Function at 0x4712a3
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x68
mov eax, 0x5b6d0a
call fcn.0058705b
mov ebx, dword [ebp + 8]
xor esi, esi
push esi
push 1
call fcn.0040eb7d
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], esi
cmp eax, esi
je 0x4712cf
mov dword [eax], ebx
jmp 0x4712d1
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [ebx], eax
mov dword [ebp - 4], 5
call fcn.0045183b
lea ecx, [ebx + 0x18]
mov dword [ecx], eax
mov byte [eax + 0x19], 1
mov eax, dword [ecx]
mov dword [eax + 4], eax
mov eax, dword [ecx]
mov dword [eax], eax
mov ecx, dword [ecx]
mov dword [ecx + 8], ecx
mov dword [ebx + 0x1c], esi
mov dword [ebp - 4], 7
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678f08
call fcn.00472e01
mov byte [ebp - 4], 8
push str.Keylog
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 9
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Keylogger
call fcn.00472e01
mov byte [ebp - 4], 0xa
push str.Monitor
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678f2c
call fcn.00472e01
mov byte [ebp - 4], 0xc
push 0x678f28
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Spyware
call fcn.00472e01
mov byte [ebp - 4], 0xe
push str.PasswordStealer
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Trojan
call fcn.00472e01
mov byte [ebp - 4], 0x10
push 0x678f4c
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678f68
call fcn.00472e01
mov byte [ebp - 4], 0x12
push 0x678f5c
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678f84
call fcn.00472e01
mov byte [ebp - 4], 0x14
push str.RemoteControl
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678fa4
call fcn.00472e01
mov byte [ebp - 4], 0x16
push str.RemoteConnection
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678fbc
call fcn.00472e01
mov byte [ebp - 4], 0x18
push str.RemoteAdmin
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678fdc
call fcn.00472e01
mov byte [ebp - 4], 0x1a
push str.RemoteManipulator
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x678fec
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00472e01
mov byte [ebp - 4], 0x1c
push 0x678fe8
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x679000
call fcn.00472e01
mov byte [ebp - 4], 0x1e
push str.Ransom
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x679014
call fcn.00472e01
mov byte [ebp - 4], 0x20
push str.Cryptor
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x679028
call fcn.00472e01
mov byte [ebp - 4], 0x22
push str.Kryptik
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Ransomware
call fcn.00472e01
mov byte [ebp - 4], 0x24
push str.Blocker
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Virus
call fcn.00472e01
mov byte [ebp - 4], 0x26
push 0x679048
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Worm
call fcn.00472e01
mov byte [ebp - 4], 0x28
push 0x679058
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Hijacker
call fcn.00472e01
mov byte [ebp - 4], 0x2a
push str.Hijack
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Rootkit
lea eax, [ebp - 0x1c]
push eax
call fcn.00472e01
mov byte [ebp - 4], 0x2c
push 0x67907c
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Dialer
call fcn.00472e01
mov byte [ebp - 4], 0x2e
push 0x67908c
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Agent
call fcn.00472e01
mov byte [ebp - 4], 0x30
push 0x67909c
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x6790b4
call fcn.00472e01
mov byte [ebp - 4], 0x32
push str.Hack
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Hacktool
call fcn.00472e01
mov byte [ebp - 4], 0x34
push str.Tool
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Dropper
call fcn.00472e01
mov byte [ebp - 4], 0x36
push str.Drop
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Injector
call fcn.00472e01
mov byte [ebp - 4], 0x38
push str.Inject
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Downloader
call fcn.00472e01
mov byte [ebp - 4], 0x3a
push str.Download
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Exploit
call fcn.00472e01
mov byte [ebp - 4], 0x3c
push 0x679110
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Nuker
call fcn.00472e01
mov byte [ebp - 4], 0x3e
push str.Nuke
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Rogue
call fcn.00472e01
mov byte [ebp - 4], 0x40
push 0x679130
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Risk
call fcn.00472e01
mov byte [ebp - 4], 0x42
push 0x679140
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x43
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x679154
call fcn.00472e01
mov byte [ebp - 4], 0x44
push 0x679150
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x679160
call fcn.00472e01
mov byte [ebp - 4], 0x46
push 0x679158
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x18]
call fcn.0040843b
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x1c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x679170
call fcn.00472e01
mov byte [ebp - 4], 0x48
push str.Toolbar
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x20]
call fcn.0040843b
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x24]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Adware
call fcn.00472e01
mov byte [ebp - 4], 0x4a
push 0x679178
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x28]
call fcn.0040843b
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Bundle
call fcn.00472e01
mov byte [ebp - 4], 0x4c
push 0x679184
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x34]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x30]
call fcn.0040843b
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x34]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Joke
call fcn.00472e01
mov byte [ebp - 4], 0x4e
push 0x679194
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x38]
call fcn.0040843b
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x3c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x6791a8
call fcn.00472e01
mov byte [ebp - 4], 0x50
push 0x6791a4
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x40]
call fcn.0040843b
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x44]
push eax
call fcn.0044e837
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x6791b0
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00472e01
mov byte [ebp - 4], 0x52
push 0x6791ac
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x48]
call fcn.0040843b
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x4c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x6791b8
call fcn.00472e01
mov byte [ebp - 4], 0x54
push 0x6791b4
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x50]
call fcn.0040843b
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x54]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], 0x6791c8
call fcn.00472e01
mov byte [ebp - 4], 0x56
push str.Unwanted
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x58]
call fcn.0040843b
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x5c]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Macro
call fcn.00472e01
mov byte [ebp - 4], 0x58
push 0x6791cc
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x64]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x60]
call fcn.0040843b
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x64]
push eax
call fcn.0044e837
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], str.Cookie
call fcn.00472e01
mov byte [ebp - 4], 0x5a
push 0x6791dc
lea eax, [ebp - 0x14]
push eax
call fcn.004083d7
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x14]
push eax
call fcn.00472403
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
lea edi, [eax + 4]
lea eax, [ebp - 0x68]
call fcn.0040843b
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x14]
call fcn.00408418
mov byte [ebp - 4], 7
lea eax, [ebp - 0x6c]
push eax
call fcn.0044e837
or dword [ebp - 4], 0xffffffff
mov eax, ebx
call fcn.00587133
ret 4