Function at 0x10059a00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101ed849
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x98
mov eax, dword [0x10275008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 0
xor eax, eax
push 0x12
mov dword [ebp - 0x58], 0
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x54], 0
push str.2345SFWebShell.exe
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x10059adb
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x10059ae8
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x11
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push 0x10234320
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x10059b63
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x10059b70
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0x11
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.2345VirusScan.exe
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x10059beb
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x10059bf8
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x1b
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.2345SafeCenterInstaller.exe
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x10059c73
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x10059c80
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0x15
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.2345SafeCenterSvc.exe
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x10059cfb
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x10059d08
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x18
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.2345SafeCenterUpdate.exe
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x10059d83
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x10059d90
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
call fcn.100e3460
test al, al
je 0x10059ef5
push 0x10
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.SafeExpMon64.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 7
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0x10
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.SafeWebMon64.dll
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 8
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x11
xor eax, eax
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
lea ecx, [ebp - 0xa0]
push str.2345SafeBho64.dll
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
call fcn.10005390
mov byte [ebp - 4], 9
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa0]
call fcn.10005300
push 0x11
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x38]
push str.2345SFGuard64.exe
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
call fcn.10005390
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
jmp 0x1005a03c
push 0xe
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x38]
push str.SafeExpMon.dll
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
call fcn.10005390
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push 0xf
xor eax, eax
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
lea ecx, [ebp - 0xa0]
push str.2345SafeBho.dll
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
call fcn.10005390
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa0]
call fcn.10005300
push 0xe
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.SafeWebMon.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0xf
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.2345SFGuard.exe
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x14
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.SdAviraSndPlugin.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a0b0
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x1005a0bd
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0x13
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.SdEsswSndPlugin.dll
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a138
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x1005a145
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x12
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.SdAntiVBusCore.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a1c0
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x1005a1cd
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0x11
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.SdRTProtectUI.dll
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a248
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x1005a255
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x15
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.SdRTProtectUICtrl.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a2d0
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x1005a2dd
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0x12
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.SdDefenceLogic.dll
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a358
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x1005a365
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0xe
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.WebProtect.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a3e0
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x1005a3ed
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0xf
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.SdHipsLogic.dll
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a468
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x1005a475
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0x10
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.SdHipsUpdate.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a4f0
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x1005a4fd
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0xc
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push 0x10234c7c
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a578
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x1005a585
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push 0xf
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x80]
push str.SdGDOperate.dll
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
call fcn.10005390
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a600
movups xmm0, xmmword [ebp - 0x80]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
jmp 0x1005a60d
lea ecx, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.10005300
push 0x13
xor eax, eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x68]
push str.SdTrojaneEngine.dll
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
call fcn.10005390
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18], eax
je 0x1005a688
movups xmm0, xmmword [ebp - 0x68]
mov dword [eax + 0x10], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x58]
movq qword [eax + 0x10], xmm0
xor eax, eax
add dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
jmp 0x1005a695
lea ecx, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.100092a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68]
call fcn.10005300
push str.SdUIList.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdHipsWebProtect.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdConfigCenter.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdReflectDefender.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdAntiVCache.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdAntiVEngine.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdAntiVCloud.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdRtPopupInpt.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.2345PopupInpt.exe
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.DriverApi.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.DriverInstall.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.ProtectApi.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.ProtectApi64.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.ProtectLogistics.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SafeCenterUpdate.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.SdMsgProtect.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.ysfwdrv.sys
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.ysdefmon.sys
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.ysnetmgr.sys
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.yssysflt.sys
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x88], 0
push eax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x84], 0
push eax
lea edx, [ebp - 0x84]
mov dword [ebp - 0xa8], 0
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xa4], 0
call fcn.10062850
add esp, 8
test al, al
je 0x1005aa55
lea eax, [ebp - 0x38]
push eax
call fcn.1004c280
add esp, 4
mov byte [ebp - 4], 0x2f
push dword [ebp - 0x84]
push dword [ebp - 0x88]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1005df50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
lea ecx, [ebp - 0x20]
call fcn.10012e60
push str.LicXPlugin.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.2345MiniUI.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.2345Extract.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.libcurl_x86.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.breakpad.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.crash_service.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.msvcp120.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.msvcr120.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
push str.courgette_dll.dll
lea ecx, [ebp - 0x38]
call fcn.10005290
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.100083e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.10005300
lea ecx, [ebp - 0x50]
call fcn.100052e0
mov byte [ebp - 4], 0x39
mov esi, dword [ebp - 0x20]
cmp esi, dword [ebp - 0x1c]
je 0x1005ace2
lea eax, [ebp - 0x80]
push eax
call fcn.1004c280
add esp, 4
mov byte [ebp - 4], 0x3a
mov edx, eax
push esi
lea ecx, [ebp - 0xa0]
call fcn.100e17c0
add esp, 4
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x50]
push eax
call fcn.10008620
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xa0]
call fcn.10005300
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x80]
call fcn.10005300
lea ecx, [ebp - 0x50]
call fcn.100e0cd0
test al, al
jne 0x1005acd6
push 4
mov ecx, 0x102794b4
call fcn.1010b510
mov edi, eax
test edi, edi
je 0x1005acb5
lea ecx, [ebp - 0x38]
call fcn.100052e0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x50]
call fcn.10008610
push eax
lea eax, [ebp - 0x38]
push str.file_no_exist___s
push eax
call fcn.1010b9f0
add esp, 0xc
lea eax, [ebp - 0x38]
mov ecx, 0x102794b4
push 0x9c
push str.RC::RCStatFileComplete::SaveSafeCenterFileStat
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_framework_src_framework_src_statistic_rcstatfilecomplete.cpp
push eax
push 4
call fcn.1010b550
cmp edi, 1
jbe 0x1005aca9
lea eax, [ebp - 0x38]
mov ecx, 0x102794b4
push eax
call fcn.1010b870
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x38]
call fcn.10005300
lea ecx, [ebp - 0x68]
call fcn.100052e0
mov byte [ebp - 4], 0x3d
push eax
push 1
push esi
call fcn.1005e2d0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x68]
call fcn.10005300
add esi, 0x18
cmp esi, dword [ebp - 0x1c]
jne 0x1005abe6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x50]
call fcn.10005300
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.10008a90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.101c837b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret