Function at 0x57c400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61c907
mov eax, dword fs:[0]
push eax
mov eax, 0x1144
call fcn.005b2440
mov eax, dword [0x6ba394]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x3bc], 7
mov dword [ebp - 0x3c0], 0
mov word [ebp - 0x3d0], ax
mov dword [ebp - 0x3a4], 7
mov dword [ebp - 0x3a8], eax
mov word [ebp - 0x3b8], ax
mov dword [ebp - 0x38c], 7
mov dword [ebp - 0x390], eax
mov word [ebp - 0x3a0], ax
mov dword [ebp - 0x374], 7
mov dword [ebp - 0x378], eax
mov word [ebp - 0x388], ax
push 0xc
push str.tiworker.exe
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 4], eax
call fcn.004346a0
push 0x11
push str.Microsoft_Windows
lea ecx, [ebp - 0x388]
call fcn.004346a0
lea eax, [ebp - 0x3d0]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x35c], 7
mov dword [ebp - 0x360], 0
mov word [ebp - 0x370], ax
mov dword [ebp - 0x344], 7
mov dword [ebp - 0x348], eax
mov word [ebp - 0x358], ax
mov dword [ebp - 0x32c], 7
mov dword [ebp - 0x330], eax
mov word [ebp - 0x340], ax
mov dword [ebp - 0x314], 7
mov dword [ebp - 0x318], eax
mov word [ebp - 0x328], ax
push 0x13
push str.compattelrunner.exe
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 1
call fcn.004346a0
push 0x11
push str.Microsoft_Windows
lea ecx, [ebp - 0x328]
call fcn.004346a0
lea eax, [ebp - 0x370]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x2fc], 7
mov dword [ebp - 0x300], 0
mov word [ebp - 0x310], ax
mov dword [ebp - 0x2e4], 7
mov dword [ebp - 0x2e8], eax
mov word [ebp - 0x2f8], ax
mov dword [ebp - 0x2cc], 7
mov dword [ebp - 0x2d0], eax
mov word [ebp - 0x2e0], ax
mov dword [ebp - 0x2b4], 7
mov dword [ebp - 0x2b8], eax
mov word [ebp - 0x2c8], ax
push 0xb
push str.poqexec.exe
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], 2
call fcn.004346a0
push 0x11
push str.Microsoft_Windows
lea ecx, [ebp - 0x2c8]
call fcn.004346a0
lea eax, [ebp - 0x310]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x29c], 7
mov dword [ebp - 0x2a0], 0
mov word [ebp - 0x2b0], ax
mov dword [ebp - 0x284], 7
mov dword [ebp - 0x288], eax
mov word [ebp - 0x298], ax
mov dword [ebp - 0x26c], 7
mov dword [ebp - 0x270], eax
mov word [ebp - 0x280], ax
mov dword [ebp - 0x254], 7
mov dword [ebp - 0x258], eax
mov word [ebp - 0x268], ax
push 0xd
push str.setupprep.exe
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 3
call fcn.004346a0
push 0x11
push str.Microsoft_Windows
lea ecx, [ebp - 0x268]
call fcn.004346a0
lea eax, [ebp - 0x2b0]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x23c], 7
mov dword [ebp - 0x240], 0
mov word [ebp - 0x250], ax
mov dword [ebp - 0x224], 7
mov dword [ebp - 0x228], eax
mov word [ebp - 0x238], ax
mov dword [ebp - 0x20c], 7
mov dword [ebp - 0x210], eax
mov word [ebp - 0x220], ax
mov dword [ebp - 0x1f4], 7
mov dword [ebp - 0x1f8], eax
mov word [ebp - 0x208], ax
push 9
push str.setup.exe
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.004346a0
push 0x15
push str.Microsoft_Corporation
lea ecx, [ebp - 0x208]
call fcn.004346a0
lea eax, [ebp - 0x250]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x1dc], 7
mov dword [ebp - 0x1e0], 0
mov word [ebp - 0x1f0], ax
mov dword [ebp - 0x1c4], 7
mov dword [ebp - 0x1c8], eax
mov word [ebp - 0x1d8], ax
mov dword [ebp - 0x1ac], 7
mov dword [ebp - 0x1b0], eax
mov word [ebp - 0x1c0], ax
mov dword [ebp - 0x194], 7
mov dword [ebp - 0x198], eax
mov word [ebp - 0x1a8], ax
push 0x11
push str.setupPlatform.exe
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 5
call fcn.004346a0
push 0x11
push str.Microsoft_Windows
lea ecx, [ebp - 0x1a8]
call fcn.004346a0
lea eax, [ebp - 0x1f0]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x17c], 7
mov dword [ebp - 0x180], 0
mov word [ebp - 0x190], ax
mov dword [ebp - 0x164], 7
mov dword [ebp - 0x168], eax
mov word [ebp - 0x178], ax
mov dword [ebp - 0x14c], 7
mov dword [ebp - 0x150], eax
mov word [ebp - 0x160], ax
mov dword [ebp - 0x134], 7
mov dword [ebp - 0x138], eax
mov word [ebp - 0x148], ax
push 0xd
push str.setuphost.exe
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 6
call fcn.004346a0
push 0x11
push str.Microsoft_Windows
lea ecx, [ebp - 0x148]
call fcn.004346a0
lea eax, [ebp - 0x190]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x11c], 7
mov dword [ebp - 0x120], 0
mov word [ebp - 0x130], ax
mov dword [ebp - 0x104], 7
mov dword [ebp - 0x108], eax
mov word [ebp - 0x118], ax
mov dword [ebp - 0xec], 7
mov dword [ebp - 0xf0], eax
mov word [ebp - 0x100], ax
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0xd8], eax
mov word [ebp - 0xe8], ax
push 0xb
push str.msmpeng.exe
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 7
call fcn.004346a0
push 0x15
push str.Microsoft_Corporation
lea ecx, [ebp - 0xe8]
call fcn.004346a0
lea eax, [ebp - 0x130]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x41c], 7
mov dword [ebp - 0x420], 0
mov word [ebp - 0x430], ax
mov dword [ebp - 0x404], 7
mov dword [ebp - 0x408], eax
mov word [ebp - 0x418], ax
mov dword [ebp - 0x3ec], 7
mov dword [ebp - 0x3f0], eax
mov word [ebp - 0x400], ax
mov dword [ebp - 0x3d4], 7
mov dword [ebp - 0x3d8], eax
mov word [ebp - 0x3e8], ax
push 0xd
push str.Kaspersky_Lab
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 8
call fcn.004346a0
lea eax, [ebp - 0x430]
mov ecx, esi
push eax
call fcn.004c9380
mov dword [ebp - 0xbc], 7
xor eax, eax
mov dword [ebp - 0xc0], 0
mov word [ebp - 0xd0], ax
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], eax
mov word [ebp - 0xb8], ax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], eax
mov word [ebp - 0xa0], ax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], eax
mov word [ebp - 0x88], ax
push 0xa
push str.devenv.exe
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 9
call fcn.004346a0
push 0x15
push str.Microsoft_Corporation
lea ecx, [ebp - 0x88]
call fcn.004346a0
lea eax, [ebp - 0xd0]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x48], eax
mov word [ebp - 0x58], ax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], eax
mov word [ebp - 0x40], ax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], eax
mov word [ebp - 0x28], ax
push 0xb
push str.procexp.exe
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.004346a0
push 0x15
push str.Microsoft_Corporation
lea ecx, [ebp - 0x28]
call fcn.004346a0
lea eax, [ebp - 0x70]
mov ecx, esi
push eax
call fcn.004c9380
xor eax, eax
mov dword [ebp - 0x47c], 7
lea ecx, [ebp - 0x478]
mov dword [ebp - 0x480], 0
mov word [ebp - 0x490], ax
call fcn.00434830
lea ecx, [ebp - 0x460]
call fcn.00434830
lea ecx, [ebp - 0x448]
call fcn.00434830
push str.procexp64.exe
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0xb
call fcn.00434220
push str.Microsoft_Corporation
lea ecx, [ebp - 0x448]
call fcn.00434220
lea eax, [ebp - 0x490]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xa30]
call fcn.0057bc00
push str.procmon.exe
mov byte [ebp - 4], 0xc
call fcn.00434220
push str.Microsoft_Corporation
lea ecx, [ebp - 0x9e8]
call fcn.00434220
lea eax, [ebp - 0xa30]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x9d0]
call fcn.0057bc00
push str.taskmgr.exe
mov byte [ebp - 4], 0xd
call fcn.00434220
push str.Microsoft_Windows
lea ecx, [ebp - 0x988]
call fcn.00434220
lea eax, [ebp - 0x9d0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x10f0]
call fcn.0057bc00
push str.Trend_Micro__Inc.
lea ecx, [ebp - 0x10a8]
mov byte [ebp - 4], 0xe
call fcn.00434220
lea eax, [ebp - 0x10f0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x1090]
call fcn.0057bc00
push str.Sophos_Limited
lea ecx, [ebp - 0x1048]
mov byte [ebp - 4], 0xf
call fcn.00434220
lea eax, [ebp - 0x1090]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x1030]
call fcn.0057bc00
push str.McAfee__Inc.
lea ecx, [ebp - 0xfe8]
mov byte [ebp - 4], 0x10
call fcn.00434220
lea eax, [ebp - 0x1030]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xfd0]
call fcn.0057bc00
push 0x641590
lea ecx, [ebp - 0xf88]
mov byte [ebp - 4], 0x11
call fcn.00434220
lea eax, [ebp - 0xfd0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xf70]
call fcn.0057bc00
push str.Cisco_Systems__Inc.
lea ecx, [ebp - 0xf28]
mov byte [ebp - 4], 0x12
call fcn.00434220
lea eax, [ebp - 0xf70]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x970]
call fcn.0057bc00
push str.searchindexer.exe
mov byte [ebp - 4], 0x13
call fcn.00434220
push str.Microsoft_Windows
lea ecx, [ebp - 0x928]
call fcn.00434220
lea eax, [ebp - 0x970]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x910]
call fcn.0057bc00
push str.vmwvvpsvc.exe
mov byte [ebp - 4], 0x14
call fcn.00434220
push str.VMware__Inc.
lea ecx, [ebp - 0x8c8]
call fcn.00434220
lea eax, [ebp - 0x910]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x8b0]
call fcn.0057bc00
push str.systemenc.exe
mov byte [ebp - 4], 0x15
call fcn.00434220
push str.MarkAny__Inc.
lea ecx, [ebp - 0x868]
call fcn.00434220
lea eax, [ebp - 0x8b0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x850]
call fcn.0057bc00
push str.dismhost.exe
mov byte [ebp - 4], 0x16
call fcn.00434220
push str.Microsoft_Windows
lea ecx, [ebp - 0x808]
call fcn.00434220
lea eax, [ebp - 0x850]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x7f0]
call fcn.0057bc00
push str.wuauclt.exe
mov byte [ebp - 4], 0x17
call fcn.00434220
push str.Microsoft_Windows
lea ecx, [ebp - 0x7a8]
call fcn.00434220
lea eax, [ebp - 0x7f0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x790]
call fcn.0057bc00
push str.spoolsv.exe
mov byte [ebp - 4], 0x18
call fcn.00434220
push str.Microsoft_Windows
lea ecx, [ebp - 0x748]
call fcn.00434220
lea eax, [ebp - 0x790]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x730]
call fcn.0057bc00
push str.googledrivesync.exe
mov byte [ebp - 4], 0x19
call fcn.00434220
push str.Google_LLC
lea ecx, [ebp - 0x6e8]
call fcn.00434220
lea eax, [ebp - 0x730]
push eax
mov ecx, esi
call fcn.004c9380
lea ecx, [ebp - 0x6d0]
call fcn.0057bc00
push str.eclipse.exe
mov byte [ebp - 4], 0x1a
call fcn.00434220
push str.Eclipse_Foundation__Inc.
lea ecx, [ebp - 0x688]
call fcn.00434220
lea eax, [ebp - 0x6d0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x670]
call fcn.0057bc00
push str.flare.exe
mov byte [ebp - 4], 0x1b
call fcn.00434220
push str.MadCap_Software__Inc.
lea ecx, [ebp - 0x628]
call fcn.00434220
lea eax, [ebp - 0x670]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x610]
call fcn.0057bc00
push str.java.exe
mov byte [ebp - 4], 0x1c
call fcn.00434220
push str.London_Jamocha_Community_CIC
lea ecx, [ebp - 0x5c8]
call fcn.00434220
lea eax, [ebp - 0x610]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x5b0]
call fcn.0057bc00
push str.java.exe
mov byte [ebp - 4], 0x1d
call fcn.00434220
push str.Oracle_America__Inc.
lea ecx, [ebp - 0x568]
call fcn.00434220
lea eax, [ebp - 0x5b0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xf10]
call fcn.0057bc00
push str.Zoom_Video_Communications__Inc.
lea ecx, [ebp - 0xec8]
mov byte [ebp - 4], 0x1e
call fcn.00434220
lea eax, [ebp - 0xf10]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xeb0]
call fcn.0057bc00
push str.Cisco_Linksys_LLC
lea ecx, [ebp - 0xe68]
mov byte [ebp - 4], 0x1f
call fcn.00434220
lea ecx, [ebp - 0xe50]
call fcn.0057bc00
push str.Cisco_Systems__Inc.
lea ecx, [ebp - 0xe08]
mov byte [ebp - 4], 0x20
call fcn.00434220
lea ecx, [ebp - 0xdf0]
call fcn.0057bc00
push str.Cisco_Consumer_Products_LLC
lea ecx, [ebp - 0xda8]
mov byte [ebp - 4], 0x21
call fcn.00434220
lea ecx, [ebp - 0xd90]
call fcn.0057bc00
push str.Cisco_WebEx_LLC
lea ecx, [ebp - 0xd48]
mov byte [ebp - 4], 0x22
call fcn.00434220
lea eax, [ebp - 0xeb0]
mov ecx, esi
push eax
call fcn.004c9380
lea eax, [ebp - 0xe50]
mov ecx, esi
push eax
call fcn.004c9380
lea eax, [ebp - 0xdf0]
mov ecx, esi
push eax
call fcn.004c9380
lea eax, [ebp - 0xd90]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xd30]
call fcn.0057bc00
push str.ESET__spol._s_r.o.
lea ecx, [ebp - 0xce8]
mov byte [ebp - 4], 0x23
call fcn.00434220
lea eax, [ebp - 0xd30]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xcd0]
call fcn.0057bc00
push str.BITDEFENDER_LLC
lea ecx, [ebp - 0xc88]
mov byte [ebp - 4], 0x24
call fcn.00434220
lea ecx, [ebp - 0xc70]
call fcn.0057bc00
push str.BitDefender_SRL
lea ecx, [ebp - 0xc28]
mov byte [ebp - 4], 0x25
call fcn.00434220
lea eax, [ebp - 0xcd0]
mov ecx, esi
push eax
call fcn.004c9380
lea eax, [ebp - 0xc70]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xc10]
call fcn.0057bc00
push str.Malwarebytes_Corporation
lea ecx, [ebp - 0xbc8]
mov byte [ebp - 4], 0x26
call fcn.00434220
lea eax, [ebp - 0xc10]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xbb0]
call fcn.0057bc00
push str.Priority_Software_LTD.
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x27
call fcn.00434220
lea ecx, [ebp - 0xb50]
call fcn.0057bc00
push str.Odcanit_Ltd
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x28
call fcn.00434220
lea ecx, [ebp - 0xaf0]
call fcn.0057bc00
push str.TALDOR_COMPUTER_SYSTEMS__1986__LTD
lea ecx, [ebp - 0xaa8]
mov byte [ebp - 4], 0x29
call fcn.00434220
lea eax, [ebp - 0xbb0]
mov ecx, esi
push eax
call fcn.004c9380
lea eax, [ebp - 0xb50]
mov ecx, esi
push eax
call fcn.004c9380
lea eax, [ebp - 0xaf0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0xa90]
call fcn.0057bc00
push str.Cynet_Security_LTD
lea ecx, [ebp - 0xa48]
mov byte [ebp - 4], 0x2a
call fcn.00434220
lea eax, [ebp - 0xa90]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x550]
call fcn.0057bc00
push str.ngen.exe
mov byte [ebp - 4], 0x2b
call fcn.00434220
push str.Microsoft_Corporation
lea ecx, [ebp - 0x508]
call fcn.00434220
lea eax, [ebp - 0x550]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x4f0]
call fcn.0057bc00
push str.mscorsvw.exe
mov byte [ebp - 4], 0x2c
call fcn.00434220
push str.Microsoft_Dynamic_Code_Publisher
lea ecx, [ebp - 0x4a8]
call fcn.00434220
lea eax, [ebp - 0x4f0]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x1150]
call fcn.0057bc00
push str.vssvc.exe
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 0x2d
call fcn.00434220
push str.Microsoft_Windows
lea ecx, [ebp - 0x4a8]
call fcn.00434220
lea eax, [ebp - 0x1150]
mov ecx, esi
push eax
call fcn.004c9380
lea ecx, [ebp - 0x1150]
call fcn.0040ae10
lea ecx, [ebp - 0x4f0]
call fcn.0040ae10
lea ecx, [ebp - 0x550]
call fcn.0040ae10
lea ecx, [ebp - 0xa90]
call fcn.0040ae10
lea ecx, [ebp - 0xaf0]
call fcn.0040ae10
lea ecx, [ebp - 0xb50]
call fcn.0040ae10
lea ecx, [ebp - 0xbb0]
call fcn.0040ae10
lea ecx, [ebp - 0xc10]
call fcn.0040ae10
lea ecx, [ebp - 0xc70]
call fcn.0040ae10
lea ecx, [ebp - 0xcd0]
call fcn.0040ae10
lea ecx, [ebp - 0xd30]
call fcn.0040ae10
lea ecx, [ebp - 0xd90]
call fcn.0040ae10
lea ecx, [ebp - 0xdf0]
call fcn.0040ae10
lea ecx, [ebp - 0xe50]
call fcn.0040ae10
lea ecx, [ebp - 0xeb0]
call fcn.0040ae10
lea ecx, [ebp - 0xf10]
call fcn.0040ae10
lea ecx, [ebp - 0x5b0]
call fcn.0040ae10
lea ecx, [ebp - 0x610]
call fcn.0040ae10
lea ecx, [ebp - 0x670]
call fcn.0040ae10
lea ecx, [ebp - 0x6d0]
call fcn.0040ae10
lea ecx, [ebp - 0x730]
call fcn.0040ae10
lea ecx, [ebp - 0x790]
call fcn.0040ae10
lea ecx, [ebp - 0x7f0]
call fcn.0040ae10
lea ecx, [ebp - 0x850]
call fcn.0040ae10
lea ecx, [ebp - 0x8b0]
call fcn.0040ae10
lea ecx, [ebp - 0x910]
call fcn.0040ae10
lea ecx, [ebp - 0x970]
call fcn.0040ae10
lea ecx, [ebp - 0xf70]
call fcn.0040ae10
lea ecx, [ebp - 0xfd0]
call fcn.0040ae10
lea ecx, [ebp - 0x1030]
call fcn.0040ae10
lea ecx, [ebp - 0x1090]
call fcn.0040ae10
lea ecx, [ebp - 0x10f0]
call fcn.0040ae10
lea ecx, [ebp - 0x9d0]
call fcn.0040ae10
lea ecx, [ebp - 0xa30]
call fcn.0040ae10
lea ecx, [ebp - 0x490]
call fcn.0040ae10
lea ecx, [ebp - 0x70]
call fcn.0040ae10
lea ecx, [ebp - 0xd0]
call fcn.0040ae10
lea ecx, [ebp - 0x430]
call fcn.0040ae10
lea ecx, [ebp - 0x130]
call fcn.0040ae10
lea ecx, [ebp - 0x190]
call fcn.0040ae10
lea ecx, [ebp - 0x1f0]
call fcn.0040ae10
lea ecx, [ebp - 0x250]
call fcn.0040ae10
lea ecx, [ebp - 0x2b0]
call fcn.0040ae10
lea ecx, [ebp - 0x310]
call fcn.0040ae10
lea ecx, [ebp - 0x370]
call fcn.0040ae10
lea ecx, [ebp - 0x3d0]
call fcn.0040ae10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b168a
mov esp, ebp
pop ebp
ret 4