Function at 0x4b00f4
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffec0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x128], ecx
mov dword [ebp - 8], ecx
mov byte [ebp - 1], dl
mov ebx, eax
xor eax, eax
push ebp
push 0x4b0cf7
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xff
lea eax, [ebp - 0x120]
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
lea edx, [ebp - 0x128]
lea eax, [ebp - 0x120]
call fcn.00409aa4
mov edx, dword [ebp - 0x128]
lea ecx, [ebp - 0x124]
mov eax, dword [ebx + 0x9dc]
call fcn.0040971c
cmp dword [ebp - 0x124], 0
jne 0x4b0302
mov ecx, dword [ebx + 0x9dc]
mov dl, 1
mov eax, dword [0x46d568]
call fcn.0046d618
mov esi, eax
mov dword [ebx + 0x9d8], esi
mov dword [ebp - 0xc], esi
mov eax, ebx
call fcn.0041f69c
dec eax
test eax, eax
jl 0x4b029d
inc eax
mov dword [ebp - 0x10], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x42ea6c]
call fcn.00403c9c
test al, al
je 0x4b020d
mov edx, esi
mov eax, ebx
call fcn.0041f670
lea edx, [ebp - 0x12c]
call fcn.00448b8c
mov eax, dword [ebp - 0x12c]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0d10
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 4]
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x4318dc]
call fcn.00403c9c
test al, al
je 0x4b0250
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [eax]
call dword [edx + 0xc4]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0d24
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0x14]
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x432008]
call fcn.00403c9c
test al, al
je 0x4b0293
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [eax]
call dword [edx + 0xc4]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0d3c
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0x14]
inc esi
dec dword [ebp - 0x10]
jne 0x4b01c1
mov eax, dword [ebx + 0x9cc]
call fcn.00421f58
push eax
mov ecx, 0x4b0d54
mov edx, 0x4b0d6c
mov eax, dword [ebp - 0xc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9d0]
call fcn.00421f58
push eax
mov ecx, 0x4b0d84
mov edx, 0x4b0d6c
mov eax, dword [ebp - 0xc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9d4]
call fcn.00421f58
push eax
mov ecx, 0x4b0d9c
mov edx, 0x4b0d6c
mov eax, dword [ebp - 0xc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9d8]
call fcn.00403b10
cmp byte [ebp - 1], 2
jne 0x4b057d
mov ecx, dword [ebx + 0x9dc]
mov dl, 1
mov eax, dword [0x46d568]
call fcn.0046d618
mov esi, eax
mov dword [ebx + 0x9d8], esi
mov dword [ebp - 0x14], esi
mov eax, ebx
call fcn.0041f69c
dec eax
test eax, eax
jl 0x4b045a
inc eax
mov dword [ebp - 0x10], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x42ea6c]
call fcn.00403c9c
test al, al
je 0x4b0398
push 0x4b0db0
lea eax, [ebp - 8]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0d10
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 8]
mov edx, 0x4b0db0
call fcn.00404c78
je 0x4b0398
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [ebp - 8]
call fcn.00448bbc
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x4318dc]
call fcn.00403c9c
test al, al
je 0x4b03f4
push 0xfffe7961
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0d24
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b03f4
mov edx, edi
mov eax, ebx
call fcn.004b163c
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
pop edx
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x432008]
call fcn.00403c9c
test al, al
je 0x4b0450
push 0xfffe7961
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0d3c
mov eax, dword [ebp - 0x14]
mov edi, dword [eax]
call dword [edi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0450
mov edx, edi
mov eax, ebx
call fcn.004b163c
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
pop edx
mov ecx, dword [eax]
call dword [ecx + 0xc8]
inc esi
dec dword [ebp - 0x10]
jne 0x4b033f
push 0xfffe7961
mov ecx, 0x4b0d54
mov edx, 0x4b0d6c
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0481
mov dword [ebx + 0x9cc], edi
push 0xfffe7961
mov ecx, 0x4b0d54
mov edx, 0x4b0d6c
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b04a8
mov dword [ebx + 0x9cc], edi
push 0xfffe7961
mov ecx, 0x4b0d84
mov edx, 0x4b0d6c
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b04cf
mov dword [ebx + 0x9d0], edi
push 0xfffe7961
mov ecx, 0x4b0d9c
mov edx, 0x4b0d6c
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b04f6
