Function at 0x4980db
Capabilities:
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x512979
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd8c
lea ecx, [ebp - 0x34]
call sub.MFC42.DLL_CStringArray::CStringArray
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
call sub.MFC42.DLL_CStringArray::CStringArray
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd98]
call sub.MFC42.DLL_CStringArray::CStringArray
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd98]
call fcn.0050f5b0
lea ecx, [ebp - 0x34]
call fcn.0050f5b0
push str.A360.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Advanced_Virus_Remover.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AdwareAlert.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AdwareSheriff.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AntiMalware.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AntiVirus_AntiSpyware_2011.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Antivirus_Protection_2012.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Antivirus_Protection.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AntiVirus_System_2011.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Antivirus_2009.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AntiVirus_2008Pro.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AntivirusPro_2010.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AV_Protection_2011.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AVASoft_Professional_Antivirus.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Block_Checker.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.CleanUp_Antivirus.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Esplora.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push 0x561ce0
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Data_Recovery.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Data_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Data_Restore.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Disk_Antivirus_Professional.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Disk_Optimizer.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Disk_Recovery.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Disk_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Fast_Disk.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.File_Recovery.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.File_Restore.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Internet_Security_2010.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.KvmSecure.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Live_PC_Care.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Live_Security_Platinum.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Malware_Defense.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MalwareWipe.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MalwareWipe_4.0.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MalwareWipe_4.1.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MalwareWipe.com.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MalwareWipe.com_4.2.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.My_Security_Engine.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.My_Security_Shield.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.OverSpy.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.PC_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.PSGuard.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.PSGuard_spyware_remover.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.RegistryQuick.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Restore.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Scanner.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Security_essentials_2010.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Security_Master_AV.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Security_Protection.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Security_Shield.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Security_Tool.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Smart_Engine.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Smart_Fortress_2012.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Smart_Protection_2012.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Smart_HDD.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Spy_Shield_v4.1.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpyAXE.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpyAXE_3.0.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpyLocked_3.6.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpyQuake2.com.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpyQuake2.com_2.3.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpySheriff.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpywareQuake.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpywareQuake_2.0.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpywareQuake.com.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpywareQuake.com_2.1.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpywareStrike.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpywareStrike_2.5.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_7_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Check.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Fix.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Care_Antivirus.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Progressive_Protection.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Recovery.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Restore.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Tool_2011.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_XP_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.ThinkPoint.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ultra_Defragger.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.VirusAlarma.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.VirusRemover2009.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.VirusResponse_Lab_2009_2.1.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Win_Defrag.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Win_Defragmenter.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Win_Disk.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Win_HDD.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Win_Scanner.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_7_Recovery.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_7_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_7_Restore.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Disk.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Fix_Disk.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Guardian_Angel.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Recovery.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_XP_Recovery.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_XP_Repair.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Scan.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.WinHound_Spyware_Remover.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.XP_Antivirus_2008.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.XP_Restore.lnk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push 0x5623f8
lea ecx, [ebp - 0x34]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x498697
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0x34]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4987d2
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7634]
push eax
push 0x562410
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b766c]
push eax
push 0x562418
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7664]
push eax
push 0x562420
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7660]
push eax
push 0x562428
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7654]
push eax
push str._sMicrosoftInternet_ExplorerQuick_Launch_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
jmp 0x49868a
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.180ax.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DIDDUID.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56247c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x562488
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._salm.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._salm_kyf.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._salmau.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.msbb.log
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.msbb_kyf.dat
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.msbbau.dat
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.saie.log
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.saie_kyf.dat
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.saieau.dat
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.fleokmsbb.log
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Downloaded_Program_Files180sainstaller.inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Inf_farmmext.inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.farmmext.ini
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.zserv.inf
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x562580
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.E_zShopper_Comparative_Shopping.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Lycos___make_LOVE_not_SPAM.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SOCFG.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DriversInfSOCFG.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.POPLIST.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SYSTEMS11.ICO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SYSTEMS12.ICO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._artmmp.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56264c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x562660
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x562678
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Error_Cleaner.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Privacy_Protector.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SpywareMalware_Protection.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.HLJWUGSF.BIN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5626f4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksDealPlyLiveUpdateTaskMachineCore.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksDealPlyLiveUpdateTaskMachineUA.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksDealPlyUpdate.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mozilla_Firefox_searchplugins_fcmdSrch.xml
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sMTWB.DAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5627b0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OfferBox.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksOlacaritaUpdateTaskMachineUA.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksOlacaritaUpdateTaskMachineCore.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasksl
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasksl.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Win_Sniffer.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ASHERIFF.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiMalware_Support.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Common_FilesSystemUninstallUninstall_A360.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.COMMON.DATA
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._file.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Hide.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.AUTORUN.INF
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.AUTORUN.IN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.AUTORUN.I
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinSAT.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Google_Chrome.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GoogleUpdate.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sGoogleChromeGoogleChrome.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sMozillaFirefoxGoogleChrome.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BuqcdD1n.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winlogoo.url.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winlogin.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sLogIENA.DLL
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CMD.GDI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MASS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.InstallLOGG.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.MSWMPDAT.TLB
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WINVIEW.OCX
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OK.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.DriversAUTORUN.BAK
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.ICON.ICO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksVTTimer.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x562a38
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.A859A2.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.OG.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.OG.EDT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.UL.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.COM.RUN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DP1.FNE
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.EAPI.FNE
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.INTERNET.FNE
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.KRNLN.FNR
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.REGEX.FNR
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SHELL.FNE
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SPEC.FNE
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CursorsBOOM.VBS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HelpMICROSOFT.HLP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.CSRSC
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JEJEKAT.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.VMDX.LKI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WINLOG2.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sDATA.TXT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.userdat.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.ICONG.ICO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsUpdate.com.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINLOGS.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSMORTEM.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.0101.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OCU.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemsPINKS.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_bkr.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_sys32.bin
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sNouveau_dossier.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemMOUSE.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.WINLOGN.BAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SVCHOST_.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.autorun.txt
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._autorun.inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.disable.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Messenger_Plus__LiveScriptsholahola.js
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sautorun.inf
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sVENDETTA.LOG
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.P2.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pid.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pidloc.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows_update.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasksism
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.KERNEL.BIN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.x.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wcfgmgr.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wcfgmgr32.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winmgr.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsvcmgr.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsvcs.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsvcs_.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winupdmgrdrv32.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._svnbmvb.vbs
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.2vC7R7Po.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.3R9HDJy9.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.4EJ1wzIo.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.7z50en0S.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AB8EzBzZ.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._agent.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppContracts.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asvcbfgh.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AZzzVJXXFY.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bcvdfge.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bcvncx.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bisrv.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BitLockerDeviceEncryption.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bmnfge.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bnfgddvvc.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bnmanager.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bvzxc_.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.catsrvut.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cbvredgs.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.crlklhiexkrsgqd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.crome.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvbdfgsd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvbe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvnbhfe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cxcvredgs.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cxvgdff.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DBw99Y0q.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.displaymedia.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DnvvneZyNN.js
