Function at 0x481cf0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x22f4
call fcn.004f78e0
mov eax, dword [0x552a7c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x22f4], ecx
cmp dword [ebp + 8], 0
jne 0x481d1a
xor eax, eax
jmp 0x482c79
push 0x208
push 0
lea eax, [ebp - 0x1e80]
push eax
call fcn.004f7580
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x1e80]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetClassNameW]
push ecx
mov ecx, esp
lea eax, [ebp - 0x1e80]
push eax
call fcn.0041d0c0
mov ecx, dword [ebp - 0x22f4]
call fcn.004695d0
test eax, eax
je 0x481d6b
xor eax, eax
jmp 0x482c79
lea ecx, [ebp - 0x1c6c]
call fcn.0043f280
push 1
push 0
lea ecx, [ebp - 0x1c6c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0049c610
add esp, 0x10
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0xa1c], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x1c50], eax
cmp dword [ebp - 0xa1c], 0
je 0x481e3e
cmp dword [ebp - 0x1c50], 0
je 0x481e3e
mov eax, dword [ebp - 0x22f4]
mov dword [eax + 0x1448], 1
mov eax, dword [ebp - 0x1c50]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0xa1c]
cdq
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x22b0]
call fcn.00451390
mov ecx, dword [ebp - 0x22b0]
mov dword [ebp - 0x22c0], ecx
mov edx, dword [ebp - 0x22ac]
mov dword [ebp - 0x22bc], edx
mov eax, dword [ebp - 0x22bc]
push eax
mov ecx, dword [ebp - 0x22c0]
push ecx
lea ecx, [ebp - 0x1c6c]
call fcn.004517b0
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x481e3e
mov edx, dword [ebp - 0x22f4]
mov dword [edx + 0x1448], 0
mov dword [ebp - 0xa30], 0
lea eax, [ebp - 0xa30]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 0x208
push 0
lea edx, [ebp - 0x1c48]
push edx
call fcn.004f7580
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1c48]
push eax
mov ecx, dword [ebp - 0xa30]
push ecx
call fcn.0042db90
add esp, 0xc
mov dword [ebp - 0xa2c], eax
push 0x53616c
lea ecx, [ebp - 0x22a8]
call fcn.0041d0c0
lea edx, [ebp - 0x22a8]
push edx
mov eax, dword [ebp - 0xa30]
push eax
call fcn.0042d820
add esp, 8
test eax, eax
jne 0x481eca
push 0x536170
lea ecx, [ebp - 0x22a8]
call fcn.0041d140
xor ecx, ecx
mov word [ebp - 0x1a38], cx
push 0xffe
push 0
lea edx, [ebp - 0x1a36]
push edx
call fcn.004f7580
add esp, 0xc
push 0x1000
push 0
mov eax, dword [ebp - 0x22f4]
add eax, 0x428
push eax
call fcn.004f7580
add esp, 0xc
push 0x800
lea ecx, [ebp - 0x1a38]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xa30]
push edx
call fcn.0042fd50
add esp, 0x14
test eax, eax
je 0x481fd0
lea eax, [ebp - 0x1a38]
push eax
call dword [sym.imp.SHLWAPI.dll_PathGetArgsW]
push eax
push 0x800
mov ecx, dword [ebp - 0x22f4]
add ecx, 0x428
push ecx
call fcn.0041cf60
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c48]
push edx
call fcn.0041d0c0
push ecx
mov ecx, esp
lea eax, [ebp - 0x1a38]
push eax
call fcn.0041d0c0
lea ecx, [ebp - 0x22b4]
push ecx
mov ecx, dword [ebp - 0x22f4]
call fcn.00481ab0
lea ecx, [ebp - 0x22b4]
call fcn.0041d300
movzx edx, al
test edx, edx
jne 0x481fc5
push 0x104
push 0
lea eax, [ebp - 0x1c48]
push eax
call fcn.004f7580
add esp, 0xc
lea ecx, [ebp - 0x22b4]
call fcn.0041d2b0
push eax
push 0x104
lea ecx, [ebp - 0x1c48]
push ecx
call fcn.0042d420
lea ecx, [ebp - 0x22b4]
call fcn.0041d100
lea ecx, [ebp - 0x1c54]
call fcn.0041d080
xor edx, edx
mov word [ebp - 0xa18], dx
push 0x7fe
push 0
lea eax, [ebp - 0xa16]
push eax
call fcn.004f7580
add esp, 0xc
cmp dword [ebp - 0xa2c], 0
jbe 0x482057
lea ecx, [ebp - 0x1c48]
push ecx
lea ecx, [ebp - 0x1c54]
call fcn.0041d140
push 0
push 0x536174
lea ecx, [ebp - 0x1c54]
call fcn.004264c0
cmp eax, 0xffffffff
je 0x482057
push 0x400
lea edx, [ebp - 0xa18]
push edx
lea eax, [ebp - 0x1c48]
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea ecx, [ebp - 0xa18]
push ecx
lea ecx, [ebp - 0x1c54]
call fcn.0041d140
lea edx, [ebp - 0x1c78]
push edx
call fcn.004163f0
add esp, 4
push 0
lea eax, [ebp - 0x1c70]
push eax
call fcn.00416040
add esp, 8
lea ecx, [ebp - 0x1c78]
call fcn.0041d2e0
test eax, eax
jg 0x482098
lea ecx, [ebp - 0x1c70]
push ecx
lea ecx, [ebp - 0x1c78]
call fcn.0041d120
lea edx, [ebp - 0x214]
push edx
call fcn.004c3dd0
add esp, 4
lea ecx, [ebp - 0xa28]
call fcn.0041d080
push 0x104
lea ecx, [ebp - 0xa28]
call fcn.0041d2c0
mov dword [ebp - 0x22a4], eax
push 0x104
mov eax, dword [ebp - 0x22a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0x536178
mov ecx, dword [ebp - 0x22a4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa28]
call fcn.0041d320
push str.Progman
lea ecx, [ebp - 0x1e8c]
call fcn.0041d0c0
push str.CabinetWClass
lea ecx, [ebp - 0x1a40]
call fcn.0041d0c0
push str.Shell_TrayWnd
lea ecx, [ebp - 0x1e84]
call fcn.0041d0c0
push str.ExploreWClass
lea ecx, [ebp - 0xa34]
call fcn.0041d0c0
xor edx, edx
mov word [ebp - 0x2098], dx
push 0x206
push 0
lea eax, [ebp - 0x2096]
push eax
call fcn.004f7580
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x2098]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push str.Logon.scr
lea edx, [ebp - 0x2098]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x2098]
push eax
lea ecx, [ebp - 0xa24]
call fcn.0041d0c0
xor ecx, ecx
mov word [ebp - 0x22a0], cx
push 0x206
push 0
lea edx, [ebp - 0x229e]
push edx
call fcn.004f7580
add esp, 0xc
push 0x104
lea eax, [ebp - 0x22a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea ecx, [ebp - 0x22a0]
push ecx
lea ecx, [ebp - 0x1c5c]
call fcn.0041d0c0
push str.SystemAppsShellExperienceHost_cw5n1h2txyewyShellExperienceHost.exe
push 0x104
lea ecx, [ebp - 0x1c5c]
call fcn.0041d2c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c5c]
call fcn.0041d320
lea edx, [ebp - 0x22a0]
push edx
lea ecx, [ebp - 0x1e88]
call fcn.0041d0c0
push str.SystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdge.exe
push 0x104
lea ecx, [ebp - 0x1e88]
call fcn.0041d2c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1e88]
call fcn.0041d320
lea eax, [ebp - 0x22a0]
push eax
lea ecx, [ebp - 0x1c4c]
call fcn.0041d0c0
push str.ImmersiveControlPanelSystemSettings.exe
push 0x104
lea ecx, [ebp - 0x1c4c]
call fcn.0041d2c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c4c]
call fcn.0041d320
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.004f7580
add esp, 0xc
push 0x104
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x210]
push ecx
lea ecx, [ebp - 0xa20]
call fcn.0041d0c0
push str.ApplicationFrameHost.exe
push 0x104
lea ecx, [ebp - 0xa20]
call fcn.0041d2c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa20]
call fcn.0041d320
lea edx, [ebp - 0x210]
push edx
lea ecx, [ebp - 0x1e90]
call fcn.0041d0c0
push str.dllhost.exe
push 0x104
lea ecx, [ebp - 0x1e90]
call fcn.0041d2c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1e90]
call fcn.0041d320
lea ecx, [ebp - 0x1c70]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1c70]
call fcn.0041d2b0
push eax
lea eax, [ebp - 0x1c48]
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0xa28]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0xa28]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
jne 0x48244c
lea ecx, [ebp - 0x1e8c]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1e8c]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1e80]
push ecx
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0x1a40]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1a40]
call fcn.0041d2b0
push eax
lea edx, [ebp - 0x1e80]
push edx
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0x1e84]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1e84]
call fcn.0041d2b0
push eax
lea eax, [ebp - 0x1e80]
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0xa34]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0xa34]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1e80]
push ecx
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0x1c6c]
call fcn.00449780
cmp eax, 0x3c0
jge 0x4825ab
lea ecx, [ebp - 0x1c78]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1c78]
call fcn.0041d2b0
push eax
lea edx, [ebp - 0x1c48]
push edx
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0xa24]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0xa24]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0x1c5c]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1c5c]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0xa20]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0xa20]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0x1e88]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1e88]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0x1c4c]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1c4c]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4825ab
lea ecx, [ebp - 0x1e90]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1e90]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
jne 0x482670
mov dword [ebp - 0x22cc], 0
lea ecx, [ebp - 0x1e90]
call fcn.0041d100
lea ecx, [ebp - 0xa20]
call fcn.0041d100
lea ecx, [ebp - 0x1c4c]
call fcn.0041d100
lea ecx, [ebp - 0x1e88]
call fcn.0041d100
lea ecx, [ebp - 0x1c5c]
call fcn.0041d100
lea ecx, [ebp - 0xa24]
call fcn.0041d100
lea ecx, [ebp - 0xa34]
call fcn.0041d100
lea ecx, [ebp - 0x1e84]
call fcn.0041d100
lea ecx, [ebp - 0x1a40]
call fcn.0041d100
lea ecx, [ebp - 0x1e8c]
call fcn.0041d100
lea ecx, [ebp - 0xa28]
call fcn.0041d100
lea ecx, [ebp - 0x214]
call fcn.0041d100
lea ecx, [ebp - 0x1c70]
call fcn.0041d100
