Function at 0xef42aa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x2c
mov eax, 0xf10ab1
call fcn.00f100b5
mov edi, ecx
mov dword [ebp - 0x18], edi
xor ebx, ebx
mov dword [edi], 0x3dc
lea ecx, [edi + 4]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov dword [ebp - 4], ebx
push eax
push str.Kaspersky_Secure_Connection
call fcn.00ef596d
lea ecx, [edi + 0x24]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 4
push eax
mov esi, str.SoftwareKasperskyLab
push esi
call fcn.00ef596d
lea ecx, [edi + 0x44]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 8
push eax
push esi
call fcn.00ef596d
lea ecx, [edi + 0x64]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0xc
push eax
mov esi, str.AVP21.18
push esi
call fcn.00ef596d
lea ecx, [edi + 0x84]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x10
push eax
push str.SoftwareKasperskyLabAVP21.18
call fcn.00ef596d
lea ecx, [edi + 0xa4]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x14
push eax
push esi
call fcn.00ef596d
lea ecx, [edi + 0xc4]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x18
push eax
mov ebx, 0xf18770
push ebx
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0xe4]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x1c
push eax
push esi
call fcn.00ef596d
xor esi, esi
lea ecx, [edi + 0x104]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x20
push eax
push str.Kaspersky_Lab
call fcn.00ef596d
lea ecx, [edi + 0x124]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x24
push eax
push str.KasperskyLabAVP21.18
call fcn.00ef596d
lea ecx, [edi + 0x144]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x28
push eax
push str.KAV21NTR
call fcn.00ef596d
lea ecx, [edi + 0x164]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x2c
push eax
push str.KAV21
call fcn.00ef596d
lea ecx, [edi + 0x184]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x30
push eax
push str.6953EA60_8D5F_4529_8710_42F8ED3E8CDA
call fcn.00ef596d
lea ecx, [edi + 0x1a4]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x34
push eax
push ebx
call fcn.00ef596d
lea ecx, [edi + 0x1c4]
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x38
push eax
mov esi, 0xf18840
push esi
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x1e4]
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x14]
push eax
push ebx
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x204]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x40
push eax
push esi
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x224]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x44
push eax
push str.AVP21.18_PatchInstallator
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x244]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x48
push eax
push str.avpui
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x264]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x4c
push eax
push str.avpui.exe
call fcn.00ef596d
lea ecx, [edi + 0x284]
call fcn.00ef59fe
lea ecx, [edi + 0x2a4]
call fcn.00ef59fe
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x2c4]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x52
push eax
push ebx
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x2e4]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x56
push eax
push esi
call fcn.00ef596d
and dword [ebp - 0x14], 0
lea ecx, [edi + 0x304]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x5a
push eax
push ebx
call fcn.00ef596d
xor ebx, ebx
lea ecx, [edi + 0x324]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x5e
push eax
push esi
call fcn.00ef596d
lea ecx, [edi + 0x344]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x62
push eax
push 0xf188b0
call fcn.00ef596d
lea ecx, [edi + 0x364]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x66
push eax
push 0xf188c0
call fcn.00ef596d
lea ecx, [edi + 0x384]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x6a
push eax
push 0xf1890c
call fcn.00ef596d
lea ecx, [edi + 0x3a4]
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x6e
push eax
push str.KasperskyLab.Ksde.UI.Toasts
call fcn.00ef596d
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x70
call fcn.00ef8501
mov byte [ebp - 4], 0x72
lea ecx, [edi + 0x3c4]
push dword [eax + 4]
push dword [eax]
call fcn.00ef2ea7
pop ecx
pop ecx
lea ecx, [ebp - 0x38]
call fcn.00ef595a
mov dword [edi + 0x3d4], 0x15
mov eax, edi
mov dword [edi + 0x3d8], 0x12
call fcn.00f10083
ret