Function at 0x499244
Capabilities:
Get disk information
Reference sql statements
Reference wmi statements

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2be
push 0
push 0
dec ecx
jne 0x49924c
push ecx
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x49a0bc
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 1
mov edx, 0x49a0d8
mov eax, esi
call fcn.0049eb74
mov byte [esi + 0x4b8], al
mov eax, dword [esi + 0x3a8]
mov edx, dword [eax]
call dword [edx + 0xdc]
mov dword [ebp - 0x40], eax
mov eax, dword [esi + 0x3a8]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x44]
lea eax, [ebp - 0x10e8]
push eax
push 0x1000
call sub.kernel32.dll_GetLogicalDriveStringsA
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1000
jg 0x4994c6
xor ebx, ebx
cmp ebx, dword [ebp - 0x3c]
jg 0x4994c6
lea eax, [ebp - 4]
call fcn.00404e6c
jmp 0x4992ff
movzx eax, byte [ebp + ebx - 0x10e8]
call fcn.004031ec
mov edx, eax
lea eax, [ebp - 0x12ec]
call fcn.00405054
mov edx, dword [ebp - 0x12ec]
lea eax, [ebp - 4]
call fcn.00405138
inc ebx
cmp ebx, dword [ebp - 0x3c]
jg 0x49930e
cmp byte [ebp + ebx - 0x10e8], 0
jne 0x4992d6
cmp dword [ebp - 4], 0
je 0x4994bc
mov eax, dword [ebp - 4]
call fcn.00405330
push eax
call sub.kernel32.dll_GetDriveTypeA
cmp eax, 2
je 0x499338
cmp byte [esi + 0x4b8], 0
je 0x4994bc
lea eax, [ebp - 8]
mov edx, 0x49a0e8
call fcn.00404f04
push pe_nt_image_headers32
lea eax, [ebp - 0x12e8]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x44]
push eax
push 0
push pe_nt_image_headers32
lea eax, [ebp - 0x11e8]
push eax
mov eax, dword [ebp - 4]
call fcn.00405330
push eax
call sub.kernel32.dll_GetVolumeInformationA
test eax, eax
je 0x499464
lea eax, [ebp - 0x11e8]
call fcn.00409da0
test eax, eax
jbe 0x4993bf
push dword [ebp - 8]
push 0x49a0f4
lea edx, [ebp - 0x12f0]
lea eax, [ebp - 0x11e8]
call fcn.00409fc8
push dword [ebp - 0x12f0]
push 0x49a100
lea eax, [ebp - 8]
mov edx, 4
call fcn.004051f0
jmp 0x4993f6
push dword [ebp - 8]
lea eax, [ebp - 0x12f4]
push eax
mov ecx, 0x49a10c
mov edx, 0x49a120
mov eax, dword [esi + 0x4d8]
call fcn.00492f6c
push dword [ebp - 0x12f4]
push 0x49a134
lea eax, [ebp - 8]
mov edx, 3
call fcn.004051f0
lea eax, [ebp - 0x12e8]
call fcn.00409da0
test eax, eax
jbe 0x499438
push dword [ebp - 8]
push 0x49a140
lea edx, [ebp - 0x12f8]
lea eax, [ebp - 0x12e8]
call fcn.00409fc8
push dword [ebp - 0x12f8]
push 0x49a14c
lea eax, [ebp - 8]
mov edx, 4
call fcn.004051f0
jmp 0x49948e
lea eax, [ebp - 0x12fc]
push eax
mov ecx, 0x49a158
mov edx, 0x49a170
mov eax, dword [esi + 0x4d8]
call fcn.00492f6c
mov edx, dword [ebp - 0x12fc]
lea eax, [ebp - 8]
call fcn.00405138
jmp 0x49948e
lea eax, [ebp - 0x1300]
push eax
mov ecx, 0x49a188
mov edx, 0x49a1ac
mov eax, dword [esi + 0x4d8]
call fcn.00492f6c
mov edx, dword [ebp - 0x1300]
lea eax, [ebp - 8]
call fcn.00405138
lea eax, [ebp - 0x1304]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.0040517c
mov edx, dword [ebp - 0x1304]
mov eax, dword [ebp - 4]
movzx ecx, byte [eax]
mov eax, dword [esi + 0x3a8]
mov eax, dword [eax + 0x284]
mov edi, dword [eax]
call dword [edi + 0x3c]
inc ebx
cmp ebx, dword [ebp - 0x3c]
jle 0x4992cc
mov edx, dword [ebp - 0x40]
mov eax, dword [esi + 0x3a8]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
mov eax, dword [esi + 0x3b4]
mov edx, dword [eax]
call dword [edx + 0xdc]
mov dword [ebp - 0x40], eax
mov eax, dword [esi + 0x3b4]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x44]
mov ecx, 1
mov edx, 0x49a1cc
mov eax, esi
call fcn.0049eb74
test al, al
jne 0x499528
lea eax, [ebp - 0x14]
call fcn.00406a10
push eax
push 0
call sub.ole32.dll_CreateBindCtx
test eax, 0x80000000
sete al
jmp 0x49952a
xor eax, eax
test al, al
je 0x499553
lea eax, [ebp - 0x18]
call fcn.00406a10
push eax
lea eax, [ebp - 0x44]
push eax
push 0x49a1d4
mov eax, dword [ebp - 0x14]
push eax
call sub.URLMON.DLL_MkParseDisplayNameEx
test eax, 0x80000000
sete al
jmp 0x499555
xor eax, eax
test al, al
je 0x499580
lea eax, [ebp - 0xc]
call fcn.00406a10
push eax
push 0x49a204
push 0
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
test eax, 0x80000000
sete al
jmp 0x499582
xor eax, eax
test al, al
je 0x499cc1
push 0x49a21c
push 0x49a250
lea eax, [ebp - 0x1324]
mov edx, dword [ebp - 0xc]
call fcn.00414f78
lea eax, [ebp - 0x1324]
push eax
lea eax, [ebp - 0x1314]
push eax
call fcn.004107ec
add esp, 0x10
lea edx, [ebp - 0x1314]
lea eax, [ebp - 0x28]
call fcn.00415060
push 0x49a260
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1338]
push eax
call fcn.004107ec
add esp, 0xc
lea edx, [ebp - 0x1338]
lea eax, [ebp - 0x1328]
call fcn.00414b3c
mov edx, dword [ebp - 0x1328]
lea eax, [ebp - 0x10]
mov ecx, 0x49a26c
call fcn.00406a54
jmp 0x499c6f
lea eax, [ebp - 0x1340]
push eax
push 0x49a27c
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1354]
push eax
call fcn.004107ec
add esp, 0xc
lea edx, [ebp - 0x1354]
lea eax, [ebp - 0x1344]
call fcn.00413e50
mov eax, dword [ebp - 0x1344]
mov ecx, 0x11
mov edx, 1
call fcn.00405390
mov eax, dword [ebp - 0x1340]
lea edx, [ebp - 0x133c]
call fcn.00408e88
mov eax, dword [ebp - 0x133c]
mov edx, 0x49a290
call fcn.0040527c
jne 0x499c56
cmp byte [esi + 0x4b8], 0
jne 0x4997cc
push 0x49a2a4
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1364]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1364]
push eax
lea eax, [ebp - 0x1374]
call fcn.004172ac
lea edx, [ebp - 0x1374]
pop eax
call fcn.004172dc
je 0x499c56
push 0x49a2a4
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1384]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1384]
push eax
lea eax, [ebp - 0x1394]
call fcn.004172a4
lea edx, [ebp - 0x1394]
pop eax
call fcn.004172dc
je 0x499c56
lea eax, [ebp - 0x139c]
push eax
push 0x49a2a4
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x13b0]
push eax
call fcn.004107ec
add esp, 0xc
lea edx, [ebp - 0x13b0]
lea eax, [ebp - 0x13a0]
call fcn.00413e50
mov eax, dword [ebp - 0x13a0]
mov ecx, 9
mov edx, 1
call fcn.00405390
mov eax, dword [ebp - 0x139c]
lea edx, [ebp - 0x1398]
call fcn.00408e88
mov eax, dword [ebp - 0x1398]
mov edx, 0x49a2bc
call fcn.0040527c
je 0x4997cc
lea eax, [ebp - 0x13b8]
push eax
push 0x49a2a4
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x13cc]
push eax
call fcn.004107ec
add esp, 0xc
lea edx, [ebp - 0x13cc]
lea eax, [ebp - 0x13bc]
call fcn.00413e50
mov eax, dword [ebp - 0x13bc]
mov ecx, 8
mov edx, 1
call fcn.00405390
mov eax, dword [ebp - 0x13b8]
lea edx, [ebp - 0x13b4]
call fcn.00408e88
mov eax, dword [ebp - 0x13b4]
mov edx, 0x49a2d0
call fcn.0040527c
jne 0x499c56
lea eax, [ebp - 4]
push eax
push 0x49a27c
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x13e0]
push eax
call fcn.004107ec
add esp, 0xc
lea edx, [ebp - 0x13e0]
lea eax, [ebp - 0x13d0]
call fcn.00413e50
mov eax, dword [ebp - 0x13d0]
mov ecx, 0xff
mov edx, 0x12
call fcn.00405390
lea eax, [ebp - 8]
mov edx, 0x49a0e8
call fcn.00404f04
push 0x49a2dc
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x13f0]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x13f0]
push eax
lea eax, [ebp - 0x1400]
call fcn.004172ac
lea edx, [ebp - 0x1400]
pop eax
call fcn.004172dc
je 0x499951
push 0x49a2dc
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1410]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1410]
push eax
lea eax, [ebp - 0x1420]
call fcn.004172a4
lea edx, [ebp - 0x1420]
pop eax
call fcn.004172dc
je 0x499951
push 0x49a2dc
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1430]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1430]
push eax
lea eax, [ebp - 0x1440]
xor edx, edx
call fcn.00414ee8
lea edx, [ebp - 0x1440]
pop eax
call fcn.004172dc
je 0x499951
lea eax, [ebp - 0x1454]
mov ecx, 0x49a0f4
mov edx, dword [ebp - 8]
call fcn.0040517c
mov edx, dword [ebp - 0x1454]
lea eax, [ebp - 0x1450]
call fcn.00414ee8
lea eax, [ebp - 0x1450]
push eax
push 0x49a2dc
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1464]
push eax
call fcn.004107ec
add esp, 0xc
lea edx, [ebp - 0x1464]
pop eax
call fcn.004172b4
lea eax, [ebp - 0x1450]
push eax
lea eax, [ebp - 0x1474]
mov edx, 0x49a100
call fcn.00414ee8
lea edx, [ebp - 0x1474]
pop eax
call fcn.004172b4
lea edx, [ebp - 0x1450]
lea eax, [ebp - 8]
call fcn.00413e50
lea eax, [ebp - 8]
mov edx, 0x49a140
call fcn.00405138
push 0x49a2e8
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1484]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1484]
push eax
lea eax, [ebp - 0x1494]
call fcn.004172ac
lea edx, [ebp - 0x1494]
pop eax
call fcn.004172dc
je 0x499a7a
push 0x49a2e8
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14a4]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x14a4]
push eax
lea eax, [ebp - 0x14b4]
call fcn.004172a4
lea edx, [ebp - 0x14b4]
pop eax
call fcn.004172dc
je 0x499a7a
push 0x49a2e8
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14c4]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x14c4]
push eax
lea eax, [ebp - 0x14d4]
xor edx, edx
call fcn.00414ee8
lea edx, [ebp - 0x14d4]
pop eax
call fcn.004172dc
je 0x499a7a
lea eax, [ebp - 0x14e4]
mov edx, dword [ebp - 8]
call fcn.00414ee8
lea eax, [ebp - 0x14e4]
push eax
push 0x49a2e8
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x14f4]
push eax
call fcn.004107ec
add esp, 0xc
lea edx, [ebp - 0x14f4]
pop eax
call fcn.004172b4
lea eax, [ebp - 0x14e4]
push eax
lea eax, [ebp - 0x1504]
mov edx, 0x49a304
call fcn.00414ee8
lea edx, [ebp - 0x1504]
pop eax
call fcn.004172b4
lea edx, [ebp - 0x14e4]
lea eax, [ebp - 8]
call fcn.00413e50
push 0x49a308
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1514]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1514]
push eax
lea eax, [ebp - 0x1524]
call fcn.004172ac
lea edx, [ebp - 0x1524]
pop eax
call fcn.004172dc
je 0x499bde
push 0x49a308
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1534]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1534]
push eax
lea eax, [ebp - 0x1544]
call fcn.004172a4
lea edx, [ebp - 0x1544]
pop eax
call fcn.004172dc
je 0x499bde
push 0x49a308
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1554]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1554]
push eax
lea eax, [ebp - 0x1564]
xor edx, edx
mov cl, 1
call fcn.00414cb4
lea edx, [ebp - 0x1564]
pop eax
call fcn.004172ec
jl 0x499bde
push 0
lea eax, [ebp - 0x1568]
push eax
lea eax, [ebp - 0x156c]
push eax
mov ecx, 0x49a318
mov edx, 0x49a328
mov eax, dword [esi + 0x4d8]
call fcn.00492f6c
mov eax, dword [ebp - 0x156c]
push eax
push 0x49a308
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1584]
push eax
call fcn.004107ec
add esp, 0xc
lea eax, [ebp - 0x1584]
push eax
lea eax, [ebp - 0x1594]
mov edx, 0x100000
mov cl, 4
call fcn.00414cb4
lea edx, [ebp - 0x1594]
pop eax
call fcn.004172c0
lea eax, [ebp - 0x1584]
call fcn.00412e3c
fstp xword [ebp - 0x15a0]
wait
lea eax, [ebp - 0x15a0]
mov dword [ebp - 0x1574], eax
mov byte [ebp - 0x1570], 3
lea ecx, [ebp - 0x1574]
mov eax, esi
pop edx
call fcn.0049edf0
mov edx, dword [ebp - 0x1568]
lea eax, [ebp - 8]
call fcn.00405138
jmp 0x499c08
lea eax, [ebp - 0x15a4]
push eax
mov ecx, 0x49a338
mov edx, 0x49a34c
mov eax, dword [esi + 0x4d8]
call fcn.00492f6c
mov edx, dword [ebp - 0x15a4]
lea eax, [ebp - 8]
call fcn.00405138
lea eax, [ebp - 8]
mov edx, 0x49a14c
call fcn.00405138
mov edx, 0x7fffffff
mov eax, dword [ebp - 4]
call fcn.004096e4
push eax
push dword [ebp - 4]
push 0x49a360
push dword [ebp - 8]
lea eax, [ebp - 0x15a8]
mov edx, 3
call fcn.004051f0
mov edx, dword [ebp - 0x15a8]
mov eax, dword [esi + 0x3b4]
mov eax, dword [eax + 0x284]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0x3c]
lea eax, [ebp - 0x15b8]
call fcn.004172a4
lea edx, [ebp - 0x15b8]
lea eax, [ebp - 0x38]
call fcn.00415060
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [eax]
call dword [eax + 0xc]
test eax, eax
je 0x499607
lea eax, [ebp - 0x15c8]
call fcn.004172a4
lea edx, [ebp - 0x15c8]
lea eax, [ebp - 0x28]
call fcn.00415060
lea eax, [ebp - 0x15d8]
call fcn.004172a4
lea edx, [ebp - 0x15d8]
lea eax, [ebp - 0xc]
call fcn.00414c08
jmp 0x499e27
xor ebx, ebx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x50]
mov edx, ebx
mov eax, esi
call fcn.004982ac
test al, al
je 0x499e1a
cmp dword [ebp - 0x3c], 1
jl 0x499ce7
cmp dword [ebp - 0x3c], 0xb
jle 0x499cf4
cmp byte [esi + 0x4b8], 0
je 0x499e1a
cmp dword [ebp - 0x4c], 0xffffffff
jne 0x499d06
cmp dword [ebp - 0x50], 0xffffffff
jbe 0x499db7
jmp 0x499d0c
jle 0x499db7
lea edx, [ebp - 0x15e0]
mov eax, ebx
call fcn.0040956c
push dword [ebp - 0x15e0]
push 0x49a36c
push 0
lea eax, [ebp - 0x15e4]
push eax
lea eax, [ebp - 0x15e8]
push eax
mov ecx, 0x49a318
mov edx, 0x49a328
mov eax, dword [esi + 0x4d8]
call fcn.00492f6c
mov eax, dword [ebp - 0x15e8]
push eax
fild qword [ebp - 0x50]
fdiv dword [0x49a374]
fstp xword [ebp - 0x15a0]
wait
lea eax, [ebp - 0x15a0]
mov dword [ebp - 0x1574], eax
mov byte [ebp - 0x1570], 3
lea ecx, [ebp - 0x1574]
mov eax, esi
pop edx
call fcn.0049edf0
push dword [ebp - 0x15e4]
push 0x49a14c
lea eax, [ebp - 0x15dc]
mov edx, 4
call fcn.004051f0
mov edx, dword [ebp - 0x15dc]
mov ecx, ebx
mov eax, dword [esi + 0x3b4]
mov eax, dword [eax + 0x284]
mov edi, dword [eax]
call dword [edi + 0x3c]
jmp 0x499e1a
lea edx, [ebp - 0x15f0]
mov eax, ebx
call fcn.0040956c
push dword [ebp - 0x15f0]
push 0x49a380
lea eax, [ebp - 0x15f4]
push eax
mov ecx, 0x49a338
mov edx, 0x49a34c
mov eax, dword [esi + 0x4d8]
call fcn.00492f6c
push dword [ebp - 0x15f4]
lea eax, [ebp - 0x15ec]
mov edx, 3
call fcn.004051f0
mov edx, dword [ebp - 0x15ec]
mov ecx, ebx
mov eax, dword [esi + 0x3b4]
mov eax, dword [eax + 0x284]
mov edi, dword [eax]
call dword [edi + 0x3c]
inc ebx
cmp ebx, 0x100
jne 0x499cc3
mov edx, dword [ebp - 0x40]
mov eax, dword [esi + 0x3b4]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
mov eax, dword [esi + 0x3a8]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x499e8a
mov eax, dword [esi + 0x39c]
call fcn.00483348
test eax, eax
jne 0x499e69
mov dl, 1
mov eax, dword [esi + 0x3d8]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [esi + 0x3a8]
mov edx, dword [eax]
call dword [edx + 0xdc]
inc eax
jne 0x499e8a
xor edx, edx
mov eax, dword [esi + 0x3a8]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
mov eax, dword [esi + 0x3b4]
mov eax, dword [eax + 0x284]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x499edb
mov eax, dword [esi + 0x39c]
call fcn.00483348
dec eax
jne 0x499eba
mov dl, 1
mov eax, dword [esi + 0x3d8]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [esi + 0x3b4]
mov edx, dword [eax]
call dword [edx + 0xdc]
inc eax
jne 0x499edb
xor edx, edx
mov eax, dword [esi + 0x3b4]
mov ecx, dword [eax]
call dword [ecx + 0xe0]
mov dword [ebp - 0xe8], 0x94
lea eax, [ebp - 0xe8]
push eax
call sub.kernel32.dll_GetVersionExA
test eax, eax
je 0x499f0c
cmp dword [ebp - 0xd8], 2
sete dl
mov eax, dword [esi + 0x36c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
jmp 0x499f19
xor edx, edx
mov eax, dword [esi + 0x36c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, dword [esi + 0x36c]
mov edx, dword [eax]
call dword [edx + 0x50]
mov edx, eax
mov eax, dword [esi + 0x370]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, esi
call fcn.00498c04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49a0c6
lea eax, [ebp - 0x15f4]
mov edx, 7
call fcn.00404e90
lea eax, [ebp - 0x15d8]
mov edx, dword [0x4010e4]
mov ecx, 3
call fcn.00405a5c
lea eax, [ebp - 0x15a8]
mov edx, 2
call fcn.00404e90
lea eax, [ebp - 0x1594]
mov edx, dword [0x4010e4]
mov ecx, 2
call fcn.00405a5c
lea eax, [ebp - 0x156c]
mov edx, 2
call fcn.00404e90
lea eax, [ebp - 0x1564]
mov edx, dword [0x4010e4]
mov ecx, 0x11
call fcn.00405a5c
lea eax, [ebp - 0x1454]
call fcn.00404e6c
lea eax, [ebp - 0x1450]
mov edx, dword [0x4010e4]
mov ecx, 8
call fcn.00405a5c
lea eax, [ebp - 0x13d0]
call fcn.00404e6c
lea eax, [ebp - 0x13cc]
call fcn.004107e4
lea eax, [ebp - 0x13bc]
mov edx, 3
call fcn.00404e90
lea eax, [ebp - 0x13b0]
call fcn.004107e4
lea eax, [ebp - 0x13a0]
mov edx, 3
call fcn.00404e90
lea eax, [ebp - 0x1394]
mov edx, dword [0x4010e4]
mov ecx, 5
call fcn.00405a5c
lea eax, [ebp - 0x1344]
mov edx, 3
call fcn.00404e90
lea eax, [ebp - 0x1338]
call fcn.004107e4
lea eax, [ebp - 0x1328]
call fcn.00406a10
lea eax, [ebp - 0x1324]
call fcn.004107e4
lea eax, [ebp - 0x1314]
call fcn.004107e4
lea eax, [ebp - 0x1304]
mov edx, 7
call fcn.00404e90
lea eax, [ebp - 0x38]
mov edx, dword [0x4010f4]
mov ecx, 2
call fcn.00405a5c
lea eax, [ebp - 0x18]
call fcn.00406a10
lea eax, [ebp - 0x14]
call fcn.00406a10
lea eax, [ebp - 0x10]
call fcn.00406a10
lea eax, [ebp - 0xc]
call fcn.00406a10
lea eax, [ebp - 8]
mov edx, 2
call fcn.00404e90
ret