Function at 0x4f9b07
Capabilities:
Parse pe header
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5135b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2b28
call fcn.005106b0
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 4], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x2a60]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea edx, [ebp - 0x2a60]
push edx
call fcn.00401fca
add esp, 4
lea eax, [ebp - 0x2a60]
push eax
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x2914], eax
push str.EXPLORER.EXE
lea ecx, [ebp - 0x2a60]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x4f9bb4
lea edx, [ebp - 0x2a60]
push edx
call fcn.004fdcde
add esp, 4
push str.WININET.DLL
lea eax, [ebp - 0x2a60]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x4f9bdb
lea ecx, [ebp - 0x2a60]
push ecx
call fcn.004fe8f8
add esp, 4
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4f9c61
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x42
jne 0x4f9c61
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x41
jne 0x4f9c61
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x54
jne 0x4f9c61
lea ecx, [ebp - 0x2a60]
push ecx
call fcn.004ff498
add esp, 4
test eax, eax
je 0x4f9c61
mov dword [ebp - 0x2a64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a64]
jmp 0x4fc72e
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4f9d16
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x49
jne 0x4f9d16
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x4e
jne 0x4f9d16
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x46
jne 0x4f9d16
lea ecx, [ebp - 0x2a60]
push ecx
call fcn.004ff498
add esp, 4
test eax, eax
je 0x4f9cef
mov dword [ebp - 0x2a68], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a68]
jmp 0x4fc72e
mov dword [ebp - 0x2a6c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a6c]
jmp 0x4fc72e
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4f9d9c
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x4c
jne 0x4f9d9c
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x4e
jne 0x4f9d9c
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x4b
jne 0x4f9d9c
lea ecx, [ebp - 0x2a60]
push ecx
call fcn.00509b53
add esp, 4
test eax, eax
je 0x4f9d9c
mov dword [ebp - 0x2a70], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a70]
jmp 0x4fc72e
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4f9e22
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x57
jne 0x4f9e22
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x4d
jne 0x4f9e22
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x41
jne 0x4f9e22
lea ecx, [ebp - 0x2a60]
push ecx
call fcn.0050c350
add esp, 4
test eax, eax
je 0x4f9e22
mov dword [ebp - 0x2a74], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a74]
jmp 0x4fc72e
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4f9e72
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x56
jne 0x4f9e72
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x42
jne 0x4f9e72
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x53
je 0x4fa00d
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a64]
cmp edx, 0x2e
jne 0x4f9ec2
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a63]
cmp ecx, 0x56
jne 0x4f9ec2
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a62]
cmp eax, 0x42
jne 0x4f9ec2
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a61]
cmp edx, 0x45
je 0x4fa00d
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a64]
cmp ecx, 0x2e
jne 0x4f9f12
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a63]
cmp eax, 0x48
jne 0x4f9f12
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a62]
cmp edx, 0x54
jne 0x4f9f12
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a61]
cmp ecx, 0x41
je 0x4fa00d
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4f9f62
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x48
jne 0x4f9f62
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x54
jne 0x4f9f62
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x4d
je 0x4fa00d
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a65]
cmp edx, 0x2e
jne 0x4f9fc1
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a64]
cmp ecx, 0x48
jne 0x4f9fc1
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a63]
cmp eax, 0x54
jne 0x4f9fc1
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a62]
cmp edx, 0x4d
jne 0x4f9fc1
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a61]
cmp ecx, 0x4c
je 0x4fa00d
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4fa047
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x49
jne 0x4fa047
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x4e
jne 0x4fa047
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x49
jne 0x4fa047
lea ecx, [ebp - 0x2a60]
push ecx
call fcn.0050bd44
add esp, 4
test eax, eax
je 0x4fa047
mov dword [ebp - 0x2a78], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a78]
jmp 0x4fc72e
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x2e
jne 0x4fa097
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x56
jne 0x4fa097
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x42
