Function at 0x4d8960
Capabilities:
Enumerate files on windows
Get common file path
Set current directory

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5305f4
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xb88
mov eax, dword [0x58b18c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xa74], edi
mov dword [ebp - 0xa54], edi
mov dword [ebp - 0xa54], edi
call fcn.0043f3a0
cmp dword [eax + 0x14], 0x10
jb 0x4d89c2
mov eax, dword [eax]
mov dword [ebp - 0xa48], eax
lea eax, [ebp - 0xa48]
mov byte [ebp - 0xa44], 0
push dword [ebp - 0xa44]
push eax
lea eax, [ebp - 0xa70]
push eax
call fcn.004e6180
add esp, 0xc
lea eax, [ebp - 0xa70]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00485d00
lea ecx, [ebp - 0xa70]
mov byte [ebp - 4], 2
call fcn.00414900
lea ecx, [ebp - 0x8c8]
call fcn.00485dd0
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 0xa49], al
mov dword [ebp - 4], 0xffffffff
call fcn.00414900
cmp byte [ebp - 0xa49], 0
jne 0x4d8a46
mov cl, 1
call fcn.004afbb0
call fcn.0043f3a0
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x4d8a55
mov esi, dword [esi]
mov dword [ebp - 0xa50], esi
test esi, esi
je 0x4d9632
xor ecx, ecx
cmp byte [esi], cl
je 0x4d9632
mov eax, esi
nop
lea eax, [eax + 1]
inc ecx
cmp byte [eax], 0
jne 0x4d8a70
test ecx, ecx
je 0x4d9632
mov ecx, 0x564aa0
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4d8aa8
test dl, dl
je 0x4d8aa4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4d8aa8
add eax, 2
add ecx, 2
test dl, dl
jne 0x4d8a88
xor eax, eax
jmp 0x4d8aad
sbb eax, eax
or eax, 1
test eax, eax
je 0x4d9632
call fcn.0043f3a0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x4d8ac5
mov eax, dword [eax]
push 0xf
push str._applaunch_2630
push 0
mov ecx, eax
call fcn.00432150
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4d9632
mov byte [ebp - 0xa44], 0
lea eax, [ebp - 0xa48]
push dword [ebp - 0xa44]
mov dword [ebp - 0xa48], esi
push eax
lea eax, [ebp - 0xa70]
push eax
call fcn.004e6180
add esp, 0xc
lea eax, [ebp - 0xa70]
mov dword [ebp - 4], 3
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00485d00
lea ecx, [ebp - 0xa70]
mov byte [ebp - 4], 5
call fcn.00414900
lea ecx, [ebp - 0x8c8]
call fcn.00485dd0
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 0xa49], al
mov dword [ebp - 4], 0xffffffff
call fcn.00414900
cmp byte [ebp - 0xa49], 0
je 0x4d9632
mov byte [ebp - 0xa44], 0
lea eax, [ebp - 0xa50]
push dword [ebp - 0xa44]
push eax
lea eax, [ebp - 0x890]
push eax
call fcn.004e6180
add esp, 0xc
lea eax, [ebp - 0xa90]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0x890]
call fcn.0043e7a0
push ecx
lea ecx, [ebp - 0xa70]
mov byte [ebp - 4], 7
push ecx
mov ecx, eax
call fcn.0047a930
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xa5c]
mov eax, ecx
mov edi, dword [ebp - 0xa60]
sub eax, edi
push 5
push str.main
cmp eax, 5
jb 0x4d8c03
cmp ecx, 0x10
lea esi, [ebp - 0xa70]
lea eax, [edi + 5]
cmovae esi, dword [ebp - 0xa70]
mov dword [ebp - 0xa60], eax
lea eax, [esi + edi]
push eax
call fcn.005005e0
add esp, 0xc
mov byte [esi + edi + 5], 0
lea eax, [ebp - 0xa70]
jmp 0x4d8c16
push dword [ebp - 0xa54]
lea ecx, [ebp - 0xa70]
push 5
call fcn.00418a60
xorps xmm0, xmm0
mov dword [ebp - 0x820], 0
movups xmmword [ebp - 0x830], xmm0
mov dword [ebp - 0x81c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x830], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x820], xmm0
mov byte [ebp - 4], 0xa
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0xa5c]
cmp ecx, 0x10
jb 0x4d8c9a
mov edx, dword [ebp - 0xa70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8c90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9678
push ecx
push edx
call fcn.004f79ae
add esp, 8
mov dword [ebp - 0xa60], 0
mov dword [ebp - 0xa5c], 0xf
mov byte [ebp - 0xa70], 0
lea ecx, [ebp - 0xa90]
call fcn.00414900
xorps xmm0, xmm0
mov dword [ebp - 0x868], 0
movups xmmword [ebp - 0x878], xmm0
mov dword [ebp - 0x864], 0xf
mov byte [ebp - 0x878], 0
push 0x140
lea eax, [ebp - 0xa40]
mov byte [ebp - 4], 0xc
push 0
push eax
call fcn.00500b60
add esp, 0xc
lea eax, [ebp - 0x418]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
xorps xmm0, xmm0
mov dword [ebp - 0x850], 0
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x84c], 0
movups xmmword [ebp - 0x860], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4d8d38
sub ecx, edx
lea eax, [ebp - 0x418]
push ecx
push eax
lea ecx, [ebp - 0x860]
call fcn.004185e0
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x830]
cmp dword [ebp - 0x81c], 0x10
cmovae eax, dword [ebp - 0x830]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
cmp dword [ebp - 0x81c], 0x10
lea eax, [ebp - 0x830]
cmovae eax, dword [ebp - 0x830]
push eax
lea eax, [ebp - 0x818]
push 0x400
push eax
call fcn.00509bbb
add esp, 0xc
lea eax, [ebp - 0x818]
push 0x573ecc
push 0x400
push eax
call fcn.0050a7ee
add esp, 0xc
lea eax, [ebp - 0xa40]
push eax
lea eax, [ebp - 0x818]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
mov dword [ebp - 0xa50], edi
cmp edi, 0xffffffff
je 0x4d919b
nop word [eax + eax]
test byte [ebp - 0xa40], 0x10
jne 0x4d8f53
xorps xmm0, xmm0
mov dword [ebp - 0x838], 0
lea ecx, [ebp - 0xa14]
mov dword [ebp - 0x834], 0
movups xmmword [ebp - 0x848], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4d8e14
sub ecx, edx
lea eax, [ebp - 0xa14]
push ecx
push eax
lea ecx, [ebp - 0x848]
call fcn.004185e0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x848]
mov esi, dword [ebp - 0x834]
cmp esi, 0x10
mov edx, dword [ebp - 0x848]
mov eax, dword [ebp - 0x838]
cmovae ecx, edx
setae byte [ebp - 0xa49]
mov dword [ebp - 0xa58], edx
mov dword [ebp - 0xa48], ecx
cmp eax, 0xa
jb 0x4d8f1b
add eax, 0xfffffff7
add eax, ecx
mov dword [ebp - 0xa44], eax
sub eax, ecx
push eax
push 0x6c
push ecx
call fcn.005023c0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4d8f0f
mov edx, edi
mov eax, str.localized_
mov esi, 6
nop dword [eax]
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x4d8eb1
add edx, 4
add eax, 4
sub esi, 4
jae 0x4d8ea0
mov cl, byte [edx]
cmp cl, byte [eax]
jne 0x4d8ed8
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x4d8ed8
cmp esi, 0xfffffffe
je 0x4d8ed4
mov cl, byte [edx + 2]
cmp cl, byte [eax + 2]
jne 0x4d8ed8
mov cl, byte [edx + 3]
cmp cl, byte [eax + 3]
jne 0x4d8ed8
xor eax, eax
jmp 0x4d8edd
sbb eax, eax
or eax, 1
test eax, eax
je 0x4d8efe
mov eax, dword [ebp - 0xa44]
inc edi
sub eax, edi
push eax
push 0x6c
push edi
call fcn.005023c0
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x4d8e91
jmp 0x4d8f09
sub edi, dword [ebp - 0xa48]
cmp edi, 0xffffffff
jne 0x4d8f6e
mov esi, dword [ebp - 0x834]
mov edx, dword [ebp - 0xa58]
mov edi, dword [ebp - 0xa50]
cmp byte [ebp - 0xa49], 0
mov byte [ebp - 4], 0xd
je 0x4d8f53
lea ecx, [esi + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8f49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9678
push ecx
push edx
call fcn.004f79ae
add esp, 8
lea eax, [ebp - 0xa40]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4d8de0
jmp 0x4d9194
xor eax, eax
inc eax
cmp eax, 0xb
je 0x4d8f81
cmp byte [eax + str.localized_], 0
jne 0x4d8f70
jmp 0x4d8f86
mov eax, 0xb
mov edx, dword [ebp - 0x834]
lea ecx, [ebp - 0x848]
mov esi, dword [ebp - 0xa58]
add eax, edi
mov edi, dword [ebp - 0x838]
cmp edx, 0x10
mov dword [ebp - 0xa48], eax
cmovae ecx, esi
mov dword [ebp - 0xa44], ecx
cmp edi, 3
jb 0x4d9048
lea edx, [edi - 3]
mov dword [ebp - 0xa54], edx
cmp eax, edx
mov edx, dword [ebp - 0x834]
ja 0x4d9048
mov edx, dword [ebp - 0xa54]
inc edx
add edx, ecx
add ecx, eax
sub edx, ecx
push edx
push 0x5f
push ecx
call fcn.005023c0
mov ecx, eax
add esp, 0xc
test ecx, ecx
je 0x4d903c
movzx eax, byte [ecx]
cmp al, 0x5f
jne 0x4d900c
movzx eax, byte [ecx + 1]
cmp al, 0x69
jne 0x4d900c
movzx eax, byte [ecx + 2]
cmp al, 0x77
jne 0x4d900c
xor eax, eax
jmp 0x4d9011
sbb eax, eax
or eax, 1
test eax, eax
je 0x4d9073
mov edx, dword [ebp - 0xa44]
lea eax, [edi - 3]
inc edx
inc ecx
add eax, edx
sub eax, ecx
push eax
push 0x5f
push ecx
call fcn.005023c0
mov esi, dword [ebp - 0xa58]
mov ecx, eax
add esp, 0xc
test ecx, ecx
jne 0x4d8ff1
mov edx, dword [ebp - 0x834]
mov eax, dword [ebp - 0xa48]
or ecx, 0xffffffff
mov dword [ebp - 0xa60], 0
xorps xmm0, xmm0
mov dword [ebp - 0xa5c], 0
movups xmmword [ebp - 0xa70], xmm0
cmp edi, eax
jb 0x4d967d
jmp 0x4d9087
sub ecx, dword [ebp - 0xa44]
mov edx, dword [ebp - 0x834]
mov eax, dword [ebp - 0xa48]
jmp 0x4d904b
sub ecx, eax
sub edi, eax
cmp edi, ecx
lea eax, [ebp - 0x848]
cmovb ecx, edi
cmp edx, 0x10
push ecx
cmovae eax, esi
lea ecx, [ebp - 0xa70]
add eax, dword [ebp - 0xa48]
push eax
call fcn.004185e0
lea eax, [ebp - 0xa70]
push eax
lea ecx, [ebp - 0x878]
call fcn.00414d90
mov ecx, dword [ebp - 0xa5c]
cmp ecx, 0x10
jb 0x4d90fb
mov edx, dword [ebp - 0xa70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d90f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9678
push ecx
push edx
call fcn.004f79ae
add esp, 8
cmp dword [ebp - 0x868], 0
je 0x4d913e
cmp dword [ebp - 0x864], 0x10
lea eax, [ebp - 0x878]
cmovae eax, dword [ebp - 0x878]
movsx eax, byte [eax]
push eax
call fcn.00503cd8
mov cl, al
add esp, 4
cmp dword [ebp - 0x864], 0x10
lea eax, [ebp - 0x878]
cmovae eax, dword [ebp - 0x878]
mov byte [eax], cl
jmp 0x4d9150
push 7
push str.Unknown
lea ecx, [ebp - 0x878]
call fcn.00415ea0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x834]
cmp ecx, 0x10
jb 0x4d918e
mov edx, dword [ebp - 0x848]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d9184
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9678
push ecx
push edx
call fcn.004f79ae
add esp, 8
mov edi, dword [ebp - 0xa50]
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x84c], 0x10
lea eax, [ebp - 0x860]
cmovae eax, dword [ebp - 0x860]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x9533d0]
cmp eax, dword [ecx + 4]
jle 0x4d938b
push 0x9533d0
call fcn.004f74f5
add esp, 4
cmp dword [0x9533d0], 0xffffffff
jne 0x4d938b
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x830]
xorps xmm0, xmm0
mov dword [0x9508b0], 0
push 0x1d
push str.localized_english_iw00.iwd
lea ecx, [ebp - 0xb98]
movq qword [0x9508a8], xmm0
call fcn.00417bf0
push 0x1d
push str.localized_english_iw01.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb80]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw02.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb68]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw03.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xb50]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw04.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xb38]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw05.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xb20]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw06.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb08]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw07.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xaf0]
call fcn.00417bf0
add esp, 0x40
push 0x1d
push str.localized_english_iw08.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xad8]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw09.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xac0]
