Function at 0x94d1f4
Capabilities:
Accept command line arguments
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x53
push 0
push 0
dec ecx
jne 0x94d1fc
push ecx
push ebx
push esi
push edi
mov esi, eax
mov ebx, 0xa4a7b4
xor eax, eax
push ebp
push 0x94dffc
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x7c]
call fcn.0040a2e0
mov edx, dword [ebp - 0x7c]
mov eax, 0x94e01c
call fcn.0040a860
test eax, eax
jg 0x94d25c
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x80]
call fcn.0040a2e0
mov edx, dword [ebp - 0x80]
mov eax, 0x94e034
call fcn.0040a860
test eax, eax
jle 0x94d280
push 0
mov eax, dword [0xa403fc]
mov eax, dword [eax]
mov eax, dword [eax + 0x178]
push eax
call sub.user32.dll_ShowWindow
push 0
mov eax, esi
call fcn.004ad7c0
push eax
call sub.user32.dll_ShowWindow
lea edx, [ebp - 0x88]
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00549288
mov edx, dword [ebp - 0x88]
lea eax, [ebp - 0x84]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0x84]
call fcn.00612c98
mov edx, ebx
mov eax, 0x94e04c
call fcn.00612f4c
cmp dword [ebx], 0
je 0x94d2f8
lea edx, [ebp - 0x8c]
mov eax, dword [ebx]
call fcn.008e67c4
mov edx, dword [ebp - 0x8c]
mov eax, ebx
call fcn.004095a8
lea edx, [ebp - 0x90]
mov eax, dword [ebx]
call fcn.006847b8
mov edx, dword [ebp - 0x90]
mov eax, ebx
call fcn.004095a8
lea eax, [ebp - 0x94]
mov edx, dword [ebx]
call fcn.0040a350
mov edx, dword [ebp - 0x94]
mov eax, 0x94e034
call fcn.0040a860
test eax, eax
jg 0x94d33a
lea eax, [ebp - 0x98]
mov edx, dword [ebx]
call fcn.0040a350
mov edx, dword [ebp - 0x98]
mov eax, 0x94e01c
call fcn.0040a860
test eax, eax
jle 0x94d375
push 0
mov eax, dword [0xa403fc]
mov eax, dword [eax]
mov eax, dword [eax + 0x178]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [0xa403fc]
mov eax, dword [eax]
mov dword [eax + 0x14c], esi
mov dword [eax + 0x148], 0x94ea88
push 0
mov eax, esi
call fcn.004ad7c0
push eax
call sub.user32.dll_ShowWindow
movzx eax, byte [0x94e058]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xa0]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xa0]
xor ecx, ecx
mov edx, 0x94e034
call fcn.0042c0f8
mov edx, dword [ebp - 0x9c]
mov eax, ebx
mov ecx, 0
call fcn.00409d88
movzx eax, byte [0x94e058]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xa8]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
mov edx, 0x94e01c
call fcn.0042c0f8
mov edx, dword [ebp - 0xa4]
mov eax, ebx
mov ecx, 0
call fcn.00409d88
movzx eax, byte [0x94e058]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xb0]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xb0]
xor ecx, ecx
mov edx, 0x94e068
call fcn.0042c0f8
mov edx, dword [ebp - 0xac]
mov eax, ebx
mov ecx, 0
call fcn.00409d88
movzx eax, byte [0x94e058]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xb8]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xb8]
xor ecx, ecx
mov edx, 0x94e08c
call fcn.0042c0f8
mov edx, dword [ebp - 0xb4]
mov eax, ebx
mov ecx, 0
call fcn.00409d88
movzx eax, byte [0x94e058]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xc0]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xc0]
xor ecx, ecx
mov edx, 0x94e0b0
call fcn.0042c0f8
mov edx, dword [ebp - 0xbc]
mov eax, ebx
mov ecx, 0
call fcn.00409d88
movzx eax, byte [0x94e058]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xc8]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xc8]
xor ecx, ecx
mov edx, 0x94e0d4
call fcn.0042c0f8
mov edx, dword [ebp - 0xc4]
mov eax, ebx
mov ecx, 0
call fcn.00409d88
lea eax, [ebp - 0xd0]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xd0]
lea edx, [ebp - 0xcc]
call fcn.00423184
mov edx, dword [ebp - 0xcc]
mov eax, ebx
mov ecx, 0
call fcn.00409d88
lea eax, [ebp - 0xd4]
mov edx, dword [ebx]
call fcn.0040a350
mov edx, dword [ebp - 0xd4]
mov eax, 0x94e0f8
call fcn.0040a860
dec eax
jne 0x94d56b
mov eax, dword [ebx]
mov dword [ebp - 0xd8], eax
mov edi, dword [ebp - 0xd8]
test edi, edi
je 0x94d55c
sub edi, 4
mov edi, dword [edi]
push ebx
mov ecx, edi
mov edx, 2
mov eax, dword [ebx]
call fcn.00409be8
lea eax, [ebp - 0xdc]
mov ecx, 0x94e108
mov edx, dword [0xa4a76c]
call fcn.0040a4e4
mov eax, dword [ebp - 0xdc]
mov dl, 1
call fcn.0042458c
test al, al
je 0x94d5e9
lea eax, [ebp - 0xe0]
mov ecx, 0x94e130
mov edx, dword [0xa4a76c]
call fcn.0040a4e4
mov eax, dword [ebp - 0xe0]
mov dl, 1
call fcn.0042458c
test al, al
je 0x94d5e9
lea eax, [ebp - 0xe4]
mov ecx, 0x94e158
mov edx, dword [0xa4a76c]
call fcn.0040a4e4
mov eax, dword [ebp - 0xe4]
mov dl, 1
call fcn.0042458c
test al, al
je 0x94d5e9
mov byte [0xa4a7a4], 1
jmp 0x94d5f0
mov byte [0xa4a7a4], 0
mov dword [0xa4a7a8], 1
lea edx, [ebp - 0xec]
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00549288
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0xe8]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0xe8]
call fcn.00612c98
lea edx, [ebp - 4]
mov eax, 0x94e17c
call fcn.00612f4c
lea eax, [ebp - 0x2c]
mov edx, dword [ebp - 4]
call fcn.0040a350
cmp dword [ebp - 0x2c], 0
je 0x94d6c8
xor eax, eax
mov dword [0xa4a7a8], eax
push 0x94e184
push 0x94e184
push 0x94e184
push 0
lea eax, [ebp - 0xf4]
mov edx, dword [ebx]
call fcn.0040a350
mov eax, dword [ebp - 0xf4]
push eax
push 0
push 0
lea eax, [esi + 0x3f4]
push eax
lea eax, [esi + 0x3fc]
push eax
lea eax, [esi + 0x3f8]
push eax
push esi
push 0x997354
push esi
push 0x997358
push 1
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0xf0]
push eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
mov eax, esi
call fcn.0094f1bc
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00548bf8
lea edx, [ebp - 0xfc]
mov eax, 1
call fcn.00404d94
mov eax, dword [ebp - 0xfc]
lea edx, [ebp - 0xf8]
call fcn.00423184
mov edx, dword [ebp - 0xf8]
mov eax, 0x94e194
call fcn.0040a860
test eax, eax
jle 0x94deb8
lea edx, [ebp - 0x104]
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00549288
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x100]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0x100]
call fcn.00612c98
lea edx, [ebp - 0xc]
mov eax, 0x94e1b4
call fcn.00612f4c
cmp dword [ebp - 0xc], 0
je 0x94de83
lea ecx, [ebp - 0x208]
mov edx, 0x94e1bc
mov eax, dword [0xa4a62c]
call fcn.0098aca0
lea edx, [ebp - 0x208]
lea eax, [ebp - 0x108]
mov ecx, 0
call fcn.0040993c
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 0xc]
call fcn.00409b50
jne 0x94de83
lea edx, [ebp - 0x34]
mov eax, 2
call fcn.00404d94
lea edx, [ebp - 0x30]
mov eax, 3
call fcn.00404d94
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0x30]
call fcn.00424d78
mov eax, dword [ebp - 0x20c]
mov dl, 1
call fcn.0094a374
test al, al
jne 0x94d7f1
movzx eax, word [0x94e1c4]
push eax
push 0
lea edx, [ebp - 0x210]
mov eax, 0x94e1d4
call fcn.00675428
mov edx, dword [ebp - 0x210]
mov cl, 1
mov eax, esi
call fcn.0099a0d4
jmp 0x94deac
mov dl, 1
mov eax, dword [ebp - 0x34]
call fcn.0042458c
test al, al
je 0x94ddf5
mov eax, dword [0xa40a94]
mov eax, dword [eax]
mov dx, 0xfff5
call fcn.00545d2c
lea edx, [ebp - 0x218]
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00549288
mov edx, dword [ebp - 0x218]
lea eax, [ebp - 0x214]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0x214]
call fcn.00612c98
lea eax, [ebp - 0x3c]
push eax
lea edx, [ebp - 0x38]
mov cl, 1
mov eax, esi
call fcn.0094b96c
push 0
mov ecx, dword [ebp - 0x34]
mov dl, 1
mov eax, dword [0x4455e0]
call fcn.0045373c
mov ebx, eax
push 0xff00
mov ecx, dword [ebp - 0x3c]
mov dl, 1
mov eax, dword [0x4455e0]
call fcn.0045373c
mov dword [ebp - 0x5c], eax
xor ecx, ecx
xor edx, edx
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x14]
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x5c]
mov edi, dword [eax]
call dword [edi + 0x14]
mov ecx, esi
mov dl, 1
mov eax, dword [0x8e8cd0]
call fcn.008e888c
mov edi, eax
lea eax, [ebp - 0x21c]
lea edx, [esi + 0x3d9]
mov ecx, 0
call fcn.0040993c
mov edx, dword [ebp - 0x21c]
mov ecx, dword [0x8e95c8]
mov eax, edi
call fcn.008e81e8
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push eax
mov ecx, dword [ebp - 0x5c]
mov edx, ebx
mov eax, edi
call fcn.008e84fc
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0x54]
mov eax, edi
call fcn.00407470
mov eax, ebx
call fcn.00407470
mov eax, dword [ebp - 0x5c]
call fcn.00407470
mov dl, 1
mov eax, dword [0x4446a4]
call fcn.004531b0
mov ebx, eax
mov edx, dword [ebp - 0x34]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea eax, [ebp - 0x220]
mov edx, dword [ebp - 0x3c]
mov ecx, 0
call fcn.00409d88
mov edx, dword [ebp - 0x220]
mov eax, 0x94e17c
call fcn.006132c0
mov eax, dword [ebp - 0x3c]
call fcn.00424b08
lea edx, [ebp - 0x224]
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00549288
mov eax, dword [ebp - 0x224]
lea edx, [ebp - 0x40]
call fcn.00424d78
mov eax, ebx
call fcn.00407470
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x228]
call fcn.0040a2e0
mov edx, dword [ebp - 0x228]
mov eax, 0x94e234
call fcn.0040a860
test eax, eax
jle 0x94dae6
lea eax, [ebp - 0x22c]
push eax
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x230]
call fcn.0040a2e0
mov edx, dword [ebp - 0x230]
mov eax, 0x94e234
call fcn.0040a860
add eax, 6
push eax
call sub.KERNEL32.DLL_GetCommandLineW
call fcn.00409654
push eax
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x234]
call fcn.0040a2e0
mov eax, dword [ebp - 0x234]
pop ecx
pop edx
call fcn.0040a6b4
mov edx, dword [ebp - 0x22c]
lea eax, [ebp - 8]
mov ecx, 0
call fcn.00409d88
lea eax, [ebp - 0x44]
call fcn.00409124
lea eax, [ebp - 0x238]
mov edx, dword [ebp - 8]
call fcn.0040a350
mov edx, dword [ebp - 0x238]
mov eax, 0x94e250
call fcn.0040a860
test eax, eax
jle 0x94daac
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x94da38
sub ebx, 4
mov ebx, dword [ebx]
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x240]
mov edx, dword [ebp - 8]
call fcn.0040a350
mov edx, dword [ebp - 0x240]
mov eax, 0x94e250
call fcn.0040a860
mov edx, eax
add edx, 6
mov ecx, ebx
mov eax, dword [ebp - 8]
call fcn.00409be8
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x44]
call fcn.0040a350
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x244]
mov edx, dword [ebp - 8]
call fcn.0040a350
mov edx, dword [ebp - 0x244]
mov eax, 0x94e250
call fcn.0040a860
mov ecx, eax
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00409be8
lea edx, [ebp - 0x248]
mov eax, dword [ebp - 8]
call fcn.006847b8
mov edx, dword [ebp - 0x248]
lea eax, [ebp - 8]
call fcn.004095f0
lea edx, [ebp - 0x24c]
mov eax, dword [ebp - 8]
call fcn.008e658c
mov edx, dword [ebp - 0x24c]
mov eax, 0x94e04c
call fcn.00613368
lea eax, [ebp - 0x48]
mov edx, 0x94e26c
call fcn.0040954c
call fcn.00427dc4
fstp qword [ebp - 0x70]
wait
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
lea ecx, [ebp - 0x4c]
mov edx, dword [0xa40580]
mov eax, dword [ebp - 0x48]
call fcn.00428e64
lea eax, [ebp - 0x250]
mov edx, dword [ebp - 0x4c]
mov ecx, 0
call fcn.00409d88
mov edx, dword [ebp - 0x250]
mov eax, 0x94e28c
call fcn.00613368
lea eax, [ebp - 0x254]
mov edx, dword [ebp - 0x30]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0x254]
call fcn.006131c4
cmp dword [ebp - 0x44], 0
je 0x94dca2
lea eax, [ebp - 0x258]
mov edx, dword [ebp - 0x30]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0x258]
call fcn.00612c98
lea edx, [ebp - 0x10]
mov eax, 0x94e17c
call fcn.00612f4c
lea edx, [ebp - 0xc]
mov eax, 0x94e1b4
call fcn.00612f4c
lea edx, [ebp - 0x14]
mov eax, 0x94e04c
call fcn.00612f4c
lea edx, [ebp - 0x20]
mov eax, 0x94e29c
call fcn.00612f4c
lea edx, [ebp - 0x24]
mov eax, 0x94e2ac
call fcn.00612f4c
lea edx, [ebp - 0x28]
mov eax, 0x94e2bc
call fcn.00612f4c
lea edx, [ebp - 0x18]
mov eax, 0x94e2cc
call fcn.00612f4c
lea edx, [ebp - 0x1c]
mov eax, 0x94e2dc
call fcn.00612f4c
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0094ca8c
lea eax, [ebp - 0x25c]
mov edx, dword [ebp - 0x30]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0x25c]
call fcn.00612c98
mov edx, dword [ebp - 0xc]
mov eax, 0x94e1b4
call fcn.00613368
mov edx, dword [ebp - 0x10]
mov eax, 0x94e17c
call fcn.00613368
mov edx, dword [ebp - 0x14]
mov eax, 0x94e04c
call fcn.00613368
lea eax, [ebp - 0x50]
mov edx, 0x94e26c
call fcn.0040954c
call fcn.00427dc4
fstp qword [ebp - 0x78]
wait
push dword [ebp - 0x74]
push dword [ebp - 0x78]
lea ecx, [ebp - 0x54]
mov edx, dword [0xa40580]
mov eax, dword [ebp - 0x50]
call fcn.00428e64
lea eax, [ebp - 0x260]
mov edx, dword [ebp - 0x54]
mov ecx, 0
call fcn.00409d88
mov edx, dword [ebp - 0x260]
mov eax, 0x94e28c
call fcn.00613368
lea eax, [ebp - 0x264]
mov edx, dword [ebp - 0x30]
mov ecx, 0
call fcn.00409d88
mov eax, dword [ebp - 0x264]
call fcn.006131c4
lea edx, [ebp - 0x26c]
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00549288
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 0x268]
call fcn.00424d78
lea eax, [ebp - 0x268]
mov edx, 0x94e2ec
call fcn.0040a48c
mov eax, dword [ebp - 0x268]
mov dl, 1
call fcn.0042458c
test al, al
je 0x94dd43
push 0
lea eax, [ebp - 0x58]
push eax
push 1
lea edx, [ebp - 0x278]
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00549288
mov eax, dword [ebp - 0x278]
lea edx, [ebp - 0x274]
call fcn.00424d78
push dword [ebp - 0x274]
push 0x94e30c
push dword [ebp - 0x30]
push 0x94e350
lea eax, [ebp - 0x270]
mov edx, 4
call fcn.0040a56c
mov edx, dword [ebp - 0x270]
xor ecx, ecx
mov eax, esi
call fcn.0094b8b8
mov eax, dword [0xa40a94]
mov eax, dword [eax]
xor edx, edx
call fcn.00545d2c
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x27c]
call fcn.0040a2e0
mov edx, dword [ebp - 0x27c]
mov eax, 0x94e360
call fcn.0040a860
test eax, eax
jle 0x94dd7f
mov eax, dword [ebp - 0x34]
call fcn.00424b08
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x280]
call fcn.0040a2e0
mov edx, dword [ebp - 0x280]
mov eax, 0x94e378
call fcn.0040a860
test eax, eax
jne 0x94deac
movzx eax, word [0x94e1c4]
push eax
push 0
lea edx, [ebp - 0x288]
mov eax, 0x94e394
call fcn.00675428
push dword [ebp - 0x288]
push 0x94e3b4
push dword [ebp - 0x30]
lea eax, [ebp - 0x284]
mov edx, 3
call fcn.0040a56c
mov edx, dword [ebp - 0x284]
mov cl, 2
mov eax, esi
call fcn.0099a0d4
jmp 0x94deac
call sub.KERNEL32.DLL_GetCommandLineW
mov edx, eax
lea eax, [ebp - 0x28c]
call fcn.0040a2e0
mov edx, dword [ebp - 0x28c]
mov eax, 0x94e378
call fcn.0040a860
test eax, eax
jne 0x94deac
movzx eax, word [0x94e1c4]
push eax
push 0
lea edx, [ebp - 0x294]
mov eax, 0x94e3c4
call fcn.00675428
push dword [ebp - 0x294]
push 0x94e3b4
push dword [ebp - 0x34]
push 0x94e3b4
lea edx, [ebp - 0x298]
mov eax, 0x94e3e0
call fcn.00675428
push dword [ebp - 0x298]
lea eax, [ebp - 0x290]
mov edx, 5
call fcn.0040a56c
mov edx, dword [ebp - 0x290]
mov cl, 1
mov eax, esi
call fcn.0099a0d4
jmp 0x94deac
movzx eax, word [0x94e1c4]
push eax
push 0
lea edx, [ebp - 0x29c]
mov eax, 0x94e40c
call fcn.00675428
mov edx, dword [ebp - 0x29c]
mov cl, 1
mov eax, esi
call fcn.0099a0d4
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00548bf8
mov eax, dword [0xa403fc]
mov eax, dword [eax]
call fcn.00548bf8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x94e006
lea eax, [ebp - 0x29c]
mov edx, 0xe
call fcn.00409184
lea eax, [ebp - 0x264]
mov edx, 8
call fcn.004091b4
lea eax, [ebp - 0x244]
mov edx, 2
call fcn.00409184
lea eax, [ebp - 0x23c]
call fcn.00409148
lea eax, [ebp - 0x238]
mov edx, 6
call fcn.00409184
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.004091b4
lea eax, [ebp - 0x218]
call fcn.00409124
lea eax, [ebp - 0x214]
call fcn.00409148
lea eax, [ebp - 0x210]
mov edx, 2
call fcn.00409184
lea eax, [ebp - 0x108]
call fcn.00409148
lea eax, [ebp - 0x104]
call fcn.00409124
lea eax, [ebp - 0x100]
call fcn.00409148
lea eax, [ebp - 0xfc]
mov edx, 5
call fcn.00409184
lea eax, [ebp - 0xe8]
call fcn.00409148
lea eax, [ebp - 0xe4]
mov edx, 3
call fcn.00409184
lea eax, [ebp - 0xd4]
mov edx, 0x11
call fcn.00409184
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.004091b4
lea eax, [ebp - 0x88]
call fcn.00409124
lea eax, [ebp - 0x84]
call fcn.00409148
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.00409184
lea eax, [ebp - 0x54]
mov edx, 0xb
call fcn.00409184
lea eax, [ebp - 0x28]
mov edx, 0xa
call fcn.004091b4
ret