Function at 0x417684
Capabilities:
Get common file path

Disassembly:
push 0x5a4
mov eax, 0x4a1a99
call fcn.00481105
xor ebx, ebx
mov dword [ebp - 0x5a4], ebx
cmp byte [0x4d4858], bl
je 0x417741
push 7
pop esi
xor eax, eax
push 0x4bd6b4
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x274], ax
call fcn.0040299a
lea eax, [ebp - 0x274]
mov dword [ebp - 4], ebx
push eax
mov edi, 0x4d48bc
mov dword [ebp - 0x5a4], 1
call fcn.0041865c
cmp dword [eax + 0x10], ebx
je 0x417746
xor eax, eax
push 0x4bd6cc
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x2f0], esi
mov dword [ebp - 0x2f4], ebx
mov word [ebp - 0x304], ax
call fcn.0040299a
lea eax, [ebp - 0x304]
mov dword [ebp - 4], 1
push eax
mov dword [ebp - 0x5a4], 3
call fcn.0041865c
cmp dword [eax + 0x10], ebx
je 0x417746
mov byte [ebp - 0x5a5], bl
jmp 0x41774d
mov edi, 0x4d48bc
mov byte [ebp - 0x5a5], 1
test byte [ebp - 0x5a4], 2
je 0x41776b
and dword [ebp - 0x5a4], 0xfffffffd
push ebx
push 1
lea ecx, [ebp - 0x304]
call fcn.00402a5a
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x5a4], 1
je 0x417786
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.00402a5a
cmp byte [ebp - 0x5a5], bl
jne 0x418460
lea eax, [ebp - 0x2e8]
push eax
call fcn.0040d19f
push str.__xml_version_1.0__encoding_UTF_8____n
lea esi, [ebp - 0x2e8]
mov dword [ebp - 4], 2
call fcn.0040e277
push ebx
push str.wae_tracker
mov ecx, esi
call fcn.00410e17
xor eax, eax
push 0x4bd6cc
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x260], 7
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x274], ax
call fcn.0040299a
lea eax, [ebp - 0x274]
push eax
mov byte [ebp - 4], 3
call fcn.0041865c
cmp dword [eax + 0x14], 8
jb 0x417803
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2ac]
push eax
push 0x4bd6cc
lea esi, [ebp - 0x2e8]
call fcn.004103c5
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.00402a5a
xor eax, eax
push 0x4bd6b4
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x260], 7
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x274], ax
call fcn.0040299a
lea eax, [ebp - 0x274]
push eax
mov byte [ebp - 4], 4
call fcn.0041865c
cmp dword [eax + 0x14], 8
jb 0x41786d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2ac]
push eax
push 0x4bd6b4
lea esi, [ebp - 0x2e8]
call fcn.004103c5
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.00402a5a
mov eax, esi
call fcn.0040ec5c
push 0xcc
lea esi, [ebp - 0x274]
call fcn.0041a62e
pop ecx
push 8
pop edi
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], edi
jb 0x4178bc
mov eax, dword [eax]
push eax
push str.waever
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.00402a5a
lea ecx, [ebp - 0x5a4]
call fcn.00422eb1
mov byte [ebp - 4], 6
push dword [eax]
lea ecx, [ebp - 0x3ac]
call fcn.004029c1
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x5a4]
add eax, 0xfffffff0
call fcn.00402a23
lea ecx, [ebp - 0x5ac]
call fcn.00422f0b
mov byte [ebp - 4], 9
push dword [eax]
lea ecx, [ebp - 0x33c]
call fcn.004029c1
mov eax, dword [ebp - 0x5ac]
add eax, 0xfffffff0
call fcn.00402a23
xor eax, eax
mov dword [ebp - 0x37c], 7
mov dword [ebp - 0x380], ebx
mov word [ebp - 0x390], ax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x5a4], ebx
cmp dword [ebp - 0x32c], ebx
jbe 0x4179cb
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x328], edi
jae 0x417976
lea eax, [ebp - 0x33c]
mov esi, dword [ebp - 0x5a4]
add esi, esi
movzx eax, word [esi + eax]
push eax
call fcn.0047acb1
pop ecx
test eax, eax
je 0x4179b7
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x328], edi
jae 0x4179a1
lea eax, [ebp - 0x33c]
movzx eax, word [esi + eax]
xor edi, edi
push eax
inc edi
lea esi, [ebp - 0x390]
call fcn.00404210
push 8
pop edi
inc dword [ebp - 0x5a4]
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x32c]
jb 0x417962
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x398], edi
jae 0x4179df
lea eax, [ebp - 0x3ac]
push eax
push str.waeversion
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x37c], edi
jae 0x417a04
lea eax, [ebp - 0x390]
push eax
push str.waenamepid
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
mov ecx, dword [0x4d48c0]
mov eax, dword [ecx]
mov dword [ebp - 0x5a4], eax
cmp ecx, eax
je 0x417a61
add eax, 0xc
lea ecx, [eax + 0x1c]
cmp dword [ecx + 0x14], edi
jb 0x417a34
mov ecx, dword [ecx]
cmp dword [eax + 0x14], edi
jb 0x417a3b
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
lea eax, [ebp - 0x5a4]
call fcn.00418868
mov eax, dword [ebp - 0x5a4]
cmp dword [0x4d48c0], eax
jne 0x417a27
lea ecx, [ebp - 0x304]
call fcn.0041a426
lea ecx, [ebp - 0x274]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00419770
pop ecx
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], edi
jb 0x417a8a
mov eax, dword [eax]
push eax
push str.winver
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.00402a5a
push ebx
push 1
lea ecx, [ebp - 0x304]
mov byte [ebp - 4], 0xc
call fcn.00401587
call fcn.00419c2c
test eax, eax
mov eax, 0x4bd7a0
jne 0x417ace
mov eax, 0x4bd7a8
push eax
push str.winbits
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
lea eax, [ebp - 0x274]
push eax
call fcn.00419c65
pop ecx
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], edi
jb 0x417af7
mov eax, dword [eax]
push eax
push str.iever
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0xc
call fcn.00402a5a
push dword [0x4d4850]
lea esi, [ebp - 0x274]
call fcn.0041a62e
pop ecx
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], edi
jb 0x417b37
mov eax, dword [eax]
push eax
push str.waestart
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0xc
call fcn.00402a5a
push ebx
call fcn.0047a88d
pop ecx
push eax
lea esi, [ebp - 0x274]
mov dword [ebp - 0x5ac], edx
call fcn.0041a62e
pop ecx
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], edi
jb 0x417b7f
mov eax, dword [eax]
push eax
push str.waeend
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0xc
call fcn.00402a5a
lea eax, [ebp - 0x274]
push eax
call fcn.004171d0
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], edi
jb 0x417bb9
mov eax, dword [eax]
push eax
push str.downstate
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0xc
call fcn.00402a5a
lea eax, [ebp - 0x274]
push eax
call fcn.0041744a
mov byte [ebp - 4], 0x13
cmp dword [eax + 0x14], edi
jb 0x417bf3
mov eax, dword [eax]
push eax
push str.installstate
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.00402a5a
xor eax, eax
mov dword [ebp - 0x30c], 7
mov dword [ebp - 0x310], ebx
mov word [ebp - 0x320], ax
mov byte [ebp - 4], 0x14
mov eax, dword [0x4d47ac]
mov ecx, dword [eax]
mov edx, dword [0x4d47b0]
xor esi, esi
mov dword [ebp - 0x5a4], ecx
cmp eax, ecx
je 0x417c93
lea edi, [edx - 1]
push 0xffffffffffffffff
lea eax, [ecx + 0xc]
push ebx
push eax
lea ecx, [ebp - 0x320]
call fcn.00404662
cmp edi, esi
je 0x417c71
push 0x4bb090
lea ecx, [ebp - 0x320]
call fcn.004041e9
lea eax, [ebp - 0x5a4]
call fcn.00418774
mov ecx, dword [ebp - 0x5a4]
inc esi
cmp dword [0x4d47ac], ecx
jne 0x417c4b
cmp dword [ebp - 0x310], ebx
jne 0x417ca3
push 0x4bd520
lea ecx, [ebp - 0x320]
call fcn.0040299a
cmp dword [ebp - 0x30c], 8
mov eax, dword [ebp - 0x320]
jae 0x417cb8
lea eax, [ebp - 0x320]
push eax
push str.cdniplist
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
mov esi, 0x4d47d0
lea edi, [ebp - 0x274]
call fcn.004175c4
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x417ce5
mov eax, dword [eax]
push eax
push str.bindtasks
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
mov esi, 0x4d47e0
lea edi, [ebp - 0x274]
call fcn.004175c4
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
jb 0x417d24
mov eax, dword [eax]
push eax
push str.binddownfail
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
mov esi, 0x4d47f0
lea edi, [ebp - 0x274]
call fcn.004175c4
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 8
jb 0x417d63
mov eax, dword [eax]
push eax
push str.bindinstallfail
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
mov eax, dword [0x4d4800]
push 8
pop edi
cmp dword [0x4d4814], edi
jae 0x417d9b
mov eax, 0x4d4800
push eax
push str.binddowntime
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
mov eax, dword [0x4d481c]
cmp dword [0x4d4830], edi
jae 0x417dbe
mov eax, 0x4d481c
push eax
push str.bindinstalltime
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
mov eax, 0x4bca30
cmp byte [0x4d485c], bl
jne 0x417de1
mov eax, 0x4bd8c0
push eax
push 0x4bd8c4
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push dword [0x4d4860]
lea esi, [ebp - 0x274]
call fcn.0041a62e
pop ecx
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], edi
jb 0x417e0f
mov eax, dword [eax]
push eax
push str.crashcode
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
xor eax, eax
push 0x3e
mov word [ebp - 0x50], ax
lea eax, [ebp - 0x4e]
push ebx
push eax
call fcn.004805d0
add esp, 0xc
push dword [0x4d4864]
lea eax, [ebp - 0x50]
push str.0x_08X
push 0x20
push eax
call fcn.004196e9
add esp, 0x10
lea eax, [ebp - 0x50]
push eax
push str.crashattr
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push dword [0x4d4868]
lea esi, [ebp - 0x274]
call fcn.0041a62e
pop ecx
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x14], edi
jb 0x417e91
mov eax, dword [eax]
push eax
push str.crashoffset
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
mov eax, dword [0x4d486c]
cmp dword [0x4d4880], edi
jae 0x417ec6
mov eax, 0x4d486c
push eax
push str.crashfilename
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
mov eax, dword [0x4d4888]
cmp dword [0x4d489c], edi
jae 0x417ee9
mov eax, 0x4d4888
push eax
push str.crashsection
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
lea eax, [ebp - 0x5a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
fild dword [ebp - 0x5a0]
push ecx
push ecx
fdiv qword [0x4c0d20]
fldz
fcomp st(1)
fnstsw ax
fstp qword [esp]
test ah, 5
jp 0x417f2a
call fcn.0049a8f0
jmp 0x417f2f
call fcn.0047f000
pop ecx
pop ecx
call fcn.00481210
neg eax
push eax
lea esi, [ebp - 0x274]
call fcn.0041a677
pop ecx
mov byte [ebp - 4], 0x1a
cmp dword [eax + 0x14], edi
jb 0x417f50
mov eax, dword [eax]
push eax
push str.timezone
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLCID]
push eax
lea esi, [ebp - 0x274]
call fcn.0041a62e
pop ecx
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x14], edi
jb 0x417f91
mov eax, dword [eax]
push eax
push str.syslcid
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
call edi
push eax
lea esi, [ebp - 0x358]
call fcn.0041a677
pop ecx
mov dword [ebp - 0x5a4], eax
push ebx
mov byte [ebp - 4], 0x1c
call edi
push eax
lea esi, [ebp - 0x3e4]
call fcn.0041a677
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x304]
mov dword [esp], 0x4bd2f4
push ecx
mov ecx, eax
call fcn.004047cc
pop ecx
pop ecx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x5a4]
cmp dword [ecx + 0x14], 8
jb 0x418013
mov edx, dword [ecx]
jmp 0x418019
mov edx, dword [ebp - 0x5a4]
push edx
lea ecx, [ebp - 0x274]
push ecx
mov ecx, eax
call fcn.004047cc
pop ecx
pop ecx
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x14], 8
jb 0x418036
mov eax, dword [eax]
push eax
push str.srceensize
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x274]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x304]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x3e4]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
push ebx
call fcn.0047a88d
pop ecx
push eax
lea esi, [ebp - 0x358]
mov dword [ebp - 0x5ac], edx
call fcn.0041a62e
pop ecx
mov byte [ebp - 4], 0x20
cmp dword [eax + 0x14], 8
jb 0x4180a8
mov eax, dword [eax]
push eax
push str.waeclose
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push edi
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
lea eax, [ebp - 0x358]
push eax
mov ecx, 0x4d4844
call fcn.004170fe
mov byte [ebp - 4], 0x21
cmp dword [eax + 0x14], 8
jb 0x4180e7
mov eax, dword [eax]
push eax
push str.remark1
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push edi
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
lea eax, [ebp - 0x358]
push eax
mov ecx, 0x4d4838
call fcn.004170fe
mov byte [ebp - 4], 0x22
cmp dword [eax + 0x14], 8
jb 0x418126
mov eax, dword [eax]
push eax
push str.remark2
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
push ebx
push 1
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x14
call fcn.00402a5a
push 0x4bae00
push str.remark3
lea ecx, [ebp - 0x2e8]
call fcn.00410e17
lea eax, [ebp - 0x2e8]
call fcn.0040ec8e
mov eax, 0x4d48a4
push eax
mov dword [ebp - 0x5ac], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x3c8]
push str.rest_v2_downloader_track_client_sign
push eax
mov ebx, 0x4d48cc
mov byte [ebp - 4], 0x23
call fcn.0040475c
pop ecx
pop ecx
mov byte [ebp - 4], 0x24
xor eax, eax
xor esi, esi
push 0x4bd6cc
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x260], 7
mov dword [ebp - 0x264], esi
mov word [ebp - 0x274], ax
call fcn.0040299a
lea eax, [ebp - 0x274]
push eax
mov edi, 0x4d48bc
mov byte [ebp - 4], 0x25
call fcn.0041865c
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x3c8]
call fcn.00404662
push esi
push 1
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x24
call fcn.00402a5a
lea esi, [ebp - 0x4f0]
call fcn.00402aa3
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x2d4], 8
mov eax, dword [ebp - 0x2e8]
jae 0x418220
lea eax, [ebp - 0x2e8]
push eax
lea ecx, [ebp - 0x3c8]
lea ebx, [ebp - 0x4f0]
call fcn.00402d4a
lea eax, [ebp - 0x2e8]
push eax
lea esi, [ebp - 0x41c]
call fcn.00402109
lea eax, [ebp - 0x258]
push eax
push 0x103
mov byte [ebp - 4], 0x27
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp word [ebp + eax*2 - 0x25a], 0x5c
je 0x418277
push 0x4bae2c
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
xor eax, eax
push 7
pop esi
mov word [ebp - 0x374], ax
lea eax, [ebp - 0x258]
xor ebx, ebx
push eax
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x360], esi
mov dword [ebp - 0x364], ebx
call fcn.0040299a
mov byte [ebp - 4], 0x28
xor eax, eax
push 0x4bd6b4
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x264], ebx
mov word [ebp - 0x274], ax
call fcn.0040299a
lea edi, [ebp - 0x400]
mov byte [ebp - 4], 0x29
call fcn.0041a5a0
mov esi, eax
lea eax, [ebp - 0x274]
push eax
mov edi, 0x4d48bc
mov byte [ebp - 4], 0x2a
call fcn.0041865c
lea ecx, [ebp - 0x438]
push 0x4bda38
push ecx
mov edi, eax
call fcn.00411440
lea ecx, [ebp - 0x304]
push 0x4bda30
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x2b
call fcn.004047cc
mov ecx, esi
lea edi, [ebp - 0x3e4]
mov byte [ebp - 4], 0x2c
call fcn.00418b9c
lea ecx, [ebp - 0x358]
push str..xml
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.004047cc
add esp, 0x18
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0x2e
call fcn.00404662
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x358]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x3e4]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x304]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x438]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x400]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x28
call fcn.00402a5a
cmp dword [ebp - 0x360], 8
mov eax, dword [ebp - 0x374]
jae 0x4183c4
lea eax, [ebp - 0x374]
lea ecx, [ebp - 0x2cc]
push ecx
push eax
lea edx, [ebp - 0x290]
lea ecx, [ebp - 0x2e8]
call fcn.0040e44b
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x374]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x41c]
call fcn.00402a5a
lea esi, [ebp - 0x4f0]
call fcn.00402af0
push ebx
push edi
lea ecx, [ebp - 0x3c8]
call fcn.00402a5a
push 0x4d48a4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push ebx
push edi
lea ecx, [ebp - 0x320]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x390]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x33c]
call fcn.00402a5a
push ebx
push edi
lea ecx, [ebp - 0x3ac]
call fcn.00402a5a
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call fcn.0040d1f0
call fcn.00481188
ret