call fcn.00417bf0
push 0x1d
push str.localized_english_iw10.iwd
lea edx, [ebp - 0x830]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xaa8]
call fcn.00417bf0
add esp, 0x14
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0xa90]
lea ecx, [ebp - 0xb98]
push eax
push ecx
mov ecx, 0x9508a8
call fcn.00479540
push fcn.00414d40
push 0xb
push 0x18
lea eax, [ebp - 0xb98]
mov byte [ebp - 4], 0xf
push eax
call fcn.004f7be5
push 0x533a90
call fcn.004f7999
add esp, 4
mov byte [ebp - 4], 0xd
push 0x9533d0
call fcn.004f74a4
add esp, 4
mov esi, dword [0x9508a8]
mov edi, dword [0x9508ac]
cmp esi, edi
je 0x4d942f
mov byte [ebp - 0xa54], 0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x4d93b0
mov eax, dword [esi]
push dword [ebp - 0xa54]
mov dword [ebp - 0xa44], eax
lea eax, [ebp - 0xa44]
push eax
lea eax, [ebp - 0xa90]
push eax
call fcn.004e6180
add esp, 0xc
lea eax, [ebp - 0xa90]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x900]
call fcn.00485d00
lea ecx, [ebp - 0xa90]
mov byte [ebp - 4], 0x1d
call fcn.00414900
lea ecx, [ebp - 0x900]
call fcn.00485dd0
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 0xa49], al
mov byte [ebp - 4], 0xd
call fcn.00414900
cmp byte [ebp - 0xa49], 0
je 0x4d9527
add esi, 0x18
cmp esi, edi
jne 0x4d93a6
mov esi, dword [ebp - 0xa74]
xorps xmm0, xmm0
lea ecx, [esi + 4]
push 7
push str.English
mov byte [esi], 1
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004185e0
mov ecx, dword [ebp - 0x84c]
cmp ecx, 0x10
jb 0x4d9495
mov edx, dword [ebp - 0x860]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d948b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9682
push ecx
push edx
call fcn.004f79ae
add esp, 8
mov ecx, dword [ebp - 0x864]
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0xf
mov byte [ebp - 0x860], 0
cmp ecx, 0x10
jb 0x4d94ea
mov edx, dword [ebp - 0x878]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d94e0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9682
push ecx
push edx
call fcn.004f79ae
add esp, 8
mov ecx, dword [ebp - 0x81c]
cmp ecx, 0x10
jb 0x4d9608
mov edx, dword [ebp - 0x830]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d95fe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9682
jmp 0x4d95fe
mov esi, dword [ebp - 0xa74]
lea eax, [ebp - 0x878]
push eax
lea ecx, [esi + 4]
mov byte [esi], 0
call fcn.00414ed0
mov ecx, dword [ebp - 0x84c]
cmp ecx, 0x10
jb 0x4d9579
mov edx, dword [ebp - 0x860]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d956f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9682
push ecx
push edx
call fcn.004f79ae
add esp, 8
mov ecx, dword [ebp - 0x864]
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0xf
mov byte [ebp - 0x860], 0
cmp ecx, 0x10
jb 0x4d95ce
mov edx, dword [ebp - 0x878]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d95c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9682
push ecx
push edx
call fcn.004f79ae
add esp, 8
mov ecx, dword [ebp - 0x81c]
cmp ecx, 0x10
jb 0x4d9608
mov edx, dword [ebp - 0x830]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d95fe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9682
push ecx
push edx
call fcn.004f79ae
add esp, 8
lea ecx, [ebp - 0x890]
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x81c], 0xf
mov byte [ebp - 0x830], 0
call fcn.00414900
mov eax, esi
jmp 0x4d965a
lea ecx, [edi + 4]
mov byte [edi], 0
xorps xmm0, xmm0
push 7
movups xmmword [ecx], xmm0
push str.Unknown
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004185e0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004f7466
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.005094c8
call fcn.00416730
call fcn.005094c8
int3