jne 0x4fa097
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x53
je 0x4fa1e2
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a64]
cmp edx, 0x2e
jne 0x4fa0e7
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a63]
cmp ecx, 0x48
jne 0x4fa0e7
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a62]
cmp eax, 0x54
jne 0x4fa0e7
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a61]
cmp edx, 0x4d
je 0x4fa1e2
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a65]
cmp ecx, 0x2e
jne 0x4fa14a
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a64]
cmp eax, 0x48
jne 0x4fa14a
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a63]
cmp edx, 0x54
jne 0x4fa14a
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a62]
cmp ecx, 0x4d
jne 0x4fa14a
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a61]
cmp eax, 0x4c
je 0x4fa1e2
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a64]
cmp edx, 0x2e
jne 0x4fa196
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a63]
cmp ecx, 0x41
jne 0x4fa196
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a62]
cmp eax, 0x53
jne 0x4fa196
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a61]
cmp edx, 0x50
je 0x4fa1e2
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a64]
cmp ecx, 0x2e
jne 0x4fa21c
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a63]
cmp eax, 0x56
jne 0x4fa21c
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a62]
cmp edx, 0x49
jne 0x4fa21c
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a61]
cmp ecx, 0x52
jne 0x4fa21c
lea edx, [ebp - 0x2a60]
push edx
call fcn.0050c5e4
add esp, 4
test eax, eax
je 0x4fa21c
mov dword [ebp - 0x2a7c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a7c]
jmp 0x4fc72e
push 0x5a8e14
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
add esp, 8
mov dword [ebp - 0x291c], eax
cmp dword [ebp - 0x291c], 0
jne 0x4fa264
mov dword [ebp - 0x2a80], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a80]
jmp 0x4fc72e
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a64]
cmp edx, 0x2e
jne 0x4fa321
mov eax, dword [ebp - 0x2914]
movsx ecx, byte [ebp + eax - 0x2a63]
cmp ecx, 0x5a
jne 0x4fa321
mov edx, dword [ebp - 0x2914]
movsx eax, byte [ebp + edx - 0x2a62]
cmp eax, 0x49
jne 0x4fa321
mov ecx, dword [ebp - 0x2914]
movsx edx, byte [ebp + ecx - 0x2a61]
cmp edx, 0x50
jne 0x4fa321
push 0
push 0x1a
mov eax, dword [ebp - 0x291c]
push eax
call dword [sym.imp.MSVCRT.dll_fseek]
add esp, 0xc
mov ecx, dword [ebp - 0x291c]
push ecx
call dword [sym.imp.MSVCRT.dll_fgetc]
add esp, 4
add eax, 0x1e
mov dword [ebp - 0x2920], eax
push 0
mov edx, dword [ebp - 0x2920]
push edx
mov eax, dword [ebp - 0x291c]
push eax
call dword [sym.imp.MSVCRT.dll_fseek]
add esp, 0xc
mov ecx, dword [ebp - 0x291c]
push ecx
push 0x2800
push 1
lea edx, [ebp - 0x2890]
push edx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov dword [ebp - 0x10], eax
jmp 0x4fa342
mov eax, dword [ebp - 0x291c]
push eax
push 0x2800
push 1
lea ecx, [ebp - 0x2890]
push ecx
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x291c]
push edx
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
lea eax, [ebp - 0x84]
push eax
call fcn.004037f3
add esp, 4
mov ecx, dword [ebp - 0x10]
push ecx
lea edx, [ebp - 0x2890]
push edx
lea eax, [ebp - 0x84]
push eax
call fcn.00403833
add esp, 0xc
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.004048a9
add esp, 8
mov eax, dword [ebp - 0x1d]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x1e]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x1f]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x20]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x21]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x22]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x23]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x24]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x25]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x26]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x27]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x28]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x29]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x2a]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x2b]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x2c]
and eax, 0xff
push eax
push 0x5a8e18
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x48
push 0x5b6504
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.02080EC864940D1BAD20A9E09DE1A485
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.049E6435AEFD2C20555D22FE3121A502
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.0E2AB306D8F99968886B9C26F306E300
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.15D751ACF8A36418737B581A3D5911B6
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.185268D3D6E268C28A9B371714C8F552
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.1ABE6BD4D42CAC8947746656F94B9A83
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.209E9A284DFAC784EB6A6CE96592B7CE
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.210F1558C9682B300F3AFE532B165143
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.247BA82A2BF87FF45CF957EF63DEA4CA
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.274E665919CA8D27D28AA2F4B80F45A9
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.28F65D684DFCE72367C8BB833AB9A2EB
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.2DB96375A8565552A6C07641D3B60459
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.409E9E54707D5CDDE755096BF45C796D
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.40A113769AD22804A94ADDAE62B52B81
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.51EA38C869F888FD8BD3FA3FDD04C359
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.593AC7F86E8DE23B06CBE65456475F8B
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.5FE3C721E8FFCF05A3EB368BC7AEFF06
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.67F95E818E43A42B7CB895B53C59A10D
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.690EF3A2A06150AE98F9865C812D3216
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.6E2684D798516A5DFF98A304BB25427F
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.8548BF7D6056E1934DE10377E555AE15
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.94B7BF4BA21AEC42F6F9CC365B94C0A7
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.983037C2FA3F0819CE0EE0EC869BBE74
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.A4730F948909750F979749BB04773A6B
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.A94EC79A5325CBE538DA8BC78CC7E88C
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.AC03742F07F87E65B6634B572581EBE0
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.B2782EF4503FB45A211B8383B29F97D2
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.C01277A1ABCB907CECD2D7408ECF832B
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.C29223E6E3478BEB912381987CE028C8
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.D786173EE93423FE5061F8DF0364F193
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.DC2C5EDCA0EE07CCFF93F896388FADFA
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.E23E531ED7D61E386418DB6D1DDF411A
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.EA30BBD6F51871F2C71774FDD0F01534
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.EB17DF6F0DC7AAAFBEBF843BB8FD5550
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.ECB740056C65A3A35C91D21B405FA426
lea eax, [ebp - 0x2960]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.F2EFC4470FA1AB2BCF0868C4A9650919
lea ecx, [ebp - 0x2960]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4fa847
push str.FBA79621AD8B995AEEA4BED9269014D0
lea edx, [ebp - 0x2960]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
jne 0x4fb942
lea eax, [ebp - 0x2a60]
push eax
lea ecx, [ebp - 0x2a84]
push ecx
call fcn.0040360d
add esp, 8
mov dword [ebp - 0x2b30], eax
mov edx, dword [ebp - 0x2b30]
mov dword [ebp - 0x2b34], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2b34]
push eax
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a84]
call sub.MFC42.DLL_CString::CString
push str.CDF66AF9A92884731A53AAF49043005B
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fa8fc
push str.FA5A919A0A433669E22D7BCBA546DD54
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fa8fc
push str.9EAB689BEBECFA7A9F1EF419AD8EDE3C
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fa8fc
push str.E31F14FD9E9E7FADD82D78B0E65BEB3B
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fa935
push str.AutoRun.Subot
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2a88], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a88]
jmp 0x4fc72e
push str.9B9DA8F3FC8D5D4D2EC35D438C0E5F44
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fa988
push str.BanLoad.AIT_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2a8c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a8c]
jmp 0x4fc72e
push str.5184C243B93FFB8DDA2258BA29976F85
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fa9db
push str.BitDownload_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2a90], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a90]
jmp 0x4fc72e
push str.770A85F087551D3962BF802492570D9B
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4faa2e
push str.Boaxxe.F_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2a94], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a94]
jmp 0x4fc72e
push str.F7F6971F182D263A9D3E8944186B7F39
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4faace
push str.2894A94E5B1284912D3B096AE94C822D
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4faace
push str.9E56269E92F685F231EAF1512E4D8E42
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4faace
push str.9A2B87E8C0B12322F9025FD6C6750E0C
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4faace
push str.1B994F5C23AFCDB24D8886E0A3FF5C19
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4faace
push str.860115FEBD2D4F6BEBEDBCC6F71222A3
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fab07
push str.Boaxxe.BE_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2a98], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a98]
jmp 0x4fc72e
push str.871BA3E3ED099C4A168358F21930B8E7
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fab3b
push str.FBD455F1CCD102AC012F94B4879416A0
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fab74
push str.Crack.NOD32Fix
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2a9c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2a9c]
jmp 0x4fc72e
push str.B135AE809810F7C5AC25F5A68B39307A
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fabc7
push str.DownLoader.BShooterEgypt
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2aa0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2aa0]
jmp 0x4fc72e
push str.1B43A94A2B789C600335F3064684098E
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fac1a
push str.DownLoader.TP_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2aa4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2aa4]
jmp 0x4fc72e
push str.1D4E1D32EF3B7B831B5557D4491BB179
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fac4e
push str.B9831FEFCF74AB23DA0A88111B06FDEB
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fac87
push str.ErrorSafe_inst_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2aa8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2aa8]
jmp 0x4fc72e
push str.DDA549C475A5DC212290CC3FFDB93D3F
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4facd5
push str.042F13CB1818A8B9FE026A250C4EEF93
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4facd5
push str.E3CE3210DC86C64554EE2AF0D8EA846E
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fad0e
push str.FindKeyXp_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2aac], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2aac]
jmp 0x4fc72e
push str.DA0E28BFE8C435C2D564635640A38EC0
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fad42
push str.DAD855789791C09D490A736FF7459ACB
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fad7b
push str.Frauder.KG_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ab0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ab0]
jmp 0x4fc72e
push str.451C94A23536DCBBA422D7612B34B6FF
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fadce
push str.HackTool.Hoic_inst_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ab4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ab4]
jmp 0x4fc72e
push str.6B5AC7203F872C1097684F66A707D6CF
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fae21
push str.HackTool.OEPass.B_inst_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ab8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ab8]
jmp 0x4fc72e
push str.24F3CF5C204E950A5568D06F6A74023D
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fae74
push str.IESearchToolbar_uninst_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2abc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2abc]
jmp 0x4fc72e
push str.F6012E8BA4DB23B0DBF4E58FBA68C7C1
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4faec7
push str.Keylogger.Bladabindi_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ac0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ac0]
jmp 0x4fc72e
push str.A3314BAD5609AC5E79C4BCE3C1FCDCFF
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4faf1a
push str.Keylogger.Gratis_inst_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ac4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ac4]
jmp 0x4fc72e
push str.C4CF6690522FD4298251606314B395AB
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fafba
push str.757B05C9BBCDD1604677B79AC67717E5
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fafba
push str.A247DEA3D31B701D5CEC0ED0E14790AE
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fafba
push str.0B3ECEA6DA853CAC6020E0A6BAFA383E
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fafba
push str.810B04BFCA0979F3F08E68F94E0CEC28
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fafba
push str.C0578D4E2C58C6CE3690CE66229243FA
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4faff3
push str.LowZones_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ac8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ac8]
jmp 0x4fc72e
push str.06A3D175622AE5D8F0506CD0CF2216D0
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb046
push str.Malware.ChrisTV_inst_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2acc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2acc]
jmp 0x4fc72e
push str.8251E15895DF9743FDAD678D84CA976A
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb099
push str.Malware.Postal_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ad0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ad0]
jmp 0x4fc72e
push str.7B150E7653D6B5A514ABDA6C965173B1
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb0cd
push str.F00F5F8DC11623F8C12242D2A5E4520D
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb106
push str.Malware.SetHC
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ad4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ad4]
jmp 0x4fc72e
push str.8A49FAEEAEB4A8F2177DD104B0E6219D
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb159
push str.MultiDropper.BlastOfStitch
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ad8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ad8]
jmp 0x4fc72e
push str.1611E3F80675C77033E829AD0643B2A1
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb1ac
push str.MultiDropper.HackTool
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2adc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2adc]
jmp 0x4fc72e
push str.12323613A769FB4579EA1C481366B459
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb1ff
push str.Ransom.Servcc_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ae0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ae0]
jmp 0x4fc72e
push str.C1904607F5E0CE4BA48F5776B6978A3B
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.1B6DD98CABBD68A27AE1D196B26BCCEB
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.9A9F62C6B1AD03E9CE9BE950D8F3039D
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.54E281DF57974E3D2067B129C4827A53
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.68A0D560DA78707155E210FF5D46225F
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.A4B620CCEA4DD3FA797C5709F28C623A
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.F76CE904361BAF7E6DC945AADB86D5AB
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.4D63FD3F1581B56B0BD148055213E217
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.918CB54E406A6D07EA69006F2F0221C9
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.A2B3A9BCF95A7AFC352BA1C4F88E6716
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.1B95399FD1A67F7A4B85F593B1F3F4E9
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb353
push str.2ECEC89C96CCF84AD0CD06D9AD778864
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb38c
push str.RiskTool.BitCoinMiner_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ae4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ae4]
jmp 0x4fc72e
push str.74484C633932BE87273F34A700484D73
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb3c0
push str.7E5DC81E0C7DE27C2952FC646A32380C
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb3f9
push str.Spy.Banker.House_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2ae8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2ae8]
jmp 0x4fc72e
push str.1871D3E332BEDCCA68E0758A42DDB93A
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb47b
push str.8E80C998965A566440A315D427FC9372
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb47b
push str.736188B56388148A376DEC164B38BFA5
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb47b
push str.80FCF3A3F22B156A894C96A032922CED
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb47b
push str.456F54BB3E330499E842B5701773E855
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb4b4
push str.Spy.Banker.UPD_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2aec], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2aec]
jmp 0x4fc72e
push str.B2BA6721C98371A271725D40EB98B3D7
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.B44AF70F35E2B1DCE032C425FBEE364E
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.E4513E1F90532EA39463170293C73098
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.1D4CB83E3765E51E9C82D148B41DDAF8
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.53407564D3421283E78CEFB9D4FF9DA1
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.6A00CE4E17AB22FF792ADE17C36CB9DA
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.453BA28744FC6478FC7ED3C63EEC9D4D
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.5D06C6283A2F4CCD8583E43AF6E43E2D
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.3E2F695F39CB6FB6B60F016B4CAD5A62
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.0CF6D3E3E7D653DCF2497CFFFB7107A1
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb5ea
push str.C48DFC3BAF938D9E110C6F91BF76ECA3
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb623
push str.StatBlaster_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2af0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2af0]
jmp 0x4fc72e
push str.53075AB0BA2345CEB61F2C6C303D0A7B
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb676
push str.Trojan.DistTrack_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2af4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2af4]
jmp 0x4fc72e
push str.4C9EFE4CA9497BFF312CF2DE40CDBB09
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb6c9
push str.Trojan.Frosparf_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2af8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2af8]
jmp 0x4fc72e
push str.81044AE23BF1EFC5F8231717F915C52E
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb71c
push str.Trojan.Gatak_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2afc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2afc]
jmp 0x4fc72e
push str.AACDC783B5681CE6D269E086E70D85DE
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb76f