lea ecx, [ebp - 0x1c78]
call fcn.0041d100
lea ecx, [ebp - 0x1c54]
call fcn.0041d100
lea ecx, [ebp - 0x22a8]
call fcn.0041d100
mov eax, dword [ebp - 0x22cc]
jmp 0x482c79
lea ecx, [ebp - 0x214]
call fcn.0041d2e0
test eax, eax
jle 0x48277c
lea ecx, [ebp - 0x214]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x214]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
call fcn.004f780c
add esp, 0xc
test eax, eax
jne 0x48277c
mov dword [ebp - 0x22d0], 0
lea ecx, [ebp - 0x1e90]
call fcn.0041d100
lea ecx, [ebp - 0xa20]
call fcn.0041d100
lea ecx, [ebp - 0x1c4c]
call fcn.0041d100
lea ecx, [ebp - 0x1e88]
call fcn.0041d100
lea ecx, [ebp - 0x1c5c]
call fcn.0041d100
lea ecx, [ebp - 0xa24]
call fcn.0041d100
lea ecx, [ebp - 0xa34]
call fcn.0041d100
lea ecx, [ebp - 0x1e84]
call fcn.0041d100
lea ecx, [ebp - 0x1a40]
call fcn.0041d100
lea ecx, [ebp - 0x1e8c]
call fcn.0041d100
lea ecx, [ebp - 0xa28]
call fcn.0041d100
lea ecx, [ebp - 0x214]
call fcn.0041d100
lea ecx, [ebp - 0x1c70]
call fcn.0041d100
lea ecx, [ebp - 0x1c78]
call fcn.0041d100
lea ecx, [ebp - 0x1c54]
call fcn.0041d100
lea ecx, [ebp - 0x22a8]
call fcn.0041d100
mov eax, dword [ebp - 0x22d0]
jmp 0x482c79
movzx eax, word [ebp - 0xa18]
test eax, eax
je 0x4828aa
lea ecx, [ebp - 0x1c70]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1c70]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0xa18]
push ecx
call fcn.004f780c
add esp, 0xc
test eax, eax
je 0x4827e5
lea ecx, [ebp - 0x1c78]
call fcn.0041d2e0
push eax
lea ecx, [ebp - 0x1c78]
call fcn.0041d2b0
push eax
lea edx, [ebp - 0xa18]
push edx
call fcn.004f780c
add esp, 0xc
test eax, eax
jne 0x4828aa
mov dword [ebp - 0x22d4], 0
lea ecx, [ebp - 0x1e90]
call fcn.0041d100
lea ecx, [ebp - 0xa20]
call fcn.0041d100
lea ecx, [ebp - 0x1c4c]
call fcn.0041d100
lea ecx, [ebp - 0x1e88]
call fcn.0041d100
lea ecx, [ebp - 0x1c5c]
call fcn.0041d100
lea ecx, [ebp - 0xa24]
call fcn.0041d100
lea ecx, [ebp - 0xa34]
call fcn.0041d100
lea ecx, [ebp - 0x1e84]
call fcn.0041d100
lea ecx, [ebp - 0x1a40]
call fcn.0041d100
lea ecx, [ebp - 0x1e8c]
call fcn.0041d100
lea ecx, [ebp - 0xa28]
call fcn.0041d100
lea ecx, [ebp - 0x214]
call fcn.0041d100
lea ecx, [ebp - 0x1c70]
call fcn.0041d100
lea ecx, [ebp - 0x1c78]
call fcn.0041d100
lea ecx, [ebp - 0x1c54]
call fcn.0041d100
lea ecx, [ebp - 0x22a8]
call fcn.0041d100
mov eax, dword [ebp - 0x22d4]
jmp 0x482c79
push str.MyDriver
lea ecx, [ebp - 0x1c74]
call fcn.0041d0c0
mov dword [ebp - 0x1a3c], 0
push 0
lea ecx, [ebp - 0x1c74]
call fcn.0041d2b0
push eax
lea ecx, [ebp - 0x1c54]
call fcn.004264c0
cmp eax, 0xffffffff
je 0x4828ec
mov dword [ebp - 0x1a3c], 1
push ecx
mov ecx, esp
lea eax, [ebp - 0x1e80]
push eax
call fcn.0041d0c0
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c54]
push edx
call fcn.0041d0a0
mov ecx, dword [ebp - 0x22f4]
call fcn.00469670
test eax, eax
jne 0x48293b
push ecx
mov ecx, esp
lea eax, [ebp - 0x1c54]
push eax
call fcn.0041d0a0
mov ecx, dword [ebp - 0x22f4]
call fcn.00469b80
test eax, eax
je 0x482a18
cmp dword [ebp - 0x1a3c], 0
jne 0x482a18
mov dword [ebp - 0x22e4], 0
lea ecx, [ebp - 0x1c74]
call fcn.0041d100
lea ecx, [ebp - 0x1e90]
call fcn.0041d100
lea ecx, [ebp - 0xa20]
call fcn.0041d100
lea ecx, [ebp - 0x1c4c]
call fcn.0041d100
lea ecx, [ebp - 0x1e88]
call fcn.0041d100
lea ecx, [ebp - 0x1c5c]
call fcn.0041d100
lea ecx, [ebp - 0xa24]
call fcn.0041d100
lea ecx, [ebp - 0xa34]
call fcn.0041d100
lea ecx, [ebp - 0x1e84]
call fcn.0041d100
lea ecx, [ebp - 0x1a40]
call fcn.0041d100
lea ecx, [ebp - 0x1e8c]
call fcn.0041d100
lea ecx, [ebp - 0xa28]
call fcn.0041d100
lea ecx, [ebp - 0x214]
call fcn.0041d100
lea ecx, [ebp - 0x1c70]
call fcn.0041d100
lea ecx, [ebp - 0x1c78]
call fcn.0041d100
lea ecx, [ebp - 0x1c54]
call fcn.0041d100
lea ecx, [ebp - 0x22a8]
call fcn.0041d100
mov eax, dword [ebp - 0x22e4]
jmp 0x482c79
push ecx
mov ecx, esp
lea edx, [ebp - 0x1c54]
push edx
call fcn.0041d0a0
lea eax, [ebp - 0x1c58]
push eax
mov ecx, dword [ebp - 0x22f4]
call fcn.00469880
push 0x5363d8
lea ecx, [ebp - 0x1c58]
call fcn.0041d180
push 0x5363e4
lea ecx, [ebp - 0x1c58]
call fcn.0041d1c0
test eax, eax
je 0x482b83
lea ecx, [ebp - 0x1c58]
call fcn.0041d2b0
push eax
mov ecx, dword [ebp - 0x22f4]
call fcn.00469ca0
test eax, eax
je 0x482b83
lea ecx, [ebp - 0x1c6c]
call fcn.00449780
cmp eax, 0x3c0
jge 0x482aa8
lea ecx, [ebp - 0x1c6c]
call fcn.00449780
cmp eax, 0x3c0
jl 0x482b83
mov dword [ebp - 0x22ec], 0
lea ecx, [ebp - 0x1c58]
call fcn.0041d100
lea ecx, [ebp - 0x1c74]
call fcn.0041d100
lea ecx, [ebp - 0x1e90]
call fcn.0041d100
lea ecx, [ebp - 0xa20]
call fcn.0041d100
lea ecx, [ebp - 0x1c4c]
call fcn.0041d100
lea ecx, [ebp - 0x1e88]
call fcn.0041d100
lea ecx, [ebp - 0x1c5c]
call fcn.0041d100
lea ecx, [ebp - 0xa24]
call fcn.0041d100
lea ecx, [ebp - 0xa34]
call fcn.0041d100
lea ecx, [ebp - 0x1e84]
call fcn.0041d100
lea ecx, [ebp - 0x1a40]
call fcn.0041d100
lea ecx, [ebp - 0x1e8c]
call fcn.0041d100
lea ecx, [ebp - 0xa28]
call fcn.0041d100
lea ecx, [ebp - 0x214]
call fcn.0041d100
lea ecx, [ebp - 0x1c70]
call fcn.0041d100
lea ecx, [ebp - 0x1c78]
call fcn.0041d100
lea ecx, [ebp - 0x1c54]
call fcn.0041d100
lea ecx, [ebp - 0x22a8]
call fcn.0041d100
mov eax, dword [ebp - 0x22ec]
jmp 0x482c79
lea ecx, [ebp - 0x1c54]
call fcn.0041d2b0
push eax
push 0x104
mov ecx, dword [ebp - 0x22f4]
add ecx, 0x18
push ecx
call fcn.0042d420
mov dword [ebp - 0x22f0], 1
lea ecx, [ebp - 0x1c58]
call fcn.0041d100
lea ecx, [ebp - 0x1c74]
call fcn.0041d100
lea ecx, [ebp - 0x1e90]
call fcn.0041d100
lea ecx, [ebp - 0xa20]
call fcn.0041d100
lea ecx, [ebp - 0x1c4c]
call fcn.0041d100
lea ecx, [ebp - 0x1e88]
call fcn.0041d100
lea ecx, [ebp - 0x1c5c]
call fcn.0041d100
lea ecx, [ebp - 0xa24]
call fcn.0041d100
lea ecx, [ebp - 0xa34]
call fcn.0041d100
lea ecx, [ebp - 0x1e84]
call fcn.0041d100
lea ecx, [ebp - 0x1a40]
call fcn.0041d100
lea ecx, [ebp - 0x1e8c]
call fcn.0041d100
lea ecx, [ebp - 0xa28]
call fcn.0041d100
lea ecx, [ebp - 0x214]
call fcn.0041d100
lea ecx, [ebp - 0x1c70]
call fcn.0041d100
lea ecx, [ebp - 0x1c78]
call fcn.0041d100
lea ecx, [ebp - 0x1c54]
call fcn.0041d100
lea ecx, [ebp - 0x22a8]
call fcn.0041d100
mov eax, dword [ebp - 0x22f0]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004f7567
mov esp, ebp
pop ebp
ret 4