Function at 0x4673fd
Capabilities:
Copy file
Delete directory
Delete file
Enumerate files on windows
Execute command
Get installed programs
Manipulate safe mode programs
Parse pe header
Persist via com hijack
Persist via default file association registry key
Persist via image file execution options registry key
Persist via lnk shortcut
Persist via lsa registry key
Persist via run registry key
Persist via windows service
Persist via winlogon helper dll registry key
Query or enumerate registry key
Query or enumerate registry value
Self delete
Set file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5128d3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x3794
call fcn.005106b0
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 4], 0
mov dword [ebp - 0x1bac], 0
mov dword [ebp - 0x1ba4], 0
mov dword [ebp - 0x179c], 0
lea ecx, [ebp - 0xe50]
call sub.MFC42.DLL_CStringArray::CStringArray
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x92c]
call sub.MFC42.DLL_CStringArray::CStringArray
mov byte [ebp - 4], 2
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x5507c8
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5507d8
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5507e4
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5507f0
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4674df
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x467725
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x818]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x818]
push eax
push 0x5507fc
push 0x80000002
lea ecx, [ebp - 0x27b0]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2cf8], eax
mov edx, dword [ebp - 0x2cf8]
mov dword [ebp - 0x2cfc], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x2cfc]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27b0]
call sub.MFC42.DLL_CString::CString
push 0x55082c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4675c2
push 0x5b8998
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4675c2
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea edx, [ebp - 0x818]
push edx
push 0x550834
push 0x80000002
lea eax, [ebp - 0x27b4]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d00], eax
mov ecx, dword [ebp - 0x2d00]
mov dword [ebp - 0x2d04], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x2d04]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27b4]
call sub.MFC42.DLL_CString::CString
push 0x550870
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x467665
push 0x5b899c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x467665
lea eax, [ebp - 0xd34]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x550878
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x818]
push ecx
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x27b8]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d08], eax
mov eax, dword [ebp - 0x2d08]
mov dword [ebp - 0x2d0c], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x2d0c]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27b8]
call sub.MFC42.DLL_CString::CString
push 0x5508ac
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x467720
push 0x5b89a0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x467720
lea edx, [ebp - 0xd34]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
jmp 0x4674d2
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push str.Adblocker
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.CosstMinn
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.CostMin
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.DOwinloadd_keepper
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5508e8
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.NeXtCoup
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.pricecchop
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.PrIcechop
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.proicecohop
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.savE_aoiN
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.savE_neit
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.savE_net
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.save_oen
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.save_oN
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.SaveClicker
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.savee_oon
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.saveu_on
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x550980
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.soave__on
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.VaauDDix
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.WEbbIIng
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.YoutubeAdblocker
lea ecx, [ebp - 0xe50]
call fcn.0050f680
lea ecx, [ebp - 0x92c]
call fcn.0050f5b0
push 0x5509bc
lea ecx, [ebp - 0x92c]
call fcn.0050f680
push 0x5509f0
lea ecx, [ebp - 0x92c]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4678d4
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0x92c]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x467bc1
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0x92c]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x1bac]
push eax
push 0x20119
push 0
lea ecx, [ebp - 0x1fac]
push ecx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x467bbc
mov dword [ebp - 0x179c], 0
push 0x5b89a4
lea edx, [ebp - 0xd30]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x400
lea eax, [ebp - 0xd30]
push eax
mov ecx, dword [ebp - 0x179c]
mov dword [ebp - 0x2d10], ecx
mov edx, dword [ebp - 0x2d10]
push edx
mov eax, dword [ebp - 0x1bac]
push eax
mov ecx, dword [ebp - 0x179c]
add ecx, 1
mov dword [ebp - 0x179c], ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x46799e
jmp 0x467baf
lea edx, [ebp - 0xd30]
push edx
lea eax, [ebp - 0x1fac]
push eax
push 0x550a30
lea ecx, [ebp - 0x918]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x550a38
lea edx, [ebp - 0x918]
push edx
push 0x80000002
lea eax, [ebp - 0x27bc]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d14], eax
mov ecx, dword [ebp - 0x2d14]
mov dword [ebp - 0x2d18], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2d18]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x23ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27bc]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x23ac]
push eax
call fcn.00401fca
add esp, 4
push str..EXE___S__N__I:_EXECUTECOMMANDS_UNINSTALLCOMMANDS____
lea ecx, [ebp - 0x23ac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x467a66
push str..EXE___X:1__S__N__I:_EXECUTECOMMANDS_UNINSTALLCOMMANDS_
lea edx, [ebp - 0x23ac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x467baa
push 0x550ab8
lea eax, [ebp - 0x918]
push eax
push 0x80000002
lea ecx, [ebp - 0x27c0]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d1c], eax
mov edx, dword [ebp - 0x2d1c]
mov dword [ebp - 0x2d20], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2d20]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x414]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c0]
call sub.MFC42.DLL_CString::CString
push 0x5b89a8
lea ecx, [ebp - 0x414]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x467b83
lea edx, [ebp - 0x414]
push edx
lea ecx, [ebp - 0xe50]
call fcn.0050f680
lea eax, [ebp - 0x414]
push eax
mov ecx, dword [0x5b7650]
push ecx
push 0x550ac4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
lea edx, [ebp - 0x414]
push edx
mov eax, dword [0x5b7658]
push eax
push 0x550acc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
lea ecx, [ebp - 0x414]
push ecx
mov edx, dword [0x5b7658]
push edx
push 0x550ad4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
lea eax, [ebp - 0x918]
push eax
push 0x80000002
call fcn.00402a6b
add esp, 8
test eax, eax
jne 0x467baa
mov ecx, dword [ebp - 0x179c]
sub ecx, 1
mov dword [ebp - 0x179c], ecx
jmp 0x467946
mov edx, dword [ebp - 0x1bac]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4678c7
mov dword [0x5b84b8], 0
jmp 0x467bda
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x467ede
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x1fac]
push eax
call fcn.00401fca
add esp, 4
lea ecx, [ebp - 0x1fac]
cmp ecx, 0x5b89ac
jne 0x467c39
jmp 0x467bcd
lea edx, [ebp - 0x1bac]
push edx
push 0x20119
push 0
push 0x550ae0
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x467d89
mov dword [ebp - 0x179c], 0
push 0x5b89b0
lea eax, [ebp - 0xd30]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x400
lea ecx, [ebp - 0xd30]
push ecx
mov edx, dword [ebp - 0x179c]
mov dword [ebp - 0x2d24], edx
mov eax, dword [ebp - 0x2d24]
push eax
mov ecx, dword [ebp - 0x1bac]
push ecx
mov edx, dword [ebp - 0x179c]
add edx, 1
mov dword [ebp - 0x179c], edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x467cc1
jmp 0x467d7c
lea eax, [ebp - 0xd30]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionexplorerBrowser_Helper_Objects_s
lea ecx, [ebp - 0x918]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x550b7c
lea edx, [ebp - 0x918]
push edx
push 0x80000002
lea eax, [ebp - 0x27c4]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d28], eax
mov ecx, dword [ebp - 0x2d28]
mov dword [ebp - 0x2d2c], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x2d2c]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x23ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c4]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x23ac]
push eax
call fcn.00401fca
add esp, 4
lea ecx, [ebp - 0x23ac]
push ecx
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x467d77
lea eax, [ebp - 0xd30]
push eax
mov ecx, 0x5b5ba8
call fcn.0050f680
jmp 0x467c69
mov ecx, dword [ebp - 0x1bac]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x1bac]
push edx
push 0x20119
push 0
push 0x550b80
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x467ed9
mov dword [ebp - 0x179c], 0
push 0x5b89b4
lea eax, [ebp - 0xd30]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x400
lea ecx, [ebp - 0xd30]
push ecx
mov edx, dword [ebp - 0x179c]
mov dword [ebp - 0x2d30], edx
mov eax, dword [ebp - 0x2d30]
push eax
mov ecx, dword [ebp - 0x1bac]
push ecx
mov edx, dword [ebp - 0x179c]
add edx, 1
mov dword [ebp - 0x179c], edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x467e11
jmp 0x467ecc
lea eax, [ebp - 0xd30]
push eax
push str.SoftwareWow6432NodeMicrosoftWindowsCurrentVersionexplorerBrowser_Helper_Objects_s
lea ecx, [ebp - 0x918]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x550c34
lea edx, [ebp - 0x918]
push edx
push 0x80000002
lea eax, [ebp - 0x27c8]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d34], eax
mov ecx, dword [ebp - 0x2d34]
mov dword [ebp - 0x2d38], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2d38]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x23ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c8]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x23ac]
push eax
call fcn.00401fca
add esp, 4
lea ecx, [ebp - 0x23ac]
push ecx
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x467ec7
lea eax, [ebp - 0xd30]
push eax
mov ecx, 0x5b5ba8
call fcn.0050f680
jmp 0x467db9
mov ecx, dword [ebp - 0x1bac]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x467bcd
mov edx, dword [0x5b7674]
push edx
push 0x550c38
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x467f15
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x467f31
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x1364], 0
jmp 0x467f06
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0xe34]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx edx, byte [ebp - 0x1364]
test edx, edx
jne 0x467f5b
jmp 0x4680d7
lea eax, [ebp - 0x1364]
push eax
mov ecx, dword [0x5b7674]
push ecx
push 0x550c44
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
push 0
lea edx, [ebp - 0x27cc]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2d3c], eax
mov eax, dword [ebp - 0x2d3c]
mov dword [ebp - 0x2d40], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2d40]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1fac]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27cc]
call sub.MFC42.DLL_CString::CString
lea edx, [ebp - 0x1fac]
push edx
call fcn.00401fca
add esp, 4
lea eax, [ebp - 0x1364]
push eax
lea ecx, [ebp - 0x1790]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x1790]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov byte [ebp + eax - 0x1794], 0
lea ecx, [ebp - 0x1790]
push ecx
push 0x5b7bb4
push 0x5b7ba4
push 0x550c4c
lea edx, [ebp - 0x23ac]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
lea eax, [ebp - 0x23ac]
push eax
call fcn.00401fca
add esp, 4
lea ecx, [ebp - 0x23ac]
push ecx
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x4680bb
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x23ac]
push ecx
mov ecx, 0x5b5bc0
call fcn.0050f680
lea edx, [ebp - 0x1364]
push edx
mov eax, dword [0x5b7674]
push eax
push 0x550c54
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x1390]
push ecx
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x467f4b
mov eax, dword [ebp - 0x1794]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b7bb4
push 0x5b7ba4
push str._s_sRoBdbMRoBdb.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7bb4
push 0x5b7ba4
push str._s_sRoBdbM
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x1fac]
push edx
mov ecx, 0x5b5bc0
call fcn.0050f680
mov eax, dword [0x5b7674]
push eax
push 0x550c80
lea ecx, [ebp - 0xe34]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x468176
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0x104
jae 0x468191
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x1364], 0
jmp 0x468167
lea ecx, [ebp - 0x1390]
push ecx
lea edx, [ebp - 0xe34]
push edx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx eax, byte [ebp - 0x1364]
test eax, eax
jne 0x4681bb
jmp 0x468326
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b7674]
push edx
push 0x550c8c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
push 0
lea eax, [ebp - 0x27d0]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2d44], eax
mov ecx, dword [ebp - 0x2d44]
mov dword [ebp - 0x2d48], ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2d48]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27d0]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x1fac]
push eax
call fcn.00401fca
add esp, 4
push 0x5b7cb4
push str._sSkype_
lea ecx, [ebp - 0x23ac]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x23ac]
push edx
call fcn.00401fca
add esp, 4
push 0x5b7cb4
push str._sSkyp_
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x414]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0x23ac]
push edx
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4682c9
lea ecx, [ebp - 0x414]
push ecx
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46830a
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b7674]
push edx
push 0x550ca8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0x1390]
push eax
mov ecx, dword [ebp - 0x1794]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4681ab
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b7ba4
push str._sNueva_carpetaa.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x550cc8
push 0x550cd4
push 0x80000002
lea eax, [ebp - 0x27d4]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d4c], eax
mov ecx, dword [ebp - 0x2d4c]
mov dword [ebp - 0x2d50], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x2d50]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27d4]
call sub.MFC42.DLL_CString::CString
push 0x550d04
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4684a6
push 0x5b89b8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4684a6
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x468450
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46848a
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x468471
jmp 0x46848a
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x468434
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x550d0c
push 0x550d18
push 0x80000002
lea eax, [ebp - 0x27d8]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d54], eax
mov ecx, dword [ebp - 0x2d54]
mov dword [ebp - 0x2d58], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x2d58]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27d8]
call sub.MFC42.DLL_CString::CString
push 0x550d54
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4685f2
push 0x5b89bc
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4685f2
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46859c
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x4685d6
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x4685bd
jmp 0x4685d6
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x468580
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x550d5c
push str.SoftwareMicrosoftWindows_NTCurrentVersionImage_File_Execution_Options_a2servic.exe
push 0x80000002
lea eax, [ebp - 0x27dc]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d5c], eax
mov ecx, dword [ebp - 0x2d5c]
mov dword [ebp - 0x2d60], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x2d60]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27dc]
call sub.MFC42.DLL_CString::CString
push 0x550dc0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46873e
push 0x5b89c0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46873e
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x4686e8
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x468722
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x468709
jmp 0x468722
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x4686cc
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x550dc8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x550dfc
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x27e0]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d64], eax
mov ecx, dword [ebp - 0x2d64]
mov dword [ebp - 0x2d68], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x2d68]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27e0]
call sub.MFC42.DLL_CString::CString
push 0x550e10
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4688a2
push 0x5b89c4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4688a2
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46884c
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x468886
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x46886d
jmp 0x468886
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x468830
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0xd6
push 0xc4
push 0xba
push 0xb7
push 6
push 0xe4
push 0xdf
push 0x550e18
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x24
push 0x550e50
push 0x5b6504
push 0x80000002
lea eax, [ebp - 0x27e4]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d6c], eax
mov ecx, dword [ebp - 0x2d6c]
mov dword [ebp - 0x2d70], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x2d70]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27e4]
call sub.MFC42.DLL_CString::CString
push 0x550e5c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x468a9b
push 0x5b89c8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x468a9b
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 0
mov dword [ebp - 0x1798], 0
jmp 0x4689bc
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [0x5b84b8]
cmp ecx, dword [ebp - 0x17a0]
jge 0x468a25
cmp dword [0x5b84b8], 0
jne 0x4689e7
mov edx, dword [0x5b84b8]
movsx eax, byte [edx + 0x5b6504]
cmp eax, 0x22
jne 0x4689e7
jmp 0x4689af
mov ecx, dword [0x5b84b8]
movsx edx, byte [ecx + 0x5b6504]
cmp edx, 0x22
jne 0x4689fb
jmp 0x468a25
mov eax, dword [ebp - 0x1798]
mov ecx, dword [0x5b84b8]
mov dl, byte [ecx + 0x5b6504]
mov byte [ebp + eax - 0x27ac], dl
mov eax, dword [ebp - 0x1798]
add eax, 1
mov dword [ebp - 0x1798], eax
jmp 0x4689af
mov ecx, dword [ebp - 0x1798]
mov byte [ebp + ecx - 0x27ac], 0
lea edx, [ebp - 0x27ac]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b89cc
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0xd6
push 0xc4
push 0xba
push 0xb7
push 6
push 0xe4
push 0xdf
push str.SystemCurrentControlSetServices_11F_c_c_c_c_c_c_c_I
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x24
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
push 0x5b78a4
push 0x550e9c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x550ed0
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x27e8]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d74], eax
mov ecx, dword [ebp - 0x2d74]
mov dword [ebp - 0x2d78], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x2d78]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27e8]
call sub.MFC42.DLL_CString::CString
push 0x550ed4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x468bff
push 0x5b89d0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x468bff
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x468ba9
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x468be3
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x468bca
jmp 0x468be3
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x468b8d
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x550edc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x550f10
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x27ec]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d7c], eax
mov ecx, dword [ebp - 0x2d7c]
mov dword [ebp - 0x2d80], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x2d80]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27ec]
call sub.MFC42.DLL_CString::CString
push 0x550f14
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x468d63
push 0x5b89d4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x468d63
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x468d0d
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x468d47
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x468d2e
jmp 0x468d47
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x468cf1
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsupd32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsvc32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x550f3c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winupd32cfg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winupdmgr32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsvcs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winupdsvcs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Security_Update.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x550fb4
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Helper
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Helpers
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Host_Process_for_Windows_Services
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Host_Process_for_Windows_Tasks
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Service_Driver
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Service_Manager
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Update_495036
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Driver
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Driver_Configuration
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Driver_Manager
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Drivers
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Manager
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Service
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Service_Manager
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Services
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Services_Up
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_SVCSc
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Update_Manager
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Update_Services
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Updates
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Microsoft_Windows_Updating_Service
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x551234
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.WCfgMgr
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.WCfgMgr32
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.WDrvConfiguration
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.WinCfgMgr
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_DDGG
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Firewall_Service
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Host_Process
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Operating_System
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Security_Manager
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Security_Manager_32
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Security_Svcscs
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Security_Update
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Service
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_11
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_22
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_33
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_44
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_39405
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_97865
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_346346
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_784475
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_2085756
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_8675887
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_9657486
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_9754865
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_9759759
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_20857567
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_48492020
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_49000499
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_49303004
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_75849348
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_97597579
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_208575678
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_346346346
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_427256357
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_494959050
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_495006960
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_495955904
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_568568568
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_537426246
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_944930304
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_2462742724
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_2478475884
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_2487245874
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_4264246426
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_4849939394
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_4859540300
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_4950505060
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_7080607400
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_7207406208
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_8334834848
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_8798984944
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_8970679586
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_24857802475
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_46363463464
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_49400405050
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_82405807247
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_94949499393
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_250459247594
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Update_Services
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Upgrade_405060
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Upgrade_559793
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Upgrade_4059300
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Upgrade_4405650
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Upgrade_40885040
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Upgrade_49096793
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Windows_Upgrade_89393874
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.WindowsServicesUpdates32
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4694f9
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46960e
push 0x5b78a4
push 0x5518e0
lea ecx, [ebp - 0xd30]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov edx, dword [0x5b84b8]
push edx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1790]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x1790]
push ecx
lea edx, [ebp - 0xd30]
push edx
push 0x80000003
lea eax, [ebp - 0x27f0]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d84], eax
mov ecx, dword [ebp - 0x2d84]
mov dword [ebp - 0x2d88], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x2d88]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27f0]
call sub.MFC42.DLL_CString::CString
push 0x551914
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4695f8
push 0x5b89d8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4695f8
lea eax, [ebp - 0xd34]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea ecx, [ebp - 0x1790]
push ecx
mov ecx, 0x5b5b90
call fcn.0050f680
jmp 0x4694ec
push 0x55191c
push 0x551924
push 0x80000002
lea edx, [ebp - 0x27f4]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d8c], eax
mov eax, dword [ebp - 0x2d8c]
mov dword [ebp - 0x2d90], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x2d90]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27f4]
call sub.MFC42.DLL_CString::CString
push 0x551954
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46975e
push 0x5b89dc
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46975e
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x469706
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov eax, dword [ebp - 0x1798]
add eax, 1
mov dword [ebp - 0x1798], eax
mov ecx, dword [0x5b84b8]
cmp ecx, dword [ebp - 0x17a0]
jge 0x469742
mov edx, dword [0x5b84b8]
movsx eax, byte [edx + 0x5b6504]
cmp eax, 0x22
jne 0x469728
jmp 0x469742
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [edx + 0x5b6504]
mov byte [ecx + 0x5b6504], al
jmp 0x4696e8
mov ecx, dword [ebp - 0x1798]
mov byte [ecx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x55195c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x551990
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x27f8]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2d94], eax
mov eax, dword [ebp - 0x2d94]
mov dword [ebp - 0x2d98], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2d98]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27f8]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::MakeUpper
push 0x5519a4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4698bc
push 0x5b89e0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4698bc
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov ecx, dword [ebp - 0x17a0]
mov dword [0x5b84b8], ecx
jmp 0x469866
mov edx, dword [0x5b84b8]
sub edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0xffffffff
jle 0x469885
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x1fac]
cmp ecx, 0x2e
jne 0x469883
jmp 0x469885
jmp 0x469857
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x1fac], 0
lea eax, [ebp - 0x1fac]
push eax
push 0x5519ac
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7db4
push str._sTasksUpdates.
lea ecx, [ebp - 0xe34]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x4698f1
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0x104
jae 0x46990c
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x1364], 0
jmp 0x4698e2
lea ecx, [ebp - 0x1390]
push ecx
lea edx, [ebp - 0xe34]
push edx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx eax, byte [ebp - 0x1364]
test eax, eax
jne 0x469936
jmp 0x4699ea
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b7654]
push edx
push 0x5519c8
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x27fc], esp
lea edx, [ebp - 0x1fac]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2d9c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2da0], eax
cmp dword [ebp - 0x2da0], 0
je 0x4699ce
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x1364]
push ecx
push 0x5b7db4
push str._sTasksUpdates_s
lea edx, [ebp - 0x23ac]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x23ac]
push eax
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x1390]
push ecx
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x469926
mov eax, dword [ebp - 0x1794]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov ecx, dword [0x5b7674]
push ecx
push 0x5519e8
lea edx, [ebp - 0xe34]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x469a2c
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x469a48
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1364], 0
jmp 0x469a1f
lea edx, [ebp - 0x1390]
push edx
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx ecx, byte [ebp - 0x1364]
test ecx, ecx
jne 0x469a72
jmp 0x469c0f
lea edx, [ebp - 0x1364]
push edx
mov eax, dword [0x5b7674]
push eax
push 0x5519f4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
push 0
lea ecx, [ebp - 0x2800]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2da4], eax
mov edx, dword [ebp - 0x2da4]
mov dword [ebp - 0x2da8], edx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x2da8]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2800]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x1fac]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0x1364]
push edx
lea eax, [ebp - 0x1790]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x1790]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov edx, dword [ebp - 0x17a0]
mov byte [ebp + edx - 0x1794], 0
lea eax, [ebp - 0x1790]
push eax
lea ecx, [ebp - 0x1790]
push ecx
mov edx, dword [0x5b7654]
push edx
push 0x5519fc
lea eax, [ebp - 0x23ac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
lea ecx, [ebp - 0x23ac]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0x23ac]
push edx
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x469bf3
lea ecx, [ebp - 0x1fac]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea edx, [ebp - 0x1364]
push edx
mov eax, dword [0x5b7674]
push eax
push 0x551a14
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x1790]
push ecx
mov edx, dword [0x5b7654]
push edx
push 0x551a1c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
lea eax, [ebp - 0x1390]
push eax
mov ecx, dword [ebp - 0x1794]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x469a62
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b7db4
push str._sTasksWindows_Driver_Foundation
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x469c51
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x469c6d
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x1364], 0
jmp 0x469c42
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0xe34]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx edx, byte [ebp - 0x1364]
test edx, edx
jne 0x469c94
jmp 0x469cda
lea eax, [ebp - 0x1364]
push eax
push 0x5b7db4
push 0x551a54
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x1390]
push ecx
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x469c87
mov eax, dword [ebp - 0x1794]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DdoviuwfMlczfe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TmlqlsbdisHahrcqyj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZzpvitKyrbbc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push str.Firefox_Default_Browser_Agent
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.NvNgxUpdateCheckDaily_
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [ebp - 0x418], 0
jmp 0x469dd8
mov ecx, dword [ebp - 0x418]
add ecx, 1
mov dword [ebp - 0x418], ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [ebp - 0x418], eax
jge 0x469fb8
mov edx, dword [ebp - 0x418]
push edx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1790]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x1790]
push ecx
push 0x5b7db4
push 0x551ae0
lea edx, [ebp - 0x27ac]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
mov dword [0x5b84b8], 0
jmp 0x469e52
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x469e6e
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1364], 0
jmp 0x469e45
lea edx, [ebp - 0x1390]
push edx
lea eax, [ebp - 0x27ac]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx ecx, byte [ebp - 0x1364]
test ecx, ecx
jne 0x469e98
jmp 0x469fa6
lea edx, [ebp - 0x1364]
push edx
push 0x5b7db4
push 0x551af0
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x1fac]
push ecx
lea edx, [ebp - 0x2804]
push edx
call fcn.00497a0b
add esp, 8
mov dword [ebp - 0x2dac], eax
mov eax, dword [ebp - 0x2dac]
mov dword [ebp - 0x2db0], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x2db0]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x23ac]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2804]
call sub.MFC42.DLL_CString::CString
push 0x5b89e4
lea edx, [ebp - 0x23ac]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x469f8a
lea eax, [ebp - 0x23ac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x23ac]
push ecx
call fcn.004aea44
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x2808], esp
lea edx, [ebp - 0x23ac]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2db4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2db8], eax
cmp dword [ebp - 0x2db8], 0
jne 0x469f8a
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x1390]
push ecx
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x469e88
mov eax, dword [ebp - 0x1794]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
jmp 0x469dc9
push 0x551afc
push str.SystemCurrentControlSetServicesClipBooksParameters
push 0x80000002
lea ecx, [ebp - 0x280c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2dbc], eax
mov edx, dword [ebp - 0x2dbc]
mov dword [ebp - 0x2dc0], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x2dc0]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x280c]
call sub.MFC42.DLL_CString::CString
push 0x551b40
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a059
push 0x5b89e8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a059
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x551b48
push str.SystemCurrentControlSetServicesctfnomParameters
push 0x80000002
lea edx, [ebp - 0x2810]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2dc4], eax
mov eax, dword [ebp - 0x2dc4]
mov dword [ebp - 0x2dc8], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x2dc8]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2810]
call sub.MFC42.DLL_CString::CString
push 0x551b88
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a0fa
push 0x5b89ec
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a0fa
lea edx, [ebp - 0xd34]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x551b90
push str.SystemCurrentControlSetServicesSRDSLParameters
push 0x80000002
lea eax, [ebp - 0x2814]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2dcc], eax
mov ecx, dword [ebp - 0x2dcc]
mov dword [ebp - 0x2dd0], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x2dd0]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2814]
call sub.MFC42.DLL_CString::CString
push 0x551bd0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a19b
push 0x5b89f0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a19b
lea eax, [ebp - 0xd34]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x551bd8
push str.SystemCurrentControlSetServices_scvhostParameters
push 0x80000002
lea ecx, [ebp - 0x2818]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2dd4], eax
mov edx, dword [ebp - 0x2dd4]
mov dword [ebp - 0x2dd8], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x2dd8]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2818]
call sub.MFC42.DLL_CString::CString
push 0x551c1c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a23c
push 0x5b89f4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a23c
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x551c24
push str.SystemCurrentControlSetServicesdrk
push 0x80000002
lea edx, [ebp - 0x281c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ddc], eax
mov eax, dword [ebp - 0x2ddc]
mov dword [ebp - 0x2de0], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x2de0]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x281c]
call sub.MFC42.DLL_CString::CString
push 0x551c58
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a2dd
push 0x5b89f8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a2dd
lea edx, [ebp - 0xd34]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x551c60
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x551c94
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x2820]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2de4], eax
mov ecx, dword [ebp - 0x2de4]
mov dword [ebp - 0x2de8], ecx
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x2de8]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2820]
call sub.MFC42.DLL_CString::CString
push 0x551cac
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a441
push 0x5b89fc
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a441
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46a3eb
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46a425
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x46a40c
jmp 0x46a425
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x46a3cf
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x551cb4
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x551cbc
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46a485
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46a730
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7654]
push edx
push str._s_s_s.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push ecx
mov ecx, esp
mov dword [ebp - 0x2824], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2dec], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2df0], eax
cmp dword [ebp - 0x2df0], 0
je 0x46a52b
push 0x551cd4
call fcn.00402131
add esp, 4
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push 0x5b78a4
push 0x551ce4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push str.TVNAME
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x2828]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2df4], eax
mov eax, dword [ebp - 0x2df4]
mov dword [ebp - 0x2df8], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x2df8]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2828]
call sub.MFC42.DLL_CString::CString
push 0x551cfc
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a62b
push 0x5b8a00
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a62b
mov edx, dword [ebp - 0xd34]
push edx
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7654]
push edx
push 0x551d04
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push 0x5b78a4
push 0x551d10
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push str.EXTNAME
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x282c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2dfc], eax
mov eax, dword [ebp - 0x2dfc]
mov dword [ebp - 0x2e00], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x2e00]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x282c]
call sub.MFC42.DLL_CString::CString
push 0x551d28
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46a72b
push 0x5b8a04
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46a72b
mov edx, dword [ebp - 0xd34]
push edx
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7654]
push edx
push 0x551d30
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
jmp 0x46a478
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ENCUTILENCUTIL.EXE
lea ecx, [ebp - 0x1fac]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x1fac]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x23ac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NAVNAV.EXE
lea ecx, [ebp - 0x23ac]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x23ac]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x414]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SQLROOTSQLROOT.EXE
lea ecx, [ebp - 0x414]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x414]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
push ecx
mov ecx, esp
mov dword [ebp - 0x2830], esp
lea eax, [ebp - 0x1fac]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2e04], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2e08], eax
cmp dword [ebp - 0x2e08], 0
jne 0x46a883
push ecx
mov ecx, esp
mov dword [ebp - 0x2834], esp
lea edx, [ebp - 0x23ac]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2e0c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2e10], eax
cmp dword [ebp - 0x2e10], 0
jne 0x46a883
push ecx
mov ecx, esp
mov dword [ebp - 0x2838], esp
lea eax, [ebp - 0x414]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2e14], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2e18], eax
cmp dword [ebp - 0x2e18], 0
je 0x46a89f
cmp dword [0x5b851c], 0
jne 0x46a89a
push 0
push 0
push str.Detectado_Bandok_nReinicie_el_Sistema_para_completar_la_Limpieza.
call sub.MFC42.DLL_AfxMessageBox
call fcn.004ae964
mov ecx, dword [0x5b764c]
push ecx
push str._s.txt
lea edx, [ebp - 0xe34]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x46a8d4
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x46a8f0
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1364], 0
jmp 0x46a8c7
lea edx, [ebp - 0x1390]
push edx
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx ecx, byte [ebp - 0x1364]
test ecx, ecx
jne 0x46a91a
jmp 0x46aa64
mov edx, dword [ebp - 0x1390]
and edx, 0x10
cmp edx, 0x10
jne 0x46a92d
jmp 0x46aa48
lea eax, [ebp - 0x1364]
push eax
lea ecx, [ebp - 0x1fac]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov byte [ebp + eax - 0x1fb0], 0
lea ecx, [ebp - 0x1fac]
push ecx
push 0x551dcc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x551dd8
push 0x5b6504
push 0x80000000
lea edx, [ebp - 0x283c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e1c], eax
mov eax, dword [ebp - 0x2e1c]
mov dword [ebp - 0x2e20], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x2e20]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x283c]
call sub.MFC42.DLL_CString::CString
push 0x551ddc
lea edx, [ebp - 0xd34]
push edx
call fcn.0050f630
and eax, 0xff
test eax, eax
je 0x46aa48
lea eax, [ebp - 0x1fac]
push eax
push 0x551de4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5ba8
call fcn.0050f680
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b764c]
push edx
push 0x551dec
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0x1390]
push eax
mov ecx, dword [ebp - 0x1794]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x46a90a
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b78a4
push 0x551df4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x551e28
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x2840]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e24], eax
mov ecx, dword [ebp - 0x2e24]
mov dword [ebp - 0x2e28], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x2e28]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2840]
call sub.MFC42.DLL_CString::CString
push 0x551e30
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46ab2a
push 0x5b8a08
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46ab2a
lea eax, [ebp - 0xd34]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x551e38
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x2844]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e2c], eax
mov edx, dword [ebp - 0x2e2c]
mov dword [ebp - 0x2e30], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x2e30]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2844]
call sub.MFC42.DLL_CString::CString
push 0x551e60
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46abcb
push 0x5b8a0c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46abcb
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x551e68
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x551ea0
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x2848]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e34], eax
mov eax, dword [ebp - 0x2e34]
mov dword [ebp - 0x2e38], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x2e38]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2848]
call sub.MFC42.DLL_CString::CString
push 0x551ec8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46ac84
push 0x5b8a10
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46ac84
lea edx, [ebp - 0xd34]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov eax, dword [0x5b764c]
push eax
push str._sYgPack_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x551edc
push 0x5b6504
call fcn.0049757d
add esp, 8
mov ecx, dword [0x5b764c]
push ecx
push str._sOdics_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x551ef0
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x551ef8
push 0x551f00
push 0x80000002
lea edx, [ebp - 0x284c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e3c], eax
mov eax, dword [ebp - 0x2e3c]
mov dword [ebp - 0x2e40], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x2e40]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x284c]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x27ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x27ac]
push eax
call fcn.00401fca
add esp, 4
lea ecx, [ebp - 0x27ac]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
push 0x551f38
lea edx, [ebp - 0x27ac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46ae34
movsx eax, byte [ebp - 0x278e]
cmp eax, 0x2e
jne 0x46ae34
movsx ecx, byte [ebp - 0x278b]
push ecx
movsx edx, byte [ebp - 0x278c]
push edx
movsx eax, byte [ebp - 0x278d]
push eax
movsx ecx, byte [ebp - 0x278e]
push ecx
movsx edx, byte [ebp - 0x278f]
push edx
movsx eax, byte [ebp - 0x2790]
push eax
movsx ecx, byte [ebp - 0x2791]
push ecx
movsx edx, byte [ebp - 0x2792]
push edx
push 0x5b7db4
push str._s_c_c_c_c_c_c_c_c
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x2c
lea ecx, [ebp - 0x1fac]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea edx, [ebp - 0x1fac]
push edx
call fcn.004aea44
add esp, 4
push 0x551f68
push 0x54
push 0x551f78
push 0x551f80
push 0x80000002
call fcn.00402bb9
add esp, 0x14
push 0x551fb8
lea eax, [ebp - 0x27ac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46af50
mov dword [0x5b84b8], 0
jmp 0x46ae6c
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46ae90
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x27ac]
cmp ecx, 0x22
jne 0x46ae8e
jmp 0x46ae90
jmp 0x46ae5d
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov dword [ebp - 0x1798], 0
jmp 0x46aec7
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46af04
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x27ac]
cmp ecx, 0x22
jne 0x46aee9
jmp 0x46af04
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [ebp + eax - 0x27ac]
mov byte [ebp + edx - 0x1fac], cl
jmp 0x46aeab
mov edx, dword [ebp - 0x1798]
mov byte [ebp + edx - 0x1fac], 0
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x1fac]
push ecx
call fcn.004aea44
add esp, 4
push 0x551fd4
push 0x54
push 0x551fe4
push 0x551fec
push 0x80000002
call fcn.00402bb9
add esp, 0x14
push 0x552024
push 0x55202c
push 0x80000002
lea edx, [ebp - 0x2850]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e44], eax
mov eax, dword [ebp - 0x2e44]
mov dword [ebp - 0x2e48], eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x2e48]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2850]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x27ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x27ac]
push eax
call fcn.00401fca
add esp, 4
lea ecx, [ebp - 0x27ac]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
push str.EXPLORER.EXE_RUNDLL32.EXE
lea edx, [ebp - 0x27ac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46b0a9
movsx eax, byte [ebp - 0x278e]
cmp eax, 0x2e
jne 0x46b0a9
movsx ecx, byte [ebp - 0x278b]
push ecx
movsx edx, byte [ebp - 0x278c]
push edx
movsx eax, byte [ebp - 0x278d]
push eax
movsx ecx, byte [ebp - 0x278e]
push ecx
movsx edx, byte [ebp - 0x278f]
push edx
movsx eax, byte [ebp - 0x2790]
push eax
movsx ecx, byte [ebp - 0x2791]
push ecx
movsx edx, byte [ebp - 0x2792]
push edx
push 0x5b7eb4
push str._sSysWOW64_c_c_c_c_c_c_c_c
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x2c
lea ecx, [ebp - 0x1fac]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea edx, [ebp - 0x1fac]
push edx
call fcn.004aea44
add esp, 4
push 0x5520ac
push 0x54
push 0x5520bc
push 0x5520c4
push 0x80000002
call fcn.00402bb9
add esp, 0x14
push str.EXPLORER.EXE_RUNDLL32.EXE__
lea eax, [ebp - 0x27ac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46b1c5
mov dword [0x5b84b8], 0
jmp 0x46b0e1
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46b105
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x27ac]
cmp ecx, 0x22
jne 0x46b103
jmp 0x46b105
jmp 0x46b0d2
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov dword [ebp - 0x1798], 0
jmp 0x46b13c
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46b179
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x27ac]
cmp ecx, 0x22
jne 0x46b15e
jmp 0x46b179
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [ebp + eax - 0x27ac]
mov byte [ebp + edx - 0x1fac], cl
jmp 0x46b120
mov edx, dword [ebp - 0x1798]
mov byte [ebp + edx - 0x1fac], 0
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x1fac]
push ecx
call fcn.004aea44
add esp, 4
push 0x552124
push 0x54
push 0x552134
push 0x55213c
push 0x80000002
call fcn.00402bb9
add esp, 0x14
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x552180
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.SoftwareWow6432NodeMicrosoftWindowsCurrentVersionexplorerBrowser_Helper_Objects
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46b20b
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46bce9
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x918]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x1bac]
push edx
push 0x20119
push 0
lea eax, [ebp - 0x918]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46bce4
mov dword [ebp - 0x179c], 0
push 0x5b8a14
lea ecx, [ebp - 0xd30]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x400
lea edx, [ebp - 0xd30]
push edx
mov eax, dword [ebp - 0x179c]
mov dword [ebp - 0x2e4c], eax
mov ecx, dword [ebp - 0x2e4c]
push ecx
mov edx, dword [ebp - 0x1bac]
push edx
mov eax, dword [ebp - 0x179c]
add eax, 1
mov dword [ebp - 0x179c], eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x46b2d4
jmp 0x46bcd7
push str.11111111_1111_1111_1111_
lea ecx, [ebp - 0xd30]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46bcd2
lea edx, [ebp - 0xd30]
push edx
lea eax, [ebp - 0x918]
push eax
push 0x552240
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x552248
push 0x5b6504
push 0x80000002
lea ecx, [ebp - 0x2854]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e50], eax
mov edx, dword [ebp - 0x2e50]
mov dword [ebp - 0x2e54], edx
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x2e54]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x27ac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2854]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x27ac]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.11111111_1111_1111_1111_11_c_c11_c_c11_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
mov ecx, 0x5b5ba8
call fcn.0050f680
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.22222222_2222_2222_2222_22_c_c22_c_c22_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
mov ecx, 0x5b5ba8
call fcn.0050f680
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.33333333_3333_3333_3333_33_c_c33_c_c33_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
mov ecx, 0x5b5ba8
call fcn.0050f680
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.Interface55555555_5555_5555_5555_55_c_c55_c_c55_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
push 0x80000000
call fcn.00402a6b
add esp, 8
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.Interface66666666_6666_6666_6666_66_c_c66_c_c66_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
push 0x80000000
call fcn.00402a6b
add esp, 8
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.Interface77777777_7777_7777_7777_77_c_c77_c_c77_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
push 0x80000000
call fcn.00402a6b
add esp, 8
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.Wow6432NodeInterface55555555_5555_5555_5555_55_c_c55_c_c55_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
push 0x80000000
call fcn.00402a6b
add esp, 8
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.Wow6432NodeInterface66666666_6666_6666_6666_66_c_c66_c_c66_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
push 0x80000000
call fcn.00402a6b
add esp, 8
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ad]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27ae]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27af]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b0]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b1]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b2]
push ecx
push str.Wow6432NodeInterface77777777_7777_7777_7777_77_c_c77_c_c77_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x5b6504
push 0x80000000
call fcn.00402a6b
add esp, 8
lea edx, [ebp - 0x27ac]
push edx
push str._s.BHO
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000000
call fcn.00402a6b
add esp, 8
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27ad]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27ae]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27af]
push edx
mov eax, dword [ebp - 0x17a0]
movsx ecx, byte [ebp + eax - 0x27b0]
push ecx
mov edx, dword [ebp - 0x17a0]
movsx eax, byte [ebp + edx - 0x27b1]
push eax
mov ecx, dword [ebp - 0x17a0]
movsx edx, byte [ebp + ecx - 0x27b2]
push edx
push str.CLSID11111111_1111_1111_1111_11_c_c11_c_c11_c_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x20
push 0x55248c
push 0x5b6504
push 0x80000000
lea eax, [ebp - 0x2858]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e58], eax
mov ecx, dword [ebp - 0x2e58]
mov dword [ebp - 0x2e5c], ecx
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x2e5c]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x27ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2858]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x27ac]
push eax
push str.Software_sInstaller
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5524a8
push 0x5b6504
push 0x80000002
lea ecx, [ebp - 0x285c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e60], eax
mov edx, dword [ebp - 0x2e60]
mov dword [ebp - 0x2e64], edx
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x2e64]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x285c]
call sub.MFC42.DLL_CString::CString
push 0x5524c0
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46ba07
push 0x5b8a18
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46ba07
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov ecx, dword [ebp - 0x17a0]
mov dword [0x5b84b8], ecx
jmp 0x46b9c9
mov edx, dword [0x5b84b8]
sub edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0xffffffff
jle 0x46b9e8
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x1fac]
cmp ecx, 0x5c
jne 0x46b9e6
jmp 0x46b9e8
jmp 0x46b9ba
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x1fac], 0
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bc0
call fcn.0050f680
lea ecx, [ebp - 0x27ac]
push ecx
push str.SoftwareWow6432Node_sInstaller
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.nova_injected_dll_path2
push 0x5b6504
push 0x80000002
lea edx, [ebp - 0x2860]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e68], eax
mov eax, dword [ebp - 0x2e68]
mov dword [ebp - 0x2e6c], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x2e6c]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1fac]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2860]
call sub.MFC42.DLL_CString::CString
push 0x552504
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46bb22
push 0x5b8a1c
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46bb22
lea ecx, [ebp - 0x1fac]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov edx, dword [ebp - 0x17a0]
mov dword [0x5b84b8], edx
jmp 0x46bae4
mov eax, dword [0x5b84b8]
sub eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0xffffffff
jle 0x46bb04
mov ecx, dword [0x5b84b8]
movsx edx, byte [ebp + ecx - 0x1fac]
cmp edx, 0x5c
jne 0x46bb02
jmp 0x46bb04
jmp 0x46bad7
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x1fac], 0
lea ecx, [ebp - 0x1fac]
push ecx
mov ecx, 0x5b5bc0
call fcn.0050f680
lea edx, [ebp - 0x27ac]
push edx
push 0x55250c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
lea eax, [ebp - 0x27ac]
push eax
push str.SoftwareWow6432Node_s_nv
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
lea ecx, [ebp - 0x27ac]
push ecx
push 0x552540
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
push 0x5b6504
push 0x80000001
call fcn.00402a6b
add esp, 8
lea edx, [ebp - 0x27ac]
push edx
push str.Software_s_nv
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
push 0x5b6504
push 0x80000001
call fcn.00402a6b
add esp, 8
lea eax, [ebp - 0x27ac]
push eax
push 0x55255c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
lea ecx, [ebp - 0x27ac]
push ecx
push str.SoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppContainerStoragewindows_ie_ac_001Software_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000001
call fcn.00402a6b
add esp, 8
lea edx, [ebp - 0x27ac]
push edx
push str..DEFAULTSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppContainerStoragewindows_ie_ac_001Software_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000003
call fcn.00402a6b
add esp, 8
lea eax, [ebp - 0x27ac]
push eax
push str.SoftwareAppDataLowSoftware_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000001
call fcn.00402a6b
add esp, 8
lea ecx, [ebp - 0x27ac]
push ecx
push str..DEFAULTSoftwareAppDataLowSoftware_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000003
call fcn.00402a6b
add esp, 8
jmp 0x46b27c
mov edx, dword [ebp - 0x1bac]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x46b1fc
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x552730
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552764
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46bd2d
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46bff6
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x918]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x1bac]
push eax
push 0x20119
push 0
lea ecx, [ebp - 0x918]
push ecx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46bff1
mov dword [ebp - 0x179c], 0
push 0x5b8a20
lea edx, [ebp - 0xd30]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x400
lea eax, [ebp - 0xd30]
push eax
mov ecx, dword [ebp - 0x179c]
mov dword [ebp - 0x2e70], ecx
mov edx, dword [ebp - 0x2e70]
push edx
mov eax, dword [ebp - 0x1bac]
push eax
mov ecx, dword [ebp - 0x179c]
add ecx, 1
mov dword [ebp - 0x179c], ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x46bdf7
jmp 0x46bfe4
lea edx, [ebp - 0xd30]
push edx
lea eax, [ebp - 0x918]
push eax
push 0x5527a4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5527ac
push 0x5b6504
push 0x80000002
lea ecx, [ebp - 0x2864]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e74], eax
mov edx, dword [ebp - 0x2e74]
mov dword [ebp - 0x2e78], edx
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x2e78]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x27ac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2864]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x27ac]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0xd30]
push edx
push 0x5527bc
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x1fac]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0x1fac]
push edx
lea eax, [ebp - 0x27ac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46bfdf
lea ecx, [ebp - 0xd30]
push ecx
mov edx, dword [0x5b7658]
push edx
push 0x5527d8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
lea eax, [ebp - 0xd30]
push eax
mov ecx, dword [0x5b7658]
push ecx
push 0x5527e0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
lea edx, [ebp - 0xd30]
push edx
push 0x5527ec
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
lea eax, [ebp - 0xd30]
push eax
push 0x552824
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
lea ecx, [ebp - 0xd30]
push ecx
push 0x552868
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
lea edx, [ebp - 0xd30]
push edx
push 0x552874
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x80000002
call fcn.00402a6b
add esp, 8
jmp 0x46bd9f
mov eax, dword [ebp - 0x1bac]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x46bd20
mov ecx, dword [0x5b764c]
push ecx
push 0x55288c
lea edx, [ebp - 0xe34]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x46c02b
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x46c047
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1364], 0
jmp 0x46c01e
lea edx, [ebp - 0x1390]
push edx
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
mov ecx, dword [ebp - 0x1390]
and ecx, 0x10
cmp ecx, 0x10
jne 0x46c105
push 0x552894
lea edx, [ebp - 0x1364]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46c0a3
push 0x552898
lea eax, [ebp - 0x1364]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x46c0a5
jmp 0x46c105
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b764c]
push edx
push str._s_sSYSHOST.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x2868], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2e7c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2e80], eax
cmp dword [ebp - 0x2e80], 0
je 0x46c105
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
lea eax, [ebp - 0x1390]
push eax
mov ecx, dword [ebp - 0x1794]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x46c061
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b7eb4
push str._sInstaller
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x46c163
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x46c17f
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x1364], 0
jmp 0x46c154
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0xe34]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
mov edx, dword [ebp - 0x1390]
and edx, 0x10
cmp edx, 0x10
jne 0x46c23b
push 0x5528c4
lea eax, [ebp - 0x1364]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46c1db
push 0x5528c8
lea ecx, [ebp - 0x1364]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x46c1dd
jmp 0x46c23b
lea edx, [ebp - 0x1364]
push edx
push 0x5b7eb4
push str._sInstaller_sSYSHOST.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x286c], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2e84], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2e88], eax
cmp dword [ebp - 0x2e88], 0
je 0x46c23b
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
lea eax, [ebp - 0x1390]
push eax
mov ecx, dword [ebp - 0x1794]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x46c199
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x5528e8
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5528f0
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5528f4
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552900
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552908
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552918
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552920
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552948
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552958
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552964
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552978
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552980
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x55298c
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552998
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5529a4
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5529ac
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5529c8
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5529d0
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5529d8
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46c3b8
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46c4e0
push 0x5b8a24
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x46c3f7
jmp 0x46c3ab
push 0x5b78a4
push 0x5529e4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov edx, dword [0x5b84b8]
push edx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x1fac]
push ecx
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x2870]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e8c], eax
mov eax, dword [ebp - 0x2e8c]
mov dword [ebp - 0x2e90], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x2e90]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2870]
call sub.MFC42.DLL_CString::CString
push 0x552a28
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46c4db
push 0x5b8a28
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46c4db
lea edx, [ebp - 0xd34]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
jmp 0x46c3ab
push str.7_Zip
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552a38
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552a44
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552a4c
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552a54
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552a5c
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x552a68
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46c569
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46c6bd
push 0x5b8a2c
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x46c5a8
jmp 0x46c55c
push 0x5b78a4
push 0x552a74
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov edx, dword [0x5b84b8]
push edx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x1fac]
push ecx
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x2874]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e94], eax
mov eax, dword [ebp - 0x2e94]
mov dword [ebp - 0x2e98], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x2e98]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2874]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::MakeUpper
mov edx, dword [0x5b7654]
push edx
push 0x552aa8
lea eax, [ebp - 0x23ac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x23ac]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0x23ac]
push edx
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46c6b8
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5b90
call fcn.0050f680
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
jmp 0x46c55c
push 0x5b78a4
push 0x552ab8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x552aec
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x2878]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2e9c], eax
mov eax, dword [ebp - 0x2e9c]
mov dword [ebp - 0x2ea0], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x2ea0]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2878]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::MakeUpper
push 0x552af8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46c782
push 0x552b00
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46c782
lea edx, [ebp - 0xd34]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x552b0c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x552b40
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x287c]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ea4], eax
mov ecx, dword [ebp - 0x2ea4]
mov dword [ebp - 0x2ea8], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0x2ea8]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x287c]
call sub.MFC42.DLL_CString::CString
push 0x552b50
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46c9aa
push 0x5b8a30
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46c9aa
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x27ac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x27ac]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 0
jmp 0x46c87d
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov eax, dword [ebp - 0x17a0]
sub eax, 1
cmp dword [0x5b84b8], eax
jge 0x46c8a5
mov ecx, dword [0x5b84b8]
movsx edx, byte [ebp + ecx - 0x27ac]
cmp edx, 0x20
jne 0x46c8a3
jmp 0x46c8a5
jmp 0x46c86e
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov dword [ebp - 0x1798], 0
jmp 0x46c8dc
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov edx, dword [ebp - 0x1798]
add edx, 1
mov dword [ebp - 0x1798], edx
mov eax, dword [ebp - 0x17a0]
sub eax, 1
cmp dword [0x5b84b8], eax
jge 0x46c91e
mov ecx, dword [0x5b84b8]
movsx edx, byte [ebp + ecx - 0x27ac]
cmp edx, 0x2c
jne 0x46c902
jmp 0x46c91e
mov eax, dword [ebp - 0x1798]
mov ecx, dword [0x5b84b8]
mov dl, byte [ebp + ecx - 0x27ac]
mov byte [ebp + eax - 0x27ac], dl
jmp 0x46c8be
mov eax, dword [ebp - 0x1798]
mov byte [ebp + eax - 0x27ac], 0
push 0x5b8a34
lea ecx, [ebp - 0x27ac]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46c9aa
movsx edx, byte [ebp - 0x27ab]
cmp edx, 0x3a
jne 0x46c963
lea eax, [ebp - 0x27ac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
jmp 0x46c9aa
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x552b58
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x27ac]
push ecx
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x552b5c
push 0x552b6c
push 0x80000002
lea edx, [ebp - 0x2880]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2eac], eax
mov eax, dword [ebp - 0x2eac]
mov dword [ebp - 0x2eb0], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x2eb0]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2880]
call sub.MFC42.DLL_CString::CString
push 0x552ba0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46cb1b
push 0x5b8a38
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46cb1b
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46caa2
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov eax, dword [ebp - 0x1798]
add eax, 1
mov dword [ebp - 0x1798], eax
mov ecx, dword [0x5b84b8]
cmp ecx, dword [ebp - 0x17a0]
jge 0x46cade
mov edx, dword [0x5b84b8]
movsx eax, byte [edx + 0x5b6504]
cmp eax, 0x22
jne 0x46cac4
jmp 0x46cade
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [edx + 0x5b6504]
mov byte [ecx + 0x5b6504], al
jmp 0x46ca84
mov ecx, dword [ebp - 0x1798]
mov byte [ecx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str..config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x552bb0
push str.SystemCurrentControlSetServicesNetwork_Adapter_Events
push 0x80000002
lea edx, [ebp - 0x2884]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2eb4], eax
mov eax, dword [ebp - 0x2eb4]
mov dword [ebp - 0x2eb8], eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x2eb8]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2884]
call sub.MFC42.DLL_CString::CString
push 0x552bf8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46cc44
push 0x5b8a3c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46cc44
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x27ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x27ac]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 0
jmp 0x46cbfe
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov edx, dword [ebp - 0x17a0]
sub edx, 1
cmp dword [0x5b84b8], edx
jge 0x46cc25
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x27ac]
cmp ecx, 0x20
jne 0x46cc23
jmp 0x46cc25
jmp 0x46cbef
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x27ac], 0
lea eax, [ebp - 0x27ac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x552c00
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x552c44
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x2888]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ebc], eax
mov edx, dword [ebp - 0x2ebc]
mov dword [ebp - 0x2ec0], edx
mov byte [ebp - 4], 0x31
mov eax, dword [ebp - 0x2ec0]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2888]
call sub.MFC42.DLL_CString::CString
push 0x552c4c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46ccfd
push 0x5b8a40
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46ccfd
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x552c54
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x552c88
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x288c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ec4], eax
mov eax, dword [ebp - 0x2ec4]
mov dword [ebp - 0x2ec8], eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x2ec8]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x288c]
call sub.MFC42.DLL_CString::CString
push 0x552c90
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46ce65
push 0x5b8a44
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46ce65
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46ce0d
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov eax, dword [ebp - 0x1798]
add eax, 1
mov dword [ebp - 0x1798], eax
mov ecx, dword [0x5b84b8]
cmp ecx, dword [ebp - 0x17a0]
jge 0x46ce49
mov edx, dword [0x5b84b8]
movsx eax, byte [edx + 0x5b6504]
cmp eax, 0x22
jne 0x46ce2f
jmp 0x46ce49
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [edx + 0x5b6504]
mov byte [ecx + 0x5b6504], al
jmp 0x46cdef
mov ecx, dword [ebp - 0x1798]
mov byte [ecx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
lea edx, [ebp - 0x1bac]
push edx
push 0x20119
push 0
push 0x552c98
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46d0ea
mov dword [ebp - 0x1ba4], 0
jmp 0x46cea6
mov eax, dword [ebp - 0x1ba4]
add eax, 1
mov dword [ebp - 0x1ba4], eax
mov dword [ebp - 0xe3c], 0x400
mov byte [ebp - 0x818], 0
mov dword [ebp - 0xe38], 0x400
mov byte [ebp - 0x27ac], 0
lea ecx, [ebp - 0xe38]
push ecx
lea edx, [ebp - 0x27ac]
push edx
push 0
push 0
lea eax, [ebp - 0xe3c]
push eax
lea ecx, [ebp - 0x818]
push ecx
mov edx, dword [ebp - 0x1ba4]
push edx
mov eax, dword [ebp - 0x1bac]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x46d0d6
lea ecx, [ebp - 0x818]
push ecx
call fcn.00401fca
add esp, 4
lea edx, [ebp - 0x27ac]
push edx
push 0x552ce0
push 0x80000002
lea eax, [ebp - 0x2890]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ecc], eax
mov ecx, dword [ebp - 0x2ecc]
mov dword [ebp - 0x2ed0], ecx
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x2ed0]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2890]
call sub.MFC42.DLL_CString::CString
push 0x552d28
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46d0d4
push 0x5b8a48
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d0d4
lea eax, [ebp - 0x27ac]
push eax
push 0x552d30
push 0x80000002
call fcn.00402ed5
add esp, 0xc
lea ecx, [ebp - 0x818]
push ecx
push 0x552d78
push 0x80000002
call fcn.00402ed5
add esp, 0xc
push 0x552dc0
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x818]
push edx
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x552dc8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x552dd8
push 0x5b6504
push 0x80000000
lea eax, [ebp - 0x2894]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ed4], eax
mov ecx, dword [ebp - 0x2ed4]
mov dword [ebp - 0x2ed8], ecx
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x2ed8]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2894]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::MakeUpper
push 0x552ddc
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46d0c3
push 0x5b8a4c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d0c3
lea eax, [ebp - 0xd34]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea ecx, [ebp - 0x818]
push ecx
mov ecx, 0x5b5ba8
call fcn.0050f680
jmp 0x46d0d8
jmp 0x46d0dd
jmp 0x46ce97
mov edx, dword [ebp - 0x1bac]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x1bac]
push eax
push 0x20119
push 0
push 0x552de4
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46d36f
mov dword [ebp - 0x1ba4], 0
jmp 0x46d12b
mov ecx, dword [ebp - 0x1ba4]
add ecx, 1
mov dword [ebp - 0x1ba4], ecx
mov dword [ebp - 0xe3c], 0x400
mov byte [ebp - 0x818], 0
mov dword [ebp - 0xe38], 0x400
mov byte [ebp - 0x27ac], 0
lea edx, [ebp - 0xe38]
push edx
lea eax, [ebp - 0x27ac]
push eax
push 0
push 0
lea ecx, [ebp - 0xe3c]
push ecx
lea edx, [ebp - 0x818]
push edx
mov eax, dword [ebp - 0x1ba4]
push eax
mov ecx, dword [ebp - 0x1bac]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x46d35b
lea edx, [ebp - 0x818]
push edx
call fcn.00401fca
add esp, 4
lea eax, [ebp - 0x27ac]
push eax
push 0x552e38
push 0x80000002
lea ecx, [ebp - 0x2898]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2edc], eax
mov edx, dword [ebp - 0x2edc]
mov dword [ebp - 0x2ee0], edx
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x2ee0]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2898]
call sub.MFC42.DLL_CString::CString
push 0x552e8c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46d359
push 0x5b8a50
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d359
lea ecx, [ebp - 0x27ac]
push ecx
push str.SoftwareWow6432NodeMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad
push 0x80000002
call fcn.00402ed5
add esp, 0xc
lea edx, [ebp - 0x818]
push edx
push 0x552ee8
push 0x80000002
call fcn.00402ed5
add esp, 0xc
push 0x552f3c
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x818]
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x552f44
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x552f54
push 0x5b6504
push 0x80000000
lea ecx, [ebp - 0x289c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ee4], eax
mov edx, dword [ebp - 0x2ee4]
mov dword [ebp - 0x2ee8], edx
mov byte [ebp - 4], 0x36
mov eax, dword [ebp - 0x2ee8]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x289c]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::MakeUpper
push 0x552f58
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46d348
push 0x5b8a54
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d348
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea edx, [ebp - 0x818]
push edx
mov ecx, 0x5b5ba8
call fcn.0050f680
jmp 0x46d35d
jmp 0x46d362
jmp 0x46d11c
mov eax, dword [ebp - 0x1bac]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x5b78a4
push 0x552f60
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x552f94
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x28a0]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2eec], eax
mov edx, dword [ebp - 0x2eec]
mov dword [ebp - 0x2ef0], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x2ef0]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28a0]
call sub.MFC42.DLL_CString::CString
push 0x552f9c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46d59a
push 0x5b8a58
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d59a
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x46d464
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x400
jge 0x46d480
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1790], 0
jmp 0x46d457
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov dword [0x5b84b8], eax
jmp 0x46d4b1
mov ecx, dword [0x5b84b8]
sub ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0xffffffff
jle 0x46d4d1
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x5c
jne 0x46d4cf
jmp 0x46d4d1
jmp 0x46d4a2
cmp dword [0x5b84b8], 0
je 0x46d4e9
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov dword [ebp - 0x1798], 0
jmp 0x46d511
mov edx, dword [ebp - 0x1798]
add edx, 1
mov dword [ebp - 0x1798], edx
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x17a0]
sub ecx, 1
cmp dword [0x5b84b8], ecx
jge 0x46d553
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x2e
jne 0x46d537
jmp 0x46d553
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [ebp + edx - 0x1fac]
mov byte [ebp + ecx - 0x1790], al
jmp 0x46d4f5
push 0x5b8a5c
lea ecx, [ebp - 0x1790]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d59a
lea edx, [ebp - 0x1790]
push edx
mov eax, dword [0x5b7650]
push eax
push 0x552fa4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x552fac
push 0x552fb4
push 0x80000002
lea ecx, [ebp - 0x28a4]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2ef4], eax
mov edx, dword [ebp - 0x2ef4]
mov dword [ebp - 0x2ef8], edx
mov byte [ebp - 4], 0x38
mov eax, dword [ebp - 0x2ef8]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28a4]
call sub.MFC42.DLL_CString::CString
push 0x552fe4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46d7ad
push 0x5b8a60
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d7ad
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x46d677
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x400
jge 0x46d693
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1790], 0
jmp 0x46d66a
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov dword [0x5b84b8], eax
jmp 0x46d6c4
mov ecx, dword [0x5b84b8]
sub ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0xffffffff
jle 0x46d6e4
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x5c
jne 0x46d6e2
jmp 0x46d6e4
jmp 0x46d6b5
cmp dword [0x5b84b8], 0
je 0x46d6fc
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov dword [ebp - 0x1798], 0
jmp 0x46d724
mov edx, dword [ebp - 0x1798]
add edx, 1
mov dword [ebp - 0x1798], edx
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x17a0]
sub ecx, 1
cmp dword [0x5b84b8], ecx
jge 0x46d766
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x2e
jne 0x46d74a
jmp 0x46d766
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [ebp + edx - 0x1fac]
mov byte [ebp + ecx - 0x1790], al
jmp 0x46d708
push 0x5b8a64
lea ecx, [ebp - 0x1790]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d7ad
lea edx, [ebp - 0x1790]
push edx
mov eax, dword [0x5b7650]
push eax
push 0x552fec
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x552ff4
push 0x552ffc
push 0x80000002
lea ecx, [ebp - 0x28a8]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2efc], eax
mov edx, dword [ebp - 0x2efc]
mov dword [ebp - 0x2f00], edx
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x2f00]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28a8]
call sub.MFC42.DLL_CString::CString
push 0x553038
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46d9c0
push 0x5b8a68
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d9c0
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x46d88a
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x400
jge 0x46d8a6
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1790], 0
jmp 0x46d87d
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov dword [0x5b84b8], eax
jmp 0x46d8d7
mov ecx, dword [0x5b84b8]
sub ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0xffffffff
jle 0x46d8f7
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x5c
jne 0x46d8f5
jmp 0x46d8f7
jmp 0x46d8c8
cmp dword [0x5b84b8], 0
je 0x46d90f
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov dword [ebp - 0x1798], 0
jmp 0x46d937
mov edx, dword [ebp - 0x1798]
add edx, 1
mov dword [ebp - 0x1798], edx
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x17a0]
sub ecx, 1
cmp dword [0x5b84b8], ecx
jge 0x46d979
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x2e
jne 0x46d95d
jmp 0x46d979
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [ebp + edx - 0x1fac]
mov byte [ebp + ecx - 0x1790], al
jmp 0x46d91b
push 0x5b8a6c
lea ecx, [ebp - 0x1790]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46d9c0
lea edx, [ebp - 0x1790]
push edx
mov eax, dword [0x5b7650]
push eax
push 0x553040
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b78a4
push 0x553048
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x55307c
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x28ac]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f04], eax
mov edx, dword [ebp - 0x2f04]
mov dword [ebp - 0x2f08], edx
mov byte [ebp - 4], 0x3a
mov eax, dword [ebp - 0x2f08]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28ac]
call sub.MFC42.DLL_CString::CString
push 0x553084
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46dbeb
push 0x5b8a70
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46dbeb
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x46dab5
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x400
jge 0x46dad1
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1790], 0
jmp 0x46daa8
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov dword [0x5b84b8], eax
jmp 0x46db02
mov ecx, dword [0x5b84b8]
sub ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0xffffffff
jle 0x46db22
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x5c
jne 0x46db20
jmp 0x46db22
jmp 0x46daf3
cmp dword [0x5b84b8], 0
je 0x46db3a
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov dword [ebp - 0x1798], 0
jmp 0x46db62
mov edx, dword [ebp - 0x1798]
add edx, 1
mov dword [ebp - 0x1798], edx
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x17a0]
sub ecx, 1
cmp dword [0x5b84b8], ecx
jge 0x46dba4
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x2e
jne 0x46db88
jmp 0x46dba4
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [ebp + edx - 0x1fac]
mov byte [ebp + ecx - 0x1790], al
jmp 0x46db46
push 0x5b8a74
lea ecx, [ebp - 0x1790]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46dbeb
lea edx, [ebp - 0x1790]
push edx
mov eax, dword [0x5b7654]
push eax
push 0x55308c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov ecx, dword [0x5b764c]
push ecx
push 0x553094
lea edx, [ebp - 0xe34]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x46dc20
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x46dc3c
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1364], 0
jmp 0x46dc13
lea edx, [ebp - 0x1390]
push edx
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
mov ecx, dword [ebp - 0x1390]
and ecx, 0x10
cmp ecx, 0x10
jne 0x46dcdb
push 0x55309c
lea edx, [ebp - 0x1364]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46dc94
push 0x5530a0
lea eax, [ebp - 0x1364]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x46dc96
jmp 0x46dcdb
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b764c]
push edx
push 0x5530a4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push str.SFTAV.EXE
push 0x5b6504
call fcn.0049757d
add esp, 8
push str.TSSD.EXE
push 0x5b6504
call fcn.0049757d
add esp, 8
lea eax, [ebp - 0x1390]
push eax
mov ecx, dword [ebp - 0x1794]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x46dc56
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5530c4
push str..exe_shellopencommand
push 0x80000000
lea eax, [ebp - 0x28b0]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f0c], eax
mov ecx, dword [ebp - 0x2f0c]
mov dword [ebp - 0x2f10], ecx
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x2f10]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28b0]
call sub.MFC42.DLL_CString::CString
push 0x5530e0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46de66
push 0x5b8a78
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46de66
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46ddfa
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46de34
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x46de1b
jmp 0x46de34
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x46ddde
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b8a7c
push 0x5b6504
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46de66
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push str._sSoftwareClassesmdaw_shellopencommand
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x553114
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x28b4]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f14], eax
mov ecx, dword [ebp - 0x2f14]
mov dword [ebp - 0x2f18], ecx
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x2f18]
push edx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28b4]
call sub.MFC42.DLL_CString::CString
push 0x553118
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46dfe0
push 0x5b8a80
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46dfe0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46df74
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46dfae
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x46df95
jmp 0x46dfae
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x46df58
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b8a84
push 0x5b6504
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46dfe0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XPSP2RES.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x28b8], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2f1c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2f20], eax
cmp dword [ebp - 0x2f20], 0
je 0x46e0df
push 0x553130
push 0x5b6504
lea eax, [ebp - 0x28bc]
push eax
call fcn.004f6bd5
add esp, 0xc
mov dword [ebp - 0x2f24], eax
mov ecx, dword [ebp - 0x2f24]
mov dword [ebp - 0x2f28], ecx
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x2f28]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28bc]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x1fac]
push eax
call fcn.00401fca
add esp, 4
push 0x55313c
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e0df
cmp dword [0x5b851c], 0
jne 0x46e0d0
push 0
push 0
push 0x553148
call sub.MFC42.DLL_AfxMessageBox
push 0x553194
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x5b78a4
push 0x5531e0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x553218
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x28c0]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f2c], eax
mov eax, dword [ebp - 0x2f2c]
mov dword [ebp - 0x2f30], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x2f30]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1fac]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28c0]
call sub.MFC42.DLL_CString::CString
lea edx, [ebp - 0x1fac]
push edx
call fcn.00401fca
add esp, 4
push 0x553220
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x553234
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x553244
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x553254
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push str.FONTSDLLHOST.LNK
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x55327c
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x553290
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x5532a8
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x5532c4
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push str.LOGMANAGER.EXE.LNK
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x5532f0
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x553304
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push str.SCVHOST.EXE.LNK
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x553328
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x55333c
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x55334c
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
push 0x55335c
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e401
lea edx, [ebp - 0x1fac]
push edx
push 0
lea eax, [ebp - 0x28c4]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2f34], eax
mov ecx, dword [ebp - 0x2f34]
mov dword [ebp - 0x2f38], ecx
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x2f38]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x23ac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28c4]
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [ebp - 0x28c8], esp
lea eax, [ebp - 0x23ac]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2f3c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2f40], eax
cmp dword [ebp - 0x2f40], 0
je 0x46e401
cmp dword [0x5b851c], 0
jne 0x46e3f2
push 0
push 0
push 0x55336c
call sub.MFC42.DLL_AfxMessageBox
push 0x5533b8
mov ecx, 0x5b5b78
call fcn.0050f680
lea ecx, [ebp - 0x1bac]
push ecx
push 0x20119
push 0
push 0x553408
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46e6ee
mov dword [ebp - 0x1ba4], 0
jmp 0x46e442
mov edx, dword [ebp - 0x1ba4]
add edx, 1
mov dword [ebp - 0x1ba4], edx
mov dword [ebp - 0xe3c], 0x400
mov byte [ebp - 0x818], 0
mov dword [ebp - 0xe38], 0x400
mov byte [ebp - 0x27ac], 0
lea eax, [ebp - 0xe38]
push eax
lea ecx, [ebp - 0x27ac]
push ecx
push 0
push 0
lea edx, [ebp - 0xe3c]
push edx
lea eax, [ebp - 0x818]
push eax
mov ecx, dword [ebp - 0x1ba4]
push ecx
mov edx, dword [ebp - 0x1bac]
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x46e6da
lea eax, [ebp - 0x27ac]
push eax
call fcn.00401fca
add esp, 4
push 0x5b7678
push 0x553448
lea ecx, [ebp - 0x1fac]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x1fac]
push edx
call fcn.00401fca
add esp, 4
push 0x5b7678
push 0x553450
lea eax, [ebp - 0x23ac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x23ac]
push ecx
call fcn.00401fca
add esp, 4
push 0x553458
lea edx, [ebp - 0x27ac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e5a3
push 0x55346c
lea eax, [ebp - 0x27ac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e5a3
lea ecx, [ebp - 0x1fac]
push ecx
lea edx, [ebp - 0x27ac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e5a3
lea eax, [ebp - 0x23ac]
push eax
lea ecx, [ebp - 0x27ac]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e5a3
push str.ALLUSE1DX
lea edx, [ebp - 0x27ac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e5a3
push str.ALLUSE1MS
lea eax, [ebp - 0x27ac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46e6d8
lea ecx, [ebp - 0x27ac]
push ecx
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
movsx edx, byte [0x5b6504]
cmp edx, 0x22
jne 0x46e653
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46e60c
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x1798]
add ecx, 1
mov dword [ebp - 0x1798], ecx
mov edx, dword [0x5b84b8]
cmp edx, dword [ebp - 0x17a0]
jge 0x46e646
mov eax, dword [0x5b84b8]
movsx ecx, byte [eax + 0x5b6504]
cmp ecx, 0x22
jne 0x46e62d
jmp 0x46e646
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [eax + 0x5b6504]
mov byte [edx + 0x5b6504], cl
jmp 0x46e5f0
mov edx, dword [ebp - 0x1798]
mov byte [edx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5534a0
call fcn.00402131
add esp, 4
push 0x5534b0
call fcn.00402131
add esp, 4
lea eax, [ebp - 0x818]
push eax
push 0x5534c0
push 0x80000002
call fcn.00402ed5
add esp, 0xc
test eax, eax
jne 0x46e6d8
lea ecx, [ebp - 0x27ac]
push ecx
lea edx, [ebp - 0x818]
push edx
push 0x553500
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
mov eax, dword [ebp - 0x1ba4]
sub eax, 1
mov dword [ebp - 0x1ba4], eax
jmp 0x46e6dc
jmp 0x46e6e1
jmp 0x46e433
mov ecx, dword [ebp - 0x1bac]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x5b78a4
push 0x553540
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x553578
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x28cc]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f44], eax
mov eax, dword [ebp - 0x2f44]
mov dword [ebp - 0x2f48], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x2f48]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28cc]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::MakeUpper
push 0x5b7778
push str._sDX
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
call fcn.00401fca
add esp, 4
push 0x5b7778
push 0x553588
lea eax, [ebp - 0x23ac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
call fcn.00401fca
add esp, 4
mov ecx, dword [0x5b7650]
push ecx
push str._sMS
lea edx, [ebp - 0x414]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
call fcn.00401fca
add esp, 4
push 0x553598
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e879
push 0x5535ac
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e879
lea eax, [ebp - 0x1fac]
push eax
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e879
lea ecx, [ebp - 0x23ac]
push ecx
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46e879
lea edx, [ebp - 0x414]
push edx
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46e8b9
lea eax, [ebp - 0xd34]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x5535c0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5535f8
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push str.Ruins
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push str.Urls
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x553610
lea ecx, [ebp - 0xe50]
call fcn.0050f680
lea ecx, [ebp - 0x92c]
call fcn.0050f5b0
push 0x553614
lea ecx, [ebp - 0x92c]
call fcn.0050f680
push str.SoftwareWow6432NodeMicrosoftWindowsCurrentVersion
lea ecx, [ebp - 0x92c]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46e93a
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46ebcf
mov dword [ebp - 0x418], 0
jmp 0x46e96c
mov edx, dword [ebp - 0x418]
add edx, 1
mov dword [ebp - 0x418], edx
lea ecx, [ebp - 0x92c]
call fcn.0050f110
cmp dword [ebp - 0x418], eax
jge 0x46ebca
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x418]
push edx
lea ecx, [ebp - 0x92c]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
push 0x553678
lea ecx, [ebp - 0x918]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x1bac]
push edx
push 0x20119
push 0
lea eax, [ebp - 0x918]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46ebc5
mov dword [ebp - 0x1ba4], 0
jmp 0x46ea04
mov ecx, dword [ebp - 0x1ba4]
add ecx, 1
mov dword [ebp - 0x1ba4], ecx
mov dword [ebp - 0xe3c], 0x400
mov byte [ebp - 0x818], 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0xe3c]
push edx
lea eax, [ebp - 0x818]
push eax
mov ecx, dword [ebp - 0x1ba4]
push ecx
mov edx, dword [ebp - 0x1bac]
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x46ebb1
push 0x5b8a88
lea eax, [ebp - 0x818]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x46ea61
jmp 0x46e9f5
mov dword [ebp - 0x930], 0
jmp 0x46ea7c
mov ecx, dword [ebp - 0x930]
add ecx, 1
mov dword [ebp - 0x930], ecx
cmp dword [ebp - 0x930], 0x100
jge 0x46ea97
mov edx, dword [ebp - 0x930]
mov byte [edx + 0x5b4f30], 0
jmp 0x46ea6d
lea eax, [ebp - 0x818]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [ebp - 0x930], 0
mov ecx, dword [ebp - 0x17a0]
sub ecx, 1
mov dword [ebp - 0x1798], ecx
jmp 0x46eae5
mov edx, dword [ebp - 0x930]
add edx, 1
mov dword [ebp - 0x930], edx
mov eax, dword [ebp - 0x1798]
sub eax, 1
mov dword [ebp - 0x1798], eax
cmp dword [ebp - 0x1798], 0xffffffff
jle 0x46eb09
mov ecx, dword [ebp - 0x930]
mov edx, dword [ebp - 0x1798]
mov al, byte [ebp + edx - 0x818]
mov byte [ecx + 0x5b4f30], al
jmp 0x46eac7
push 0x5b8a8c
push 0x5b4f30
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46ebaf
mov ecx, dword [ebp - 0x418]
push ecx
lea ecx, [ebp - 0x92c]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
push str._sRun
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b4f30
push 0x5b6504
push 0x80000002
call fcn.00402ed5
add esp, 0xc
push 0x553688
push 0x5b4f30
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b4f30
push 0x5b7db4
push 0x553690
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b4f30
mov ecx, 0x5b5b90
call fcn.0050f680
jmp 0x46ebb3
jmp 0x46ebb8
jmp 0x46e9f5
mov eax, dword [ebp - 0x1bac]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x46e95d
jmp 0x46e92b
push 0x5b78a4
push 0x553698
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5536cc
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x28d0]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f4c], eax
mov edx, dword [ebp - 0x2f4c]
mov dword [ebp - 0x2f50], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x2f50]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28d0]
call sub.MFC42.DLL_CString::CString
push 0x5536dc
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46ed36
push 0x5b8a90
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46ed36
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46ecdf
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov edx, dword [ebp - 0x1798]
add edx, 1
mov dword [ebp - 0x1798], edx
mov eax, dword [0x5b84b8]
cmp eax, dword [ebp - 0x17a0]
jge 0x46ed1a
mov ecx, dword [0x5b84b8]
movsx edx, byte [ecx + 0x5b6504]
cmp edx, 0x22
jne 0x46ed00
jmp 0x46ed1a
mov eax, dword [ebp - 0x1798]
mov ecx, dword [0x5b84b8]
mov dl, byte [ecx + 0x5b6504]
mov byte [eax + 0x5b6504], dl
jmp 0x46ecc1
mov eax, dword [ebp - 0x1798]
mov byte [eax + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x5536e4
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x5536f0
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46ed7c
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46eefb
mov edx, dword [0x5b84b8]
push edx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1790]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x1790]
push ecx
mov edx, dword [0x5b7674]
push edx
push 0x553708
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
push 1
lea eax, [ebp - 0x28d4]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2f54], eax
mov ecx, dword [ebp - 0x2f54]
mov dword [ebp - 0x2f58], ecx
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x2f58]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28d4]
call sub.MFC42.DLL_CString::CString
push 0x5b8a94
lea eax, [ebp - 0x1fac]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46eef6
lea ecx, [ebp - 0x1fac]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [ebp - 0x418], 1
mov dword [ebp - 0x1798], 0
jmp 0x46ee98
mov edx, dword [ebp - 0x418]
add edx, 1
mov dword [ebp - 0x418], edx
mov eax, dword [ebp - 0x1798]
add eax, 1
mov dword [ebp - 0x1798], eax
mov ecx, dword [ebp - 0x418]
cmp ecx, dword [ebp - 0x17a0]
jge 0x46eed7
mov edx, dword [ebp - 0x418]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x22
jne 0x46eebb
jmp 0x46eed7
mov ecx, dword [ebp - 0x1798]
mov edx, dword [ebp - 0x418]
mov al, byte [ebp + edx - 0x1fac]
mov byte [ebp + ecx - 0x1fac], al
jmp 0x46ee7a
mov ecx, dword [ebp - 0x1798]
mov byte [ebp + ecx - 0x1fac], 0
lea edx, [ebp - 0x1fac]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
jmp 0x46ed6d
lea ecx, [ebp - 0xe50]
call fcn.0050f5b0
push 0x553710
lea ecx, [ebp - 0xe50]
call fcn.0050f680
push 0x553740
lea ecx, [ebp - 0xe50]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x46ef3f
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xe50]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x46f1d9
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xe50]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea edx, [ebp - 0xd30]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x55377c
lea eax, [ebp - 0xd30]
push eax
push 0x80000002
lea ecx, [ebp - 0x28d8]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f5c], eax
mov edx, dword [ebp - 0x2f5c]
mov dword [ebp - 0x2f60], edx
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x2f60]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28d8]
call sub.MFC42.DLL_CString::CString
push 0x553788
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46f1d4
push 0x5b8a98
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46f1d4
lea ecx, [ebp - 0xd34]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x46f05e
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x400
jge 0x46f07a
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1790], 0
jmp 0x46f051
lea edx, [ebp - 0x1fac]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov dword [0x5b84b8], eax
jmp 0x46f0ab
mov ecx, dword [0x5b84b8]
sub ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0
jle 0x46f0cb
mov edx, dword [0x5b84b8]
movsx eax, byte [ebp + edx - 0x1fac]
cmp eax, 0x5c
jne 0x46f0c9
jmp 0x46f0cb
jmp 0x46f09c
mov ecx, dword [0x5b84b8]
sub ecx, 1
mov dword [0x5b84b8], ecx
jmp 0x46f0eb
mov edx, dword [0x5b84b8]
sub edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0
jle 0x46f10a
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x1fac]
cmp ecx, 0x5c
jne 0x46f108
jmp 0x46f10a
jmp 0x46f0dc
cmp dword [0x5b84b8], 0
je 0x46f122
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov dword [ebp - 0x1798], 0
jmp 0x46f14c
mov eax, dword [ebp - 0x1798]
add eax, 1
mov dword [ebp - 0x1798], eax
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov edx, dword [ebp - 0x17a0]
sub edx, 1
cmp dword [0x5b84b8], edx
jge 0x46f18c
mov eax, dword [0x5b84b8]
movsx ecx, byte [ebp + eax - 0x1fac]
cmp ecx, 0x5c
jne 0x46f171
jmp 0x46f18c
mov edx, dword [ebp - 0x1798]
mov eax, dword [0x5b84b8]
mov cl, byte [ebp + eax - 0x1fac]
mov byte [ebp + edx - 0x1790], cl
jmp 0x46f12e
push 0x5b8a9c
lea edx, [ebp - 0x1790]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46f1d4
lea eax, [ebp - 0x1790]
push eax
mov ecx, dword [0x5b7650]
push ecx
push 0x553790
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
jmp 0x46ef32
mov edx, dword [0x5b7650]
push edx
push 0x553798
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x46f20c
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x46f228
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x1364], 0
jmp 0x46f1ff
lea edx, [ebp - 0x1390]
push edx
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx eax, byte [ebp - 0x1364]
test eax, eax
jne 0x46f250
jmp 0x46f34d
mov ecx, dword [ebp - 0x1390]
and ecx, 0x10
cmp ecx, 0x10
jne 0x46f331
push 0x5537a0
lea edx, [ebp - 0x1364]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46f292
push 0x5537a4
lea eax, [ebp - 0x1364]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x46f297
jmp 0x46f331
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b7650]
push edx
push str._s_sXCC.exe
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x28dc], esp
lea edx, [ebp - 0x1fac]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2f64], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2f68], eax
cmp dword [ebp - 0x2f68], 0
je 0x46f331
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x1364]
push ecx
mov edx, dword [0x5b7650]
push edx
push 0x5537b8
lea eax, [ebp - 0x1fac]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x1fac]
push ecx
mov ecx, 0x5b5bc0
call fcn.0050f680
lea edx, [ebp - 0x1390]
push edx
mov eax, dword [ebp - 0x1794]
push eax
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x46f240
mov ecx, dword [ebp - 0x1794]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov edx, dword [0x5b7674]
push edx
push str._s.vbs
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x46f391
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x46f3ad
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x1364], 0
jmp 0x46f382
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0xe34]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx edx, byte [ebp - 0x1364]
test edx, edx
jne 0x46f3d7
jmp 0x46f525
lea eax, [ebp - 0x1364]
push eax
lea ecx, [ebp - 0x1790]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x1790]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov byte [ebp + eax - 0x1794], 0
lea ecx, [ebp - 0x1790]
push ecx
push 0x5b7cb4
push 0x5537cc
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x1790]
push eax
mov ecx, dword [0x5b7654]
push ecx
push str._s_subfolder_s.exe
lea edx, [ebp - 0x23ac]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x28e0], esp
lea eax, [ebp - 0x1fac]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2f6c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2f70], eax
cmp dword [ebp - 0x2f70], 0
jne 0x46f4b8
push ecx
mov ecx, esp
mov dword [ebp - 0x28e4], esp
lea edx, [ebp - 0x23ac]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2f74], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2f78], eax
cmp dword [ebp - 0x2f78], 0
je 0x46f509
lea eax, [ebp - 0x1fac]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x23ac]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea edx, [ebp - 0x1364]
push edx
mov eax, dword [0x5b7674]
push eax
push 0x5537f4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x1390]
push ecx
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x46f3c7
mov eax, dword [ebp - 0x1794]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderjfjefjg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x553814
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x55384c
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x28e8]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f7c], eax
mov edx, dword [ebp - 0x2f7c]
mov dword [ebp - 0x2f80], edx
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x2f80]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28e8]
call sub.MFC42.DLL_CString::CString
push 0x553854
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46f65c
push 0x5b8aa0
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46f65c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x27ac]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x27ac]
push edx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x17a0]
mov byte [ebp + eax - 0x27b1], 0
lea ecx, [ebp - 0x27ac]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x55385c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x553890
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x28ec]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f84], eax
mov eax, dword [ebp - 0x2f84]
mov dword [ebp - 0x2f88], eax
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x2f88]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28ec]
call sub.MFC42.DLL_CString::CString
push 0x55389c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46f7c4
push 0x5b8aa4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46f7c4
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46f76c
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov eax, dword [ebp - 0x1798]
add eax, 1
mov dword [ebp - 0x1798], eax
mov ecx, dword [0x5b84b8]
cmp ecx, dword [ebp - 0x17a0]
jge 0x46f7a8
mov edx, dword [0x5b84b8]
movsx eax, byte [edx + 0x5b6504]
cmp eax, 0x22
jne 0x46f78e
jmp 0x46f7a8
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [edx + 0x5b6504]
mov byte [ecx + 0x5b6504], al
jmp 0x46f74e
mov ecx, dword [ebp - 0x1798]
mov byte [ecx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x5538a4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5538d8
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x28f0]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f8c], eax
mov eax, dword [ebp - 0x2f8c]
mov dword [ebp - 0x2f90], eax
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x2f90]
push ecx
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28f0]
call sub.MFC42.DLL_CString::CString
push 0x5538e8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46f92c
push 0x5b8aa8
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x46f92c
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5b6504
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x17a0], eax
mov dword [0x5b84b8], 1
mov dword [ebp - 0x1798], 0
jmp 0x46f8d4
mov ecx, dword [0x5b84b8]
cmp ecx, dword [ebp - 0x17a0]
jge 0x46f910
mov edx, dword [0x5b84b8]
movsx eax, byte [edx + 0x5b6504]
cmp eax, 0x22
jne 0x46f8f6
jmp 0x46f910
mov ecx, dword [ebp - 0x1798]
mov edx, dword [0x5b84b8]
mov al, byte [edx + 0x5b6504]
mov byte [ecx + 0x5b6504], al
jmp 0x46f8b6
mov ecx, dword [ebp - 0x1798]
mov byte [ecx + 0x5b6504], 0
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov edx, dword [0x5b7674]
push edx
push 0x5538f0
lea eax, [ebp - 0xe34]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x46f963
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x46f97f
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x1364], 0
jmp 0x46f954
lea eax, [ebp - 0x1390]
push eax
lea ecx, [ebp - 0xe34]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x1794], eax
movsx edx, byte [ebp - 0x1364]
test edx, edx
jne 0x46f9a9
jmp 0x46fc88
lea eax, [ebp - 0x1364]
push eax
mov ecx, dword [0x5b7674]
push ecx
push 0x5538fc
lea edx, [ebp - 0x1fac]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x1fac]
push eax
push 0
lea ecx, [ebp - 0x28f4]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2f94], eax
mov edx, dword [ebp - 0x2f94]
mov dword [ebp - 0x2f98], edx
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x2f98]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x23ac]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28f4]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x23ac]
push ecx
call fcn.00401fca
add esp, 4
push str.APPDATALOCALTEMP_
lea edx, [ebp - 0x23ac]
push edx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46fc6c
push 0x55391c
lea eax, [ebp - 0x23ac]
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x46fc6c
lea ecx, [ebp - 0x1390]
push ecx
mov edx, dword [ebp - 0x1794]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x46f999
mov eax, dword [ebp - 0x1794]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Host.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x55394c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x553958
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x553990
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x28f8]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2f9c], eax
mov edx, dword [ebp - 0x2f9c]
mov dword [ebp - 0x2fa0], edx
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0x2fa0]
push eax
lea ecx, [ebp - 0xd34]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28f8]
call sub.MFC42.DLL_CString::CString
push 0x553998
lea ecx, [ebp - 0xd34]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x46fe25