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dwm.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DxaFzRB6.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dZ6VjLgS.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EhStorAuthn.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.eX1Tk7TR.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.F63zTB9J.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.F7Tf3C3F.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fdxgbxcve.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FHnrk1kE.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fsdxsdf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FYgbEcpF.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gcntlwrlhelttum.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gfhdfxc.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ghbn.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gmst.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gn46.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gtud.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hjdfasd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hwC1305I.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ieUnatt.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iuyghe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.j28CorDz.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jghcve.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jK53O26n.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LockAppHost.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MaxxAudioMeters64.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.meysg.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.Uev.SyncController.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftEdgeDevTools.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mp3.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mpLc2Rp8.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msconfig.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OaKZR9x9.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.oaxiszhzqywdcvy.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OneDrive.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.outputmedia.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pcsllwn.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.prosysmodified.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._refsutil.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rootvimkvddoarv.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdfcve.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdfnme.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sfxcv.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._shrpubw.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._smile.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._swisscheck.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._taskmgr.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._taskmgr.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Temp.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._trrefghuy.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.update.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbcdfxc.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbfdcv.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbftyuj.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbmn.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbnme.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vcbvc.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VhNetY9j.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vnvhbjyyqigwezh.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._voxxdaatraftuxd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vxcsd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vxcxsdf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.web.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.win.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsTerms.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsUtility.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wr9RqAY2.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.x3jZhv36.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcbve.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcbvsdf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcvbhte.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcvdfge.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcvftyuj.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xczas.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xSpzA1aA.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Xz1y8iqH.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftIexplorer.Identifier
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Winrarupdate.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windowsupdate.exe.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windowsupdate.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Contactspm.png
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7624
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pmnen.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7624
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pmero.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str..Identifier
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_raserver
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_tty.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.drivers_str.sys
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DLL1.tmp
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DLL2.tmp
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DLL3.tmp
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskshort
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZeDihni9NbrCzW6eeF.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HALO2
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DebugResult.dark
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Debugddid
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.installESP.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ASSUNTO.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSG.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.RUN.REG
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FIRST.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.email.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pass.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._req.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sSTART.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DIDUSEEKER03.TXR
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sWINDOWS.TXT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._feixartudo.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Su.Soft.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EXPLO.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Win_Nt_Sec.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sCayane.bat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sTouroMacho.bat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sANSPYWARE.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sWIPESUP.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LOGCPU.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.bios_setup1192.txt
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OLGROS.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.inifile41.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.infBIO.INF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5636c8
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NIGZSS.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINSYS.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5636ec
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BraveSentry.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AVDRN.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WIASERVA.LOG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WIASERVG.LOG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdbUpd.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Downloaded_Program_FilesShellInstaller.INF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WIASERVB.LOG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.GH14RS.TXT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sDOAWISK.TXT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.XEA2108l.9ZT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MY.CSS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HP.HTM
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SRCH.REG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsMSOFFICE.HTA
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsFONTS.HTA
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5637ec
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SYS.REG
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.OEMSYSPNP.INF
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.KEYMGR3.INF
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DRVUPD.INF
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SSTYLE.CSS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WEBWIN.DEF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x563844
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XXXVIDEO.HTA
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push 0x563864
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntivirusGold.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PASSEPARTOUT_LIGHT.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563894
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7668
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TJ.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7668
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DEL.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DONNE_BELLISSIME.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DIALEREXE.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5638d8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5638ec
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NoCreditCard.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SuperBabes.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563920
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ESPLORA.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.REQ.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HCF605.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HCF618.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HK506.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KDCOMS.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Brickshooter_Egypt.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GPC_666.CNF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GC_407.CNF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sTMP.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_ExplorerWindows_Update.exe.config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.RUNONCE.T__
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.RUNONCE.TM_
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._schitaX.bat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._shallsX.bat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._ssigameex.txt
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksPowerControl_HR
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksPowerControl_LG
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.c.ico
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.m.ico
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.p.ico
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.s.ico
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563a80
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563a98
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563aa8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563abc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563acc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563ae4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563af4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563b08
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Free_MP3_Search.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Free_Porn.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Search_Online.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VIP_Casino.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks_
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Taskshackshen.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_ExplorerJS.MUI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SANTA.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InfASYNCEQL.INF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vtjhdhjj.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksOpera_scheduled_Autoupdate_3131961357
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksOpera_scheduled_Autoupdate_3131963549
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksAmiUpdXp.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sWP.BMP
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sBSW.BMP
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x563c58
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ErrorSafe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Error_Safe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SpywareWarning.mht
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.UNIQ.TLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x563ca4
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WINFRUN32.BIN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push 0x563cc0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BEST_BDSM_PORN.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GAY_FETISH_SEX.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DATA.GF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Buy_Advanced_PC_Shield_2012.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Critical_Warning.html
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x563d34
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_Security_Pro.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_Security_2013.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563d7c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Start
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Completescan
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Clean_This.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0xffffffffffffffa0
mov ecx, dword [0x5b7630]
push ecx
push str._sSecurity_cDefender.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x563dcc
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.ConfigSystemprofileMen
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System_Doctor_2014.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System_Doctor_2014_support.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Zentom_System_Guard.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Nudetube.com.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Pornotube.com.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Youporn.com.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SYA.TXT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.CAPTURE.BMP
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DriversDETPORT.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DriversISPUPDRV.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DriversRVDPORT.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winupdate.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563f10
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Actualizar_la_licencia_de_ESET.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563f58
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Actualizar_la_licencia_del_ESET.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x563fb8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IE_AntiVirus_3.3.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SEARCHBAR.HTML
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SEARCHX.HTML
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SB.HTM
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SX.HTM
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINHLP32.HLP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Start.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Explorer.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KeenValue.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.javaupdateupdate.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DriversPLUGIN.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DriversWINL.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.k_oneXxxx
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ccleaner.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Chrome.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Crome.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.exploler.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.explorer.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Java.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SsmSs.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Svchost.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._volume.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csrss.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.clean.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dll.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56419c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svchost.exe.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cemapi.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scvhost.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsUpdater.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksNYAN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobepdf.exe.config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobepdf.exex
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobepdf.ex_
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.binarysoundx.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Delay.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppDataLocalTempKlawiaturaklawsterowniki.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b79a4
mov edx, dword [0x5b761c]
push edx
push str._s_s.log
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsDllhost.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsScvhost.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsScvhost.exe.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.0zWLc8kNJcUtkkAEjNlUYKQumKdayZ.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.5ksHcbx1tOfruJpQKBSWcJx3.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csAiprbfef.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csp6VUuIR4mYAMbroab1A.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xxZbEWSnqt.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x564364
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chlz.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ConHost.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cssrss.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Boligkonsulenter.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Preenlighten.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Rekvirenter5.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.googles.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tub.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MozillaFirefox.png
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MozillaFox
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MozillaFox.png
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IdentitiesGhidul_operatorului.pdf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.host
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uqtSQ.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ame.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_Command_Hosts.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IwiX.com.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svs.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbc.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Vll.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbn
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7644
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempSpvTE.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VCqFv.com.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7644
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempfyjI.hC
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.PK.BIN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.BPK.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.INST.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WEB.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicZYMUNEeCoW.vbs
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicNest
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicNeX
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicLibrariesNull
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Yar.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ICQCSKMHS.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ICQGMYLEA.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OTiTPkAD
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5645d0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppDataCYIDXTqs.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cxcbvb.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fghoiuytr.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jkcgjj.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jkcgjj.png
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x564628
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x564634
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logs.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logggts.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoftlogs.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rufus.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tdOIW.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tggs.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ADFGHJ.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ahn7464.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._anydeskMRX.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._app.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppointmentApis.Lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodga.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodgbc.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodgc.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodgcg.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodialog.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._axd00000000000000000523kjiutj.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BluetoothApis.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.conor.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ertsdvb.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fvecezit.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LEeg6AxO.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mauverlite.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mfsrcsnk.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.printersoundx.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pwcreator.Lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._receipt.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._regedt32.Lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ssd.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svchosts.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TestLink.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._thistime.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uniplat.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._visualPrint.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wiawow64.Lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WMPDMC.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wscsvc.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.yourfile.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Taskscommentators.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksDebitumenize.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksMilieukravene.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksRdpSaUacHelper.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksUdsknke1.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Taskscommentators
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksDebitumenize
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksMilieukravene
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_nafdfnasia
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNano
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNanos
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksprocessing
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksRdpSaUacHelper
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksRuntimeBroker_tdOIW
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksUdsknke1
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KY.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ky.config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logger.p
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._swinservices.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDocuments
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Spyrix_Free_Keylogger.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logmanager.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Settings.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tettee
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Java
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.data.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Java6
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._build.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.config.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._filename.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._filename.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msn.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._systemfile.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._systm.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._till.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vol.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ogdg.sfx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._server1.sfx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._firefoxxx.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.image.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kdiurdjk.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.programs.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._raserver.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksNafdnasia
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNafifas
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNafnias
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com2.62D8ED13_C9D0_4CE8_A914_47DD628FB1B0keys.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com2.62D8ED13_C9D0_4CE8_A914_47DD628FB1B0log.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com2.62D8ED13_C9D0_4CE8_A914_47DD628FB1B0Off.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com4.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9keys.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com4.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9log.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com4.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9Off.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com6.00C6D95F_329C_409a_81D7_C46C66EA7F33keys.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com6.00C6D95F_329C_409a_81D7_C46C66EA7F33log.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.com6.00C6D95F_329C_409a_81D7_C46C66EA7F33Off.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt3.1D2680C9_0E2A_469d_B787_065558BC7D43keys.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt3.1D2680C9_0E2A_469d_B787_065558BC7D43log.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt3.1D2680C9_0E2A_469d_B787_065558BC7D43Off.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt6.17cd9488_1228_4b2f_88ce_4298e93e0966keys.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt6.17cd9488_1228_4b2f_88ce_4298e93e0966log.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt6.17cd9488_1228_4b2f_88ce_4298e93e0966Off.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt7.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9keys.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt7.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9log.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lpt7.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9Off.c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._services.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._spoolv.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svchost.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinApp.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.log.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DC8B938D_89F5_4A39_A4F9_F4D75F6CB4E6.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.LECHUCK.HTA
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.CC.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._symantec.css
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._a776a8.js
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.home_bg3.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.icon_security_scan.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.icon_virus_detection.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logo_home.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logo_symantec.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nav_alert_over.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nav_help_over.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nav_info_over.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nav_solutions_over.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.protect_new_55x55.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._start_security_over.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._start_virus_over.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windowsXP_masthead_ltr.gif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MsSkinnerMSBACKUP.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks1232wfm.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWinNT.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._adobread.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksApplication_Management
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asspp.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AutoTime.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksAvast_security
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.unregmp2.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasksunregmp2
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.log.binb
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.log.ewbb
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.log.ewbt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._addons.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Taskscsrss
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksScheduledUpdate
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TaskBitGuard.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TaskBrowser_Manager.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TaskBrowserDefender.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TaskBrowserProtect.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BrandingShellBrdCore1_sasdt1.bak
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BrandingShellBrdCore1_sasdt1.KInf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5652e8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wmnmsn_taskmg.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Outlook_ExpressKLOG.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MessengerKLOG.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Movie_MakerKLOG.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NetMeetingKLOG.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.ComKLOG.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DllcacheKLOG.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.RestoreKLOG.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.LISTA.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.ENVIADOS.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_start
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CILSEY.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.convert.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._files.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicORGDTNQvHu.vbs
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublic_vzgnuwxmjeukdfwdujqa.vbs
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._azroles.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aa.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AccountsRt.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._autopilot.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bi.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._browseui.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chrome.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ddr.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DevicePairingWizard.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.doskey.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DpiScaling.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.exploerss.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fxscover.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HVintbRD.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.live.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msco.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mspaint.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._name.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ople.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.others1.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PasswordOnWakeSettingFlyout.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pdf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pzry.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rdeaa009765678_987656bn.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scwind.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdchange.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdfgfdsdfd.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sys30.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sys4h57g.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tdwebeowjzbvcxx.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UNPUXHost.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uyhf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbhtghbvfgh.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wen.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows_update.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wuid.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xdqzemydvwkvnea.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.znytpstdcrwsisx.fr.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_azroles
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksDPI_Service
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksDPI_Service_Task
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_fonts
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksimages
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNafnifas
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNania
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNanias
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_rekeywiz
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksUDP_Service
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksUDP_Service_Task
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksUpdateWinFeed
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksUpdatesFTNygAhcwbW
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksUpdatesUxfDWBHJe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskswerwqerweqrwe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWPA_Service
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWPA_Service_Task
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksAdobe_Flash_Player_5064EE77_0M61_4F38_V100_96E2C039847L.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Diamond.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.diskraid.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.id.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksBetvingelsernes7
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksBetvingelsernes7.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.EXPLORER32.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.explorer.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._a1bDl273281923490928390GHAJSl.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._a1bDl273281923490928390GHAJSl.docx
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.WinSKTLLWL.XCV
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._antomarvis.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cnhnfvjhfchfbc.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dfghjk.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DGOLKDGKJGBKJDGIKJ.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dmtdy.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dphs.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.drhd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dth54.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.erew.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.esfgvyw.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.explo.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.explor.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.expls.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fgisdp.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._funfnndfnkes.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fyfluyf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ghjnrt.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hdry.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iihge.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iutmn.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jesd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JHGUJYGBIG_UKHI.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jnsbt.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jyfyfffyy.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kjydre.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ksea.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kwrtd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mer.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mighr.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nctwe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ndiso.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nesy.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nfgh.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nhgf5.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nmsp3.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ntry.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.obhn.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ofiyh.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ojwfwjiokjs9jvikojsoidj.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.okezi.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.otgwsf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.oyjf.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.oyjfo.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.plbns.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qaimhy.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qamhy.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qrfpo.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qwrtd.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sgcro.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sgih.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._startup.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tempadexpac.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tsig.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uogfre.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wsea.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wzsdfr.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xckycixgych.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xithe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._adobe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Document.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._file.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._folder.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.outlook.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbs.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeG7L2D8V6_E3C1_M1Q0_R0B7_O1L2F5R6X0G4.pas
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeG7L2D8V6_E3C1_M1Q0_R0B7_O1L2F5R6X0G4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobeut
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksMicrosoft_Window_Center
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksMicrosoft_System_Protect.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Gato.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Garbage_Cleaner.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gpupdate.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.HEURICCOMMAND.BAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HOLA_COMO_ESTAS.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x565da4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Install_ntfs.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svchosts.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svcthost.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svhost.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sxvhost.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.win0.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hadikhiya.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Cjojansta.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tenakat.js
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.el_homa.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Fontsconfig.json
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Debugconfig.json
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksUpdate.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksUpdate2.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksUpdate3.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksUpdate4.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksUpdate_windows.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksWindowsUpdate1.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksWindowsUpdate2.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksWindowsUpdate3.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksWindows_Update.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeARMHelper.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JOJO.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks15203F7B_31CF_3999_A824_6448E629E96C.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksEburin
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksEburin.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.abengine.ini
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.abengineOff.ini
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.zcengine.ini
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.zcengineOff.ini
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.zdengine.ini
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.zdengineOff.ini
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksLogOfficeDat.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.F.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksAzure_Update_Task
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows_.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566084
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Taskspennybee_Runner.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.php.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov dword [0x5b84b8], 0x43
jmp 0x4a254e
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x5b
jge 0x4a2582
mov ecx, dword [0x5b84b8]
push ecx
push str._c:WindowsSystem32Winsh320
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
jmp 0x4a2541
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.projectfile1.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Drivers_Memory.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PTCut.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PTCut.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksRuntimeBroker_PTCut
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Client.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rasphone.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksBlanktegn7
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksBlanktegn7.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.X2014
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rqw.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TEMP.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.explorre.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AMDW.VBS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.3.VBS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.4.REG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CHE.JPG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SmartClock.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksSmart_Clock
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5661f8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_svcupdater
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWindowsUpdater
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.usvc32.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SyncHost.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sREG.REG
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksSystemCO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksSystemTA
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksTest_Task17
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksTest_Task17.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TaskscIOOhjLCvz
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_fQfPixvUpX
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksSystemIDE
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksSystemSecurityService
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks18FD2003_7401_4463_B772_6843E703F734
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x56633c
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tempbypass.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.003D9085_BB95_4A55_AF4B_7A397AB8827C.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksUpdateWindows_Tittle
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TSTheme.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.outlookupdatings.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ne9bzef6m8.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MaOM6bIc55Lj6k4i.exe.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.o1710tdXI475lNr9.exe.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OSmEgyoAcnw5g38C.exe.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pFkMx6mGt2FTyWmB.exe.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sbR5JGVggDjZ4CKC.exe.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.w7Auwv44gzhC6Njn.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Z16Vn7MNDyjg5KNy.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566494
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BbIGzz.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fBKDCV.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jkzoKD.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PHAHYp.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PkKqJI.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rTErod.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tEsQxF.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XJmdcQ.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ymbWet.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Google.com.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.diiihost.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tHwMAS.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AzKKHE.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.eRKmgs.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ios.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.os.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svch32.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbc.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vncc.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VZqnCn.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aadcloudap.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BMwpknSibA.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BxjUOFQUZX.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GxMZHjywsI.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IMEPADSV.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ODNEQImDfk.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.petrZQvPnX.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RAVBg64.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rnYVKJVOCd.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RtlUpd64.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sgDQNBnLin.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._smiWVuKjWE.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZVvIyyfKWN.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._atgybtuumnbylnw.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cyxhdqoxfwnwkgr.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dgrltvzvvgjpxaz.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dobusyfllewbsqp.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jhnysglllmplcxv.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._srvknhyssouajgg.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xemfpqyipxgmokm.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.yykvpqoezbvwpdp.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zyywipgaoyboscz.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svchost.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks_svchost.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_svchost
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sMUERE.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.VARSH.TXT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b79a4
mov edx, dword [0x5b7674]
push edx
push 0x566784
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b79a4
mov eax, dword [0x5b7674]
push eax
push 0x566790
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksVMWare_Central_Connector
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VOPackageVOPackage.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksWinWOW64Services
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.bactname
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.nbetwinds
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWMI_Services
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wxhk.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xteris.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksFlash.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksHomeGroupProvider.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksMiscfost.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksMiscfostNsi.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksNetframework.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksWwANsvc.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksFlash
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksHomeGroupProvider
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksMiscfost
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksMiscfostNsi
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksNetframework
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWwANsvc
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ime_tps.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Malware_Defense_Support.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.READ.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sWIN.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sWINLOG.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.DLL.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.EMM.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WINK.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._Terms.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5669b0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.247Cams.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5669c8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MyWebSearch_Email_Plugin.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566a08
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566a18
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Lollipop.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b8d70
push 0x5b4e30
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4a3f40
push 0x5b4e30
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0xd80], eax
push 0x5b4e30
lea ecx, [ebp - 0x978]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [0x5b84b8], 0
jmp 0x4a3df2
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov eax, dword [0x5b84b8]
cmp eax, dword [ebp - 0xd80]
jge 0x4a3e21
mov ecx, dword [0x5b84b8]
movsx edx, byte [ebp + ecx - 0x978]
cmp edx, 0x2e
jne 0x4a3e1f
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x978], 0
jmp 0x4a3de3
lea ecx, [ebp - 0x978]
push ecx
push str._s_NAVPS.DAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea edx, [ebp - 0x978]
push edx
push str._s_NAV.DAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0x978]
push eax
push str._s.DAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x978]
push ecx
push str._s_CFG.LPD
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea edx, [ebp - 0x978]
push edx
push str._s_PS.LPD
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0x978]
push eax
push str._s.LPD
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x978]
push ecx
push str._s.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.LSNSS.EXE
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SQLPASS.DIC
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SQL_1.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SQL_1V7.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SQL_2QINGD.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SQL_2TAIW.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SQL_3.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.UPLOG.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.VERSION.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Casino.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Email.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MakeMoney.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MP3.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sex.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Web_Hosting.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UIDSAVE.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.KR_DONE1
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Personal_Antivirus.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Personal_Protector.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PestTrap.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IE_HOOK.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sGOOGLE2.API
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sIEXXPLORE.PAC
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.INISTONE.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftSTOR.CFG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HelpidsmtpView.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDocumento_Importante.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sMicro.bat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sMicro2.bat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sMicro3.bat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Online_Security_Test.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566c78
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566c94
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7668
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Online_Security_Guide.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7668
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Security_Troubleshooting.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov edx, dword [0x5b7674]
push edx
push str._sDownload.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov eax, dword [0x5b7674]
push eax
push str._shqghumeaylnlf.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, dword [0x5b7674]
push ecx
push str._sOptimizerPro.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov edx, dword [0x5b7674]
push edx
push str._s_superoptimizersetup.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov eax, dword [0x5b7674]
push eax
push str._sTusFiles.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, dword [0x5b7654]
push ecx
push str._sWse_binkilandUpdateProc_bkup.dat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PIPLXE.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RGZLTE.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TKRULI.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.javasch.js
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.154.BAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chrome.exe.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.KB95842.LOG
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tempxyz.dll
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AHNRPTA.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EXPIORER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._feedbooks.com.xml
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fullscreen_toolbar.xml
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Introvert.EGH
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_ExplorerONLO0R.OBK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566e5c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HELPHOSTS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.O.REG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.O2.REG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.O.VBS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINLOG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x566e8c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.WUWBQY.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
lea ecx, [ebp - 0x34]
call fcn.0050f5b0
push str.decrypt
lea ecx, [ebp - 0x34]
call fcn.0050f680
push 0x566eb4
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.instructions
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.recover
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.restore
lea ecx, [ebp - 0x34]
call fcn.0050f680
lea ecx, [ebp - 0x20]
call fcn.0050f5b0
push str..txt
lea ecx, [ebp - 0x20]
call fcn.0050f680
push str..png
lea ecx, [ebp - 0x20]
call fcn.0050f680
push str..bmp
lea ecx, [ebp - 0x20]
call fcn.0050f680
push str..html
lea ecx, [ebp - 0x20]
call fcn.0050f680
push str..url
lea ecx, [ebp - 0x20]
call fcn.0050f680
push 0x566f0c
lea ecx, [ebp - 0x20]
call fcn.0050f680
mov dword [ebp - 0x97c], 0
jmp 0x4a4a84
mov edx, dword [ebp - 0x97c]
add edx, 1
mov dword [ebp - 0x97c], edx
lea ecx, [ebp - 0x34]
call fcn.0050f110
cmp dword [ebp - 0x97c], eax
jge 0x4a4da5
mov dword [ebp - 0xd84], 0
jmp 0x4a4ab3
mov eax, dword [ebp - 0xd84]
add eax, 1
mov dword [ebp - 0xd84], eax
lea ecx, [ebp - 0x20]
call fcn.0050f110
cmp dword [ebp - 0xd84], eax
jge 0x4a4da0
mov ecx, dword [ebp - 0xd84]
push ecx
lea ecx, [ebp - 0x20]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x97c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7634]
push edx
push 0x566f14
lea eax, [ebp - 0xd7c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
mov dword [0x5b84b8], 0
jmp 0x4a4b22
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x4a4b3e
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x548], 0
jmp 0x4a4b13
lea eax, [ebp - 0x574]
push eax
lea ecx, [ebp - 0xd7c]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x578], eax
movsx edx, byte [ebp - 0x548]
test edx, edx
jne 0x4a4b65
jmp 0x4a4bad
lea eax, [ebp - 0x548]
push eax
mov ecx, dword [0x5b7634]
push ecx
push 0x566f1c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea edx, [ebp - 0x574]
push edx
mov eax, dword [ebp - 0x578]
push eax
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4a4b58
mov ecx, dword [ebp - 0x578]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov edx, dword [ebp - 0xd84]
push edx
lea ecx, [ebp - 0x20]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x97c]
push ecx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7674]
push eax
push 0x566f24
lea ecx, [ebp - 0xd7c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
mov dword [0x5b84b8], 0
jmp 0x4a4c14
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0x104
jae 0x4a4c2f
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x548], 0
jmp 0x4a4c05
lea ecx, [ebp - 0x574]
push ecx
lea edx, [ebp - 0xd7c]
push edx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x578], eax
movsx eax, byte [ebp - 0x548]
test eax, eax
jne 0x4a4c56
jmp 0x4a4c9e
lea ecx, [ebp - 0x548]
push ecx
mov edx, dword [0x5b7674]
push edx
push 0x566f2c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0x574]
push eax
mov ecx, dword [ebp - 0x578]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4a4c49
mov edx, dword [ebp - 0x578]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov eax, dword [ebp - 0xd84]
push eax
lea ecx, [ebp - 0x20]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x97c]
push edx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
mov ecx, dword [0x5b7670]
push ecx
push 0x566f34
lea edx, [ebp - 0xd7c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
mov dword [0x5b84b8], 0
jmp 0x4a4d04
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x4a4d20
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x548], 0
jmp 0x4a4cf7
lea edx, [ebp - 0x574]
push edx
lea eax, [ebp - 0xd7c]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x578], eax
movsx ecx, byte [ebp - 0x548]
test ecx, ecx
jne 0x4a4d47
jmp 0x4a4d8e
lea edx, [ebp - 0x548]
push edx
mov eax, dword [0x5b7670]
push eax
push 0x566f3c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x574]
push ecx
mov edx, dword [ebp - 0x578]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4a4d3a
mov eax, dword [ebp - 0x578]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
jmp 0x4a4aa4
jmp 0x4a4a75
push str.TasksUpdateWuauclt
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksUpdateWuaucltHelper
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._INSTRUCTION.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._INSTRUCTION.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._newstyle.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.README_HOW_TO_DECRYPT_YOUR_FILES.HTML
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.README_HOW_TO_DECRYPT_YOUR_FILES.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DECRYPTION.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56700c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567018
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567024
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Info.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56703c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FILES_ENCRYPTED.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sFILES_ENCRYPTED.txt
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asasin.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asasin.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksUpdate_service__Windows_System
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.blackhunt_bg.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.blackhunt_icon.ico
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.blackhunt_id.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BlackHunt_Logs.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.blackhunt_private.key
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.blackhunt_public.key
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.blackhunt_readme.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.blackhunt_readme.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Back.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._reload1.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aamer.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeReader.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._advapi32.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.devcon.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.explorer.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Garsomware.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ITS_ME.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Edge.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MINECR1.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.moin_moin.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PDF_Reader.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Rakkun.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Serie.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svch0st.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svchosts.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System.ini.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._virus.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._virus228.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.whatsapp.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Defender.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Update.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows64.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.help_dcfile.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.COMO_RESTAURAR_ARCHIVOS.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.COMO_RESTAURAR_ARCHIVOS.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.INSTRUCCIONES_DESCIFRADO.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.INSTRUCCIONES_DESCIFRADO.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Comment_d
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Cyborg_DECRYPT.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.8a0b51a0.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.9e1bbe88.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ab2da064.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.8a0b51a0.ico
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.9e1bbe88.ico
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ab2da064.ico
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.diablo6.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.diablo6.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cryptinfo.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asdqw.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567474
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.READ_ME.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._takeown.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BAD_GOPHER.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RondoWallpapeR.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LockBit_note.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JA.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5674e8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.wvtymcow.bat
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.info.hta
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.logs.txt
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksLoki
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sinfo.hta
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DesktopLOPTR.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DesktopLOPTR.htm
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EscritorioLOPTR.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EscritorioLOPTR.htm
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lukitus.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lukitus.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_svhost
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5675c0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wallpaper.png
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.39B6FD42_8SKE_838D_9875_3YTA2897936Q.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._HOWDO_text.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._HOWDO_text.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DesktopOSIRIS.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DesktopOSIRIS.htm
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EscritorioOSIRIS.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EscritorioOSIRIS.htm
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pastagood.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hi.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ArchivioAmatoriali.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Premi_Si.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._stst.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.How_To_Recover_Encrypted_Files.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LOOK.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.README_TO_DECRYPT_FILES.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._recovery.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.How_Recovery_Files.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksEncrypter
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._HELP_SOS.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._f1.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567778
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5677b8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK__PLEASE_READ_THIS.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Oaonmsiyy.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.datafile.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.drhyd.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nbsdd.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nexcsf.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Warnings.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._WHAT_is.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._WHAT_is.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ShrugDecryptor_.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sHow__to__decrypt__files.txt
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7aa4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ReadMe_Now_.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.h4_svc.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._v9_svc.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._t2_svc.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._f__d_d.sys
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Pagesfilo.sys
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Renc.sys
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksMicrosoft_Auto_Scheduler
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksTime_Trigger_Task
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.getbinomo.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CryptoLocker.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Save_Files.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mystartup.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RESTORE_FILES_INFO.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RESTORE_FILES_INFO.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HOW_TO_DECYPHER_FILES.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HOW_TO_DECYPHER_FILES.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567a28
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.READ_DECRYPT_DATA_INSTRUCTIONS.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567a70
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.READ_DECRYPT_DATA_INSTRUCTIONS.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567ab8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Decryption_instructions.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567af8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Decryption_instructions.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567b38
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Good_morning_DECRYPT_FILES.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567b78
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Good_morning.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x567ba0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.__RESTORE_FILES__.inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.__READ_ME__.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.payday.hta
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._s_s_ransom.jpg
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IyQA.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdf51ewxzv24d54fg.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tasksche.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qeriuwjhrf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeflashPIC.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeflashIP.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KodakPIC.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KodakIP.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MediaplayerPIC.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MediaplayerIP.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Altshell.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Cache.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Icon.ico
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Skype.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ntbackup.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ykcol.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ykcol.html
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FUCKDATA2000.LOG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SILC_DLL.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.MODEL.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.RK.BIN
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._settings.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksOneDriveStart
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWinHostStart
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWinHostStartForMachne
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksSynapticUpdater.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Local_Security_Authority_Process.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksGoogle_Update_12.3
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AudioDriver.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AudioHD.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Skype.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_taskmgr.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoftminer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pthreadGC2.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zlib1.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.phatk121016.cl
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.poclbm130302.cl
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scrypt130511.cl
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Medialibcurl_4.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Medialibeay32.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Medialibgcc_s_dw2_1.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Medialibstdc_6.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Media_ssleay32.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MediapthreadGC2.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mediazlib1.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AHZSVhvnGm.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bAUnSdlCkw.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BfWTjSzBAA.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EJMbfDcdzM.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ftUPeSPdpA.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gBWXXQuzYx.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HFePKnTbhy.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HpuEtzbXyw.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kBBcUBIbha.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KmJlZQXSMi.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LtHgNeMqRB.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qkYTRdrwMd.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ulZYCdTsml.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WTeEqNLdqe.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.yHXUGewwUP.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZPfgIfhGfC.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Image.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftNetworkConnectionsConnection
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AutoRunApp.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftVBS.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftVBS1.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftVBS3.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svcbmp.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System7za.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System_sys32.7z
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systemgzip.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x568134
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vget.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dskdgnostbat.key
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dwdiag.cat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinRing0x64.sys
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.instsrv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nirc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subinacl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.infmstoble.inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SoftwareDistributionintl.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SoftwareDistributiongrim.ime
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SoftwareDistributionmsletni.ime
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SoftwareDistributionmstoble.cab
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SoftwareDistributionmstoble.cop
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.majorsw.pol
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Webhost.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logstart.bd
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._setting.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SecurityHost.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.driversconfig.json
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.drivers_ver.txt
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.drivers_ver2.txt
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.HSERV.SYS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.NETDX.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.VERSION.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.OSPCONT.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AFLFILIQ.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InfTWAINTEC.INF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.OT.ICO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SFKLG.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LDLIST.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Bot.hwid
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56837c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VERSION.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.X.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LycosSidesearchOFFLINE.HTM
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5683c0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5683d8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LYCOS_SIDESEARCH.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.HX1.BAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.NORUNS.REG
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x56841c
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ID.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ADOBE.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FILE.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TASKMAN
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RARARC.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.coc40.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.o40.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._apps.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasksdsg
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7bb4
mov ecx, dword [0x5b7654]
push ecx
push str._s_s.glp
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ROX.ROXROX
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.infosapi.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.win64.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.JURISOS.TXT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.ORIGEMCLASSES.TXT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.BONECUDOS.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sGIRENON.TXT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSTECF.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.AVG32XL.KDX
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.DADVIK32.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7bb4
mov edx, dword [0x5b7654]
push edx
push str._s_s.TXT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINET.OCX
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sPREFS.JS
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.MSUPDATE.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SEI.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SPI.DLL
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.IERROR.REP
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WINT.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WINTE.HTML
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32FarrEl.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Crmans.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GoogleGoogle.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OCULS.LOG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MediaUPSET1.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MediaUSER.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5685f8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5685fc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.img.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56860c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x568610
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.micronhelp.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeReader_temp.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobe_temp.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sibcdb.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sibcdb.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BN0RL4YT.FQB
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CM94CCFW.GT0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LZ1OV0N4.RR7
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TB2K5VDF.5MG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kav.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._syslog.123.log
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sProgramData6.4.cfg
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appleuptade.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.itunesupdate.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DKXVHW.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XYRYZ9458
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zangifppa.zlib
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._botpc.cdr
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winrar.zlib
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7bb4
push 0x5b7778
push str._s_s.DAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoftgertesa33.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appdata.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_ExplorerACPI.VXD
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GForces4822.hlp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mHelp234.hlp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Stmamps2983.hlp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zapzap828.hlp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.8.8.brt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iexplore.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sX2014
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aneis.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.documentos.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._trucndmfj.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scpak1.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scpak2.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scpak3.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDados_de_aplicativos1.jpg
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDados_de_aplicativos2.jpg
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDados_de_aplicativos6.jpg
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDados_de_aplicativosid.sys
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDados_de_aplicativosChrome_Serviceclass.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDados_de_aplicativosChrome_Serviceicon.png
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDados_de_aplicativosChrome_Servicemanifest.json
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._stray0p
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HPOFFICE.zip
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.1.cer
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.2.cer
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.icc.cur
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pc.id
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bf4ppp.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gwp2.sys
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.babfiv.sys
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.bsbfiv.sys
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EVAL.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.microsoft.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsX64microsoft.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksUpdate
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ty46.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.itunes.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.itunes_br.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.itunes_el.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.itunes_ftp.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.itunes_ge.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.itunes_sf.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._file.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.WindowsInput.exe.config
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.WindowsInput.InstallState
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AssemblySystem.exe.config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._taskhost.exe.config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winlogom.exe.config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windefenderhos.exe.config
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksWindows_Defender_host
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sc.exe.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VenoM.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VenoM.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PWISYS.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasksigfxpers
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Execution2.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Execution5.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemComponentModelINotifyPropertyChangingV.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemNetNegotiateClientp.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.A.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksSystemSystemUpdate
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sProgramDataWindowsShellword.png
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcbcujqbvhewknr.eu.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logfrs.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZCiojYXYi.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cont.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sant
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemACD.CMD
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemACD2.CMD
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DEFAULT.CSS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WEBOSLOGO.BMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HH.HTT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SP.HTML
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.CRCSPIDER.ICO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PCSEARCH.REG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.FAVICO.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7ba4
push str._sSECURE32.HTML
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SECURE32.HTML
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JustClickinghome.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SND44.GIF
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.USER44.ICO
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Find_Your_Perfect_Car.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FREE_DVD_Player.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.INCREASE_PROFITS.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Play_Bingo_Online.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adult_Search.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Erotic_Search.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Web_Search.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WebRebates4WebsrebatesWebtrebates_toprC0.htm
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.POPUP.HTML
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZSMSCC16.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FOTO.JPG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.EJECUTOR.BAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TEUER.JAR
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksAcrobat_Update.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sscvhost.lnk
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DeviceProperties.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.htjdd.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jgfn.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._srg.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ufyd.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Crhome.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._atu.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.configs.inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7628
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Server_server.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7628
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x568f28
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7628
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Server_admin.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.__init.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._a.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._b.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Taskswow64
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Taskswow64.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasksmichelangelo.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasksmichelangelo
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FaxOCNHRH.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KndexRAZCXS.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RAZCXS.bmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksAdasdsadas3id
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysHelp.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksSystemSystemDonezs
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWebHost
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksMicrosoft_LocalManager
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7bb4
mov eax, dword [0x5b7654]
push eax
push str._s_s.ntx
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b79a4
push 0x5b7bb4
mov ecx, dword [0x5b7654]
push ecx
push str._s_s_s.txt
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gtdddsssqyt.js
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks4EA29966_F266_4038_80A9_1DEC42740035
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskszdgvdfg
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.CSLSS
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5690c4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.152142592440782110995132
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ad614a361b6a01b307b49efaeff97543
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ec40016aefa10c1b7a71ef6a56c6d383
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_bguuwe.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_blfte.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksdanke.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksdcupdate.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksdllhost.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksdrbux.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_ftewk.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksgbudn.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksghaaer.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksgkools.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksgntuud.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskshbilop.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskshnbux.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksjbruyer.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksknuus.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskslamod.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskslegenda.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskslegends.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksmetado.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksmetafor.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksmjlooy.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksmnolyk.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_nbveek.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_nrbux.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_ntools.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_nvopencl64.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksoneetx.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksorxds.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_redlines.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_rgbux.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_rnyuf.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_rovwer.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_rtouk.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_rugen.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_skdbn.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_sqtvvs.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_taskhostv.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasks_tkools.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Taskswfyoot.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWinComService.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksytouk.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksTT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SVDHALP.EXE.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._syskey2i.drv
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.g.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.v.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.w.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._systemskey.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.userdata.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CTFMON.CFG
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._versao.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ok.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SeafkoAgent.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AForge.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AForge.Video.DirectShow.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AForge.Video.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CommonData.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Newtonsoft.Json.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sqlite3.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mannyexe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wscript.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._start1.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CSIDL_X
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CSIDL_
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov edx, dword [0x5b7654]
push edx
push str._sMicrosoftProtectOnce
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov eax, dword [0x5b7654]
push eax
push str._sMicrosoftProtectwinrescheck.wrc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SetupExtensionm.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.NlsLexicons00mmx.dll
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.NlsLexicons00ssx.dll
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks35DC3473_A719_4d14_B7C1_FD326CA84A0C.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks7B02EF0B_A410_4938_8480_9BA26420A627.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks22116563_108C_42c0_A7CE_60161B75E508.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks62C40AA6_4406_467a_A5A5_DFDF1B559B7A.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks810401E2_DDE0_454e_B0E2_AA89C9E5967C.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksBBAEAEAF_1275_40e2_BD6C_BC8F88BD114A.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksCapite7.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksCrome.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksIons2.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasksprogram.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksRosinbrdet5.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksCapite7
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksCrome
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksIons2
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.Tasksprogram
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksRosinbrdet5
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._system32helper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._system32helper
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._system32helper.js
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._system32helper.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._system32helper.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._system32helper.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_svnosht.exe
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.CRT.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wusa.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Taskswusa
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Taskswusa.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mscuivedeoire.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fdcgjhjyuyihdastagghejh.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gjhgkuytgkgfgd.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vcdfcfghjghtkhjbnvgh.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chromee.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._filez8.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.87ghd.log
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.b55v0.log
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksWindows_Update
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push str._sTasksWindows_Update_.job
lea ecx, [ebp - 0xd7c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x4ab4ba
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
cmp dword [0x5b84b8], 0x104
jae 0x4ab4d5
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x548], 0
jmp 0x4ab4ab
lea ecx, [ebp - 0x574]
push ecx
lea edx, [ebp - 0xd7c]
push edx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x578], eax
movsx eax, byte [ebp - 0x548]
test eax, eax
jne 0x4ab4fc
jmp 0x4ab542
lea ecx, [ebp - 0x548]
push ecx
push 0x5b7eb4
push 0x569974
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea edx, [ebp - 0x574]
push edx
mov eax, dword [ebp - 0x578]
push eax
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4ab4ef
mov ecx, dword [ebp - 0x578]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindClose]
push str.TasksWindowsSystemCareMicrosoft
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.TasksSvchostUpdateTask
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SCANDISK.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemSYSTEM.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemSYSTEM.VBS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.win32.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nhju.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Ctfmon.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Msconfig.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Regmonstd.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Runctf.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x569a54
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LOGFILE32.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.MYUSERNAME11.TXT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msconfig.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.explorer.ini.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Google.com.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.com.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PowerTray.ini.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows.ini.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sv.exe.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Update.Microsoft.com.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Host.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Lunhgfan.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DisplaySwitch.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_spec
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chrome.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chrome1.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msword.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.prgram.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Tasks_name
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ResourcesThemesicsys.icn
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ResourcesThemes_tjcm.cmn
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x569bd0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ICSYS.ICN
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ICSYS.ICO
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7db4
push str._sTasksMicrosoft_LocalManager__
lea edx, [ebp - 0xd7c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x4abcd4
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x4abcf0
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x548], 0
jmp 0x4abcc7
lea edx, [ebp - 0x574]
push edx
lea eax, [ebp - 0xd7c]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x578], eax
movsx ecx, byte [ebp - 0x548]
test ecx, ecx
jne 0x4abd17
jmp 0x4abd5d
lea edx, [ebp - 0x548]
push edx
push 0x5b7db4
push 0x569c18
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0x574]
push eax
mov ecx, dword [ebp - 0x578]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4abd0a
mov edx, dword [ebp - 0x578]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
push 0x5b7db4
push str._sTasksMicrosoft_LocalManager_
lea eax, [ebp - 0xd7c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x4abd9f
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0x104
jae 0x4abdbb
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x548], 0
jmp 0x4abd90
lea eax, [ebp - 0x574]
push eax
lea ecx, [ebp - 0xd7c]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x578], eax
movsx edx, byte [ebp - 0x548]
test edx, edx
jne 0x4abde2
jmp 0x4abe28
lea eax, [ebp - 0x548]
push eax
push 0x5b7db4
push 0x569c48
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x574]
push ecx
mov edx, dword [ebp - 0x578]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4abdd5
mov eax, dword [ebp - 0x578]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
push str.TasksTelemetry_Logging
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7624
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._r1d3.mp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksSystemHiBatya
lea ecx, [ebp - 0xd98]
call fcn.0050f680
lea ecx, [ebp - 0x34]
call fcn.0050f5b0
push str.ApplicationNetwork
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.AudibleFree
lea ecx, [ebp - 0x34]
call fcn.0050f680
push 0x569cb0
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.BrowserDatStorage
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.BrowserStorage
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Cache_System_Extension
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Clean_Master
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.CleanMemoryWinTask
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.ChromeDataStorage
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.CmdValidate
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Command_cache_application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.CompFit_Application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.DefragWinSysTask
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Direct_Tools_Update
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Download_http_service
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Drivers_Update
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Fit_Elementary_Application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Free_Advanced_Tuneup_utilities_for_Windows
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.FreeMonoLibrary
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.FullColor0
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.gpu_driver
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Gpu_Settings
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Gpu_Tools
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Glari_Utilities_for_Windows
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Home_lan_application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Home_http_service
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.iCloud_Free_Disk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MNU_Net_libraries
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Mono_Library
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_Cloud_Lan
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_Cloud_Disk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_Cloud_Network
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_cpu_monitor
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_dll_libraries
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_libraries
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_net
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_Net_14.0_libraries
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_new_library
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_nocsys_tools
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_speed_internet_library
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_system_cache_service
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Ms_visual_extension
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsLogExpert
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsLogMonitor
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Msmmvs
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Msnetc
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Msnetcs
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsNetMonitor
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsNetValidator
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Msntcs
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsSocketVision
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsSystemWatcher
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsSysToken
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsTools
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MsWinToken
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.MyCloud_Disk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.NativeLogger
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Net_libraries
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.net_rest_application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.netcloud_free_disk
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.NetvalTask
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.NetSys
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.NetworkTask
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Power_Saves
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.services_update
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Shell_Applications_Extension
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Shell_Database_Extensions
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Shell_File_Extensions
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Speed_lan_library
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.SpeedNetworkTask
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Stream_application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Sysnetsf
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_cache_service
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Health_Application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.System_Network_Extensions
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Task_Gpu_health
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Task_Gpu_update
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Task_Health_Application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.TaskForms1.0
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.TimeEr
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Visual_Extensions
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Win_Direct_Tools
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.WinDotNet
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_.Net_core_library
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_.Net_library_core
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_core_.Net_library
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Direct_core_tools
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_directory_manager
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Net_Core
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Network
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_OneDrive_Shell_Extensions
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Power_Saves
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Power_Saves_application
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Power_saves_tools_for_windows
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.Windows_Shell_OneDrive_Extensions
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.WinInform
lea ecx, [ebp - 0x34]
call fcn.0050f680
push str.WinNetworkTask
lea ecx, [ebp - 0x34]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4ac39e
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
lea ecx, [ebp - 0x34]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4ac435
mov edx, dword [0x5b84b8]
push edx
lea ecx, [ebp - 0x34]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x978]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x978]
push ecx
push str.Tasks_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0xd98]
call fcn.0050f680
lea edx, [ebp - 0x978]
push edx
push 0x5b7eb4
push 0x56a3d0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
jmp 0x4ac38f
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.client_id
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.group_tag
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xps.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CGLOGS.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows54xmz2NgW.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows54xmz2NgW.cfg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b79a4
mov eax, dword [0x5b7654]
push eax
push str._s_sLOG.DAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b79a4
mov ecx, dword [0x5b7654]
push ecx
push str._s_sv1.20.0crackmenlog.dat
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b79a4
mov edx, dword [0x5b7654]
push edx
push str._s_s_wchelper.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BOOT.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TEKNO.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Taskshromex
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows____Mutex____.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsokokok.cfg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsokokok.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsVsFnHJN5d.cfg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsVsFnHJN5d.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows8DiQ0.cfg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows8DiQ0.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows6Y5LgRTQ2.cfg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows6Y5LgRTQ2.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows_aAQZ6qhr.cfg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows_aAQZ6qhr.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows_nTKCe2.cfg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows_nTKCe2.dat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Browsers.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mails.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Waiting.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cmitros.exe.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FlashFXP1.exe.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systeme.exe.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systemi.exe.ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csrss.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.I3.TMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uns.tmp
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UnSpyPC_Scanner__Monitor.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.helper.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._staxnet.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sChavez.txt
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sDedicado_A.....txt
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sLee_Esto_.txt
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Carla.txt.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BM9b5ae91d.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BM9b5ae91d.xml
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PSKT.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VMTEMP.TMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.SUWOVEKU
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.VUYOSIVA
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x56a7e8
mov ecx, 0x5b4d28
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4ad159
push 0x5b8d74
mov ecx, 0x5b4d28
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4ad159
mov dword [0x5b84b8], 0
jmp 0x4ace42
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x400
jge 0x4ace6c
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x978], 0
mov edx, dword [0x5b84b8]
mov byte [ebp + edx - 0x434], 0
jmp 0x4ace35
mov ecx, 0x5b4d28
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0xd80]
mov dword [0x5b84b8], eax
jmp 0x4acea1
mov ecx, dword [0x5b84b8]
sub ecx, 1
mov dword [0x5b84b8], ecx
cmp dword [0x5b84b8], 0xffffffff
jle 0x4acec7
mov edx, dword [0x5b84b8]
push edx
mov ecx, 0x5b4d28
call fcn.0050f7b0
movsx eax, al
cmp eax, 0x5c
jne 0x4acec5
jmp 0x4acec7
jmp 0x4ace92
cmp dword [0x5b84b8], 0
je 0x4acedf
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov ecx, 0x5b4d28
call fcn.0050f0b0
push eax
lea edx, [ebp - 0xd7c]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0xd7c], 0
mov dword [ebp - 0x97c], 0
jmp 0x4acf30
mov ecx, dword [ebp - 0x97c]
add ecx, 1
mov dword [ebp - 0x97c], ecx
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov eax, dword [ebp - 0xd80]
sub eax, 1
cmp dword [0x5b84b8], eax
jge 0x4acf7b
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b4d28
call fcn.0050f7b0
movsx edx, al
cmp edx, 0x2e
jne 0x4acf5c
jmp 0x4acf7b
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b4d28
call fcn.0050f7b0
mov ecx, dword [ebp - 0x97c]
mov byte [ebp + ecx - 0x978], al
jmp 0x4acf12
lea edx, [ebp - 0xd7c]
push edx
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x978]
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push str..inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0x978]
push ecx
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0xd80], eax
mov dword [0x5b84b8], 0
mov edx, dword [ebp - 0xd80]
sub edx, 1
mov dword [ebp - 0x97c], edx
jmp 0x4ad010
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, dword [ebp - 0x97c]
sub ecx, 1
mov dword [ebp - 0x97c], ecx
cmp dword [ebp - 0x97c], 0xffffffff
jle 0x4ad035
mov edx, dword [0x5b84b8]
mov eax, dword [ebp - 0x97c]
mov cl, byte [ebp + eax - 0x978]
mov byte [ebp + edx - 0x434], cl
jmp 0x4acff4
lea edx, [ebp - 0xd7c]
push edx
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x434]
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push str..ini
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea ecx, [ebp - 0xd7c]
push ecx
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x434]
push edx
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push str..ini2
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0xd7c]
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x434]
push ecx
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x56a808
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea edx, [ebp - 0xd7c]
push edx
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x434]
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push str..tmp2
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7ba4
push str._sPaint
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Paint.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.DMLCONF.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7658
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_ExplorerDMLCONF.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WO.TMP
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WareOut_Scanner__Monitor.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TBPS.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Instalar_WinAntiVirus_Pro_2006_.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinAntiVirus_Pro_2006.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinAntiVirus_Pro_2007.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Police_Pro.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.NUAR.OLD
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SKYNET.DAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WF3.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WF4.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Instalar_WinFixer_2005_.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.Winsys.bat
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.photo_022.jpg
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._temp.bin
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.oem8735.inf
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System_setup87.inf
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._Vac
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._Vacmo_.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tasks_alFSVWJB.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TasksBLD93115RWR.job
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.___m
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x56a9f0
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.___t
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.___u
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.___Prior
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._TheMoonlight_.txt
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CLB.DLLBAK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MEMTEST.TXT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._notepad.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asodakaossd.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.TasksMSShell32
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.X_Password_Manager.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7630
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XPSecurityCenter.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.AUTORUN.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
push str.SETUP.INI
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Yazzle1122OinUninstaller.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DW_START.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.MSNAV32.AX
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DEEWOO.LNK
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.ZXDNT3D.CFG
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Cheap_Holiday_Travel.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Free_Online_Music.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x56ab48
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b763c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Online_Dating.url
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDSM_galleries.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CP_illegal_content.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Uncensored_porn.URL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
push str.DELSELF.BAT
lea ecx, [ebp - 0xd98]
call fcn.0050f680
mov dword [ebp - 0x97c], 1
jmp 0x4ada46
mov ecx, dword [ebp - 0x97c]
add ecx, 1
mov dword [ebp - 0x97c], ecx
cmp dword [ebp - 0x97c], 0xa
jge 0x4adb41
push 0xa
lea edx, [ebp - 0x978]
push edx
mov eax, dword [ebp - 0x97c]
push eax
call dword [sym.imp.MSVCRT.dll__itoa]
add esp, 0xc
lea ecx, [ebp - 0x978]
push ecx
push 0x5b7eb4
push str._sTasksAt_s.job
lea edx, [ebp - 0xd7c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
mov dword [0x5b84b8], 0
jmp 0x4adaa6
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x4adac2
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x548], 0
jmp 0x4ada99
lea edx, [ebp - 0x574]
push edx
lea eax, [ebp - 0xd7c]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x578], eax
movsx ecx, byte [ebp - 0x548]
test ecx, ecx
jne 0x4adae9
jmp 0x4adb2f
lea edx, [ebp - 0x548]
push edx
push 0x5b7eb4
push str._sTasks_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
lea eax, [ebp - 0x574]
push eax
mov ecx, dword [ebp - 0x578]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4adadc
mov edx, dword [ebp - 0x578]
push edx
call dword [sym.imp.KERNEL32.DLL_FindClose]
jmp 0x4ada37
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._notpad.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4adb8d
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
lea ecx, [ebp - 0xd98]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4adc29
mov ecx, dword [0x5b84b8]
push ecx
lea ecx, [ebp - 0xd98]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
push 0x5b7db4
push 0x56abec
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
cmp dword [0x5b84d4], 0
je 0x4adc24
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0xd98]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push 0x5b7eb4
push 0x56abf4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
jmp 0x4adb80
mov dword [0x5b84b8], 0
jmp 0x4adc44
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov ecx, 0x5b5bd8
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4adcee
push 0
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5bd8
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5bd8
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_remove]
add esp, 4
test eax, eax
jne 0x4adce9
cmp dword [0x5b8500], 0
jne 0x4adcb3
mov dword [0x5b8500], 3
mov edx, dword [0x5b84b8]
push edx
mov ecx, 0x5b5bd8
call fcn.0050f5d0
mov eax, dword [eax]
push eax
push str._s_____Eliminado__Fichero_Complementario_._n
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4adc35
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd98]
call fcn.0051046c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.0051046c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.0051046c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret