Function at 0x4780b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x14fc
call fcn.004c65d0
mov eax, dword [0x5159c4]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x14fc], ecx
cmp dword [ebp + 8], 0
jne 0x4780da
xor eax, eax
jmp 0x478f97
push 0x208
push 0
lea eax, [ebp - 0x1088]
push eax
call fcn.004c62e0
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x1088]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetClassNameW]
push ecx
mov ecx, esp
lea eax, [ebp - 0x1088]
push eax
call fcn.00413a00
mov ecx, dword [ebp - 0x14fc]
call fcn.00456f60
test eax, eax
je 0x47812b
xor eax, eax
jmp 0x478f97
lea ecx, [ebp - 0xe74]
call fcn.004365d0
push 1
push 0
lea ecx, [ebp - 0xe74]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00481320
add esp, 0x10
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0xa1c], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0xe58], eax
cmp dword [ebp - 0xa1c], 0
je 0x4781fe
cmp dword [ebp - 0xe58], 0
je 0x4781fe
mov eax, dword [ebp - 0x14fc]
mov dword [eax + 0x76c], 1
mov eax, dword [ebp - 0xe58]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0xa1c]
cdq
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x14b8]
call fcn.0043f100
mov ecx, dword [ebp - 0x14b8]
mov dword [ebp - 0x14c8], ecx
mov edx, dword [ebp - 0x14b4]
mov dword [ebp - 0x14c4], edx
mov eax, dword [ebp - 0x14c4]
push eax
mov ecx, dword [ebp - 0x14c8]
push ecx
lea ecx, [ebp - 0xe74]
call fcn.0043f3f0
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x4781fe
mov edx, dword [ebp - 0x14fc]
mov dword [edx + 0x76c], 0
mov dword [ebp - 0xa30], 0
lea eax, [ebp - 0xa30]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 0x208
push 0
lea edx, [ebp - 0xe50]
push edx
call fcn.004c62e0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xe50]
push eax
mov ecx, dword [ebp - 0xa30]
push ecx
call fcn.00425690
add esp, 0xc
mov dword [ebp - 0xa2c], eax
push 0x4ffd48
lea ecx, [ebp - 0x14b0]
call fcn.00413a00
lea edx, [ebp - 0x14b0]
push edx
mov eax, dword [ebp - 0xa30]
push eax
call fcn.00425320
add esp, 8
test eax, eax
jne 0x47828a
push 0x4ffd4c
lea ecx, [ebp - 0x14b0]
call fcn.00413a60
xor ecx, ecx
mov word [ebp - 0xc40], cx
push 0x206
push 0
lea edx, [ebp - 0xc3e]
push edx
call fcn.004c62e0
add esp, 0xc
push 0x104
lea eax, [ebp - 0xc40]
push eax
push 0
push 0
mov ecx, dword [ebp - 0xa30]
push ecx
call fcn.00427760
add esp, 0x14
test eax, eax
je 0x478350
push ecx
mov ecx, esp
lea edx, [ebp - 0xe50]
push edx
call fcn.00413a00
push ecx
mov ecx, esp
lea eax, [ebp - 0xc40]
push eax
call fcn.00413a00
lea ecx, [ebp - 0x14bc]
push ecx
mov ecx, dword [ebp - 0x14fc]
call fcn.00477d90
lea ecx, [ebp - 0x14bc]
call fcn.00412400
movzx edx, al
test edx, edx
jne 0x478345
push 0x104
push 0
lea eax, [ebp - 0xe50]
push eax
call fcn.004c62e0
add esp, 0xc
lea ecx, [ebp - 0x14bc]
call fcn.00413b20
push eax
push 0x104
lea ecx, [ebp - 0xe50]
push ecx
call fcn.00422b70
lea ecx, [ebp - 0x14bc]
call fcn.00413a40
lea ecx, [ebp - 0xe5c]
call fcn.004139c0
xor edx, edx
mov word [ebp - 0xa18], dx
push 0x7fe
push 0
lea eax, [ebp - 0xa16]
push eax
call fcn.004c62e0
add esp, 0xc
cmp dword [ebp - 0xa2c], 0
jbe 0x4783d7
lea ecx, [ebp - 0xe50]
push ecx
lea ecx, [ebp - 0xe5c]
call fcn.00413a60
push 0
push 0x4ffd50
lea ecx, [ebp - 0xe5c]
call fcn.004121c0
cmp eax, 0xffffffff
je 0x4783d7
push 0x400
lea edx, [ebp - 0xa18]
push edx
lea eax, [ebp - 0xe50]
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
lea ecx, [ebp - 0xa18]
push ecx
lea ecx, [ebp - 0xe5c]
call fcn.00413a60
lea edx, [ebp - 0xe7c]
push edx
call fcn.0040d290
add esp, 4
push 0
lea eax, [ebp - 0xe78]
push eax
call fcn.0040d0e0
add esp, 8
lea ecx, [ebp - 0xe7c]
call fcn.00413b50
test eax, eax
jg 0x478418
lea ecx, [ebp - 0xe78]
push ecx
lea ecx, [ebp - 0xe7c]
call fcn.004121a0
lea edx, [ebp - 0x214]
push edx
call fcn.0048eb00
add esp, 4
lea ecx, [ebp - 0xa28]
call fcn.004139c0
push 0x104
lea ecx, [ebp - 0xa28]
call fcn.00413b30
mov dword [ebp - 0x14ac], eax
push 0x104
mov eax, dword [ebp - 0x14ac]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0x4ffd54
mov ecx, dword [ebp - 0x14ac]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa28]
call fcn.00413b70
push str.Progman
lea ecx, [ebp - 0x1094]
call fcn.00413a00
push str.CabinetWClass
lea ecx, [ebp - 0xc44]
call fcn.00413a00
push str.Shell_TrayWnd
lea ecx, [ebp - 0x108c]
call fcn.00413a00
push str.ExploreWClass
lea ecx, [ebp - 0xa34]
call fcn.00413a00
xor edx, edx
mov word [ebp - 0x12a0], dx
push 0x206
push 0
lea eax, [ebp - 0x129e]
push eax
call fcn.004c62e0
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x12a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push str.Logon.scr
lea edx, [ebp - 0x12a0]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x12a0]
push eax
lea ecx, [ebp - 0xa24]
call fcn.00413a00
xor ecx, ecx
mov word [ebp - 0x14a8], cx
push 0x206
push 0
lea edx, [ebp - 0x14a6]
push edx
call fcn.004c62e0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x14a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea ecx, [ebp - 0x14a8]
push ecx
lea ecx, [ebp - 0xe64]
call fcn.00413a00
push str.SystemAppsShellExperienceHost_cw5n1h2txyewyShellExperienceHost.exe
push 0x104
lea ecx, [ebp - 0xe64]
call fcn.00413b30
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xe64]
call fcn.00413b70
lea edx, [ebp - 0x14a8]
push edx
lea ecx, [ebp - 0x1090]
call fcn.00413a00
push str.SystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweMicrosoftEdge.exe
push 0x104
lea ecx, [ebp - 0x1090]
call fcn.00413b30
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1090]
call fcn.00413b70
lea eax, [ebp - 0x14a8]
push eax
lea ecx, [ebp - 0xe54]
call fcn.00413a00
push str.ImmersiveControlPanelSystemSettings.exe
push 0x104
lea ecx, [ebp - 0xe54]
call fcn.00413b30
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xe54]
call fcn.00413b70
xor ecx, ecx
mov word [ebp - 0x210], cx
push 0x206
push 0
lea edx, [ebp - 0x20e]
push edx
call fcn.004c62e0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x210]
push ecx
lea ecx, [ebp - 0xa20]
call fcn.00413a00
push str.ApplicationFrameHost.exe
push 0x104
lea ecx, [ebp - 0xa20]
call fcn.00413b30
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa20]
call fcn.00413b70
lea edx, [ebp - 0x210]
push edx
lea ecx, [ebp - 0x1098]
call fcn.00413a00
push str.dllhost.exe
push 0x104
lea ecx, [ebp - 0x1098]
call fcn.00413b30
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1098]
call fcn.00413b70
lea ecx, [ebp - 0xe78]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xe78]
call fcn.00413b20
push eax
lea eax, [ebp - 0xe50]
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xa28]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xa28]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
jne 0x4787cc
lea ecx, [ebp - 0x1094]
call fcn.00413b50
push eax
lea ecx, [ebp - 0x1094]
call fcn.00413b20
push eax
lea ecx, [ebp - 0x1088]
push ecx
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xc44]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xc44]
call fcn.00413b20
push eax
lea edx, [ebp - 0x1088]
push edx
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0x108c]
call fcn.00413b50
push eax
lea ecx, [ebp - 0x108c]
call fcn.00413b20
push eax
lea eax, [ebp - 0x1088]
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xa34]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xa34]
call fcn.00413b20
push eax
lea ecx, [ebp - 0x1088]
push ecx
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xe74]
call fcn.0043f320
cmp eax, 0x3c0
jge 0x47892b
lea ecx, [ebp - 0xe7c]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xe7c]
call fcn.00413b20
push eax
lea edx, [ebp - 0xe50]
push edx
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xa24]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xa24]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xe64]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xe64]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xa20]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xa20]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0x1090]
call fcn.00413b50
push eax
lea ecx, [ebp - 0x1090]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0xe54]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xe54]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x47892b
lea ecx, [ebp - 0x1098]
call fcn.00413b50
push eax
lea ecx, [ebp - 0x1098]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
jne 0x4789f0
mov dword [ebp - 0x14d4], 0
lea ecx, [ebp - 0x1098]
call fcn.00413a40
lea ecx, [ebp - 0xa20]
call fcn.00413a40
lea ecx, [ebp - 0xe54]
call fcn.00413a40
lea ecx, [ebp - 0x1090]
call fcn.00413a40
lea ecx, [ebp - 0xe64]
call fcn.00413a40
lea ecx, [ebp - 0xa24]
call fcn.00413a40
lea ecx, [ebp - 0xa34]
call fcn.00413a40
lea ecx, [ebp - 0x108c]
call fcn.00413a40
lea ecx, [ebp - 0xc44]
call fcn.00413a40
lea ecx, [ebp - 0x1094]
call fcn.00413a40
lea ecx, [ebp - 0xa28]
call fcn.00413a40
lea ecx, [ebp - 0x214]
call fcn.00413a40
lea ecx, [ebp - 0xe78]
call fcn.00413a40
lea ecx, [ebp - 0xe7c]
call fcn.00413a40
lea ecx, [ebp - 0xe5c]
call fcn.00413a40
lea ecx, [ebp - 0x14b0]
call fcn.00413a40
mov eax, dword [ebp - 0x14d4]
jmp 0x478f97
lea ecx, [ebp - 0x214]
call fcn.00413b50
test eax, eax
jle 0x478afc
lea ecx, [ebp - 0x214]
call fcn.00413b50
push eax
lea ecx, [ebp - 0x214]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
call fcn.004c64f6
add esp, 0xc
test eax, eax
jne 0x478afc
mov dword [ebp - 0x14d8], 0
lea ecx, [ebp - 0x1098]
call fcn.00413a40
lea ecx, [ebp - 0xa20]
call fcn.00413a40
lea ecx, [ebp - 0xe54]
call fcn.00413a40
lea ecx, [ebp - 0x1090]
call fcn.00413a40
lea ecx, [ebp - 0xe64]
call fcn.00413a40
lea ecx, [ebp - 0xa24]
call fcn.00413a40
lea ecx, [ebp - 0xa34]
call fcn.00413a40
lea ecx, [ebp - 0x108c]
call fcn.00413a40
lea ecx, [ebp - 0xc44]
call fcn.00413a40
lea ecx, [ebp - 0x1094]
call fcn.00413a40
lea ecx, [ebp - 0xa28]
call fcn.00413a40
lea ecx, [ebp - 0x214]
call fcn.00413a40
lea ecx, [ebp - 0xe78]
call fcn.00413a40
lea ecx, [ebp - 0xe7c]
call fcn.00413a40
lea ecx, [ebp - 0xe5c]
call fcn.00413a40
lea ecx, [ebp - 0x14b0]
call fcn.00413a40
mov eax, dword [ebp - 0x14d8]
jmp 0x478f97
movzx eax, word [ebp - 0xa18]
test eax, eax
je 0x478c2a
lea ecx, [ebp - 0xe78]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xe78]
call fcn.00413b20
push eax
lea ecx, [ebp - 0xa18]
push ecx
call fcn.004c64f6
add esp, 0xc
test eax, eax
je 0x478b65
lea ecx, [ebp - 0xe7c]
call fcn.00413b50
push eax
lea ecx, [ebp - 0xe7c]
call fcn.00413b20
push eax
lea edx, [ebp - 0xa18]
push edx
call fcn.004c64f6
add esp, 0xc
test eax, eax
jne 0x478c2a
mov dword [ebp - 0x14dc], 0
lea ecx, [ebp - 0x1098]
call fcn.00413a40
lea ecx, [ebp - 0xa20]
call fcn.00413a40
lea ecx, [ebp - 0xe54]
call fcn.00413a40
lea ecx, [ebp - 0x1090]
call fcn.00413a40
lea ecx, [ebp - 0xe64]
call fcn.00413a40
lea ecx, [ebp - 0xa24]
call fcn.00413a40
lea ecx, [ebp - 0xa34]
call fcn.00413a40
lea ecx, [ebp - 0x108c]
call fcn.00413a40
lea ecx, [ebp - 0xc44]
call fcn.00413a40
lea ecx, [ebp - 0x1094]
call fcn.00413a40
lea ecx, [ebp - 0xa28]
call fcn.00413a40
lea ecx, [ebp - 0x214]
call fcn.00413a40
lea ecx, [ebp - 0xe78]
call fcn.00413a40
lea ecx, [ebp - 0xe7c]
call fcn.00413a40
lea ecx, [ebp - 0xe5c]
call fcn.00413a40
lea ecx, [ebp - 0x14b0]
call fcn.00413a40
mov eax, dword [ebp - 0x14dc]
jmp 0x478f97
push ecx
mov ecx, esp
lea eax, [ebp - 0x1088]
push eax
call fcn.00413a00
push ecx
mov ecx, esp
lea edx, [ebp - 0xe5c]
push edx
call fcn.004139e0
mov ecx, dword [ebp - 0x14fc]
call fcn.00457010
test eax, eax
jne 0x478c79
push ecx
mov ecx, esp
lea eax, [ebp - 0xe5c]
push eax
call fcn.004139e0
mov ecx, dword [ebp - 0x14fc]
call fcn.00457570
test eax, eax
je 0x478d3e
mov dword [ebp - 0x14ec], 0
lea ecx, [ebp - 0x1098]
call fcn.00413a40
lea ecx, [ebp - 0xa20]
call fcn.00413a40
lea ecx, [ebp - 0xe54]
call fcn.00413a40
lea ecx, [ebp - 0x1090]
call fcn.00413a40
lea ecx, [ebp - 0xe64]
call fcn.00413a40
lea ecx, [ebp - 0xa24]
call fcn.00413a40
lea ecx, [ebp - 0xa34]
call fcn.00413a40
lea ecx, [ebp - 0x108c]
call fcn.00413a40
lea ecx, [ebp - 0xc44]
call fcn.00413a40
lea ecx, [ebp - 0x1094]
call fcn.00413a40
lea ecx, [ebp - 0xa28]
call fcn.00413a40
lea ecx, [ebp - 0x214]
call fcn.00413a40
lea ecx, [ebp - 0xe78]
call fcn.00413a40
lea ecx, [ebp - 0xe7c]
call fcn.00413a40
lea ecx, [ebp - 0xe5c]
call fcn.00413a40
lea ecx, [ebp - 0x14b0]
call fcn.00413a40
mov eax, dword [ebp - 0x14ec]
jmp 0x478f97
push ecx
mov ecx, esp
lea edx, [ebp - 0xe5c]
push edx
call fcn.004139e0
lea eax, [ebp - 0xe60]
push eax
mov ecx, dword [ebp - 0x14fc]
call fcn.00457230
push 0x4fffa0
lea ecx, [ebp - 0xe60]
call fcn.0041fe40
push str.explorer.exe
lea ecx, [ebp - 0xe60]
call fcn.00430120
test eax, eax
je 0x478e76
lea ecx, [ebp - 0xe60]
call fcn.00413b20
push eax
mov ecx, dword [ebp - 0x14fc]
call fcn.00457a30
test eax, eax
je 0x478e76
mov dword [ebp - 0x14f4], 0
lea ecx, [ebp - 0xe60]
call fcn.00413a40
lea ecx, [ebp - 0x1098]
call fcn.00413a40
lea ecx, [ebp - 0xa20]
call fcn.00413a40
lea ecx, [ebp - 0xe54]
call fcn.00413a40
lea ecx, [ebp - 0x1090]
call fcn.00413a40
lea ecx, [ebp - 0xe64]
call fcn.00413a40
lea ecx, [ebp - 0xa24]
call fcn.00413a40
lea ecx, [ebp - 0xa34]
call fcn.00413a40
lea ecx, [ebp - 0x108c]
call fcn.00413a40
lea ecx, [ebp - 0xc44]
call fcn.00413a40
lea ecx, [ebp - 0x1094]
call fcn.00413a40
lea ecx, [ebp - 0xa28]
call fcn.00413a40
lea ecx, [ebp - 0x214]
call fcn.00413a40
lea ecx, [ebp - 0xe78]
call fcn.00413a40
lea ecx, [ebp - 0xe7c]
call fcn.00413a40
lea ecx, [ebp - 0xe5c]
call fcn.00413a40
lea ecx, [ebp - 0x14b0]
call fcn.00413a40
mov eax, dword [ebp - 0x14f4]
jmp 0x478f97
lea ecx, [ebp - 0xe5c]
call fcn.00413b20
push eax
push 0x104
mov ecx, dword [ebp - 0x14fc]
add ecx, 0x134
push ecx
call fcn.00422b70
lea ecx, [ebp - 0xe74]
call fcn.0043f340
push eax
lea ecx, [ebp - 0xe74]
call fcn.0043f320
push eax
mov edx, dword [ebp - 0xe5c]
push edx
lea eax, [ebp - 0x1088]
push eax
push str.ClassName_s__ProcFile_s___d__d
call fcn.004139b0
add esp, 0x14
mov dword [ebp - 0x14f8], 1
lea ecx, [ebp - 0xe60]
call fcn.00413a40
lea ecx, [ebp - 0x1098]
call fcn.00413a40
lea ecx, [ebp - 0xa20]
call fcn.00413a40
lea ecx, [ebp - 0xe54]
call fcn.00413a40
lea ecx, [ebp - 0x1090]
call fcn.00413a40
lea ecx, [ebp - 0xe64]
call fcn.00413a40
lea ecx, [ebp - 0xa24]
call fcn.00413a40
lea ecx, [ebp - 0xa34]
call fcn.00413a40
lea ecx, [ebp - 0x108c]
call fcn.00413a40
lea ecx, [ebp - 0xc44]
call fcn.00413a40
lea ecx, [ebp - 0x1094]
call fcn.00413a40
lea ecx, [ebp - 0xa28]
call fcn.00413a40
lea ecx, [ebp - 0x214]
call fcn.00413a40
lea ecx, [ebp - 0xe78]
call fcn.00413a40
lea ecx, [ebp - 0xe7c]
call fcn.00413a40
lea ecx, [ebp - 0xe5c]
call fcn.00413a40
lea ecx, [ebp - 0x14b0]
call fcn.00413a40
mov eax, dword [ebp - 0x14f8]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c62c9
mov esp, ebp
pop ebp
ret 4