mov dword [ebx + 0x9d4], edi
mov edx, dword [ebx + 0x9d4]
mov eax, dword [ebx + 0x818]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x80c]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x814]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x81c]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x824]
call fcn.00448d2c
mov edx, dword [ebx + 0x9d0]
mov eax, dword [ebx + 0x810]
call fcn.00448d2c
mov edx, dword [ebx + 0x9d0]
mov eax, dword [ebx + 0x820]
call fcn.00448d2c
mov eax, dword [ebx + 0x9d8]
call fcn.00403b10
jmp 0x4b0c9b
mov ecx, dword [ebx + 0x9dc]
mov dl, 1
mov eax, dword [0x46d568]
call fcn.0046d618
mov esi, eax
mov dword [ebx + 0x9d8], esi
mov dword [ebp - 0x18], esi
cmp byte [ebp - 1], 0
jne 0x4b0840
mov eax, ebx
call fcn.0041f69c
dec eax
test eax, eax
jl 0x4b0696
inc eax
mov dword [ebp - 0x10], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x42ea6c]
call fcn.00403c9c
test al, al
je 0x4b0606
mov edx, esi
mov eax, ebx
call fcn.0041f670
lea edx, [ebp - 0x130]
call fcn.00448b8c
mov eax, dword [ebp - 0x130]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0dbc
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 4]
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x4318dc]
call fcn.00403c9c
test al, al
je 0x4b0649
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [eax]
call dword [edx + 0xc4]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0dcc
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 0x14]
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x432008]
call fcn.00403c9c
test al, al
je 0x4b068c
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [eax]
call dword [edx + 0xc4]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0de0
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 0x14]
inc esi
dec dword [ebp - 0x10]
jne 0x4b05ba
mov eax, dword [ebx + 0x40]
push eax
mov ecx, 0x4b0df4
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x44]
push eax
mov ecx, 0x4b0e14
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x48]
push eax
mov ecx, 0x4b0e20
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x4c]
push eax
mov ecx, 0x4b0e30
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9cc]
call fcn.00421f58
push eax
mov ecx, 0x4b0d54
mov edx, 0x4b0e40
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9d0]
call fcn.00421f58
push eax
mov ecx, 0x4b0d84
mov edx, 0x4b0e40
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9d4]
call fcn.00421f58
push eax
mov ecx, 0x4b0d9c
mov edx, 0x4b0e40
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x7d4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x60]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4b07a7
inc eax
mov dword [ebp - 0x10], eax
xor esi, esi
lea ecx, [ebp - 0x134]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x60]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x134]
push eax
lea edx, [ebp - 0x138]
mov eax, esi
call fcn.004090e4
mov ecx, dword [ebp - 0x138]
mov edx, 0x4b0e54
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 4]
inc esi
dec dword [ebp - 0x10]
jne 0x4b0767
lea edx, [ebp - 0x13c]
mov eax, dword [ebx + 0x3a4]
mov eax, dword [eax + 0x26c]
call fcn.00448b8c
mov eax, dword [ebp - 0x13c]
push eax
mov ecx, 0x4b0e6c
mov edx, 0x4b0e7c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 4]
mov eax, dword [ebx + 0x9ac]
push eax
mov ecx, 0x4b0e90
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9b0]
push eax
mov ecx, 0x4b0eb8
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9b4]
push eax
mov ecx, 0x4b0ec8
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebx + 0x9b8]
push eax
mov ecx, 0x4b0edc
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
jmp 0x4b0c90
mov eax, ebx
call fcn.0041f69c
dec eax
test eax, eax
jl 0x4b0971
inc eax
mov dword [ebp - 0x10], eax
xor esi, esi
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x42ea6c]
call fcn.00403c9c
test al, al
je 0x4b08af
push 0x4b0db0
lea eax, [ebp - 8]
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0dbc
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 8]
mov edx, 0x4b0db0
call fcn.00404c78
je 0x4b08af
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [ebp - 8]
call fcn.00448bbc
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x4318dc]
call fcn.00403c9c
test al, al
je 0x4b090b
push 0xfffe7961
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0dcc
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b090b
mov edx, edi
mov eax, ebx
call fcn.004b163c
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
pop edx
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov edx, dword [0x432008]
call fcn.00403c9c
test al, al
je 0x4b0967
push 0xfffe7961
mov edx, esi
mov eax, ebx
call fcn.0041f670
mov ecx, dword [eax + 8]
mov edx, 0x4b0de0
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0967
mov edx, edi
mov eax, ebx
call fcn.004b163c
push eax
mov edx, esi
mov eax, ebx
call fcn.0041f670
pop edx
mov ecx, dword [eax]
call dword [ecx + 0xc8]
inc esi
dec dword [ebp - 0x10]
jne 0x4b0856
push 0xfffe7961
mov ecx, 0x4b0df4
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b099b
mov edx, edi
mov eax, ebx
call fcn.004482fc
push 0xfffe7961
mov ecx, 0x4b0e14
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b09c5
mov edx, edi
mov eax, ebx
call fcn.00448320
push 0xfffe7961
mov ecx, 0x4b0e20
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b09ef
mov edx, edi
mov eax, ebx
call fcn.00448348
push 0xfffe7961
mov ecx, 0x4b0e30
mov edx, 0x4b0e04
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0a19
mov edx, edi
mov eax, ebx
call fcn.0044836c
push 0xfffe7961
mov ecx, 0x4b0d54
mov edx, 0x4b0e40
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0a40
mov dword [ebx + 0x9cc], edi
push 0xfffe7961
mov ecx, 0x4b0d54
mov edx, 0x4b0e40
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0a67
mov dword [ebx + 0x9cc], edi
push 0xfffe7961
mov ecx, 0x4b0d84
mov edx, 0x4b0e40
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0a8e
mov dword [ebx + 0x9d0], edi
push 0xfffe7961
mov ecx, 0x4b0d9c
mov edx, 0x4b0e40
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0ab5
mov dword [ebx + 0x9d4], edi
mov edx, dword [ebx + 0x9d4]
mov eax, dword [ebx + 0x818]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x80c]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x814]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x81c]
call fcn.00448d2c
mov edx, dword [ebx + 0x9cc]
mov eax, dword [ebx + 0x824]
call fcn.00448d2c
mov edx, dword [ebx + 0x9d0]
mov eax, dword [ebx + 0x810]
call fcn.00448d2c
mov edx, dword [ebx + 0x9d0]
mov eax, dword [ebx + 0x820]
call fcn.00448d2c
mov eax, dword [ebx + 0x7d4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x60]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x4b0b98
inc eax
mov dword [ebp - 0x10], eax
xor esi, esi
push 0x4b0db0
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0x140]
mov eax, esi
call fcn.004090e4
mov ecx, dword [ebp - 0x140]
mov edx, 0x4b0e54
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 8]
mov edx, 0x4b0db0
call fcn.00404c78
je 0x4b0b92
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x60]
mov ecx, dword [ebp - 8]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0x20]
inc esi
dec dword [ebp - 0x10]
jne 0x4b0b4b
push 0xfffe7961
mov ecx, 0x4b0e90
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0bbf
mov dword [ebx + 0x9ac], edi
push 0xfffe7961
mov ecx, 0x4b0eb8
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0be6
mov dword [ebx + 0x9b0], edi
push 0xfffe7961
mov ecx, 0x4b0ec8
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0c0d
mov dword [ebx + 0x9b4], edi
push 0xfffe7961
mov ecx, 0x4b0edc
mov edx, 0x4b0ea0
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 8]
mov edi, eax
cmp edi, 0xfffe7961
je 0x4b0c34
mov dword [ebx + 0x9b8], edi
push 0x4b0db0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b0e6c
mov edx, 0x4b0e7c
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi]
mov eax, dword [ebp - 8]
mov edx, 0x4b0db0
call fcn.00404c78
je 0x4b0c76
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004b5674
mov edx, eax
mov eax, dword [ebx + 0x3a4]
call fcn.00482eb8
jmp 0x4b0c87
mov edx, dword [ebx + 0x3a8]
mov eax, dword [ebx + 0x3a4]
call fcn.00482eb8
xor edx, edx
mov eax, ebx
call fcn.004b5270
mov eax, dword [ebx + 0x9d8]
call fcn.00403b10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b0cfe
lea eax, [ebp - 0x140]
call fcn.0040487c
lea eax, [ebp - 0x13c]
call fcn.0040487c
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.004048a0
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.004048a0
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.004048a0
lea eax, [ebp - 8]
call fcn.0040487c
ret