405520
push str.ApplicationFrameHost.exe
push 0x104
lea ecx, [ebp - 0xa20]
call fcn.004058f0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa20]
call fcn.00406060
lea ecx, [ebp - 0x210]
push ecx
lea ecx, [ebp - 0x10a0]
call fcn.00405520
push str.dllhost.exe
push 0x104
lea ecx, [ebp - 0x10a0]
call fcn.004058f0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10a0]
call fcn.00406060
lea ecx, [ebp - 0xe78]
call fcn.00406180
push eax
lea ecx, [ebp - 0xe78]
call fcn.00406010
push eax
lea edx, [ebp - 0xe50]
push edx
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0xa28]
call fcn.00406180
push eax
lea ecx, [ebp - 0xa28]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0xe7c]
call fcn.00406180
push eax
lea ecx, [ebp - 0xe7c]
call fcn.00406010
push eax
lea eax, [ebp - 0xe50]
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0xa24]
call fcn.00406180
push eax
lea ecx, [ebp - 0xa24]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0xe64]
call fcn.00406180
push eax
lea ecx, [ebp - 0xe64]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0xa20]
call fcn.00406180
push eax
lea ecx, [ebp - 0xa20]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0x1098]
call fcn.00406180
push eax
lea ecx, [ebp - 0x1098]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0xe54]
call fcn.00406180
push eax
lea ecx, [ebp - 0xe54]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0x10a0]
call fcn.00406180
push eax
lea ecx, [ebp - 0x10a0]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c5d03
lea ecx, [ebp - 0x1090]
call fcn.00406180
push eax
lea ecx, [ebp - 0x1090]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
jne 0x4c5de9
mov dword [ebp - 0x14e0], 0
lea ecx, [ebp - 0x10a0]
call fcn.00406190
lea ecx, [ebp - 0xa20]
call fcn.00406190
lea ecx, [ebp - 0xe54]
call fcn.00406190
lea ecx, [ebp - 0x1098]
call fcn.00406190
lea ecx, [ebp - 0xe64]
call fcn.00406190
lea ecx, [ebp - 0xa24]
call fcn.00406190
lea ecx, [ebp - 0x214]
call fcn.00406190
lea ecx, [ebp - 0xa34]
call fcn.00406190
lea ecx, [ebp - 0x108c]
call fcn.00406190
lea ecx, [ebp - 0xc44]
call fcn.00406190
lea ecx, [ebp - 0x109c]
call fcn.00406190
lea ecx, [ebp - 0xa28]
call fcn.00406190
lea ecx, [ebp - 0x1090]
call fcn.00406190
lea ecx, [ebp - 0x1094]
call fcn.00406190
lea ecx, [ebp - 0x218]
call fcn.00406190
lea ecx, [ebp - 0xe78]
call fcn.00406190
lea ecx, [ebp - 0xe7c]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406190
lea ecx, [ebp - 0x14b8]
call fcn.00406190
mov eax, dword [ebp - 0x14e0]
jmp 0x4c652f
lea ecx, [ebp - 0x218]
call fcn.00406180
test eax, eax
jle 0x4c5f16
lea ecx, [ebp - 0x218]
call fcn.00406180
push eax
lea ecx, [ebp - 0x218]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
jne 0x4c5f16
mov dword [ebp - 0x14e4], 0
lea ecx, [ebp - 0x10a0]
call fcn.00406190
lea ecx, [ebp - 0xa20]
call fcn.00406190
lea ecx, [ebp - 0xe54]
call fcn.00406190
lea ecx, [ebp - 0x1098]
call fcn.00406190
lea ecx, [ebp - 0xe64]
call fcn.00406190
lea ecx, [ebp - 0xa24]
call fcn.00406190
lea ecx, [ebp - 0x214]
call fcn.00406190
lea ecx, [ebp - 0xa34]
call fcn.00406190
lea ecx, [ebp - 0x108c]
call fcn.00406190
lea ecx, [ebp - 0xc44]
call fcn.00406190
lea ecx, [ebp - 0x109c]
call fcn.00406190
lea ecx, [ebp - 0xa28]
call fcn.00406190
lea ecx, [ebp - 0x1090]
call fcn.00406190
lea ecx, [ebp - 0x1094]
call fcn.00406190
lea ecx, [ebp - 0x218]
call fcn.00406190
lea ecx, [ebp - 0xe78]
call fcn.00406190
lea ecx, [ebp - 0xe7c]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406190
lea ecx, [ebp - 0x14b8]
call fcn.00406190
mov eax, dword [ebp - 0x14e4]
jmp 0x4c652f
lea ecx, [ebp - 0x1094]
call fcn.00406180
test eax, eax
jle 0x4c6043
lea ecx, [ebp - 0x1094]
call fcn.00406180
push eax
lea ecx, [ebp - 0x1094]
call fcn.00406010
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
jne 0x4c6043
mov dword [ebp - 0x14e8], 0
lea ecx, [ebp - 0x10a0]
call fcn.00406190
lea ecx, [ebp - 0xa20]
call fcn.00406190
lea ecx, [ebp - 0xe54]
call fcn.00406190
lea ecx, [ebp - 0x1098]
call fcn.00406190
lea ecx, [ebp - 0xe64]
call fcn.00406190
lea ecx, [ebp - 0xa24]
call fcn.00406190
lea ecx, [ebp - 0x214]
call fcn.00406190
lea ecx, [ebp - 0xa34]
call fcn.00406190
lea ecx, [ebp - 0x108c]
call fcn.00406190
lea ecx, [ebp - 0xc44]
call fcn.00406190
lea ecx, [ebp - 0x109c]
call fcn.00406190
lea ecx, [ebp - 0xa28]
call fcn.00406190
lea ecx, [ebp - 0x1090]
call fcn.00406190
lea ecx, [ebp - 0x1094]
call fcn.00406190
lea ecx, [ebp - 0x218]
call fcn.00406190
lea ecx, [ebp - 0xe78]
call fcn.00406190
lea ecx, [ebp - 0xe7c]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406190
lea ecx, [ebp - 0x14b8]
call fcn.00406190
mov eax, dword [ebp - 0x14e8]
jmp 0x4c652f
movzx ecx, word [ebp - 0xa18]
test ecx, ecx
je 0x4c6192
lea ecx, [ebp - 0xe78]
call fcn.00406180
push eax
lea ecx, [ebp - 0xe78]
call fcn.00406010
push eax
lea edx, [ebp - 0xa18]
push edx
call fcn.0050c679
add esp, 0xc
test eax, eax
je 0x4c60ac
lea ecx, [ebp - 0xe7c]
call fcn.00406180
push eax
lea ecx, [ebp - 0xe7c]
call fcn.00406010
push eax
lea eax, [ebp - 0xa18]
push eax
call fcn.0050c679
add esp, 0xc
test eax, eax
jne 0x4c6192
mov dword [ebp - 0x14ec], 0
lea ecx, [ebp - 0x10a0]
call fcn.00406190
lea ecx, [ebp - 0xa20]
call fcn.00406190
lea ecx, [ebp - 0xe54]
call fcn.00406190
lea ecx, [ebp - 0x1098]
call fcn.00406190
lea ecx, [ebp - 0xe64]
call fcn.00406190
lea ecx, [ebp - 0xa24]
call fcn.00406190
lea ecx, [ebp - 0x214]
call fcn.00406190
lea ecx, [ebp - 0xa34]
call fcn.00406190
lea ecx, [ebp - 0x108c]
call fcn.00406190
lea ecx, [ebp - 0xc44]
call fcn.00406190
lea ecx, [ebp - 0x109c]
call fcn.00406190
lea ecx, [ebp - 0xa28]
call fcn.00406190
lea ecx, [ebp - 0x1090]
call fcn.00406190
lea ecx, [ebp - 0x1094]
call fcn.00406190
lea ecx, [ebp - 0x218]
call fcn.00406190
lea ecx, [ebp - 0xe78]
call fcn.00406190
lea ecx, [ebp - 0xe7c]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406190
lea ecx, [ebp - 0x14b8]
call fcn.00406190
mov eax, dword [ebp - 0x14ec]
jmp 0x4c652f
push ecx
mov ecx, esp
lea edx, [ebp - 0x1088]
push edx
call fcn.00405520
push ecx
mov ecx, esp
lea eax, [ebp - 0xe5c]
push eax
call fcn.00405e60
mov ecx, dword [ebp - 0x150c]
call fcn.004b0d20
test eax, eax
jne 0x4c61e1
push ecx
mov ecx, esp
lea edx, [ebp - 0xe5c]
push edx
call fcn.00405e60
mov ecx, dword [ebp - 0x150c]
call fcn.004b1250
test eax, eax
je 0x4c62c7
mov dword [ebp - 0x14fc], 0
lea ecx, [ebp - 0x10a0]
call fcn.00406190
lea ecx, [ebp - 0xa20]
call fcn.00406190
lea ecx, [ebp - 0xe54]
call fcn.00406190
lea ecx, [ebp - 0x1098]
call fcn.00406190
lea ecx, [ebp - 0xe64]
call fcn.00406190
lea ecx, [ebp - 0xa24]
call fcn.00406190
lea ecx, [ebp - 0x214]
call fcn.00406190
lea ecx, [ebp - 0xa34]
call fcn.00406190
lea ecx, [ebp - 0x108c]
call fcn.00406190
lea ecx, [ebp - 0xc44]
call fcn.00406190
lea ecx, [ebp - 0x109c]
call fcn.00406190
lea ecx, [ebp - 0xa28]
call fcn.00406190
lea ecx, [ebp - 0x1090]
call fcn.00406190
lea ecx, [ebp - 0x1094]
call fcn.00406190
lea ecx, [ebp - 0x218]
call fcn.00406190
lea ecx, [ebp - 0xe78]
call fcn.00406190
lea ecx, [ebp - 0xe7c]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406190
lea ecx, [ebp - 0x14b8]
call fcn.00406190
mov eax, dword [ebp - 0x14fc]
jmp 0x4c652f
push ecx
mov ecx, esp
lea eax, [ebp - 0xe5c]
push eax
call fcn.00405e60
lea ecx, [ebp - 0xe60]
push ecx
mov ecx, dword [ebp - 0x150c]
call fcn.004b0f40
push 0x55320c
lea ecx, [ebp - 0xe60]
call fcn.00405a70
push str.explorer.exe
lea ecx, [ebp - 0xe60]
call fcn.00415a60
test eax, eax
je 0x4c6420
lea ecx, [ebp - 0xe60]
call fcn.00406010
push eax
mov ecx, dword [ebp - 0x150c]
call fcn.004b1360
test eax, eax
je 0x4c6420
mov dword [ebp - 0x1504], 0
lea ecx, [ebp - 0xe60]
call fcn.00406190
lea ecx, [ebp - 0x10a0]
call fcn.00406190
lea ecx, [ebp - 0xa20]
call fcn.00406190
lea ecx, [ebp - 0xe54]
call fcn.00406190
lea ecx, [ebp - 0x1098]
call fcn.00406190
lea ecx, [ebp - 0xe64]
call fcn.00406190
lea ecx, [ebp - 0xa24]
call fcn.00406190
lea ecx, [ebp - 0x214]
call fcn.00406190
lea ecx, [ebp - 0xa34]
call fcn.00406190
lea ecx, [ebp - 0x108c]
call fcn.00406190
lea ecx, [ebp - 0xc44]
call fcn.00406190
lea ecx, [ebp - 0x109c]
call fcn.00406190
lea ecx, [ebp - 0xa28]
call fcn.00406190
lea ecx, [ebp - 0x1090]
call fcn.00406190
lea ecx, [ebp - 0x1094]
call fcn.00406190
lea ecx, [ebp - 0x218]
call fcn.00406190
lea ecx, [ebp - 0xe78]
call fcn.00406190
lea ecx, [ebp - 0xe7c]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406190
lea ecx, [ebp - 0x14b8]
call fcn.00406190
mov eax, dword [ebp - 0x1504]
jmp 0x4c652f
lea ecx, [ebp - 0xe5c]
call fcn.00406010
push eax
push 0x104
mov edx, dword [ebp - 0x150c]
add edx, 0xfc
push edx
call fcn.0049c340
mov dword [ebp - 0x1508], 1
lea ecx, [ebp - 0xe60]
call fcn.00406190
lea ecx, [ebp - 0x10a0]
call fcn.00406190
lea ecx, [ebp - 0xa20]
call fcn.00406190
lea ecx, [ebp - 0xe54]
call fcn.00406190
lea ecx, [ebp - 0x1098]
call fcn.00406190
lea ecx, [ebp - 0xe64]
call fcn.00406190
lea ecx, [ebp - 0xa24]
call fcn.00406190
lea ecx, [ebp - 0x214]
call fcn.00406190
lea ecx, [ebp - 0xa34]
call fcn.00406190
lea ecx, [ebp - 0x108c]
call fcn.00406190
lea ecx, [ebp - 0xc44]
call fcn.00406190
lea ecx, [ebp - 0x109c]
call fcn.00406190
lea ecx, [ebp - 0xa28]
call fcn.00406190
lea ecx, [ebp - 0x1090]
call fcn.00406190
lea ecx, [ebp - 0x1094]
call fcn.00406190
lea ecx, [ebp - 0x218]
call fcn.00406190
lea ecx, [ebp - 0xe78]
call fcn.00406190
lea ecx, [ebp - 0xe7c]
call fcn.00406190
lea ecx, [ebp - 0xe5c]
call fcn.00406190
lea ecx, [ebp - 0x14b8]
call fcn.00406190
mov eax, dword [ebp - 0x1508]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0050c75f
mov esp, ebp
pop ebp
ret 4