Function at 0x4814ac
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x568
push ebx
push esi
lea eax, [ebp + 8]
push edi
push eax
mov dword [ebp - 0x28], ecx
call fcn.004379a9
push 4
pop edi
push edi
lea eax, [ebp + 8]
push eax
push str._svr
call fcn.0043f1bd
add esp, 0x10
xor ebx, ebx
test al, al
mov byte [ebp - 0x39], al
jne 0x4814fc
push edi
lea eax, [ebp + 8]
push eax
push str._vhd
call fcn.0043f1bd
add esp, 0xc
test al, al
mov byte [ebp - 0x2d], 1
jne 0x481500
mov byte [ebp - 0x2d], 0
mov al, byte [ebp - 0x2d]
or al, byte [ebp - 0x39]
jne 0x4816f5
push edi
lea eax, [ebp + 8]
push eax
push str._udm
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x4816f5
mov esi, dword [ebp + 8]
push edi
lea eax, [ebp + 8]
push eax
push str.upud
mov dword [ebp - 0x4c], ebx
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x48154b
mov dword [ebp - 0x4c], 0x80000000
jmp 0x481566
push 6
lea eax, [ebp + 8]
push eax
push str.listud
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x48168d
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x50], ebx
call fcn.0043d47d
mov ecx, dword [ebp - 0x28]
push 1
push ebx
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call fcn.0044b30d
mov eax, dword [ebp - 0x24]
mov dword [ebp + 8], eax
push 5
lea eax, [ebp + 8]
push eax
push str._ret:
mov dword [ebp - 0xc], ebx
call fcn.0043f1bd
mov ecx, dword [ebp + 8]
add esp, 0xc
cmp ecx, ebx
je 0x4815b7
mov dx, word [ecx]
cmp dx, 0x2d
je 0x4815b7
cmp dx, 0x5c
je 0x4815b7
mov al, 1
test al, al
je 0x4815d3
push 0xd
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0xc], ecx
call fcn.00418d74
add esp, 0xc
mov dword [ebp + 8], eax
push 8
lea eax, [ebp + 8]
push eax
push str._udmask:
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x481618
mov eax, dword [ebp + 8]
cmp word [eax], 0x2a
jne 0x481609
add dword [ebp + 8], 2
mov dword [ebp - 0x38], 0x3d
mov dword [ebp - 0x34], ebx
jmp 0x481618
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00448773
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
push 0xd
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00418d74
add esp, 0xc
mov dword [ebp + 8], eax
xor esi, esi
cmp word [eax], bx
je 0x48163c
mov esi, eax
lea ecx, [ebp - 0x2c]
call fcn.0043d47d
mov eax, dword [ebp - 0x38]
push ebx
and eax, 0xfeffff
or eax, dword [ebp - 0x4c]
xor ecx, ecx
xor edx, edx
or ecx, edx
push ecx
push eax
push esi
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x20]
call fcn.004358b7
mov ecx, dword [ebp - 0x28]
add esp, 0x18
push dword [ebp - 0x2c]
push dword [ebp - 0xc]
call fcn.0043cd78
lea ecx, [ebp - 0x2c]
call fcn.00437960
lea ecx, [ebp - 0x24]
call fcn.00437960
xor eax, eax
jmp 0x48209a
movzx esi, word [esi]
mov eax, esi
or eax, 0x20
cmp ax, 0x61
jb 0x4816a1
cmp ax, 0x7a
jbe 0x4816be
mov eax, esi
call fcn.0043d00b
test al, al
jne 0x4816be
cmp si, 0x61
jb 0x4816b8
cmp si, 0x66
jbe 0x4816be
cmp si, 0x78
jne 0x4816c5
mov eax, str.22:INDATA
jmp 0x4816ca
mov eax, str.22:INDATA_mount
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0xc]
call fcn.0044581a
push dword [ebp + 8]
lea ecx, [ebp - 0xc]
call fcn.0043d4e9
push dword [ebp - 0xc]
mov ecx, dword [ebp - 0x28]
call fcn.0042ee8f
mov esi, eax
lea ecx, [ebp - 0xc]
jmp 0x482093
push dword [ebp - 0x28]
lea ecx, [ebp - 0x64]
call fcn.0043f504
mov edi, 0x4a39d4
push edi
lea ecx, [ebp - 0x44]
call fcn.004457e4
push edi
lea ecx, [ebp - 0x48]
call fcn.004457e4
push edi
lea ecx, [ebp - 0x50]
call fcn.004457e4
push edi
lea ecx, [ebp - 0x40]
call fcn.004457e4
mov esi, dword [ebp + 8]
cmp word [esi], 0x2d
mov dword [ebp - 0x1c], 0x80000000
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov al, 0x2a
jne 0x48174c
add al, 3
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
movzx ecx, word [esi]
movsx eax, al
cmp eax, ecx
mov byte [ebp - 5], 0
mov byte [ebp - 0xd], 0
mov dword [ebp - 0xc], eax
jne 0x4818b1
push 5
lea ebx, [esi + 2]
push ebx
push str.query
call fcn.00438b38
add esp, 0xc
test al, al
je 0x48178b
mov byte [ebp - 5], 1
jmp 0x481882
push 3
push ebx
push 0x4aee00
call fcn.00438b38
add esp, 0xc
test al, al
je 0x4817f6
lea eax, [ebp + 8]
add esi, 8
push eax
mov dword [ebp + 8], esi
call fcn.004379a9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
lea eax, [ebp + 8]
push eax
call fcn.004050f3
mov eax, dword [ebp + 8]
pop ecx
pop ecx
xor ecx, ecx
cmp word [eax], cx
je 0x4817d0
mov word [eax], cx
add dword [ebp + 8], 2
push ecx
push ecx
mov ecx, dword [ebp - 0x28]
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00433065
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
lea eax, [ebp + 8]
push eax
call fcn.004379a9
jmp 0x48188b
push 1
push ebx
push 0x4a8518
call fcn.00438b38
add esp, 0xc
test al, al
je 0x481810
mov byte [ebp - 0xd], 1
jmp 0x481882
push 1
push ebx
push 0x4aedfc
call fcn.00438b38
add esp, 0xc
test al, al
je 0x48182d
mov dword [ebp - 0x34], 1
jmp 0x481882
push 1
push ebx
push 0x4a807c
call fcn.00438b38
add esp, 0xc
test al, al
je 0x48184a
mov dword [ebp - 0x2c], 1
jmp 0x481882
push 1
push ebx
push 0x4adbfc
call fcn.00438b38
add esp, 0xc
test al, al
je 0x481867
mov dword [ebp - 0x24], 1
jmp 0x481882
push 1
push ebx
push 0x4aedf8
call fcn.00438b38
add esp, 0xc
test al, al
je 0x48189b
mov dword [ebp - 0x20], 2
lea eax, [ebp + 8]
push eax
call fcn.0040507c
mov esi, dword [ebp + 8]
movzx eax, word [esi]
cmp dword [ebp - 0xc], eax
pop ecx
je 0x48176b
xor ebx, ebx
jmp 0x4818b1
cmp ax, 0x21
jne 0x4818b9
inc esi
inc esi
mov dword [ebp - 0x4c], 1
mov dword [ebp + 8], esi
mov ax, word [esi]
cmp ax, bx
jne 0x48189f
lea eax, [ebp + 8]
push eax
call fcn.004379a9
pop ecx
mov ecx, dword [ebp - 0x28]
push ebx
push 0x2c
pop esi
push esi
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00433065
mov dword [ebp + 8], eax
mov eax, dword [ebp - 0x44]
mov cx, word [eax]
push 0x5c
pop edx
cmp cx, dx
mov dword [ebp - 0x18], eax
je 0x4818f7
cmp cx, 0x2f
jne 0x48191c
cmp cx, dx
jne 0x481913
cmp word [eax + 2], dx
jne 0x481913
mov cx, word [eax + 4]
cmp cx, 0x3f
je 0x48190d
cmp cx, 0x2e
jne 0x481913
cmp word [eax + 6], dx
je 0x48191c
mov dword [ebp - 4], 1
jmp 0x48191f
mov dword [ebp - 4], ebx
cmp byte [ebp - 5], 0
jne 0x481976
cmp dword [ebp - 4], ebx
je 0x481976
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ebx, dword [ebp - 0x44]
and dword [ebp - 0x44], 0
mov esi, eax
lea eax, [esi + 3]
push eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0xc], ebx
call fcn.0043d4c2
mov eax, dword [ebp - 0x44]
inc esi
push esi
mov dword [ebp - 0x18], eax
mov word [eax], 0x20
mov word [eax + 2], 0x3a
add eax, 4
push ebx
push eax
call fcn.00405064
add esp, 0xc
lea ecx, [ebp - 0xc]
call fcn.00437960
push 0x2c
xor ebx, ebx
pop esi
mov eax, dword [ebp + 8]
cmp word [eax], si
jne 0x481997
mov ecx, dword [ebp - 0x28]
add dword [ebp + 8], 2
push ebx
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00433065
mov dword [ebp + 8], eax
cmp byte [ebp - 5], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x14], eax
jne 0x4819fa
mov eax, dword [ebp + 8]
cmp word [eax], si
jne 0x4819fa
add dword [ebp + 8], 2
mov eax, dword [ebp + 8]
cmp word [eax], 0x22
jne 0x4819bc
add dword [ebp + 8], 2
push esi
lea eax, [ebp - 0x1c]
push eax
push 1
push esi
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x64]
call fcn.0044e524
push eax
call fcn.00440076
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], si
jne 0x4819fa
mov ecx, dword [ebp - 0x28]
add dword [ebp + 8], 2
push ebx
push esi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00433065
mov dword [ebp + 8], eax
cmp byte [ebp - 0x2d], 0
je 0x481b00
mov esi, 0x4beaf4
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
call fcn.0043aa81
push esi
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp byte [ebp - 0xd], 0
je 0x481a32
push dword [ebp - 0x18]
call fcn.0043acc2
pop ecx
mov esi, eax
jmp 0x482068
or dword [ebp - 0xc], 0xffffffff
cmp dword [ebp - 0x2c], ebx
je 0x481a90
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call fcn.00441c9a
mov eax, dword [ebp - 0x14]
mov word [eax], bx
xor eax, eax
pop ecx
inc eax
cmp dword [ebp - 0x24], ebx
pop ecx
je 0x481a60
xor eax, eax
cmp dword [ebp - 0x34], ebx
jg 0x481a77
jl 0x481a70
cmp dword [ebp - 0x38], 0x100000
jae 0x481a77
mov esi, 0x80070057
jmp 0x481abd
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x18]
call fcn.0043ab63
mov esi, eax
add esp, 0x10
mov dword [ebp - 0xc], esi
jmp 0x481abd
mov eax, dword [ebp - 0x20]
or eax, dword [ebp - 0x34]
or eax, 4
cmp dword [ebp - 0x1c], ebx
jg 0x481aa5
mov dword [ebp - 0x1c], 1
lea ecx, [ebp - 0xc]
push ecx
push dword [ebp - 0x1c]
push dword [ebp - 0x14]
push eax
push dword [ebp - 0x18]
call fcn.004811ec
add esp, 0x14
mov esi, eax
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
add eax, 0x3c
push eax
lea ecx, [ebp - 0x2c]
call fcn.0043d49b
push dword [ebp - 0x14]
push esi
push dword [ebp - 0xc]
push str._d__d__s
push dword [ebp - 0x2c]
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x28]
add esp, 0x14
push dword [ebp - 0x2c]
push dword [ebp - 0x40]
call fcn.0043cd78
lea ecx, [ebp - 0x2c]
jmp 0x482063
cmp byte [ebp - 5], 0
jne 0x481b26
mov eax, dword [ebp - 0x14]
cmp word [eax], bx
jne 0x481b26
cmp byte [ebp - 0xd], 0
je 0x481b1c
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
jne 0x481b26
mov esi, 0x80070057
jmp 0x482068
cmp byte [ebp - 0x39], 0
je 0x481bd9
push 0xffffffffffffffff
push str.22:INDATA_mount_wimsvr__
lea ecx, [ebp - 4]
call fcn.0044581a
push dword [ebp - 0x18]
lea ecx, [ebp - 4]
mov word [ebp - 0x100], bx
call fcn.0043d4e9
mov esi, 0x4a7da8
push esi
lea ecx, [ebp - 4]
call fcn.0043d4e9
push dword [ebp - 0x14]
lea ecx, [ebp - 4]
call fcn.0043d4e9
push esi
lea ecx, [ebp - 4]
call fcn.0043d4e9
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jl 0x481b9b
cdq
push edx
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.004842fa
add esp, 0xc
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 4]
call fcn.0043d4e9
push esi
lea ecx, [ebp - 4]
call fcn.0043d4e9
push dword [ebp - 0x40]
lea ecx, [ebp - 4]
call fcn.0043d4e9
push 0x4a7e28
lea ecx, [ebp - 4]
call fcn.0043d4e9
push dword [ebp + 8]
lea ecx, [ebp - 4]
call fcn.0043d4e9
push dword [ebp - 4]
mov ecx, dword [ebp - 0x28]
call fcn.0042ee8f
mov esi, eax
jmp 0x482060
mov esi, 0x4be6f4
push esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
push dword [ebp - 0x58]
lea ecx, [ebp + 8]
call fcn.00438ca1
lea ecx, [ebp + 8]
call fcn.00438c88
push esi
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp dword [ebp - 0xc], ebx
jge 0x481c1e
push str.WIM_DLL_ERR_r_n
push dword [ebp - 0x28]
call fcn.0040f2bd
pop ecx
pop ecx
xor esi, esi
inc esi
jmp 0x482068
cmp byte [ebp - 5], 0
je 0x481d46
cmp dword [0x4be134], ebx
jne 0x481c38
push 0x78
pop esi
jmp 0x482068
mov esi, dword [ebp - 0x18]
push 0x3d
push esi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
cmp eax, ebx
mov dword [ebp - 0x34], eax
je 0x481c53
mov word [eax], bx
inc eax
inc eax
mov dword [ebp - 0x34], eax
cmp word [esi], bx
je 0x481b1c
lea ecx, [ebp - 0x24]
call fcn.0043d47d
mov eax, dword [ebp + 8]
cmp word [eax], 0x2c
jne 0x481c8f
add dword [ebp + 8], 2
push 1
push 0x2c
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x64]
call fcn.0044e524
push ebx
lea ecx, [ebp - 0x24]
push ecx
push eax
call fcn.0043fe29
add esp, 0xc
push dword [ebp - 0x24]
call fcn.0041113a
pop ecx
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.0043d47d
mov edi, dword [ebp - 0x14]
cmp word [edi], bx
je 0x481cca
cmp word [edi + 2], 0x3a
je 0x481cca
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.004114d4
pop ecx
pop ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x48]
call fcn.0044584c
mov edi, dword [eax]
cmp word [esi], bx
je 0x481cef
cmp word [esi + 2], 0x3a
je 0x481cef
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.004114d4
pop ecx
pop ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x24]
call fcn.0044584c
mov esi, dword [eax]
push 0x20
lea ecx, [ebp - 0x20]
call fcn.0043d49b
mov eax, dword [ebp - 0x20]
push ebx
push dword [ebp - 0x34]
mov word [eax + 4], bx
lea eax, [ebp - 0x20]
push eax
push esi
push edi
push dword [ebp - 0x28]
call fcn.00448ca5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
add esp, 0x18
add eax, 4
push eax
push dword [ebp - 0x18]
call fcn.0043cd78
lea ecx, [ebp - 0x20]
call fcn.00437960
lea ecx, [ebp - 0x1c]
call fcn.00437960
lea ecx, [ebp - 0x24]
call fcn.00437960
xor esi, esi
jmp 0x482068
cmp byte [ebp - 0xd], 0
mov dword [ebp - 0x2c], ebx
jne 0x481f45
mov esi, dword [ebp - 0x18]
cmp word [esi], bx
je 0x481f45
mov eax, dword [ebp - 0x40]
cmp word [eax], 0x2a
jne 0x481d89
push 0x105
lea ecx, [ebp - 0x40]
call fcn.0043d4c2
mov eax, dword [ebp - 0x40]
mov word [eax], bx
push dword [ebp - 0x40]
push 0x104
call dword [sym.imp.KERNEL32.DLL_GetTempPathW]
cmp dword [0x4be12c], ebx
je 0x481c16
push dword [ebp - 0x14]
call fcn.0048ef50
test eax, eax
pop ecx
jne 0x481dbe
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34]
call fcn.004457e4
push dword [ebp - 0x34]
call fcn.0041bb2d
pop ecx
lea ecx, [ebp - 0x34]
call fcn.00437960
push dword [ebp - 0x14]
call fcn.0048ef50
test eax, eax
pop ecx
je 0x481c16
cmp dword [ebp - 4], ebx
jne 0x481de3
push esi
call fcn.0048f0e8
test eax, eax
pop ecx
je 0x481c16
push 8
pop ecx
xor eax, eax
mov dword [ebp - 0x88], ebx
lea edi, [ebp - 0x84]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x88]
push eax
push ebx
push esi
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesExW]
test eax, eax
je 0x481e12
test byte [ebp - 0x88], 1
jne 0x481e1d
mov eax, dword [ebp - 0x40]
cmp word [eax], bx
mov dword [ebp - 0x24], eax
jne 0x481e20
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 4], ebx
mov dword [ebp - 0x20], ebx
je 0x481e3d
cmp dword [ebp - 0xc], ebx
jne 0x481e34
mov dword [ebp - 0x20], 0x100
cmp dword [ebp - 0x4c], ebx
je 0x481e3d
or byte [ebp - 0x1f], 2
xor eax, eax
inc eax
cmp dword [ebp - 4], ebx
je 0x481e51
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.004726f3
pop ecx
pop ecx
mov edi, dword [ebp - 0x1c]
sar eax, 8
movzx esi, al
dec esi
cmp edi, 0x80000000
jne 0x481e66
xor edi, edi
inc edi
push dword [ebp - 0x18]
call fcn.0048f0e8
test eax, eax
pop ecx
je 0x481ec7
cmp dword [ebp - 0xc], ebx
je 0x481e93
cmp edi, ebx
jge 0x481e7f
xor edi, edi
inc edi
push dword [ebp - 0x24]
push edi
push dword [ebp - 0x18]
push dword [ebp - 0x14]
call fcn.00448b2f
add esp, 0x10
jmp 0x481eaa
cmp edi, ebx
jge 0x481e9a
xor edi, edi
inc edi
push dword [ebp - 0x24]
push edi
push dword [ebp - 0x18]
push dword [ebp - 0x14]
call dword [0x4be12c]
push eax
push dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push str.FOUND_WIM___s____mount_to___s____s___d_r_n
push dword [ebp - 0x28]
call fcn.0040f2bd
add esp, 0x18
cmp dword [ebp - 4], ebx
je 0x481ede
cmp dword [ebp - 0x4c], ebx
jne 0x481ede
mov eax, dword [ebp - 0x20]
cmp ax, bx
je 0x481ede
call fcn.0043944f
cmp esi, ebx
jl 0x481f08
push esi
lea eax, [ebp - 0x150]
push str.PART_update__d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push ebx
lea eax, [ebp - 0x148]
push eax
call fcn.00458e0f
lea ecx, [ebp - 0x54]
call fcn.00437960
lea ecx, [ebp - 0x40]
call fcn.00437960
lea ecx, [ebp - 0x50]
call fcn.00437960
lea ecx, [ebp - 0x48]
call fcn.00437960
lea ecx, [ebp - 0x44]
call fcn.00437960
lea ecx, [ebp - 0x64]
call fcn.00437960
xor eax, eax
cmp dword [ebp - 0x2c], ebx
sete al
jmp 0x48209a
lea ecx, [ebp - 4]
call fcn.0043d47d
mov esi, dword [ebp - 0x14]
cmp word [esi], bx
je 0x481f78
cmp word [esi + 2], 0x3a
je 0x481f78
lea eax, [ebp - 4]
push eax
push esi
call fcn.004114d4
pop ecx
pop ecx
push dword [ebp - 4]
lea ecx, [ebp - 0x48]
call fcn.0044584c
mov esi, dword [eax]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
je 0x481fa3
cmp word [eax + 2], 0x3a
je 0x481fa3
lea ecx, [ebp - 4]
push ecx
push eax
call fcn.004114d4
pop ecx
pop ecx
push dword [ebp - 4]
lea ecx, [ebp - 0x44]
call fcn.0044584c
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp word [esi], bx
jne 0x481fd8
cmp word [eax], bx
je 0x481fd3
lea ecx, [ebp - 0x568]
push ecx
push edi
lea ecx, [ebp - 4]
push ecx
push eax
push edi
push dword [ebp - 0x28]
call fcn.00448ca5
add esp, 0x18
test eax, eax
je 0x481ff0
lea esi, [ebp - 0x360]
mov dword [ebp - 0x14], esi
cmp word [esi], bx
je 0x481ff0
cmp dword [0x4be130], ebx
jne 0x481fe5
xor esi, esi
inc esi
jmp 0x482060
push esi
call fcn.0048ef50
test eax, eax
pop ecx
jne 0x481ff7
mov esi, 0x80070057
jmp 0x482060
mov eax, dword [ebp - 0x18]
cmp word [eax], bx
mov dword [ebp - 0x34], eax
jne 0x482005
mov dword [ebp - 0x34], ebx
cmp word [esi], bx
mov edi, esi
jne 0x48200e
xor edi, edi
cmp dword [ebp - 0x1c], 0x80000000
jne 0x48201a
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0xc], ebx
je 0x482038
xor eax, eax
cmp dword [ebp - 0x1c], ebx
setne al
push eax
push dword [ebp - 0x14]
call fcn.0043a978
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x482060
cmp dword [ebp - 0x1c], 0x80000000
je 0x48204b
cmp dword [ebp - 0x1c], ebx
je 0x48204b
xor eax, eax
inc eax
jmp 0x48204d
xor eax, eax
push eax
push ebx
push dword [ebp - 0x34]
push edi
call dword [0x4be130]
mov esi, eax
neg esi
sbb esi, esi
inc esi
lea ecx, [ebp - 4]
call fcn.00437960
lea ecx, [ebp - 0x54]
call fcn.00437960
lea ecx, [ebp - 0x40]
call fcn.00437960
lea ecx, [ebp - 0x50]
call fcn.00437960
lea ecx, [ebp - 0x48]
call fcn.00437960
lea ecx, [ebp - 0x44]
call fcn.00437960
lea ecx, [ebp - 0x64]
call fcn.00437960
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 8