Function at 0x4720ac
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x564
push ebx
push esi
lea eax, [ebp + 8]
push edi
push eax
mov dword [ebp - 0x20], ecx
call fcn.00431c97
push 4
lea eax, [ebp + 8]
push eax
push str._udm
call fcn.00438eee
add esp, 0x10
test al, al
push 4
lea eax, [ebp + 8]
push eax
je 0x4722b0
mov esi, dword [ebp + 8]
xor ebx, ebx
push 0x4a13bc
mov dword [ebp - 0x30], ebx
call fcn.00438eee
add esp, 0xc
test al, al
je 0x472107
mov dword [ebp - 0x30], 0x80000000
jmp 0x472122
push 6
lea eax, [ebp + 8]
push eax
push str.listud
call fcn.00438eee
add esp, 0xc
test al, al
je 0x472248
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x48], ebx
call fcn.0043717e
mov ecx, dword [ebp - 0x20]
push 1
push ebx
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call fcn.0043eb92
mov eax, dword [ebp - 0x24]
mov dword [ebp + 8], eax
push 5
lea eax, [ebp + 8]
push eax
push str._ret:
mov dword [ebp - 0x18], ebx
call fcn.00438eee
mov ecx, dword [ebp + 8]
add esp, 0xc
cmp ecx, ebx
je 0x472173
mov dx, word [ecx]
cmp dx, 0x2d
je 0x472173
cmp dx, 0x5c
je 0x472173
mov al, 1
cmp al, bl
je 0x47218f
push 0xd
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x18], ecx
call fcn.00417571
add esp, 0xc
mov dword [ebp + 8], eax
push 8
lea eax, [ebp + 8]
push eax
xor esi, esi
push str._udmask:
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], ebx
call fcn.00438eee
add esp, 0xc
test al, al
je 0x4721d5
mov eax, dword [ebp + 8]
cmp word [eax], 0x2a
jne 0x4721c3
add dword [ebp + 8], 2
push 0x3d
pop esi
mov dword [ebp - 0x28], ebx
jmp 0x4721d5
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00439f88
mov esi, dword [ebp - 0x2c]
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4c], eax
push 0xd
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00417571
add esp, 0xc
mov dword [ebp + 8], eax
xor edi, edi
cmp word [eax], bx
je 0x4721f9
mov edi, eax
lea ecx, [ebp - 0xc]
call fcn.0043717e
push ebx
xor eax, eax
xor ecx, ecx
or eax, ecx
push eax
and esi, 0xfeffff
or esi, dword [ebp - 0x30]
lea eax, [ebp - 0xc]
push esi
push edi
push eax
push dword [ebp - 0x4c]
call fcn.0042ff9f
mov ecx, dword [ebp - 0x20]
add esp, 0x18
push dword [ebp - 0xc]
push dword [ebp - 0x18]
call fcn.00436b54
lea ecx, [ebp - 0xc]
call fcn.00431c4c
lea ecx, [ebp - 0x24]
call fcn.00431c4c
xor eax, eax
jmp 0x472b83
movzx esi, word [esi]
mov eax, esi
or eax, 0x20
cmp ax, 0x61
jb 0x47225c
cmp ax, 0x7a
jbe 0x472279
mov eax, esi
call fcn.00436dbd
test al, al
jne 0x472279
cmp si, 0x61
jb 0x472273
cmp si, 0x66
jbe 0x472279
cmp si, 0x78
jne 0x472280
mov eax, str.22:INDATA
jmp 0x472285
mov eax, str.22:INDATA_mount
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x18]
call fcn.004419f2
push dword [ebp + 8]
lea ecx, [ebp - 0x18]
call fcn.004371ec
push dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
call fcn.004296fc
mov esi, eax
lea ecx, [ebp - 0x18]
jmp 0x472b7c
push str._vhd
call fcn.00438eee
add esp, 0xc
push dword [ebp - 0x20]
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x39], al
call fcn.004391ff
mov esi, 0x497994
push esi
lea ecx, [ebp - 0x34]
call fcn.004419bc
push esi
lea ecx, [ebp - 0x40]
call fcn.004419bc
push esi
lea ecx, [ebp - 0x48]
call fcn.004419bc
push esi
lea ecx, [ebp - 0x38]
call fcn.004419bc
mov edi, dword [ebp + 8]
xor ebx, ebx
cmp word [edi], 0x2d
mov dword [ebp - 0x1c], 0x80000000
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x44], ebx
mov al, 0x2a
jne 0x472319
add al, 3
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
movzx ecx, word [edi]
movsx eax, al
cmp eax, ecx
mov byte [ebp - 1], bl
mov byte [ebp - 0xd], bl
mov dword [ebp - 0x30], eax
jne 0x47248a
lea eax, [edi + 2]
push 5
push eax
push str.query
call fcn.00432c0f
add esp, 0xc
test al, al
je 0x472356
mov byte [ebp - 1], 1
jmp 0x47245d
push 3
lea eax, [edi + 2]
push eax
push 0x4a136c
call fcn.00432c0f
add esp, 0xc
test al, al
je 0x4723c2
lea eax, [ebp + 8]
add edi, 8
push eax
mov dword [ebp + 8], edi
call fcn.00431c97
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
lea eax, [ebp + 8]
push eax
call fcn.004047e3
mov eax, dword [ebp + 8]
cmp word [eax], bx
pop ecx
pop ecx
je 0x47239c
mov word [eax], bx
add dword [ebp + 8], 2
mov ecx, dword [ebp - 0x20]
push ebx
push ebx
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0042d8a6
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
lea eax, [ebp + 8]
push eax
call fcn.00431c97
jmp 0x472466
push 1
lea eax, [edi + 2]
push eax
push 0x49b3d4
call fcn.00432c0f
add esp, 0xc
test al, al
je 0x4723df
mov byte [ebp - 0xd], 1
jmp 0x47245d
push 1
lea eax, [edi + 2]
push eax
push 0x4a1368
call fcn.00432c0f
add esp, 0xc
test al, al
je 0x4723ff
mov dword [ebp - 0x28], 1
jmp 0x47245d
push 1
lea eax, [edi + 2]
push eax
push 0x49b210
call fcn.00432c0f
add esp, 0xc
test al, al
je 0x47241f
mov dword [ebp - 0xc], 1
jmp 0x47245d
push 1
lea eax, [edi + 2]
push eax
push 0x4a0774
call fcn.00432c0f
add esp, 0xc
test al, al
je 0x47243f
mov dword [ebp - 0x14], 1
jmp 0x47245d
push 1
lea eax, [edi + 2]
push eax
push 0x4a1364
call fcn.00432c0f
add esp, 0xc
test al, al
je 0x47248a
mov dword [ebp - 0x44], 2
lea eax, [ebp + 8]
push eax
call fcn.00404807
mov edi, dword [ebp + 8]
movzx eax, word [edi]
cmp dword [ebp - 0x30], eax
pop ecx
je 0x472336
jmp 0x47248a
cmp ax, 0x21
jne 0x472492
inc edi
inc edi
mov dword [ebp - 0x4c], 1
mov dword [ebp + 8], edi
mov ax, word [edi]
cmp ax, bx
jne 0x472478
lea eax, [ebp + 8]
push eax
call fcn.00431c97
pop ecx
mov ecx, dword [ebp - 0x20]
push ebx
push 0x2c
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d8a6
mov ecx, dword [ebp - 0x34]
mov dword [ebp + 8], eax
mov ax, word [ecx]
cmp ax, 0x5c
mov dword [ebp - 8], ecx
je 0x4724cb
cmp ax, 0x2f
je 0x4724cb
xor eax, eax
jmp 0x4724ce
xor eax, eax
inc eax
cmp byte [ebp - 1], bl
movzx edi, al
mov dword [ebp - 0x18], edi
jne 0x472525
cmp edi, ebx
je 0x472525
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
lea eax, [edi + 3]
push eax
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], ebx
call fcn.004371c5
mov eax, dword [ebp - 0x34]
inc edi
push edi
push dword [ebp - 0x30]
mov dword [ebp - 8], eax
mov word [eax], 0x20
mov word [eax + 2], 0x3a
add eax, 4
push eax
call fcn.004047cb
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00431c4c
mov eax, dword [ebp + 8]
cmp word [eax], 0x2c
jne 0x472548
mov ecx, dword [ebp - 0x20]
add dword [ebp + 8], 2
push ebx
push 0x2c
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d8a6
mov dword [ebp + 8], eax
cmp byte [ebp - 1], bl
mov edi, dword [ebp - 0x40]
mov dword [ebp - 0x24], edi
jne 0x4725a2
mov eax, dword [ebp + 8]
cmp word [eax], 0x2c
jne 0x4725a2
add dword [ebp + 8], 2
push 0x2c
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x2c
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x60]
call fcn.00443720
push eax
call fcn.00439d51
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x4725a2
mov ecx, dword [ebp - 0x20]
add dword [ebp + 8], 2
push ebx
push 0x2c
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d8a6
mov dword [ebp + 8], eax
cmp byte [ebp - 0x39], bl
je 0x47268a
call fcn.00434ac2
cmp byte [ebp - 0xd], bl
je 0x4725c5
push dword [ebp - 8]
call fcn.00434d08
pop ecx
mov ebx, eax
jmp 0x472aa7
or dword [ebp - 0x18], 0xffffffff
cmp dword [ebp - 0xc], ebx
je 0x472623
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.0043bfa0
mov edi, dword [ebp - 0x24]
xor eax, eax
pop ecx
inc eax
cmp dword [ebp - 0x14], ebx
pop ecx
mov word [edi], bx
je 0x4725f3
xor eax, eax
cmp dword [ebp - 0x28], ebx
jg 0x47260a
jl 0x472603
cmp dword [ebp - 0x2c], 0x100000
jae 0x47260a
mov ebx, 0x80070057
jmp 0x47264e
push eax
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push dword [ebp - 8]
call fcn.00434ba4
mov ebx, eax
add esp, 0x10
mov dword [ebp - 0x18], ebx
jmp 0x47264e
mov eax, dword [ebp - 0x44]
or eax, dword [ebp - 0x28]
or eax, 4
cmp dword [ebp - 0x1c], ebx
jg 0x472638
mov dword [ebp - 0x1c], 1
lea ecx, [ebp - 0x18]
push ecx
push dword [ebp - 0x1c]
push edi
push eax
push dword [ebp - 8]
call fcn.0046c59d
add esp, 0x14
mov ebx, eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 0x3c
push eax
lea ecx, [ebp - 0xc]
call fcn.0043719c
push edi
push ebx
push dword [ebp - 0x18]
push str._d__d__s
push dword [ebp - 0xc]
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x20]
add esp, 0x14
push dword [ebp - 0xc]
push dword [ebp - 0x38]
call fcn.00436b54
jmp 0x4727ed
cmp byte [ebp - 1], bl
jne 0x4726ab
cmp word [edi], bx
jne 0x4726ab
cmp byte [ebp - 0xd], bl
je 0x4726a1
mov eax, dword [ebp - 8]
cmp word [eax], bx
jne 0x4726ab
mov ebx, 0x80070057
jmp 0x472aa7
push dword [ebp - 0x54]
lea ecx, [ebp + 8]
call fcn.00432d5c
lea ecx, [ebp + 8]
call fcn.00432d43
cmp eax, ebx
mov dword [ebp - 0x30], eax
jge 0x4726dc
push str.WIM_DLL_ERR_r_n
push dword [ebp - 0x20]
call fcn.0040d391
pop ecx
pop ecx
xor ebx, ebx
inc ebx
jmp 0x472aa7
cmp byte [ebp - 1], bl
je 0x4727f5
cmp dword [0x4b0094], ebx
jne 0x4726f5
push 0x78
pop ebx
jmp 0x472aa7
mov esi, dword [ebp - 8]
push 0x3d
push esi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
cmp eax, ebx
mov dword [ebp - 0x28], eax
je 0x472710
mov word [eax], bx
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp word [esi], bx
je 0x4726a1
lea ecx, [ebp - 0xc]
call fcn.0043717e
mov eax, dword [ebp + 8]
cmp word [eax], 0x2c
jne 0x472748
add dword [ebp + 8], 2
push 1
push 0x2c
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x60]
call fcn.00443720
push ebx
lea ecx, [ebp - 0xc]
push ecx
push eax
call fcn.00439b04
add esp, 0xc
push dword [ebp - 0xc]
call fcn.0040f738
pop ecx
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.0043717e
cmp word [edi], bx
je 0x472780
cmp word [edi + 2], 0x3a
je 0x472780
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.0040fa85
pop ecx
pop ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x40]
call fcn.00441a24
mov edi, dword [eax]
cmp word [esi], bx
je 0x4727a5
cmp word [esi + 2], 0x3a
je 0x4727a5
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.0040fa85
pop ecx
pop ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc]
call fcn.00441a24
mov esi, dword [eax]
push 0x20
lea ecx, [ebp - 0x24]
call fcn.0043719c
mov eax, dword [ebp - 0x24]
push ebx
push dword [ebp - 0x28]
mov word [eax + 4], bx
lea eax, [ebp - 0x24]
push eax
push esi
push edi
push dword [ebp - 0x20]
call fcn.0043b0d3
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
add esp, 0x18
add eax, 4
push eax
push dword [ebp - 8]
call fcn.00436b54
lea ecx, [ebp - 0x24]
call fcn.00431c4c
lea ecx, [ebp - 0x1c]
call fcn.00431c4c
lea ecx, [ebp - 0xc]
jmp 0x472aa2
cmp byte [ebp - 0xd], bl
mov dword [ebp - 0x44], ebx
jne 0x4729f4
mov eax, dword [ebp - 8]
cmp word [eax], bx
je 0x4729f4
mov eax, dword [ebp - 0x38]
cmp word [eax], 0x2a
jne 0x472837
push 0x105
lea ecx, [ebp - 0x38]
call fcn.004371c5
mov eax, dword [ebp - 0x38]
mov word [eax], bx
push dword [ebp - 0x38]
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [0x4b008c], ebx
je 0x4726d4
push edi
call fcn.00482b55
test eax, eax
pop ecx
jne 0x472868
push edi
lea ecx, [ebp - 0x28]
call fcn.004419bc
push dword [ebp - 0x28]
call fcn.0041a353
pop ecx
lea ecx, [ebp - 0x28]
call fcn.00431c4c
push edi
call fcn.00482b55
test eax, eax
pop ecx
je 0x4726d4
cmp dword [ebp - 0x18], ebx
jne 0x47288d
push dword [ebp - 8]
call fcn.00482cde
test eax, eax
pop ecx
je 0x4726d4
push 8
pop ecx
xor eax, eax
mov dword [ebp - 0x84], ebx
lea edi, [ebp - 0x80]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x84]
push eax
push ebx
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x4728bb
test byte [ebp - 0x84], 1
jne 0x4728c6
mov eax, dword [ebp - 0x38]
cmp word [eax], bx
mov dword [ebp - 0xc], eax
jne 0x4728c9
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
je 0x4728e6
cmp dword [ebp - 0x30], ebx
jne 0x4728dd
mov dword [ebp - 0x14], 0x100
cmp dword [ebp - 0x4c], ebx
je 0x4728e6
or byte [ebp - 0x13], 2
xor eax, eax
inc eax
cmp dword [ebp - 0x18], ebx
je 0x4728fc
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 8]
call fcn.0046c7d1
pop ecx
pop ecx
mov esi, dword [ebp - 0x1c]
sar eax, 8
movzx edi, al
dec edi
cmp esi, 0x80000000
jne 0x472911
xor esi, esi
inc esi
push dword [ebp - 8]
call fcn.00482cde
test eax, eax
pop ecx
je 0x472973
cmp dword [ebp - 0x30], ebx
je 0x47293e
cmp esi, ebx
jge 0x47292a
xor esi, esi
inc esi
push dword [ebp - 0xc]
push esi
push dword [ebp - 8]
push dword [ebp - 0x24]
call fcn.0043af5d
add esp, 0x10
jmp 0x472955
cmp esi, ebx
jge 0x472945
xor esi, esi
inc esi
push dword [ebp - 0xc]
push esi
push dword [ebp - 8]
push dword [ebp - 0x24]
call dword [0x4b008c]
mov esi, eax
push esi
push dword [ebp - 0xc]
push dword [ebp - 0x24]
push dword [ebp - 8]
push str.FOUND_WIM___s____mount_to___s____s___d_r_n
push dword [ebp - 0x20]
call fcn.0040d391
add esp, 0x18
jmp 0x472976
mov esi, dword [ebp - 0x44]
cmp dword [ebp - 0x18], ebx
je 0x47298e
cmp dword [ebp - 0x4c], ebx
jne 0x47298e
cmp word [ebp - 0x14], bx
je 0x47298e
mov eax, dword [ebp - 0x14]
call fcn.004335da
cmp edi, ebx
jl 0x4729b8
push edi
lea eax, [ebp - 0x14c]
push str.PART_update__d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x20]
add esp, 0xc
push ebx
lea eax, [ebp - 0x144]
push eax
call fcn.0045491f
lea ecx, [ebp - 0x50]
call fcn.00431c4c
lea ecx, [ebp - 0x38]
call fcn.00431c4c
lea ecx, [ebp - 0x48]
call fcn.00431c4c
lea ecx, [ebp - 0x40]
call fcn.00431c4c
lea ecx, [ebp - 0x34]
call fcn.00431c4c
lea ecx, [ebp - 0x60]
call fcn.00431c4c
xor eax, eax
cmp esi, ebx
sete al
jmp 0x472b83
lea ecx, [ebp - 0x14]
call fcn.0043717e
cmp word [edi], bx
je 0x472a21
cmp word [edi + 2], 0x3a
je 0x472a21
lea eax, [ebp - 0x14]
push eax
push edi
call fcn.0040fa85
pop ecx
pop ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x40]
call fcn.00441a24
mov edi, dword [eax]
mov eax, dword [ebp - 8]
cmp word [eax], bx
je 0x472a4e
cmp word [eax + 2], 0x3a
je 0x472a4e
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 8]
call fcn.0040fa85
pop ecx
pop ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34]
call fcn.00441a24
mov eax, dword [eax]
mov dword [ebp - 8], eax
cmp word [edi], bx
jne 0x472a82
cmp word [eax], bx
je 0x472a7d
lea eax, [ebp - 0x564]
push eax
push esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 8]
push esi
push dword [ebp - 0x20]
call fcn.0043b0d3
add esp, 0x18
test eax, eax
je 0x472a9a
lea edi, [ebp - 0x35c]
cmp word [edi], bx
je 0x472a9a
cmp dword [0x4b0090], ebx
jne 0x472a8f
xor ebx, ebx
inc ebx
jmp 0x472a9f
push edi
call fcn.00482b55
test eax, eax
pop ecx
jne 0x472ade
mov ebx, 0x80070057
lea ecx, [ebp - 0x14]
call fcn.00431c4c
lea ecx, [ebp - 0x50]
call fcn.00431c4c
lea ecx, [ebp - 0x38]
call fcn.00431c4c
lea ecx, [ebp - 0x48]
call fcn.00431c4c
lea ecx, [ebp - 0x40]
call fcn.00431c4c
lea ecx, [ebp - 0x34]
call fcn.00431c4c
lea ecx, [ebp - 0x60]
call fcn.00431c4c
mov eax, ebx
jmp 0x472b83
mov eax, dword [ebp - 8]
cmp word [eax], bx
mov dword [ebp - 0x28], eax
jne 0x472aec
mov dword [ebp - 0x28], ebx
cmp word [edi], bx
mov dword [ebp - 0x44], edi
jne 0x472af7
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x1c], 0x80000000
jne 0x472b03
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x30], ebx
je 0x472b1f
xor eax, eax
cmp dword [ebp - 0x1c], ebx
setne al
push eax
push edi
call fcn.004349b9
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x472b49
cmp dword [ebp - 0x1c], 0x80000000
je 0x472b32
cmp dword [ebp - 0x1c], ebx
je 0x472b32
xor eax, eax
inc eax
jmp 0x472b34
xor eax, eax
push eax
push ebx
push dword [ebp - 0x28]
push dword [ebp - 0x44]
call dword [0x4b0090]
mov esi, eax
neg esi
sbb esi, esi
inc esi
lea ecx, [ebp - 0x14]
call fcn.00431c4c
lea ecx, [ebp - 0x50]
call fcn.00431c4c
lea ecx, [ebp - 0x38]
call fcn.00431c4c
lea ecx, [ebp - 0x48]
call fcn.00431c4c
lea ecx, [ebp - 0x40]
call fcn.00431c4c
lea ecx, [ebp - 0x34]
call fcn.00431c4c
lea ecx, [ebp - 0x60]
call fcn.00431c4c
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 8