Function at 0x545ae0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x22
push 0
push 0
dec ecx
jne 0x545ae9
xchg dword [ebp - 4], ecx
push ebx
mov byte [ebp - 9], cl
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x64]
mov edx, dword [0x4bbb5c]
call fcn.004078bc
xor eax, eax
push ebp
push 0x5467bd
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
add eax, 0x230
call fcn.004542a0
mov eax, dword [ebp - 4]
add eax, 0x244
call fcn.004542a0
cmp dword [ebp - 8], 0
je 0x5466dd
mov eax, dword [0x59e8c8]
cmp byte [eax], 0
jne 0x5466dd
cmp byte [ebp - 9], 1
jne 0x545c09
mov eax, dword [ebp - 8]
cmp byte [eax + 8], 0
jne 0x545c09
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
cmp dword [ebp - 0x68], 0
je 0x545c09
mov eax, dword [ebp - 8]
cmp byte [eax + 0xf0], 0
jne 0x545c09
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
dec eax
sub eax, 5
jae 0x545c09
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x1c]
cmp byte [eax + 8], 2
jne 0x545c09
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
cmp dword [eax + 0xdc], 0
je 0x545c09
push 1
push 5
lea eax, [ebp - 0x64]
mov edx, dword [0x4bbb5c]
call fcn.00407994
mov edx, eax
mov eax, dword [ebp - 8]
lea ecx, [eax + 4]
mov eax, dword [ebp - 4]
call fcn.00540f90
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.00544a60
test al, al
je 0x545c09
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x224
call fcn.00406a0c
jmp 0x5466dd
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
dec eax
sub eax, 5
jae 0x5460b4
mov eax, dword [ebp - 8]
cmp byte [eax + 0xf0], 0
jne 0x5460b4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 1
je 0x545c42
sub eax, 2
je 0x545c42
sub eax, 2
je 0x545c42
xor eax, eax
jmp 0x545c44
mov al, 1
mov byte [ebp - 0x29], al
cmp byte [ebp - 9], 7
jne 0x545d76
mov eax, dword [ebp - 4]
push eax
push 0x540780
mov eax, dword [ebp - 8]
add eax, 4
push eax
mov eax, dword [ebp - 4]
add eax, 0x244
push eax
lea edx, [ebp - 0x70]
mov eax, dword [0x59eb58]
mov eax, dword [eax]
call fcn.00443690
mov eax, dword [ebp - 0x70]
push eax
push 0
lea eax, [ebp - 0x74]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [0x59f190]
mov eax, dword [eax]
call fcn.00443690
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
mov byte [ebp - 0x80], 0x11
lea edx, [ebp - 0x8c]
mov eax, dword [0x59f190]
mov eax, dword [eax]
call fcn.00443690
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x78], 0x11
lea edx, [ebp - 0x84]
mov eax, dword [0x59ecc4]
mov eax, dword [eax]
mov ecx, 1
call fcn.00443710
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x10]
mov eax, dword [0x59e944]
mov eax, dword [eax]
call fcn.00540880
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x244]
add eax, 0x120
mov edx, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00406970
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x250], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x24c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
xor edx, edx
mov dword [eax + 0x13c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x244]
mov eax, dword [eax + 0x120]
push eax
push 0
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 8]
xor ecx, ecx
call fcn.004bcf40
test al, al
je 0x5466dd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x7c]
mov edx, dword [ebp - 4]
mov dword [edx + 0x248], eax
jmp 0x5466dd
cmp byte [ebp - 9], 5
sete al
and al, byte [ebp - 0x29]
je 0x545dca
push 0
lea edx, [ebp - 0x90]
mov eax, dword [0x59e92c]
mov eax, dword [eax]
call fcn.00443690
mov eax, dword [ebp - 0x90]
push eax
lea edx, [ebp - 0x94]
mov eax, dword [0x59e804]
mov eax, dword [eax]
call fcn.00443690
mov edx, dword [ebp - 0x94]
mov eax, 0x5467dc
pop ecx
call fcn.00494d10
call fcn.00459070
jmp 0x5466dd
cmp byte [ebp - 9], 4
jne 0x545edf
mov eax, dword [ebp - 8]
call fcn.0056f6b0
test al, al
je 0x545e0c
lea edx, [ebp - 0x98]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0053e420
test al, al
jne 0x5466dd
jmp 0x54606c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 5
jne 0x545ed2
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
call fcn.005807d0
cmp dword [ebp - 0x18], 0
jne 0x545e49
lea eax, [ebp - 0x18]
mov edx, dword [0x59eaa8]
mov edx, dword [edx]
mov edx, dword [edx + 0x5c]
call fcn.004069b8
push 0
push 0
push 0
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0xa0], 0x11
lea edx, [ebp - 0xa4]
mov eax, dword [0x59ed4c]
mov eax, dword [eax]
xor ecx, ecx
call fcn.00443710
mov eax, dword [ebp - 0x9c]
push eax
lea edx, [ebp - 0xa8]
mov eax, dword [0x59e748]
mov eax, dword [eax]
call fcn.00443690
mov edx, dword [ebp - 0xa8]
mov eax, 0x546824
pop ecx
call fcn.00494e30
call fcn.00459070
cmp al, 2
jne 0x5466dd
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 4]
call fcn.004551a0
jmp 0x5466dd
mov eax, dword [ebp - 8]
call fcn.004d19d0
jmp 0x5466dd
cmp byte [ebp - 9], 3
jne 0x545f38
push 0
lea edx, [ebp - 0xb0]
mov eax, dword [0x59f144]
mov eax, dword [eax]
call fcn.00443690
mov eax, dword [ebp - 0xb0]
push eax
lea edx, [ebp - 0xb4]
mov eax, dword [0x59e804]
mov eax, dword [eax]
call fcn.00443690
mov edx, dword [ebp - 0xb4]
mov eax, 0x546860
pop ecx
call fcn.00494d10
call fcn.00459070
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00545920
jmp 0x5466dd
cmp byte [ebp - 9], 1
jne 0x546007
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 5
jne 0x545fbc
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
call fcn.00581c60
test al, al
je 0x545f73
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00547200
jmp 0x5466dd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x1c]
cmp byte [eax + 8], 2
jne 0x545faa
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
cmp dword [eax + 0xdc], 0
je 0x545faa
mov cl, 4
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.005458a0
jmp 0x5466dd
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00545920
test al, al
jmp 0x5466dd
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x70]
sub eax, 1
je 0x545ff5
sub eax, 2
je 0x545ff5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x150]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x1c]
cmp byte [eax + 8], 2
jne 0x54606c
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
cmp dword [eax + 0xdc], 0
je 0x54606c
mov cl, 4
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.005458a0
jmp 0x5466dd
cmp byte [ebp - 9], 6
sete al
and al, byte [ebp - 0x29]
je 0x54606c
mov eax, dword [ebp + 8]
cmp dword [eax + 0xc], 0
jne 0x54602d
lea edx, [ebp - 0x18]
mov eax, dword [0x59eea8]
mov eax, dword [eax]
call fcn.00443690
jmp 0x54603b
lea eax, [ebp - 0x18]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0xc]
call fcn.004069b8
push 0
lea edx, [ebp - 0xb8]
mov eax, dword [0x59e7ec]
mov eax, dword [eax]
call fcn.00443690
mov edx, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x18]
mov eax, 0x54689c
call fcn.00494d10
call fcn.00459070
jmp 0x5466dd
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 8]
call fcn.0056f850
mov edx, dword [ebp - 0xbc]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
call fcn.00407588
je 0x5460b4
mov edx, dword [ebp + 8]
mov edx, dword [edx + 4]
mov eax, dword [ebp - 8]
call fcn.0056f880
mov eax, dword [0x59ec14]
cmp dword [eax], 0
je 0x5460b4
mov eax, dword [0x59ec14]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
call fcn.00527bd0
mov eax, dword [ebp - 8]
mov byte [eax + 0xf0], 0
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0xac]
test al, al
je 0x5460f3
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp + 8]
xor edx, edx
call fcn.004bd8f0
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0053ff90
jmp 0x5466dd
xor eax, eax
push ebp
push 0x5466d6
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004d1960
lea eax, [ebp - 0x38]
call fcn.004065ac
mov edx, eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [ebp - 4]
push eax
push 0x5407e0
mov eax, dword [ebp - 8]
add eax, 4
push eax
mov eax, dword [ebp - 4]
add eax, 0x23c
push eax
lea edx, [ebp - 0xc4]
mov eax, dword [0x59e938]
mov eax, dword [eax]
call fcn.00443690
mov eax, dword [ebp - 0xc4]
push eax
push 2
lea edx, [ebp - 0xc8]
mov eax, dword [0x59f078]
mov eax, dword [eax]
call fcn.00443690
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x10]
mov eax, dword [0x59e944]
mov eax, dword [eax]
call fcn.00540880
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x30]
lea ecx, [ebp - 0x30]
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
call fcn.0056dea0
cmp dword [ebp - 0x30], 0
je 0x5461a0
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x30]
call fcn.0053d800
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x78]
test al, al
je 0x54622a
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
call fcn.00580a00
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x54622a
lea edx, [ebp - 0xcc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0xcc]
push eax
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0x34]
call fcn.0041d074
mov edx, dword [ebp - 0xd0]
pop eax
call fcn.00407398
mov eax, dword [ebp - 0xcc]
lea edx, [ebp - 0x10]
call fcn.0053d800
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
call fcn.00580980
cmp dword [ebp - 0x24], 0
je 0x54622a
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x24]
call fcn.0053d800
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0xe4]
test al, al
je 0x54626e
lea edx, [ebp - 0xd8]
mov eax, dword [ebp - 8]
add eax, 4
call fcn.0046e8d0
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd4]
mov edx, 0x5468dc
call fcn.004073f0
mov eax, dword [ebp - 0xd4]
lea edx, [ebp - 0x10]
call fcn.0053d800
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp + 8]
cmp dword [eax], 0
je 0x546309
cmp dword [ebp - 0x1c], 0
je 0x546309
cmp dword [ebp - 0x20], 0
je 0x546309
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
lea eax, [ebp - 0xdc]
mov edx, dword [ebp - 0x1c]
call fcn.004073f0
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0x10]
call fcn.0053d800
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.004069b8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
lea eax, [ebp - 0xe0]
mov edx, dword [ebp - 0x20]
call fcn.004073f0
mov eax, dword [ebp - 0xe0]
lea edx, [ebp - 0x10]
call fcn.0053d800
lea eax, [ebp - 0xe4]
mov ecx, 0x546900
mov edx, dword [ebp - 0x20]
call fcn.004073f0
mov eax, dword [ebp - 0xe4]
lea edx, [ebp - 0x14]
call fcn.0053d800
jmp 0x546314
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.004069b8
lea eax, [ebp - 0x28]
call fcn.004065ac
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 0x38]
call fcn.0042b760
mov eax, dword [ebp - 0xe8]
lea edx, [ebp - 0x40]
call fcn.00427c80
mov eax, dword [ebp - 0x40]
mov edx, 0x546910
call fcn.00407588
je 0x54638d
mov eax, dword [ebp - 0x40]
mov edx, 0x546928
call fcn.00407588
je 0x54638d
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x38]
call fcn.004069b8
lea ecx, [ebp - 0xec]
mov edx, 0x546910
mov eax, dword [ebp - 0x38]
call fcn.0042b6c0
mov edx, dword [ebp - 0xec]
lea eax, [ebp - 0x38]
call fcn.004069b8
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
call fcn.00427de0
mov eax, dword [0x59e8c8]
mov byte [eax], 1
xor eax, eax
push ebp
push 0x546692
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x546940
push dword [ebp - 0x38]
push 0x54696c
push dword [ebp - 0x14]
lea eax, [ebp - 0xf0]
mov edx, 4
call fcn.00407478
mov edx, dword [ebp - 0xf0]
mov eax, dword [0x59e8a8]
mov eax, dword [eax]
xor ecx, ecx
call fcn.004368f0
xor eax, eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
call fcn.00581380
test al, al
jne 0x546402
mov eax, dword [0x59eaa8]
mov eax, dword [eax]
cmp byte [eax + 0x19], 0
je 0x546508
mov eax, dword [ebp - 8]
call fcn.0056fe50
test al, al
jne 0x546508
call fcn.00436ea0
test al, al
je 0x54643c
call fcn.00437010
test al, al
jne 0x54643c
mov eax, dword [ebp - 8]
call fcn.0056fe70
test al, al
jne 0x54647c
mov eax, dword [ebp - 0x38]
call fcn.00429d30
test al, al
je 0x54647c
push 1
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 8]
add eax, 4
call fcn.0053dcc0
mov eax, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0xf8]
mov eax, dword [ebp - 0x38]
call fcn.0042b640
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
call fcn.0053d8f0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x44], 0
jne 0x546508
call fcn.00436ea0
test al, al
je 0x546508
call fcn.004370b0
test al, al
je 0x546508
call fcn.00437010
test al, al
jne 0x546508
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x38]
call fcn.0042b640
mov eax, dword [ebp - 0xfc]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
push 0x54697c
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 0x38]
call fcn.0057b210
push dword [ebp - 0x104]
push 0x54696c
push dword [ebp - 0x10]
lea eax, [ebp - 0x100]
mov edx, 4
call fcn.00407478
mov ecx, dword [ebp - 0x100]
mov edx, dword [0x59e7d4]
mov edx, dword [edx]
mov eax, 0x5469a8
call fcn.00437b20
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x44], 0
jne 0x54657d
call fcn.00436ea0
test al, al
je 0x546544
call fcn.004370b0
test al, al
je 0x546544
call fcn.00437010
test al, al
jne 0x546544
mov eax, dword [ebp - 0x38]
call fcn.00429d30
test al, al
jne 0x546544
lea eax, [ebp - 0x3c]
mov edx, 0x5469a8
call fcn.004069b8
jmp 0x546551
lea eax, [ebp - 0x3c]
mov edx, 0x5469c0
call fcn.004069b8
lea edx, [ebp - 0x108]
mov eax, dword [ebp - 0x38]
call fcn.0042b640
mov eax, dword [ebp - 0x108]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
call fcn.00437b20
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x20
jbe 0x5465f4
mov eax, dword [ebp - 8]
cmp byte [eax + 0xa0], 0
jne 0x5465c2
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0xe4]
test al, al
jne 0x5465c2
push 0xc8
call sub.kernel32.dll_Sleep_2
mov eax, dword [0x59ec14]
mov eax, dword [eax]
xor edx, edx
call fcn.00458950
mov eax, dword [0x59ee34]
mov eax, dword [eax]
call fcn.00450db0
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [ebp - 4]
call fcn.00542d70
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x44]
call fcn.00437df0
mov ecx, eax
mov eax, dword [ebp - 8]
lea edx, [eax + 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe8]
call fcn.004ffcb0
jmp 0x54666b
push 0x5469d8
mov eax, dword [ebp - 0x48]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x110]
call fcn.0041d09c
push dword [ebp - 0x110]
push 0x546a1c
push dword [ebp - 0x38]
lea eax, [ebp - 0x10c]
mov edx, 4
call fcn.00407478
mov edx, dword [ebp - 0x10c]
mov eax, dword [0x59e8a8]
mov eax, dword [eax]
xor ecx, ecx
call fcn.004363e0
push 0
mov eax, dword [ebp - 0x48]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x114]
call fcn.0041d09c
mov eax, dword [ebp - 0x114]
push eax
mov eax, dword [ebp - 8]
lea ecx, [eax + 4]
mov edx, 9
mov eax, dword [ebp - 4]
call fcn.004feeb0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x546699
cmp dword [ebp - 0x28], 0
je 0x546689
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
call fcn.00427de0
mov eax, dword [0x59e8c8]
mov byte [eax], 0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5467c7
lea eax, [ebp - 0x114]
mov edx, 8
call fcn.0040660c
lea eax, [ebp - 0xf4]
mov edx, dword [0x427538]
call fcn.004084f0
lea eax, [ebp - 0xf0]
mov edx, 0xc
call fcn.0040660c
lea eax, [ebp - 0xc0]
call fcn.004065d0
lea eax, [ebp - 0xbc]
mov edx, 4
call fcn.0040660c
lea eax, [ebp - 0xac]
call fcn.004065d0
lea eax, [ebp - 0xa8]
call fcn.004065ac
lea eax, [ebp - 0x9c]
call fcn.004065ac
lea eax, [ebp - 0x98]
call fcn.004065d0
lea eax, [ebp - 0x94]
mov edx, 4
call fcn.0040660c
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0040660c
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0040663c
lea eax, [ebp - 0x64]
mov edx, dword [0x4bbb5c]
call fcn.00407994
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.0040660c
lea eax, [ebp - 0x30]
call fcn.004065ac
lea eax, [ebp - 0x28]
mov edx, 7
call fcn.0040660c
ret