Function at 0x435000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x34
push 0
push 0x4330e4
call fcn.00401070
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x4330e8], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4330e4], eax
call fcn.00401048
call fcn.00404540
call fcn.00404520
call fcn.004044da
call fcn.004042e0
call fcn.004041e3
call fcn.00403d0b
call fcn.00403c96
call fcn.00403ae0
call fcn.00403772
call fcn.00403720
call fcn.00402e50
call fcn.00402daa
call fcn.00402cc4
call fcn.00402c91
call fcn.00402c4c
call fcn.00402b67
call fcn.004025fd
call fcn.0040237a
call fcn.00401b42
call fcn.0040185b
call fcn.004011f7
push 0x433110
push 0x432790
push 8
push 0x15
push 4
call fcn.00404396
mov ebp, dword [0x433110]
mov edx, str.virus
lea ecx, [ebp]
call fcn.00401008
mov edx, str.firewall
lea ecx, [ebp + 4]
call fcn.00401008
mov edx, str.atelier
lea ecx, [ebp + 8]
call fcn.00401008
mov edx, str.f_secure
lea ecx, [ebp + 0x10]
call fcn.00401008
mov edx, str.bitdefender
lea ecx, [ebp + 0x14]
call fcn.00401008
mov edx, str.mcafee
lea ecx, [ebp + 0x18]
call fcn.00401008
mov edx, str.zonealarm
lea ecx, [ebp + 0x1c]
call fcn.00401008
mov edx, str.kaspersky
lea ecx, [ebp + 0x20]
call fcn.00401008
mov edx, str.avg
lea ecx, [ebp + 0x24]
call fcn.00401008
mov edx, str.ESET
lea ecx, [ebp + 0x28]
call fcn.00401008
mov edx, str.avira
lea ecx, [ebp + 0x2c]
call fcn.00401008
mov edx, str.avast_
lea ecx, [ebp + 0x30]
call fcn.00401008
mov edx, str.Malwarebytes
lea ecx, [ebp + 0x34]
call fcn.00401008
mov edx, str.WinPatrol
lea ecx, [ebp + 0x38]
call fcn.00401008
mov edx, str.Trojan_Killer
lea ecx, [ebp + 0x3c]
call fcn.00401008
mov edx, str.Loaris_Trojan_Remover
lea ecx, [ebp + 0x40]
call fcn.00401008
mov edx, str.SUPERAntiSpyware
lea ecx, [ebp + 0x44]
call fcn.00401008
mov edx, str.GlassWire
lea ecx, [ebp + 0x48]
call fcn.00401008
mov edx, str.360_Total_Security
lea ecx, [ebp + 0x4c]
call fcn.00401008
mov edx, str.GridinSoft_Anti_Malware
lea ecx, [ebp + 0x50]
call fcn.00401008
push 0x118
push 0x1f4
push 0
push 0
call fcn.0043531e
push 1
push dword [0x4330f0]
call fcn.00401e7e
push 1
push dword [0x4330f4]
call fcn.00401e7e
push 1
push 0x10
mov eax, str.Clique_no_bot
push eax
call fcn.004353f8
mov edx, str.C:Program_FilesWindowsApps_
lea ecx, [0x4330f8]
call fcn.00401008
mov edx, str.MSTeams_
lea ecx, [0x433100]
call fcn.00401008
call fcn.00402b5f
mov dword [0x433104], eax
mov ebx, dword [0x433104]
cmp ebx, 0x332c
jne 0x4352aa
call fcn.00404161
mov ebx, eax
cmp ebx, dword [0x4330ec]
jne 0x435276
push 0
call fcn.0043545e
jmp 0x4352aa
call fcn.00404161
mov ebx, eax
cmp ebx, dword [0x4330f0]
jne 0x435291
push 0
call fcn.00435a31
jmp 0x4352aa
call fcn.00404161
mov ebx, eax
cmp ebx, dword [0x4330f4]
jne 0x4352aa
push 0
call fcn.00435b63
mov ebx, dword [0x433104]
cmp ebx, 0x333c
jne 0x435243
push 0
call 0x4352d7
call fcn.00404580
push dword [0x4330e4]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040184f
call fcn.00401be6
call sub.ole32.dll_OleUninitialize
call fcn.004025da
call fcn.00402bd6
call fcn.00402cb8
call fcn.00402cea
call fcn.00402d9e
call fcn.00403b00
call fcn.00403cff
call fcn.00404151
call fcn.004042b8
call fcn.00403b00
call fcn.00404510
ret