push str.Trojan.PHP.Qhost.A_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2b00], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2b00]
jmp 0x4fc72e
push str.C44126F4DAC558CC23C5275068AFE8D6
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb7a3
push str.D755EC992835189BA76D046F8CB37B1A
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb7dc
push str.Trojan.Neurevt_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2b04], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2b04]
jmp 0x4fc72e
push str.348422DA99FB73FDD1005953C14E321E
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb82f
push str.Trojan.PornoAsset_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2b08], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2b08]
jmp 0x4fc72e
push str.62861931E5C3EB08788496E2C5ED4738
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb882
push str.Trojan.VB.ZAX_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2b0c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2b0c]
jmp 0x4fc72e
push str.6ACE02DD7856E99721759961F17AAF1E
lea eax, [ebp - 0x2918]
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb8d5
push str.WebHancer_inst_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2b10], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2b10]
jmp 0x4fc72e
push str.D4EE53D39B831795E67D3BDFB28A71A1
lea ecx, [ebp - 0x2918]
push ecx
call fcn.0050f610
and eax, 0xff
test eax, eax
jne 0x4fb909
push str.BDA9F51ACBDBBF2EE7F88DA89E0EA565
lea edx, [ebp - 0x2918]
push edx
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4fb942
push str.Zlob.Rich.B_dr_
push 0x5b6404
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2b14], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2918]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x2b14]
jmp 0x4fc72e
mov dword [ebp - 0x88], 0
movsx eax, byte [ebp - 0x2960]
cmp eax, 0x30
jne 0x4fb964
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x295f]
cmp edx, 0x30
jne 0x4fb97c
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x2960]
cmp ecx, 0x31
jne 0x4fb997
mov edx, dword [ebp - 0x88]
add edx, 0x10
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x295f]
cmp eax, 0x31
jne 0x4fb9b2
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x2960]
cmp edx, 0x32
jne 0x4fb9cd
mov eax, dword [ebp - 0x88]
add eax, 0x20
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x295f]
cmp ecx, 0x32
jne 0x4fb9e8
mov edx, dword [ebp - 0x88]
add edx, 2
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x2960]
cmp eax, 0x33
jne 0x4fba03
mov ecx, dword [ebp - 0x88]
add ecx, 0x30
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x295f]
cmp edx, 0x33
jne 0x4fba1e
mov eax, dword [ebp - 0x88]
add eax, 3
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x2960]
cmp ecx, 0x34
jne 0x4fba39
mov edx, dword [ebp - 0x88]
add edx, 0x40
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x295f]
cmp eax, 0x34
jne 0x4fba54
mov ecx, dword [ebp - 0x88]
add ecx, 4
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x2960]
cmp edx, 0x35
jne 0x4fba6f
mov eax, dword [ebp - 0x88]
add eax, 0x50
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x295f]
cmp ecx, 0x35
jne 0x4fba8a
mov edx, dword [ebp - 0x88]
add edx, 5
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x2960]
cmp eax, 0x36
jne 0x4fbaa5
mov ecx, dword [ebp - 0x88]
add ecx, 0x60
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x295f]
cmp edx, 0x36
jne 0x4fbac0
mov eax, dword [ebp - 0x88]
add eax, 6
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x2960]
cmp ecx, 0x37
jne 0x4fbadb
mov edx, dword [ebp - 0x88]
add edx, 0x70
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x295f]
cmp eax, 0x37
jne 0x4fbaf6
mov ecx, dword [ebp - 0x88]
add ecx, 7
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x2960]
cmp edx, 0x38
jne 0x4fbb13
mov eax, dword [ebp - 0x88]
add eax, 0x80
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x295f]
cmp ecx, 0x38
jne 0x4fbb2e
mov edx, dword [ebp - 0x88]
add edx, 8
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x2960]
cmp eax, 0x39
jne 0x4fbb4c
mov ecx, dword [ebp - 0x88]
add ecx, 0x90
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x295f]
cmp edx, 0x39
jne 0x4fbb67
mov eax, dword [ebp - 0x88]
add eax, 9
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x2960]
cmp ecx, 0x41
jne 0x4fbb85
mov edx, dword [ebp - 0x88]
add edx, 0xa0
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x295f]
cmp eax, 0x41
jne 0x4fbba0
mov ecx, dword [ebp - 0x88]
add ecx, 0xa
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x2960]
cmp edx, 0x42
jne 0x4fbbbd
mov eax, dword [ebp - 0x88]
add eax, 0xb0
mov dword [ebp - 0x88], eax
movsx ecx, byte [ebp - 0x295f]
cmp ecx, 0x42
jne 0x4fbbd8
mov edx, dword [ebp - 0x88]
add edx, 0xb
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0x2960]
cmp eax, 0x43
jne 0x4fbbf6
mov ecx, dword [ebp - 0x88]
add ecx, 0xc0
mov dword [ebp - 0x88], ecx
movsx edx, byte [ebp - 0x295f]
cmp edx, 0x43
jne 0x4fbc11
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret