Function at 0x546770
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x22
push 0
push 0
dec ecx
jne 0x546779
xchg dword [ebp - 4], ecx
push ebx
mov byte [ebp - 9], cl
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x64]
mov edx, dword [0x4bc03c]
call fcn.004078bc
xor eax, eax
push ebp
push 0x54744d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
add eax, 0x230
call fcn.00454200
mov eax, dword [ebp - 4]
add eax, 0x244
call fcn.00454200
cmp dword [ebp - 8], 0
je 0x54736d
mov eax, dword [0x59f8c8]
cmp byte [eax], 0
jne 0x54736d
cmp byte [ebp - 9], 1
jne 0x546899
mov eax, dword [ebp - 8]
cmp byte [eax + 8], 0
jne 0x546899
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
cmp dword [ebp - 0x68], 0
je 0x546899
mov eax, dword [ebp - 8]
cmp byte [eax + 0xf0], 0
jne 0x546899
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
dec eax
sub eax, 5
jae 0x546899
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x1c]
cmp byte [eax + 8], 2
jne 0x546899
mov eax, dword [0x59faac]
mov eax, dword [eax]
cmp dword [eax + 0xdc], 0
je 0x546899
push 1
push 5
lea eax, [ebp - 0x64]
mov edx, dword [0x4bc03c]
call fcn.00407994
mov edx, eax
mov eax, dword [ebp - 8]
lea ecx, [eax + 4]
mov eax, dword [ebp - 4]
call fcn.00541c00
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.005456d0
test al, al
je 0x546899
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x224
call fcn.00406a0c
jmp 0x54736d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
dec eax
sub eax, 5
jae 0x546d44
mov eax, dword [ebp - 8]
cmp byte [eax + 0xf0], 0
jne 0x546d44
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 1
je 0x5468d2
sub eax, 2
je 0x5468d2
sub eax, 2
je 0x5468d2
xor eax, eax
jmp 0x5468d4
mov al, 1
mov byte [ebp - 0x29], al
cmp byte [ebp - 9], 7
jne 0x546a06
mov eax, dword [ebp - 4]
push eax
push 0x5413f0
mov eax, dword [ebp - 8]
add eax, 4
push eax
mov eax, dword [ebp - 4]
add eax, 0x244
push eax
lea edx, [ebp - 0x70]
mov eax, dword [0x59fb5c]
mov eax, dword [eax]
call fcn.00443480
mov eax, dword [ebp - 0x70]
push eax
push 0
lea eax, [ebp - 0x74]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [0x5a01a8]
mov eax, dword [eax]
call fcn.00443480
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
mov byte [ebp - 0x80], 0x11
lea edx, [ebp - 0x8c]
mov eax, dword [0x5a01a8]
mov eax, dword [eax]
call fcn.00443480
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x78], 0x11
lea edx, [ebp - 0x84]
mov eax, dword [0x59fcc0]
mov eax, dword [eax]
mov ecx, 1
call fcn.00443500
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x10]
mov eax, dword [0x59f944]
mov eax, dword [eax]
call fcn.005414f0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x244]
add eax, 0x120
mov edx, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00406970
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x250], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x24c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
xor edx, edx
mov dword [eax + 0x13c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x244]
mov eax, dword [eax + 0x120]
push eax
push 0
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 8]
xor ecx, ecx
call fcn.004bd420
test al, al
je 0x54736d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x248], eax
jmp 0x54736d
cmp byte [ebp - 9], 5
sete al
and al, byte [ebp - 0x29]
je 0x546a5a
push 0
lea edx, [ebp - 0x90]
mov eax, dword [0x59f92c]
mov eax, dword [eax]
call fcn.00443480
mov eax, dword [ebp - 0x90]
push eax
lea edx, [ebp - 0x94]
mov eax, dword [0x59f804]
mov eax, dword [eax]
call fcn.00443480
mov edx, dword [ebp - 0x94]
mov eax, 0x54746c
pop ecx
call fcn.004951f0
call fcn.00459030
jmp 0x54736d
cmp byte [ebp - 9], 4
jne 0x546b6f
mov eax, dword [ebp - 8]
call fcn.00570800
test al, al
je 0x546a9c
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0053f090
test al, al
jne 0x54736d
jmp 0x546cfc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 5
jne 0x546b62
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59faac]
mov eax, dword [eax]
call fcn.005820e0
cmp dword [ebp - 0x18], 0
jne 0x546ad9
lea eax, [ebp - 0x18]
mov edx, dword [0x59faac]
mov edx, dword [edx]
mov edx, dword [edx + 0x5c]
call fcn.004069b8
push 0
push 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0xa0], 0x11
lea edx, [ebp - 0xa4]
mov eax, dword [0x59fd4c]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00443500
mov eax, dword [ebp - 0x9c]
push eax
lea edx, [ebp - 0xa8]
mov eax, dword [0x59f748]
mov eax, dword [eax]
call fcn.00443480
mov edx, dword [ebp - 0xa8]
mov eax, 0x5474b4
pop ecx
call fcn.00495310
call fcn.00459030
cmp al, 2
jne 0x54736d
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 4]
call fcn.00455120
jmp 0x54736d
mov eax, dword [ebp - 8]
call fcn.004d1f00
jmp 0x54736d
cmp byte [ebp - 9], 3
jne 0x546bc8
push 0
lea edx, [ebp - 0xb0]
mov eax, dword [0x5a015c]
mov eax, dword [eax]
call fcn.00443480
mov eax, dword [ebp - 0xb0]
push eax
lea edx, [ebp - 0xb4]
mov eax, dword [0x59f804]
mov eax, dword [eax]
call fcn.00443480
mov edx, dword [ebp - 0xb4]
mov eax, 0x5474f0
pop ecx
call fcn.004951f0
call fcn.00459030
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.005465b0
jmp 0x54736d
cmp byte [ebp - 9], 1
jne 0x546c97
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 5
jne 0x546c4c
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59faac]
mov eax, dword [eax]
call fcn.00583570
test al, al
je 0x546c03
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00547e90
jmp 0x54736d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x1c]
cmp byte [eax + 8], 2
jne 0x546c3a
mov eax, dword [0x59faac]
mov eax, dword [eax]
cmp dword [eax + 0xdc], 0
je 0x546c3a
mov cl, 4
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00546530
jmp 0x54736d
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.005465b0
test al, al
jmp 0x54736d
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 1
je 0x546c85
sub eax, 2
je 0x546c85
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x1c]
cmp byte [eax + 8], 2
jne 0x546cfc
mov eax, dword [0x59faac]
mov eax, dword [eax]
cmp dword [eax + 0xdc], 0
je 0x546cfc
mov cl, 4
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00546530
jmp 0x54736d
cmp byte [ebp - 9], 6
sete al
and al, byte [ebp - 0x29]
je 0x546cfc
mov eax, dword [ebp + 8]
cmp dword [eax + 0xc], 0
jne 0x546cbd
lea edx, [ebp - 0x18]
mov eax, dword [0x59feb8]
mov eax, dword [eax]
call fcn.00443480
jmp 0x546ccb
lea eax, [ebp - 0x18]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0xc]
call fcn.004069b8
push 0
lea edx, [ebp - 0xb8]
mov eax, dword [0x59f7ec]
mov eax, dword [eax]
call fcn.00443480
mov edx, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x18]
mov eax, 0x54752c
call fcn.004951f0
call fcn.00459030
jmp 0x54736d
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.005709a0
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
call fcn.00407588
je 0x546d44
mov edx, dword [ebp + 8]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 8]
call fcn.005709d0
mov eax, dword [0x59fc1c]
cmp dword [eax], 0
je 0x546d44
mov eax, dword [0x59fc1c]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.005288d0
mov eax, dword [ebp - 8]
mov byte [eax + 0xf0], 0
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0xac]
test al, al
je 0x546d83
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp + 8]
xor edx, edx
call fcn.004bddd0
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00540c00
jmp 0x54736d
xor eax, eax
push ebp
push 0x547366
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004d1e90
lea eax, [ebp - 0x38]
call fcn.004065ac
mov edx, eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
push eax
push 0x541450
mov eax, dword [ebp - 8]
add eax, 4
push eax
mov eax, dword [ebp - 4]
add eax, 0x23c
push eax
lea edx, [ebp - 0xc4]
mov eax, dword [0x59f938]
mov eax, dword [eax]
call fcn.00443480
mov eax, dword [ebp - 0xc4]
push eax
push 2
lea edx, [ebp - 0xc8]
mov eax, dword [0x5a0094]
mov eax, dword [eax]
call fcn.00443480
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x10]
mov eax, dword [0x59f944]
mov eax, dword [eax]
call fcn.005414f0
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x30]
lea ecx, [ebp - 0x30]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
call fcn.0056efd0
cmp dword [ebp - 0x30], 0
je 0x546e30
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x30]
call fcn.0053e460
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x78]
test al, al
je 0x546eba
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59faac]
mov eax, dword [eax]
call fcn.00582310
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x546eba
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0xcc]
push eax
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0x34]
call fcn.0041d048
mov edx, dword [ebp - 0xd0]
pop eax
call fcn.00407398
mov eax, dword [ebp - 0xcc]
lea edx, [ebp - 0x10]
call fcn.0053e460
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59faac]
mov eax, dword [eax]
call fcn.00582290
cmp dword [ebp - 0x24], 0
je 0x546eba
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x24]
call fcn.0053e460
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0xe8]
test al, al
je 0x546efe
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 8]
add eax, 4
call fcn.0046e8c0
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd4]
mov edx, 0x54756c
call fcn.004073f0
mov eax, dword [ebp - 0xd4]
lea edx, [ebp - 0x10]
call fcn.0053e460
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp + 8]
cmp dword [eax], 0
je 0x546f99
cmp dword [ebp - 0x1c], 0
je 0x546f99
cmp dword [ebp - 0x20], 0
je 0x546f99
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
lea eax, [ebp - 0xdc]
mov edx, dword [ebp - 0x1c]
call fcn.004073f0
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0x10]
call fcn.0053e460
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.004069b8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
lea eax, [ebp - 0xe0]
mov edx, dword [ebp - 0x20]
call fcn.004073f0
mov eax, dword [ebp - 0xe0]
lea edx, [ebp - 0x10]
call fcn.0053e460
lea eax, [ebp - 0xe4]
mov ecx, 0x547590
mov edx, dword [ebp - 0x20]
call fcn.004073f0
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0x14]
call fcn.0053e460
jmp 0x546fa4
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.004069b8
lea eax, [ebp - 0x28]
call fcn.004065ac
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 0x38]
call fcn.0042b5b0
mov eax, dword [ebp - 0xe8]
lea edx, [ebp - 0x40]
call fcn.00427ad0
mov eax, dword [ebp - 0x40]
mov edx, 0x5475a0
call fcn.00407588
je 0x54701d
mov eax, dword [ebp - 0x40]
mov edx, 0x5475b8
call fcn.00407588
je 0x54701d
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x38]
call fcn.004069b8
lea ecx, [ebp - 0xec]
mov edx, 0x5475a0
mov eax, dword [ebp - 0x38]
call fcn.0042b510
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0x38]
call fcn.004069b8
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
call fcn.00427c30
mov eax, dword [0x59f8c8]
mov byte [eax], 1
xor eax, eax
push ebp
push 0x547322
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x5475d0
push dword [ebp - 0x38]
push 0x5475fc
push dword [ebp - 0x14]
lea eax, [ebp - 0xf0]
mov edx, 4
call fcn.00407478
mov edx, dword [ebp - 0xf0]
mov eax, dword [0x59f8a8]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00436740
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [0x59faac]
mov eax, dword [eax]
call fcn.00582c90
test al, al
jne 0x547092
mov eax, dword [0x59faac]
mov eax, dword [eax]
cmp byte [eax + 0x19], 0
je 0x547198
mov eax, dword [ebp - 8]
call fcn.00570fa0
test al, al
jne 0x547198
call fcn.00436cf0
test al, al
je 0x5470cc
call fcn.00436e60
test al, al
jne 0x5470cc
mov eax, dword [ebp - 8]
call fcn.00570fc0
test al, al
jne 0x54710c
mov eax, dword [ebp - 0x38]
call fcn.00429b80
test al, al
je 0x54710c
push 1
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 8]
add eax, 4
call fcn.0053e920
mov eax, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 0x38]
call fcn.0042b490
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
call fcn.0053e550
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x44], 0
jne 0x547198
call fcn.00436cf0
test al, al
je 0x547198
call fcn.00436f00
test al, al
je 0x547198
call fcn.00436e60
test al, al
jne 0x547198
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x38]
call fcn.0042b490
mov eax, dword [ebp - 0xfc]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
push 0x54760c
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 0x38]
call fcn.0057ca40
push dword [ebp - 0x104]
push 0x5475fc
push dword [ebp - 0x10]
lea eax, [ebp - 0x100]
mov edx, 4
call fcn.00407478
mov ecx, dword [ebp - 0x100]
mov edx, dword [0x59f7d4]
mov edx, dword [edx]
mov eax, 0x547638
call fcn.00437970
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x44], 0
jne 0x54720d
call fcn.00436cf0
test al, al
je 0x5471d4
call fcn.00436f00
test al, al
je 0x5471d4
call fcn.00436e60
test al, al
jne 0x5471d4
mov eax, dword [ebp - 0x38]
call fcn.00429b80
test al, al
jne 0x5471d4
lea eax, [ebp - 0x3c]
mov edx, 0x547638
call fcn.004069b8
jmp 0x5471e1
lea eax, [ebp - 0x3c]
mov edx, 0x547650
call fcn.004069b8
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x38]
call fcn.0042b490
mov eax, dword [ebp - 0x108]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
call fcn.00437970
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x20
jbe 0x547284
mov eax, dword [ebp - 8]
cmp byte [eax + 0xa0], 0
jne 0x547252
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0xe8]
test al, al
jne 0x547252
push 0xc8
call sub.kernel32.dll_Sleep_2
mov eax, dword [0x59fc1c]
mov eax, dword [eax]
xor edx, edx
call fcn.004588e0
mov eax, dword [0x59fe44]
mov eax, dword [eax]
call fcn.00450d50
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [ebp - 4]
call fcn.005439e0
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x44]
call fcn.00437c40
mov ecx, eax
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe8]
call fcn.00500870
jmp 0x5472fb
push 0x547668
mov eax, dword [ebp - 0x48]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x110]
call fcn.0041d070
push dword [ebp - 0x110]
push 0x5476ac
push dword [ebp - 0x38]
lea eax, [ebp - 0x10c]
mov edx, 4
call fcn.00407478
mov edx, dword [ebp - 0x10c]
mov eax, dword [0x59f8a8]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00436230
push 0
mov eax, dword [ebp - 0x48]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x114]
call fcn.0041d070
mov eax, dword [ebp - 0x114]
push eax
mov eax, dword [ebp - 8]
lea ecx, [eax + 4]
mov edx, 9
mov eax, dword [ebp - 4]
call fcn.004ffa70
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x547329
cmp dword [ebp - 0x28], 0
je 0x547319
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
call fcn.00427c30
mov eax, dword [0x59f8c8]
mov byte [eax], 0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x547457
lea eax, [ebp - 0x114]
mov edx, 8
call fcn.0040660c
lea eax, [ebp - 0xf4]
mov edx, dword [0x427388]
call fcn.004084f0
lea eax, [ebp - 0xf0]
mov edx, 0xc
call fcn.0040660c
lea eax, [ebp - 0xc0]
call fcn.004065d0
lea eax, [ebp - 0xbc]
mov edx, 4
call fcn.0040660c
lea eax, [ebp - 0xac]
call fcn.004065d0
lea eax, [ebp - 0xa8]
call fcn.004065ac
lea eax, [ebp - 0x9c]
call fcn.004065ac
lea eax, [ebp - 0x98]
call fcn.004065d0
lea eax, [ebp - 0x94]
mov edx, 4
call fcn.0040660c
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0040660c
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0040663c
lea eax, [ebp - 0x64]
mov edx, dword [0x4bc03c]
call fcn.00407994
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.0040660c
lea eax, [ebp - 0x30]
call fcn.004065ac
lea eax, [ebp - 0x28]
mov edx, 7
call fcn.0040660c
ret