Function at 0x4d9b5a
Capabilities:
Create process on windows
Enumerate files on windows
Persist via run registry key
Persist via winlogon helper dll registry key
Self delete
Set file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x512fe7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3a0
mov eax, dword [str.Eliminada_Carpeta]
mov dword [ebp - 0x3a0], eax
mov ecx, dword [0x596b58]
mov dword [ebp - 0x39c], ecx
mov edx, dword [0x596b5c]
mov dword [ebp - 0x398], edx
mov eax, dword [0x596b60]
mov dword [ebp - 0x394], eax
mov cx, word [0x596b64]
mov word [ebp - 0x390], cx
mov dl, byte [0x596b66]
mov byte [ebp - 0x38e], dl
lea ecx, [ebp - 0x284]
call sub.MFC42.DLL_CStringArray::CStringArray
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x12c]
call sub.MFC42.DLL_CStringArray::CStringArray
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1861771
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_13633451
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_18617711
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_196818750
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_196852800
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1965298451
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1965398451
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1965598451
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1965798451
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1965988451
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1968138750
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_1968152800
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C:RECYCLERS_1_5_21_0243556031_888888379_781862338_6985472110112323
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4d9cd7
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4d9d87
push 0x5b8e6c
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4d9d16
jmp 0x4d9cc8
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4d9d82
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x596eac
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4d9cc8
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str._1332_7441_6225_1145_2283_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str._3806_1510_1243_8280_7007_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str._5096_7835_3933_7043_2539_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str._8937_2587_8329_4420_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str._8975_4932_7241_6744_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str._Recycle_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.021_251860923_12_5_1_S
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.223_1876133383_12_5_1_S
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.62112056
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.63517727
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.89294671
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.98881131
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AllL33T
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x596fb8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x596fbc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BDTMP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.boli_me
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x596fd0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CleanSweep
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CMOS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Commonfiles
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Darius
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Directory
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DriverLoad
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gFnFILdc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Hf_mig
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59702c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.install
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59703c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.java1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597050
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.login
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mcrosync
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftSecurity
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597084
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NTKernel
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59709c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.onSrPCkE
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.permsync
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ProgramData339a76a2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ProgramFileas
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Recycle.Bin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5970ec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5970f4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.system16
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597108
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597118
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597120
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocuments158E1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocuments62721
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocuments990497818655
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsA1611
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsB96F1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsD8B81
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsF2981
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsFaSHxnwjRFVyhBDRxvFVzLZ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentskV5jq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsmellower
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsmitigatory
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsqqvceyewtbbthrihpoqhobah
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocuments_tPSvrNzWhJyzOyVXyQNZLyuGqcBTk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentsUSglaGIbBWVMgAoJxEBltgDILKthqkcuSKeHF
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UsersPublicDocumentszXozfjBdYLKukPmtNRGwTmHwzGFrNdKEJZrt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597380
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59738c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597390
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows.Bin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5973a8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5973bc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Winduws
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Winnt_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5b79a4
push str._sRand123
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4da245
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4da2fb
push 0x5b8e70
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4da284
jmp 0x4da236
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push 0x5b7ba4
push 0x5973e8
lea edx, [ebp - 0x38c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x38c]
push eax
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4da2f6
lea ecx, [ebp - 0x38c]
push ecx
lea edx, [ebp - 0x3a0]
push edx
push 0x5973f0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4da236
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push 0x5973f8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Audio_Microsoft
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597410
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BootDarius
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cursors3p43vkZLVpUeHNGTu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cursors45221
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cursors6caSXRLgRupP2V2Hm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CursorsDBACFBCAADCBEEACFFABDCEBD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CursorsHbzxlmpZrwoQrExpYSCweYrh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EliteBar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EliteToolBar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5974cc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EliteSideBar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5974e0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Folder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fonts1sass.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fontsconfig
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fontsdata
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fonts_system32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fontswin1ogin.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fontswin1ogon.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fontswuauc1t.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Google
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.inet10054
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.inet20001
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.inet20002
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.inet20009
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.inetdata
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.inetsrv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InfusedAppe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Instalation_config
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5975d4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ivmpc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFramework437CE198
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFramework_byrbn1VVY7
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFrameworkcWTOcPXozTBTfRcFGybj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFrameworkDBF61
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFrameworkEkjCm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFrameworkl81EyIfzlz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFramework_s359946698855589
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NETFrameworkxrpSendfsxM
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Audio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Media_Corp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Start_Up_Media
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.msik
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MsSkinner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.notepads
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nsdb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.raid
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes4CCA1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemesD15C1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemesE02A1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShell05261
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShell12661
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShell56F01
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShell65841
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShell9B2A1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShellCXdeHOUs4t
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShellD9E41
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemes_aeroShellD7B4D56CF88F2C9AD204F39DF651A704
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemescotanffe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResourcesThemesOuXuwjjo9jc08koh8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597950
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.shdd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SyncHost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SysWOW64Pp_pP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Audio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Data_Start_Up
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Display
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Secure_Start
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Security
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Security_Health
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Start_Ups_Manager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Start_Ups_Sound_Audio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windowsadmin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Winlogins
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinUpdaterstd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.XKlLf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0xffffffffffffffa0
push str.system32_c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4da826
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4da8dc
push 0x5b8e74
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4da865
jmp 0x4da817
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
push 0x5b7eb4
push 0x597a70
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4da8d7
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x597a78
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4da817
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str._appdata_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1024
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.28463
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AdCache
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Adobe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.appdatee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Application_Services
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597ad0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Comfig
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.config_systemprofileAppDataLocalWServices
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b10
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b18
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b1c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b24
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b28
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Drv32dta
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b38
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IEDriver
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b48
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InstallCalc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lowsec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.microsft
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mocosoftt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.P2P_Networking
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Polime
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597b90
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pschost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Recycled
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597ba8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Schtml
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597bb4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Skype32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Splm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SUACT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SUCONTR
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SUSKN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Svchost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.svshost.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x597bf8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksA_6_2_86_1054449431_1390401644_1014486147_3304
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksA_7_2_29_1384623024_1135716233_1211109241_3876
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksB_2_8_94_1186184952_1210605092_1332812639_9776
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksB_8_4_91_1107007167_1387033899_1040531307_4587
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksC_5_4_28_1036962384_1155294864_1195913386_5782
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksD_7_4_21_1300834896_1009564677_1104022894_6548
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksF_1_4_95_1278196632_1363847688_1373091897_2403
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksF_9_5_10_1291267862_1064186354_1185048515_2168
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksH_9_7_81_1268223077_1347342195_1024432720_7238
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksI_1_8_33_1246499492_1022374255_1323257990_1075
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksK_3_5_72_1066982837_1095551009_1359310149_6552
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksK_3_9_61_1054422350_1299949038_1392580372_4368
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksL_2_5_60_1188515285_1330550438_1289152853_9177
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksN_3_3_93_1381418029_1256466849_1135178513_8865
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksN_2_4_29_1308560602_1064827540_1075372472_3795
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksN_2_8_65_1349921963_1116516205_1265993428_6322
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksR_3_3_79_1273951425_1123247796_1012973728_9141
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksR_4_9_56_1018635226_1099479023_1053137870_1542
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksS_1_5_21_1105307131_1346935890_1275883081_4276
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksS_1_5_21_1143773476_1323814032_1389101597_4249
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksS_5_1_85_1156251370_1139807930_1082114344_2804
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksU_1_7_93_1288920791_1406706435_1311300255_7403
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksU_5_3_63_1367033436_1289652679_1190611762_2498
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksW_7_6_25_1202971079_1176348168_1166084766_5843
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksX_1_4_78_1354716187_1262675319_1372486732_7117
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksEHZGSPP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksTESRLEQ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksUDMYKPK
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksUICBMLG
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksXWVWKXD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TasksYMRYOAH
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Twain32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5981e4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vmss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Host
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Winoffice
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Winup
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wsnpoem
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wsxsvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.zad32and
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4dadf2
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4daf23
push 0x5b8e78
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4dae31
jmp 0x4dade3
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
push 0x5b7db4
push 0x598230
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4daea3
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x598238
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
cmp dword [0x5b84d4], 0
je 0x4daf1e
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
push 0x5b7eb4
push str._sSysWOW64_s
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4daf1e
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x598250
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4dade3
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.45935167
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.4_71
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.5t4y82nywsf8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.77726364lu68i
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.94503656
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AccountsRt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.activeds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.affyredes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ALLERFARV
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.APMon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.appcompat
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AppContracts
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AppDataLocalTempKlawiatura
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Application_DataTazebama
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AppVClient
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AppVerif
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.arachnidial
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.assembly
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.atmosfretryk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.audiodg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.autopilot
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.avicap32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AzSqlExt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Baadev4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BATT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BingASDS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bisrv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BitLockerDeviceEncryption
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5983d4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bnmanager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Boot
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Boxify
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Branding
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bryghussin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BUNKENDESS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bvcdzf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598430
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.catsrv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cemapi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Champion
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Circumve4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cosets
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvbcvbsd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvbgdfasd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvsdf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvxsdfg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvzsdf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DAKSTAGPAP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DEBU
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DevicePairingWizard
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Diastem7
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DigitalLocker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.directory
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.displaymedia
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DmOmaCpMo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DpiScaling
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EASPolicyManagerBrokerHost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eftermad
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EhStorAuthn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ENGLEBLIDT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EUDIDY
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Focusable
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Form1Prve8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Form1screw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GFDGHHGF
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gidselt9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.grun
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gyrodactyl9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.HAGME
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hdwwiz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hjfdsg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ieUnatt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.immobili
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Inderzones9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.indesprringerne
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598604
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.inferno
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.INFRAORBIT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ingresw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.INTRA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.JAGTT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jegern3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jettesun
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.K_37763_383_2847_00
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kjdhfg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kldeskabet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Krystalkasses3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kuku
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.L2Schemas
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Labibiaa6
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.land
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Landing
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lecitha8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lfhgcvb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LiveKernelReports
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Livskvalit3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LockAppHost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lser
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.marianotornens
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MaxxAudioMeters64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mell4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MERGEDADMRXU
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mevi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.NET
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft.Uev.SyncController
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftEdgeDevTools
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MiracastView
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Monarkis
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.msconfig
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mspaint
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nabobish1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.netsh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nonmali8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NONSUPPLICATION
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nslookup
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nuancerin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.outputmedia
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.P_7_78_8964_9648_3874
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PANTEFO
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PasswordOnWakeSettingFlyout
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Patientsto8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pc_Profile
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Peristr4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Prefetch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PrintDialog
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Prio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.prosysmodified
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.q11N68kG
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.raserver
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5988b0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.refsutil
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5988c0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rejsefr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5988d0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.saddening
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sadsgs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SAMMEN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SELVOPHOLDELSES
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.servicing
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sfds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.shrpubw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598920
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598924
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Slee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SoftwareDistribution
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Speech
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SPYDIGE
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.STEM
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.stophound
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Structi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.stuvningi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598980
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.subfolder1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sundhed6
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemResources
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5989b4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TAPI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tarantula
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Temp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.thermol
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tilv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tracing
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Travers3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Trimme
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tscon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UpdateNotificationMgr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598a28
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vbnfghcbv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vcbxbv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VELETABLE
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vikote_pajiq_losiw_tojoyafe_volij_tohid
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.visualPrint
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WerFault
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsTerms
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinSAT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.winload
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wuQkQkYk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xcvbfsd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xcvbdsdf
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4dba79
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4dbb2f
push 0x5b8e7c
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4dbab8
jmp 0x4dba6a
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push 0x5b7778
push 0x598acc
lea edx, [ebp - 0x38c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x38c]
push eax
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4dbb2a
lea ecx, [ebp - 0x38c]
push ecx
lea edx, [ebp - 0x3a0]
push edx
push 0x598ad4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4dba6a
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.AHistory
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598ae8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598aec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598af8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598b10
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wupdsac
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xerox
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4dbbc5
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4dbc7b
push 0x5b8e80
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4dbc04
jmp 0x4dbbb6
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
push 0x5b7678
push 0x598b24
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4dbc76
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x598b2c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4dbbb6
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.OpenMin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UpdateMiner
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4dbcc1
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4dbd78
push 0x5b8e84
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4dbd00
jmp 0x4dbcb2
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7644]
push eax
push 0x598b48
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4dbd73
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x598b50
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4dbcb2
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str._Inc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str._1NB472C
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str..echosft
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.006700e5a2ab05
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.O6F008P6_Y2C0_M8X2_S888_B1Y5L7K7Q331
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.07c6bc37dc5087
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.0c1b614d3d0a85
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.0c2a2c6f2254e8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.0f9e96501df59a
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1000188060
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.110809d565579c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1877
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1Yc6TbAIeT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.253fa33afbb5b2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.27d75989acd3e0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.2c503bf4f188b4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.2eed656dd58e95
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.2t1q1a
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.376fde80dfdc81
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.396554bad854c4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.406d6c22b040c6
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.45e60d5870098d
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.465dbc52837d81
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.47f67d6d164631
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.504035a4229ca5
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.55b408a629a8dd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.56a1c3d463f381
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.57f99c943261e5
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.5df53479937883
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.6_99
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.62adfdc75ca852
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.638aa1bc5aa9e4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.64d3ed4fe9b768
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.67427e28d0dbae
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.69661389
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.704b6797337c48
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.70b90d83e65db7
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.74644968
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.79d69f945ccab2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.7b808607219092
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.80b59841e5c623
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.80c6bf70bf3f8f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.827912061472a0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.85f469ce401df1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.86yvh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.8aac7cc649cf1d
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.8be7d7b3521979
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.8iyu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.9034267ed8b4ad
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.90C1C5BB_7121_4ED2_B082_7BA7F01FD83D
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.97dc81492a1b60
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x598e70
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a091ec0a6e2227
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a34b4ca54a0fa17ae35b1fcef33e21c1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a967e0f403b652
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a96bf39c2ed186
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.aadauthhelper
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.aadcloudap
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.aadtb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.acledit
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AcompanyXXX
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Acti_1_0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ActiveP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.actxprxy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5990d4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ada68804a71383
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.adbl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.adobejavaversion
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AdobeReader
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599110
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59911c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.aepic
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Agzga
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ahnlab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.aiep
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.alFSVWJB
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.alrsprx4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.anpfix
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59916c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599188
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5991a4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5991bc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.antomarvis.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.anxd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5991ec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.APHostService
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599204
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Appdat
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.appdata
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Apps
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Appsync
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AppVOrchestration
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AppXDeploymentServer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.april2021
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Archivos_comunes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.atl110
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ATM_Machine
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.atqonbkevbe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Audio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.auragmdh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AuthHost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.autoplay
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AV_SCAN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Avastt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Avjee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Awsmttwuimd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.azar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AZURE
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.b1062eb64a0f99
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.b19fc57c80a5a8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599314
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.b51ecacb95f3fd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.backup2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BascordApp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bbojo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bBPgQAc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bbyro
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bcnvdxcz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bcxvfgds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bdehdcfg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bdpssrcqdbd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Beaem
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bf045808586a24
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bffa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bifrost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bilqe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Binary
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BitLockerWizardElev
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bitrem2022
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bitsigd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bjcbe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BLD93115RWR
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bmsa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bnhjyuyklsd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bnmj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bokuh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bonjours
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.boom
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.booy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bouqi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bqfzx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Brlai
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.browser
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.browseui
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bskmv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bssgj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BthAvrcp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bxvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bulpn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bush
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599498
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c1ec479e5342a2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c33e9ad058e5d3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c60A5NAAGQ4L1nN0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c797bf6bc5c7
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cacls
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.caf045170b494e
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.calc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.calltem
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CapabilityAccessHandlers
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.capauthz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.capisp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CastC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.catsrvut
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cbfdvcxsd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cbqhslexwm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cbvfsd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cdbsd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cdpusersvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cdudm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CenterPlay
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chlz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Chorme
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5995a4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chrome.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Chrview
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Chvtqs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CleanUp_Antivirus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cliconfg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5995e8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cnhnfvjhfchfbc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ConfigsEx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.conor
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.continue
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.coredpussvr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Corporate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cOtXzLE
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cpCoukZ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cQMlXpb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.crcss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Crcvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CredentialUIBroker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cscript
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.csriss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ctdos
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599688
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cupp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvbndgs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cvexl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5996a4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvvxfds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cvxcz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cvxjh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cwrbj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cxvbner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cxvbr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cyavs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cyllbul
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.d2cd7032cbd028
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.d3d9t3ui
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.d3ed71f752c04f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.d4dcd1cea3c801
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.d530df7c8ff3e2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.D7I2A8S6_B3Y1_K1N8_O887_M0I1C4O6V0D4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dahne
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Darlf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Data
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dclogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59977c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dddr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ddoviuwf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599798
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59979c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DeCom
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DeCom2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DefaultTab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5997c0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dellcorp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x5997dc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Demo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dfcvghjpkj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dfgbnsdf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dfgfdfvd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dfghj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dfghjk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DFQCPQ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dfrgJLK
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DGHezqOA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DGOLKDGKJGBKJDGIKJ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.discord
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.djoin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Djrcz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599868
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dlllhost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dlllhostt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dlls
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dmtdy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Document
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.docuone
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dollar_Tree_Stores
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DomainHostingl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dot3rsvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.download2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dphs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DPTopologyApp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dqavw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dqtzy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Drbfl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.drhd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dth54
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dtjsqm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dufoz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DWWIN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.E0C0CF
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.e2e7364be473d5
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eac7b2a78f3eb6
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eAdobe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.easeus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ebooks
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ec73a8d4cea564
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Edit
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Edge_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EHZGSPP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ekxjv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ELAMBKUP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eldeskfix
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eldmbwmuflaoex
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eLFxKPP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Emery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Emwhr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ENCUTIL
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.endity
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Entxqesu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.erasbo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.etiwa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.etwa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EpicNet_Inc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.erew
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.esfgvyw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Euafni
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eudcedit
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Eukzi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eventvwr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.excom
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.explo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.explor
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.explore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.explorer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.expls
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Eygho
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EzLife
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.f49dfc5e4e2508
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.F7K2D8U6_D3B1_M1P8_Q8A7_O1K2E5Q6X0G4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599ae0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Faiass
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.familyguy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fatbtifdnumsa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fblpol
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fcpepiax
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fcvbn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FD8F974C_62BC_4637_B429_33ED1FBFF1B6
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fdcdw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fdxdv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fesmql
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FfXXNf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fgdxvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fggfd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fghbvcdsf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fghnmjh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fgisdp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fgldm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fhgvcx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.file
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.filez8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.firefox1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.firefoxx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.firfox
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fkanistpd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fkgfqcjzll
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fkvd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FLAUQG
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.flfdae
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fltMC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fmavwpkqqu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fmqofh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fmtdfh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fnbovh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Foacgb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fokfvk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.folder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FolderN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.folgfbvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Folzer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Font
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fonts
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.foracbas
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.forbas
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Form_CS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fovoev
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fqngzg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.frdbjx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Frfx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fsdbner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fsqabh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fssvcs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fudjdrpgqc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.funfnndfnkes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fuvpzfo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fvsnb.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fxgtqq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fxvscvvxinc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fyfluyf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.G2fbP87M2bHen79a
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GabPath
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599d40
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Georgy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gfdfk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gffbcvx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gfgfd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gfhdg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GfxUIEx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gfxv2_0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ggbgso
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ggfd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ghghjjkqwes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ghjnrt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599da0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gizdal
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gjfhfb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gksgmn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gltkij
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gmst
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gnyodv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.goggle
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Google_Updater_1.1029
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Google_Updater_2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Google_inc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GoogleAppUpdate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GoogleChrome
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.googles
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GoogleSandbox
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Googlex
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gpaerc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gpgqev
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gpupdate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gqfhsb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gqgtycopkc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gqjxni
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gqpltj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GST_SOA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gtig
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gtud
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Guntxq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gvcc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gvgizs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gvMbRZF
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gxpvlm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gzgshb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gznylr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Happ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Hbjskj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x599ef4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hdkl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hdoydskbdx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hdry
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hdSmd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Hedajy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Hfevsjbkw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Hkxrjvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hmnsqhntxxaw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hpes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hRTTASBg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Hukkuj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hvugvgch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hylblxy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.I5E1S5G4_F4T3_T1Y3_B4I3_K5W2V3B0V441
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Identities1127B45R_F765T_34ER_YPOI_KI907POA378P
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.iexpress
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ifbksiw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ifulvbcrzo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.igfxCUIService
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.igfxext
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.igfxHK
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.iihge
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.iiiiffi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.iiqwvji
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IjBbKmV
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ilas
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a040
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Images
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Imgburn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Imminent
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.index
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a068
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Iniwuvgwq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Install
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InstallDir
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.intelGraphic
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IntelService
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Internet_Command_Hosts
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ioeqhgs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Iogxnu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a0dc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ipdrpgy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.iupinstr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.iutmn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ivguxi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Iwezte
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Iyigsf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.izqzhhurtr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Izxihzz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jaty
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.java
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Java_SE_Platform_Updater
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Java_Security_Plugin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jbbozaxv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jctlnyga
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jdrpglhj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jesd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.JGXYXY
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jhgnmklphnm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.JHGUJYGBIG_UKHI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jipaxzr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jlsjd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jlyzbon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jmlyaxsg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jmtxwsc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jnsbt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a1f0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Johmfg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a1fc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a200
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Isgmtvwnnhf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a210
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.juhg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jus_Case
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jyfyfffyy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jyrxk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.K3NA39DV
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Kdfrgbi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a250
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Kgypucf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.khgcfb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kijh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Kjlbyz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kjtxdyrv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kjydre
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a288
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.klist
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Klogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kogtjraetr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KPDMQBf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Kqjdtbq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Krjlazy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ksea
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kwpdznphua
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kwrtd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Kwtbbty
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KxFFstC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KxYJYebDAB
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Kynvtq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.labrinjas
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lbltebvinfyvw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lbrdp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lhcnlwjk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lhrxqswkpg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Liujham
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Live_PC_Care
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ljhgteydvcbn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lkjhg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lkjhytredfcvbxswqasxyre
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lmiajkd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lnohbfv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lnpozjs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.loads
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Local_Windows
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LocalOffice
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a3c0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LogFiIe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.logger
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Logs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Logs_File
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.logslivemilol2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Loscs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lpremove
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lrhkjnmjwq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lsassfold
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lsdemvpkv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lspwpel
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Luck8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Luck9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lvxzuojt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lxacpjdb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a460
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Maker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.manager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Manilla
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mdxdxtzjhf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MediaCache
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.memorandum
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a4a0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a4a4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.METAR
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.meysg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mgmypwofhfmq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mheslpk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicRecords
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Micro_oft
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicroManager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicroMon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.microservices
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microso
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftD11AA14B_FC95_2BF9_8E95_F08FA2992433
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftCertergy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoftd3d9t3ui
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftDavhORes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftIexplorer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftInternet_explorer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftInternet_ExplorerQuick_LaunchLogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftSys32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftTelemetryServices
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_v4.0_4.0.0.0__ffe502bfbf4e5ec9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsCPU
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsDsvHelper
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsDwiDesk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsIEUpdate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsRecentRZTHX
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsScreenToGif
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsTemplatesSmms
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsThemesSlideshows
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindows_vtjhdhjj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftWindowsXGgA6Wbi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftwindowsLogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Audio_Card
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Hd_Audio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Hd_Card
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Window_Client
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Window_Clinet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.microsoftx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsyncs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mighr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mining
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Minoral
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mirca
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a840
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mknxsnkyn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mnbgygfcx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Modules
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Moe1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.money
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Monitor
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mork
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mountvol
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Moxilla
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mozila
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mp2chk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mqqypeag
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mrca
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mrjdvzwu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MSBuild
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MSbuild56123
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mscofi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MsCom
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MSDC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a8f8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mskz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.msoffice2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mtesscz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mtmgxghqo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MusNotificationUx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MuwmwOC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mvlmnac
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mxwmzif
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.My_Security_Engine
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.My_Security_Shield
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MyApp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MyAppQ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mygol
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MyNewCase
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MyWafaa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.N3S8L5V2_L0C7_N6Q5_Y5J3_W6M7F112Y5H0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a9d0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nbdxccgf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nbsdd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a9e8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ncdsynuuc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59a9f8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ndhpudmzt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ndiso
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59aa14
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.New2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.newnext.me
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.newport
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.newssp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nexcsf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nfgh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nfjkanmf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nglzgcb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ngneqippkv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nhgf5
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nhhkjnvs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nightupdate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Njueisg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nlktzmskzs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NlugFF
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NMQR
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nmsp3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59aab8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nnscvehhras
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59aac8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.notes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59aad8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nrvgcfyksvarq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ntgkrtdf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ntjcg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ntry
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NTSystem
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NuSAEgj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nuzbtuvx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nvbintel
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nvebzjy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nvidial
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ab44
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nxqovtx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nxtwvewyel
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nyivcnoj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nzlrgyt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nzxwpauc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.obhn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ockdr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.octbuild
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59aba0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ocxa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Oepgercc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ofiyh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59abc0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OfficeMicrosoft
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ofvvalwqef
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.oiuyt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ojwfwjiokjs9jvikojsoidj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.okezi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OKitSpace
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OldNZ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OlynLLF
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OM669O47
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.omqvbhcoes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.omukntxgzy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.oneddrive
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ooxphyia
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ac68
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Oqcikzhm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Oqnrnxp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Orjynhr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ac88
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ac90
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.otftmwdwqv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.otgwsf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ouiiumgz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.outlook
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.owftmfp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ows_bin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.owtmaqokwj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.oxtdmirbwg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.oyaalflabx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.oyjf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.oyjfo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pbxtgftlcb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ad0c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Peace
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.peent
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pemcos
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Photos
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pilcidlbp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pimmscmpu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pivzwrahj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pkbgbdbds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Plastochrone
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ad70
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pldrbjtblr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pmhoazlfo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pocare1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.POEA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pogbuuafvb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.powershell
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ppbfaecldr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ppozehtoq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ppwcvqqkvm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pqcstpzxy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pqjfqjmygi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59adfc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Priuunaiipp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Privacy_Components
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ProgramFiles_32.3uu_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ProPlayer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Prqhnsx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Prusegipyyw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PSGuard.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PSTOZEb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pummzkw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pvwbcupcpi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Pwmdpurry
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PYQzxq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pyLWjVX
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.q9w8d498wr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qaglqic
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qaimhy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qamhy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qbnacnhvlr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qjJZauJA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qhljktwjwyt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qhmmoskgh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qlagkhxg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qlcjghotc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qmzznwuxt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qqkogdxr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qrfpo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qsbhheuvb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qsqfklbna
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59af48
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qukgi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qvqlh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qwrtd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rain
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rbevyy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rcbrxjjuohhkn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59af88
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RealP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.recdisc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RegAsm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Registries
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rekeywiz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59afbc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rem1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Remc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59afd0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RemcosIng
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RemD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Remmy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RemR
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.remupdat
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.reoupmywscd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Retbdeiol
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rfrnkwgrrxi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rgsm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rhlaovfllkv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rhorbhykl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RigSys
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b054
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Roaming
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rocksfolds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rqwerwerweq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RSnqlljBB
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RSys
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RtDCpl64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rThNtnN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RtkAudioService64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rtyt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ruaqohew
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Runtime5
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Runtime7
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Runtime8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Runtime12
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Runtime14
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Runtime2021
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rvbxmcojj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rvwvvic
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rwinsta
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rxtjpewlkv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rZnlUKo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.saba
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Saved_Games
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Saxhjb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sbietray
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sclieljq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Scndnpryr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Scopazop
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Screens
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b194
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SCSNKT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SD__Shipment
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sdbcv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sdbmjslkdc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sdfgfs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sdfvbnmghf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.secure
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Security_Master_AV
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.server
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.setmode
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.setspn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Seventh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sfdfbvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sgcro
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sgih
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sgswxqjxgy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.shipment
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b24c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b25c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b26c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sips2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sixth
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sjdkyjgdh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Skype_Update
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SKYPES
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Smart_Clock
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Smart_Engine
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Smart_Shopper
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b2d0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Smgjjfmxq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.smgy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.smile
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SMMNWA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sms_audio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Snglasyi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SnippingTool
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sntqxfhps
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sorpbrgsjn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sorrypeople2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sort
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.soundlog
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b368
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.spgoh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sppptjohtx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b380
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.start
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.star2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.start1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.startup
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.StartupDir
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.stle
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Stlvjxwdm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SubDir
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SubDirs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.subfolder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.subfoldercommo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b3f4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.suwpherqbptq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b40c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.svchosts.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.svhcost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sviwk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Svqcjzlv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Swgosuuckn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Swkccsuyt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SwvUpdater
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.swxbaknyarcon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b474
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sys32App
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sysdir
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sysfiles
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b498
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.system3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System32Work
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemProc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemSecurity
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemSettingsRemoveDevice
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.systemtaskl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemUpdateV8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SysWin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sytjuoam
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Szszulug
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Taskmanager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Taskmgr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tasks
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Taukogvf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.taxrecords
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tbyzfuvca
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.teamviewer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.teewire
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.telemetry
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tempadexpac.exe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Terry
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TESRLEQ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.thistime
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.timers
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.timjitpxmyyn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tinder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.titobmevvwpl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tjepjjlc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tjkxqfgafvyn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tjrjxfadz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tjxruxolpube
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tlogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tlnqalbgztp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tmgvhkhmcwjm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tmlqlsbdis
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tncjnufwqp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tpmvscmgr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tqpjlcosl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tqqdnxwk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Trgpbimd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tsig
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b6ac
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TsWpfWrp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tteegmiuoefs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b6cc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tusmgyea
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.twtfporqdq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Txqxgjwwkq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Txveneaflx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tygoh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tzqsjvh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ubkidoxrll
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UDMYKPK
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UGDMsHn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.uhmvgbdsbaj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UICBMLG
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.uihd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Uizcoetewd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ujebhbdwyf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ujehdfutnuw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Uninstall_Information
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UNSDG
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.uogfre
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Uoghhibqwj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Update
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UpdateAssistantV2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.updatee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UpdChecker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UPUpdata
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.User
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Utamvkufor
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UTVOEI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.uuhnnbc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Uyukbxzm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vaojwjkcxz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b818
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vbcxcv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vbnmer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b82c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vcbdvcxsd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vcibealcns
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vcxbv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vdbvsfvgai
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b85c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vftahfwqxa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vgNbadw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vhjktcygqe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ViaFile
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ViaFolder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ViaFolderX
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vidoeplayers
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b8b0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vkyrsunhaixyh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vmilheifddmqm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vnasrsgzms
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Voitbeejpk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vonss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59b8fc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vqxdqtzta
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vreditsoftware
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vsiibiypxa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vskanpkoobd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vssxrnnvj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vsts
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vsylrnnqk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vTjPIBq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vukftiaoyndhd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vxdsfc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vxlvwjazdo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vzjyejnb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wabfnbyhygg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wcindowsdefeninic
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wDDgXZwA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Webobject
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WeChat
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WechattsApp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WeChatx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WeChatxl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wecutil
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.where
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WHService
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.widow
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wimps
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ba20
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.win0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win32Sync
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ba40
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ba58
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windata
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinDefrag
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.windeploy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.windlogomnt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowDir
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowDriverSys
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.windowgqwuwed12ss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_AVG
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Con_Host
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Network_Host
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.windows_process
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_RT_Server
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Script_Invoker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Session
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Tittle
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Update_Folder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_View_Invoker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.windowsdata
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsDefe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsFilessc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsLogon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsPE
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsServices
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsSidebarf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsUpdater
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinHost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinHound.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.winloga
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.winlogon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.winlogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.winpcs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinPress
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinPressFree
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.winsapp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinServices
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinsoundHD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.winsrar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinSxS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wintaskhost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinUt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WiseManager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wlanext
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59bcb4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wmnmsn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.workhole
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Workspace
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wowuds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WpcTok
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wPLpKMo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wreydxcvs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59bcfc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wtlusloofe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wuauclt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wvshspnfgxa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wynyodmaqndnrl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wzsdfr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.X1D5V2H0_V6U4_L5R1_R8I1_Y5X7K0J3Y7V4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xaxucdbzpde
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xcbvdgfs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xckycixgych
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xclhmlqvgiviwx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xcopy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xhbfjoz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xithe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xl5jVVxcVWIx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xl9gUWNjZ19iVAxx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xmrig
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xncvbnsdf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xoamkqomrppqyd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xpyoyfrgtle
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xrgfrndukxd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xrqguzlrpxx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xsecva
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xtjpewlkv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xTzIpSy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xvwrkthabyihde
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.XWVWKXD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xxmjgocbs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.xzvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.y2ku
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.yakkk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59be74
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ydqcodmeyu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Yfwaegzjizj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ygbidpkecdl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ygwtopnozzx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ylluulabi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.YMRYOAH
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Yndvodmwscl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.yngr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ynhycd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Yqxsvaorwni
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.yutghbncxsdz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.yvnculvyhbubdh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Yxcao
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.yxosroawnpflvv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.yxqffsjqrcmacx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59bf30
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Z0BAZwxx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.zcrfmszmkp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zdosbzkfd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zeeesnwvoo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zgbbnjshlyg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zhamrinh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zisizgeefss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zjrjwxsrv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zkidxbqem
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zlfac
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zlivzcbevlz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zmpsofbmtjs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.zmscsc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zmuiokppqwa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Znufrnkwgrr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Znxqmfqxv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zqzicdfdyev
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.zvcxvbn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zwhtpizsgxc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zyfrlcamp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zzgmbbvnx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zzpvit
lea ecx, [ebp - 0x284]
call fcn.0050f680
lea ecx, [ebp - 0x12c]
call fcn.0050f5b0
push str.appCraft
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.AppKraft
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.ArhCat
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.ClearDataCache
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.Craft
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.CregSysUtils
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.DeerDir
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.free_LogicMonitor
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.GameDir
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.getout
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.GudierApp
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.HollyDolly
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.HollyGarden
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.HollysGarden
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.iAppGoodier
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.iNetManager
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.iNetworkManager
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.internetDownloader
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.newsroom
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.nvidiaRays
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.nvidiaWinRays
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.RiseFolder
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.WinTimeFreeze
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.WinZoneFreeze
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.WinZoom_
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.wise_tools
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.WiseFolderHider
lea ecx, [ebp - 0x12c]
call fcn.0050f680
push str.wisetools
lea ecx, [ebp - 0x12c]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4e0799
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
lea ecx, [ebp - 0x12c]
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4e086b
mov eax, dword [0x5b84b8]
push eax
lea ecx, [ebp - 0x12c]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7654]
push edx
push 0x59c198
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
mov dword [ebp - 0x10], 0
jmp 0x4e07f2
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 0x104
jae 0x4e0808
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0x240], 0
jmp 0x4e07e9
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x270], eax
movsx edx, byte [ebp - 0x240]
test edx, edx
jne 0x4e082f
jmp 0x4e0859
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f680
lea ecx, [ebp - 0x26c]
push ecx
mov edx, dword [ebp - 0x270]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4e0822
mov eax, dword [ebp - 0x270]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
jmp 0x4e078a
mov dword [ebp - 0x118], 0
jmp 0x4e0886
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e093e
push 0x5b8e88
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e08c5
jmp 0x4e0877
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7654]
push edx
push 0x59c1a0
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e0939
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59c1a8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e0877
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.AdobeCSS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Adobes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AudioP2PSound
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.asfega
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AskToolbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.astra444
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Atheros
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c1fc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c200
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Chrome
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.clicup
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c214
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ComBroadCaster
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ComEo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ComNetwork
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Context2pro
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ContextFree
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ContextTrue
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CSKMHS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c26c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Domain_Technology_Group__
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Drpbx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c29c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DynamicPricer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eorezo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Erijfl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ertfhgjhf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fDLqqTxZBH
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.freeSOFTtoday
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gamesdesktop
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.genienext
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Get_Cliboard_Address
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GForceCmp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c328
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GMYLEA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hxastq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jgrbum
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jkcgjj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jpxq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Klirre
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lollipop
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LuckyBuy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c380
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_OneDrive
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.microsoftz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ndjqzl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.note
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.notepadnote
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Odics
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c3c8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c3d4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OCNHRH
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c3ec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pgcchelper
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qsvrsbiy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Qxbf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RAZCXS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.searchlike
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ServiceHub
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.StampG
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sys30
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sys30s
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sys4h57g
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SysLogs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.tczycl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ThunderSLI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tuto100
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.twbcj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tzifzw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Uobvap
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Utopiasyst
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vixDiskMountApi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VzEujvQEZT
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WCSpESKKYX
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wsearch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WServices
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xcst
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xggq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Yandex
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.YgPack
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ZapDust
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ZzHEpRgsJA
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e0e84
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e0f3c
push 0x5b8e8c
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e0ec3
jmp 0x4e0e75
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b764c]
push edx
push 0x59c514
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e0f37
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59c51c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e0e75
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.19FC6134_86B7_4D6A_8CA3_D7EADC6139A6
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.2FA7F4CD_9162_46A1_BC7F_3E15137743E0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.30869C68_4F7E_4FC3_A1A4_BB56211E67D1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.4EA2A1F7_3AF7_425C_81BD_1E75CA740079
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FA0311A9_3346_46EB_821D_5574F101DE8E
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.002571aea7
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.011ab573a3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.0141f24c463d89
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.04bbb7d123
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.07e94b0ca5d069
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.07fc519c6f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.0825e16232
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.0892b52d62edab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1234567ME
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.125484
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1321ba6d1f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1428cad52d922f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1a9f26b569d5df
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.1b1b390c5bee22
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.2603f3488c41d3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.2db6c08d5a93ff
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.3094e75976
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.32_Security
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.3826790d0e5a5e
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.395C99F9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.3b2b21708d
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.3b8397f8c6d337
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.3fede613bfdf79
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.50cb447688f8dd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.52b2cae07d
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.54a58e34c1bb70
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.5caba47efa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.5eba991cccd123
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.69dfa185b0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.6c905ff76d
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.6d6f5f6124
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.729ee320c4413d
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.80373760c0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.87AABDBA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.894fy894yt980
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.89da14dd9f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.8A1A1A8D
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.8A87C8F1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.8a8a4f61cb34cb
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.8f80aeaa2e33b8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.927ef2d61ffa77
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.95e8fc81d7
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.968b2ad0a1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.97fd00311d
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.9b026d4b11eb57
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a043022f13
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a3a2b592a5
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a3ec9f3b74
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a538bc0e7bed99
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a76878f016
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.a7963
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.A99D1AAC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ab9f81c4e9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.acec187791ef85
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Adsl_Software_Limited
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ADwXcSSGvY
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.aeb89d1784
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ajLgJpQ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ap10tlc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.appmgmt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.asa1231sds9s4hv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.b7f03175ee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BAkEYIos
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c934
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c944
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bizum
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.bfsa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BjUGOZiQd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c96c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c97c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c98c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c3a72be100
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c3e11c701b800f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c4c9955b8c3339
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.c9c2592926ae12
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ca82a716069a53
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chrcrh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chromes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c9f8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59c9fc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CrucialSoft_Ltd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Csrss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.D17E66A9
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.d23c4bc78e
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.d59ff63d70
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ca40
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.df7b514b13
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ca58
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Drivers
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Duck
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.e19b362424bbc4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eeae6d030f
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eecce2a3dc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.emco
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EpsanDrive
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ErrorResponder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eSafe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.f1a6a48e76c1fd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.f9285ea3f86ad97b5e47
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.faa2fb3217da50
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FeSdavbMaL
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FtqBnjJnmF
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fuhnob
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Garbage_Cleaner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gational
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GbPlugin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GCxcrhlcfj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cb4c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Google_Updater_2.07
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gtRycypKUS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hasdsdvzZva
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hDiBgK84
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hjgvfdxrdy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hsdsafbxzcbXMsa
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.htfruning
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IePluginService
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IePluginServices
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IHProtectUpDate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IlKTmhStyg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.imaging
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IMVmirKgDI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InstallMate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IZDVSkwLFX
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cc2c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KcEqSDTxqP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Kikblaster
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.lcooAkoU
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LogonUI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ltional
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.machines
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftEnc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftGational
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MicrosoftLtional
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Net
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Netframework
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsofts_HeIp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.migVCTGVwf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MiscTools
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cd0c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mshealth
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nEzJvZquBf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NTISyPbUNc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nvxasync
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ostersin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PBbalKddBS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pBSiTUERTJ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pcdfdata
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cd70
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cd7c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PnQssBdbSh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cd8c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cd9c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Realtek0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RedTools
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.REGVIEW
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cdc0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.rematsssss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.remcos
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Resources
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.safe_saevoee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SaveByclick
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sdfghjk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SearchNewTab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.searose
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SecuriSoft_SARL
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Services
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sHrhJDaCBu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SmartPurple
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Somrec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ce5c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.srvdir
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Steam_Client0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sukoku
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SuperbApp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Synaptics
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ceac
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SysWOW64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cecc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Terminal
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TIZmZvyYpW
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tmp0x0x
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UBlockPlugin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.verclsid
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vidmon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vmss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vtsuvtfyxh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WIFIService
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cf4c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cf64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsMangerProtect
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsProtectManger
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinPow
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WMI_Services
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.work
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59cfcc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WrdJdgYRmg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wsxs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xifbi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ZCiojYXYi
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ZRBEbQTcgq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d004
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e1c52
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e1d0a
push 0x5b8e90
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e1c91
jmp 0x4e1c43
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7650]
push edx
push 0x59d00c
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e1d05
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59d014
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e1c43
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.pdfie
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e1d40
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e1df8
push 0x5b8e94
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e1d7f
jmp 0x4e1d31
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7648]
push edx
push 0x59d024
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e1df3
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59d02c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e1d31
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.5CFC78F8_01BF_3082_0210_999811130022
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.705DA534_07D0_3082_1229_040408180022
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.C81A215D_01BF_3082_0210_999811130022
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Delsim
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d0b4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Google_Updater_5.0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KeenValue
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PSD_Tools
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d0f4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d0fc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SysgeData
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d10c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d118
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System40FD1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System76A91
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System9f3df393cbbd19b
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemAA4B1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemIThkhrobUZ
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemJUp4K4MS8bldNp6jH
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SystemLatke
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_s212328722981877
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d1cc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d1e0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UninstallPersonalAV
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d1fc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d208
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d220
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinSoftware
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinTools
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e1fee
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e20a6
push 0x5b8e98
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e202d
jmp 0x4e1fdf
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b765c]
push edx
push 0x59d250
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e20a1
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59d258
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e1fdf
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push 0x59d260
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.0CA45C95134D
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.180search_assistant
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.180Solutions
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.247Cams
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d2a0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d2a8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ActSys
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AdvancedDVDPlayerSaap
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AdvanceElite
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d2e0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d2ec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AGSeyApp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AllGenius
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d314
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.amdidx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d324
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d330
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d344
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d354
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d364
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AntiVirusGold
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d384
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.aotech
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AppEnable
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.appjavainiini
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Application_Assistance
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ASK.COM
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AskBarDis
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AskTBar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Autos
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AutoUpdate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.badu
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bargain_Buddy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BasicServe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BinarySound
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BingoCabin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d440
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Blok_Free_4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d458
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d46c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d47c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d48c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BrowseStudio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d4ac
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BullsEye_Network
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CashBack
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CashReminder
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cegush
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d4f4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d504
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Client
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d510
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ClipManagerP0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Clock_Hand
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d538
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_Files894fy894yt98.2227A280_3AEA_1069_A2DE_08002B30309D
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesActiveU0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_Files_appDataBin0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_Fileschkstatus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesKeenValue
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesMicrosoft_Framework0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesRealtek0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesSteam_Client0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesSvchostsys
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesSvchost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesWin_Audio
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_FilesWindows_Kernel_Updater
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Common_Fileswininit64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CommonName
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Company
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Couponica
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.couponsandoffers
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CSec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.CxtPls
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cyti_Web
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DC_Locknet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d724
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DealPlyLive
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Defender_Folders
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d74c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Delta
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Deskbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DHCP_Monitor
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Digital_Communications
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Digital_Protection
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dolphin_Deals
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DownloadWare
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dripkick
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Dripkix
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DropSpam
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DsLifeStyle
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DVDs
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DyFuCA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.E_zShopper
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d810
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ebates_MoeMoneyMaker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Error_Safe_Free
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d83c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ESETMiNODLogin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eXact
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eZula
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.F552DD4C52E3
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.facemoods.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d888
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d89c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Flowsurf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Flwsrf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d8bc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Framed_Display
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Freeprod_Toolbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fresh_Outlook
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FunWebProducts
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gaov
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GbPluggin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gbplugin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gccgw32loc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GlobalUpdate
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Great_Hub
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.HbTools
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Hotbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.HulaToo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.I___Cinema
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ICONS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59d980
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IE_BAR
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IEAntiVirus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IESearchToolbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Image_Activex_Access
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Inet_Delivery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InetGet2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InfiniNet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InfoTrigger
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Instant_Access
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Internet_Antivirus_Pro
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Internet_Security
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InternetSpeedTracker_9tEI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ipwindows
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IrcamBundle
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ISTbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ISTsvc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jelbruss_Secure_Web
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.JustClicking
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59da98
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KingBrowse
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KpAds
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dab8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.langwow64_16
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.License_Manager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LPVideoPlugin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.LycosSidesearch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MailSkinner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59db14
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59db24
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59db30
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.maraew
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MaxSpeed
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MediaAccumulativeCodec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MediaEntertainmentCodec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MediaSupplyCodec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MediaVideoCodec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mein_PONSline
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MemoryMeter
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dbc4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Bdehtf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Mjpgul
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Pilgfz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Security_Adviser
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Vxwsmt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Microsoft_Wklwyy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Miniw64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MiuiTab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MMSAssist
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dc74
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Monobanda___Herramienta_de_Monografias.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MSClient
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MyWay
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MyWebSearch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.nctwe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NetProject
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dce8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.NewDotNet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nimeckreelule
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dd08
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Notify
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Oasis_Space
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Oemji
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OfferBox
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Olacarita
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.onesoftperday
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OneStepSearch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Orcus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dd6c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dd74
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PC_Sentinel_Software
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PCHealthCenter
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.pdfforge_Toolbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PennyBee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Penwes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59ddd0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dddc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PersSecurity
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.plbns
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Power_Scan
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PowerControl
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59de24
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59de28
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59de38
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59de44
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PricePeep
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Program
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59de64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PSGuard
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PurityScan
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.qtyh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.QualityChecker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.QuestService
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.QuickSearch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RapidBlaster
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RayDld
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RCPrograms
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.REACHit
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59deec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59def8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ResultsBay
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RichVideoCodec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59df28
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rxtoolbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Save
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SaveNow
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Screensavers.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Screenshots
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59df68
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Search_Guard_Plus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Search_Guard_PlusU
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Search_Settings
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SearchesToYesbnd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dfb8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Seekmo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dfcc
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59dfd0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SGPSA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ShopperReports
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ShoppingReport
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SmartShopper
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SmartURL
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SmartVideoCodec
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.snova_holod
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sohutz
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sorawardanagck
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SourceApp
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e058
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e064
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpyFalcon
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e078
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e088
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e098
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Spyware_Guard_2009
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e0c4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e0d4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e0e8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SQLIOSIMS
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Sqwire
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.srbjj
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Srng
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e11c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.STHomePage
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.STLinks
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SuperBar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SupTab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.svchost
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sxs_16
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e158
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e164
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Tbonbin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TClock
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TelevisionFanatic
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TelevisionFanaticEI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TheSearchAccelerator
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ToggleMark
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Toolbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ToolBar888
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e1e0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TV_Media
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TVMD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UCmore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UDP_Service
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UnSpyPC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Universal_Updater
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e228
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Vanilla
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VBouncer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VersalSoftInternetDownload
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Video_Activex_Access
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Video_Activex_Object
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Video_Add_on
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Video_AX_Object
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e2ac
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e2b8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VirusRL2009
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VirusTriggerBin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VVSN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e2f0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WAN_Subsystem
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WarAgent
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WareOut
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e31c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Web_Rebates
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WebMediaViewer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WebSpades
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.whInstall
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e35c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e368
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinAntiVirus_Pro_2007
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e398
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinFixer_2005
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinHound
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Winsere
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinTaske
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WNet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WPA_Service
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.wsea
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e3f8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.XTab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Xupiter
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.yesbnd
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Yontoo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.zSearch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zwinky_5qEI
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zwunzi
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4e356c
mov ecx, dword [0x5b84b8]
add ecx, 1
mov dword [0x5b84b8], ecx
mov ecx, 0x5b5b48
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4e35d3
mov edx, dword [0x5b84b8]
push edx
mov ecx, 0x5b5b48
call fcn.0050f5d0
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f0c0
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push 0x59e448
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x284]
call fcn.0050f680
jmp 0x4e355d
mov dword [ebp - 0x118], 0
jmp 0x4e35ee
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e3722
push 0x5b8e9c
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e362d
jmp 0x4e35df
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7658]
push eax
push 0x59e45c
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e36a0
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e464
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
cmp dword [0x5b84d4], 0
je 0x4e371d
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
mov ecx, dword [0x5b7658]
push ecx
push 0x59e46c
lea edx, [ebp - 0x38c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x38c]
push eax
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e371d
lea ecx, [ebp - 0x38c]
push ecx
lea edx, [ebp - 0x3a0]
push edx
push 0x59e478
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e35df
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.Accoona
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AdvancedVirusRemover
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e4a0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e4a8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e4b8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fast_Browser_Search
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InternetSecurity2010
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Internet_Optimizer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Manson
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MySearch
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e518
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Securityessentials2010
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpySheriff
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ThunMail
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.webHancer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WindowsSA
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e56c
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e3858
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e390e
push 0x5b8ea0
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e3897
jmp 0x4e3849
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
push 0x5b7ba4
push str._sProgram_Files_s
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e3909
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e594
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e3849
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push 0x59e59c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Adult_Sites
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Adult_Store
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Antiviruses__Software__Computers
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Business
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e5f8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Computers
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cool_Stuff
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cracks
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.E_Business_News
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Entertainment
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e64c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Finance
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e660
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Free_Adult_Content
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Free_Adult_Pics_and_Movies
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Free_Hardcore_Porn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Free_Stuff
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gambling
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gaming
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Health_News
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Inernet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lifestyle
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Netzany
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e6f8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Shopping
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Shopping_News
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e724
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Travel
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e3b04
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e3bbb
push 0x5b8ea4
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e3b43
jmp 0x4e3af5
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b763c]
push eax
push 0x59e738
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e3bb6
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e740
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e3af5
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push 0x59e748
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bersek1.0
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Bersek1.1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e774
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e788
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mobile_AntiVirus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Updater
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e3c51
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e3d08
push 0x5b8ea8
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e3c90
jmp 0x4e3c42
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7634]
push eax
push 0x59e7b0
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e3d03
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e7b8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e3c42
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.A360
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e7c8
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Antivirus2008
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Antivirus2008y
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Antivirus_2009
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e80c
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59e820
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Venusseek
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.XP_Antivirus_2008
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e3dbe
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e3e75
push 0x5b8eac
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e3dfd
jmp 0x4e3daf
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b766c]
push eax
push 0x59e84c
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e3e70
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e854
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e3daf
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.PersonalAV
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e3eab
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e3f62
push 0x5b8eb0
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e3eea
jmp 0x4e3e9c
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b7668]
push eax
push 0x59e868
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e3f5d
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e870
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e3e9c
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.DCSCMIN
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IISExpress
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MSDCSC
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.snakekeylogger
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e3fc8
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e407f
push 0x5b8eb4
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e4007
jmp 0x4e3fb9
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b762c]
push eax
push 0x59e8a4
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e407a
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e8ac
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e3fb9
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.bnvr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.cxghxnr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kzlab
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ldab
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e40e5
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e419c
push 0x5b8eb8
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e4124
jmp 0x4e40d6
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b761c]
push eax
push 0x59e8d4
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e4197
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59e8dc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e40d6
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push 0x59e8e4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Abxrt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.adobe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Adult_Entertainment
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.advanced
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Advanced_PC_Shield_2012
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AdwareSheriff
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AltNet
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AntiMalware
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Antivirus_2008_PRO
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AntiVirus_AntiSpyware_2011
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Antivirus_Protection_2012
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Antivirus_Protection
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AntiVirus_System_2011
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AntivirusPro_2010
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Application
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.asrdv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AV_Protection_2011
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.AVASoft_Professional_Antivirus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BitGuard
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Block_Checker
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BraveSentry
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Browser_Manager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BrowserDefender
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BrowserProtect
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.buddylinks.net
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Casinos__Gambling
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Cfflo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chlome
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ChrismasPorn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chrom
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chrome
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chromes.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ChromesOffice
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chrone
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.chrorme
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ClockSync
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Chromes.ese
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.csrsss
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.DealPly
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Defense_Center
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Data_Recovery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Data_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Data_Restore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Disk_Antivirus_Professional
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Disk_Optimizer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Disk_Recovery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Disk_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.download
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.dwrn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Earn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.eeeeeeee
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.EWB_Wire_Transfer_Form
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ezpdkr
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Family_Keylogger
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Fast_Disk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FasterXP
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.fffffffff
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.File_Recovery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.File_Restore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.filesubmit
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Find_a_date
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.firef0x
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.firefox
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gammadyne
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.gggggggg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Gnigg
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.hfshmxt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.iMazing
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.InetStat
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.IntExplorer64
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Jabojcn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.jkirurfnfjfmfmf
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.JustPorn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kkkkk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kkkkkkkk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kkkkkkkkkkkk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.kkkkkkkkkkkkkk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.KvmSecure
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Lfqxtnrq
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Live_Security_Platinum
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.livewin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Malware_Defense
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MalwareWipe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MalwareWipe.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MessengerSkinner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mgrser
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mmmmmm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mmmmmmm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mmmmmmmm
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mrfeabtw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Mrphyfyw
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MS_AntiSpyware_2009
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.msbul
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.msbuld
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.mtixspx
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.notepad
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.notepod
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.notpad
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Nzyukyad
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ooooooooooo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OverSpy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Passware
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PC_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PC_Sentinels_Smoking_Gun_
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Personal_Protector
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PestTrap
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PSGuard_spyware_remover
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ptyis
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Purity_Scan
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Rcbimcxfh
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Recycle__Bin
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.runpclinked
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Scanner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Search_The_Net
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SearchVideo
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Smart_Fortress_2012
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SMART_HDD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Smart_Protection_2012
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Smart_Uninstaller
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Spy_Shield
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpyAxe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpyLocked_3.6
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpyQuake2.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpywareQuake
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpywareQuake.com
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SpywareStrike
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Start_Lollipop
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.startes
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.sysfile
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.SysProtect
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_7_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Check
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Fix
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Care_Antivirus
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Doctor_2014
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Progressive_Protection
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Recovery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Restore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_Tool
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.System_XP_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.system32
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.systernsfile
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.task
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.testing
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.TopText_iLookup
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.UCmore___The_Search_Accelerator
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ultra_Defragger
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VirusResponse_Lab_2009_2.1
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VOPackage
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.vvvvvvvvv
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59f148
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WatchPorn
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Web_Search_Tools
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win_Defrag
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win_Defragmenter
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win_Disk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win_HDD
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win_Scanner
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Disk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Fix_Disk
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Police_Pro
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Recovery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Restore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_Scan
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_7_Recovery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_7_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_7_Restore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_XP_Recovery
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_XP_Repair
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Windows_XP_Restore
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.windscribe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinHound_Spyware_Remover
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.X_Password_Manager
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zentom_System_Guard
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Zgmasrl
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4e4ce2
mov edx, dword [0x5b84b8]
add edx, 1
mov dword [0x5b84b8], edx
mov ecx, 0x5b5b48
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4e4d49
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f0c0
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov edx, dword [eax]
push edx
push 0x59f2fc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x284]
call fcn.0050f680
jmp 0x4e4cd3
mov dword [ebp - 0x118], 0
jmp 0x4e4d64
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e4e1c
push 0x5b8ebc
mov ecx, dword [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e4da3
jmp 0x4e4d55
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov eax, dword [eax]
push eax
mov ecx, dword [0x5b7664]
push ecx
push 0x59f310
lea edx, [ebp - 0x38c]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [ebp - 0x38c]
push eax
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e4e17
lea ecx, [ebp - 0x38c]
push ecx
lea edx, [ebp - 0x3a0]
push edx
push 0x59f318
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e4d55
lea ecx, [ebp - 0x284]
call fcn.0050f5b0
push str.AdwareAlert
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Ardamax_Keylogger
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.BBrowsee2siaave
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Brickshooter_Egypt
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Crawler_Toolbar
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Error_Safe_Unregistered_Version
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.ErrorSafe
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.free_soft_to_day
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.free_soft_today
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.FrEeSoFtOdAy
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Freesofttoday
lea ecx, [ebp - 0x284]
call fcn.0050f680
push 0x59f3e4
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.GamesDesktop
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MobilePCStarterKit
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.MyBestOffersToday
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.OneSoftPerDay
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PremierOpinion
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PriceGong
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.PriceGong2
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Proof_Defender_2009
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RegQuick
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.RelevantKnowledge
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Spyrix_Free_Keylogger
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VirusAlarma
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.VirusRemover2009
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Wajam
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.Win_Sniffer
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.WinAntiVirus_Pro_2006
lea ecx, [ebp - 0x284]
call fcn.0050f680
push str.XPSecurityCenter
lea ecx, [ebp - 0x284]
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x4e5010
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, 0x5b5b48
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x4e5078
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f0c0
mov edx, dword [0x5b84b8]
push edx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov eax, dword [eax]
push eax
push str._s_Browser_Enhancer
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x284]
call fcn.0050f680
jmp 0x4e5003
mov dword [ebp - 0x118], 0
jmp 0x4e5093
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x284]
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e514b
push 0x5b8ec0
mov edx, dword [ebp - 0x118]
push edx
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e50d2
jmp 0x4e5084
mov eax, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x284]
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7660]
push edx
push 0x59f518
lea eax, [ebp - 0x38c]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5146
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59f520
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e5084
mov ecx, dword [0x5b7674]
push ecx
push str._s_firefoxx
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov edx, dword [0x5b7674]
push edx
push str._sjava
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov eax, dword [0x5b7674]
push eax
push str._s_notepaaaaddsss
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov ecx, dword [0x5b7674]
push ecx
push str._s_notepaaaaddsssi
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov edx, dword [0x5b7674]
push edx
push str._s_notepaaaxddss
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov eax, dword [0x5b7674]
push eax
push str._s_notepaadb
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0xffffffffffffffa0
mov ecx, dword [0x5b7660]
push ecx
push str._sSecurity_cDefender
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7bb4
mov edx, dword [0x5b7650]
push edx
push str._s_s__s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._s_sRand123
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalgbOAvv
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalkZnEQA
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalQetXmA
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalTbgZOC
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalUGZDhg
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalVTXSam
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalXqbGLC
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov dword [ebp - 0x118], 0
jmp 0x4e5418
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
mov ecx, 0x5b5bc0
call fcn.0050f110
cmp dword [ebp - 0x118], eax
jge 0x4e54c5
push 0x5b8ec4
mov ecx, dword [ebp - 0x118]
push ecx
mov ecx, 0x5b5bc0
call fcn.0050f5d0
push eax
call fcn.0050f610
and eax, 0xff
test eax, eax
je 0x4e5455
jmp 0x4e5409
mov edx, dword [ebp - 0x118]
push edx
mov ecx, 0x5b5bc0
call fcn.0050f5d0
mov ecx, eax
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e54c0
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59f69c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
jmp 0x4e5409
push 0x5b8ec8
push 0x5b5230
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4e5591
push 0x5b5230
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x288], eax
push 0x5b5230
lea ecx, [ebp - 0x38c]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp - 0x288]
mov dword [0x5b84b8], edx
jmp 0x4e5521
mov eax, dword [0x5b84b8]
sub eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0
jle 0x4e5541
mov ecx, dword [0x5b84b8]
movsx edx, byte [ebp + ecx - 0x38c]
cmp edx, 0x5c
jne 0x4e553f
jmp 0x4e5541
jmp 0x4e5514
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x38c], 0
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5591
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59f6a4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
mov ecx, dword [0x5b7658]
push ecx
push str._sRHCJ0E
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
mov dword [0x5b84b8], 0
jmp 0x4e55c6
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x104
jae 0x4e55e2
mov ecx, dword [0x5b84b8]
mov byte [ebp + ecx - 0x240], 0
jmp 0x4e55b9
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
mov dword [ebp - 0x270], eax
movsx ecx, byte [ebp - 0x240]
test ecx, ecx
jne 0x4e560c
jmp 0x4e56eb
lea edx, [ebp - 0x240]
push edx
mov eax, dword [0x5b7658]
push eax
push 0x59f6b8
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5671
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59f6c0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
lea edx, [ebp - 0x240]
push edx
push str.MS_s
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x59f6d0
push 0x80000002
call fcn.00402ed5
add esp, 0xc
test eax, eax
jne 0x4e56cf
lea eax, [ebp - 0x240]
push eax
push str.Entrada_Eliminada__HKLM...Run___MS_s__n
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
lea ecx, [ebp - 0x26c]
push ecx
mov edx, dword [ebp - 0x270]
push edx
call dword [sym.imp.KERNEL32.DLL_FindNextFileA]
test eax, eax
jne 0x4e55fc
mov eax, dword [ebp - 0x270]
push eax
call dword [sym.imp.KERNEL32.DLL_FindClose]
mov ecx, dword [0x5b7654]
push ecx
push str.._scom2.62D8ED13_C9D0_4CE8_A914_47DD628FB1B0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov edx, dword [0x5b7654]
push edx
push str.cmd__c__del__._scom2.62D8ED13_C9D0_4CE8_A914_47DD628FB1B0.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov eax, dword [0x5b7654]
push eax
push str.cmd__c__rd__._scom2.62D8ED13_C9D0_4CE8_A914_47DD628FB1B0__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov ecx, dword [0x5b7654]
push ecx
push str.._scom4.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov edx, dword [0x5b7654]
push edx
push str.cmd__c__del__._scom4.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov eax, dword [0x5b7654]
push eax
push str.cmd__c__rd__._scom4.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov ecx, dword [0x5b7654]
push ecx
push str.._scom6.00C6D95F_329C_409a_81D7_C46C66EA7F33
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov edx, dword [0x5b7654]
push edx
push str.cmd__c__del__._scom6.00C6D95F_329C_409a_81D7_C46C66EA7F33.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov eax, dword [0x5b7654]
push eax
push str.cmd__c__rd__._scom6.00C6D95F_329C_409a_81D7_C46C66EA7F33__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov ecx, dword [0x5b7654]
push ecx
push str.._slpt2.20D04FE0_3AEA_1069_A2D8_08002B30309D
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov edx, dword [0x5b7654]
push edx
push str.cmd__c__del__._slpt2.20D04FE0_3AEA_1069_A2D8_08002B30309D.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov eax, dword [0x5b7654]
push eax
push str.cmd__c__rd__._slpt2.20D04FE0_3AEA_1069_A2D8_08002B30309D__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov ecx, dword [0x5b7654]
push ecx
push str.._slpt3.1D2680C9_0E2A_469d_B787_065558BC7D43
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov edx, dword [0x5b7654]
push edx
push str.cmd__c__del__._slpt3.1D2680C9_0E2A_469d_B787_065558BC7D43.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov eax, dword [0x5b7654]
push eax
push str.cmd__c__rd__._slpt3.1D2680C9_0E2A_469d_B787_065558BC7D43__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov ecx, dword [0x5b7654]
push ecx
push str.._slpt6.17cd9488_1228_4b2f_88ce_4298e93e0966
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov edx, dword [0x5b7654]
push edx
push str.cmd__c__del__._slpt6.17cd9488_1228_4b2f_88ce_4298e93e0966.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov eax, dword [0x5b7654]
push eax
push str.cmd__c__rd__._slpt6.17cd9488_1228_4b2f_88ce_4298e93e0966__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov ecx, dword [0x5b7654]
push ecx
push str.._slpt7.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
mov edx, dword [0x5b7654]
push edx
push str.cmd__c__del__._slpt7.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
mov eax, dword [0x5b7654]
push eax
push str.cmd__c__rd__._slpt7.05d7b0f4_2121_4eff_bf6b_ed3f69b894d9__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
push 0x5b7eb4
push str.._sFONTSCOM4.241D7C96_F8BF_4F85_B01F_E2B043341A4B
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
push 0x5b7eb4
push str.cmd__c__del__._sFONTSCOM4.241D7C96_F8BF_4F85_B01F_E2B043341A4B.___a__q_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
push 0x5b7eb4
push str.cmd__c__rd__._sFONTSCOM4.241D7C96_F8BF_4F85_B01F_E2B043341A4B__
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0
push 0x5b6504
call dword [sym.imp.KERNEL32.DLL_WinExec]
push 0x5b5130
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5ad2
push 0x5b5130
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59fd60
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
movsx edx, byte [0x5b7504]
test edx, edx
je 0x4e5b1c
push 0x5b7504
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5b1c
push 0x5b7504
lea eax, [ebp - 0x3a0]
push eax
push 0x59fd68
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_s_AppDataRoamingAudioHDriver
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea edx, [ebp - 0x38c]
push edx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5b7e
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
push 0x59fd9c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x5b4728
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5bbd
push 0x5b4728
lea edx, [ebp - 0x3a0]
push edx
push 0x59fda4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x5b4328
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5bfc
push 0x5b4328
lea eax, [ebp - 0x3a0]
push eax
push 0x59fdac
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x5b8ecc
push 0x5b5030
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4e5cc8
push 0x5b5030
call sub.MSVCRT.dll_strlen
add esp, 4
mov dword [ebp - 0x288], eax
push 0x5b5030
lea ecx, [ebp - 0x38c]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp - 0x288]
mov dword [0x5b84b8], edx
jmp 0x4e5c58
mov eax, dword [0x5b84b8]
sub eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0
jle 0x4e5c78
mov ecx, dword [0x5b84b8]
movsx edx, byte [ebp + ecx - 0x38c]
cmp edx, 0x5c
jne 0x4e5c76
jmp 0x4e5c78
jmp 0x4e5c4b
mov eax, dword [0x5b84b8]
mov byte [ebp + eax - 0x38c], 0
lea ecx, [ebp - 0x38c]
push ecx
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5cc8
lea edx, [ebp - 0x38c]
push edx
lea eax, [ebp - 0x3a0]
push eax
push 0x59fdb4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x59fdbc
push 0x59fdc8
push 0x80000002
lea ecx, [ebp - 0x3a4]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x3a8], eax
mov edx, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x3ac]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3a4]
call sub.MFC42.DLL_CString::CString
push 0x59fe00
lea ecx, [ebp - 0x38c]
push ecx
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4e5de2
push 0x5b8ed0
lea edx, [ebp - 0x38c]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4e5de2
lea eax, [ebp - 0x38c]
push eax
call fcn.004e6241
add esp, 4
test eax, eax
je 0x4e5de2
lea ecx, [ebp - 0x38c]
push ecx
lea edx, [ebp - 0x3a0]
push edx
push str._s__s__n
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
push 0x59fe10
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x59fe48
push 0x5b6504
push 0x80000002
call fcn.00402ed5
add esp, 0xc
push 0x59fe54
push 0x5b6504
push 0x80000002
call fcn.00402ed5
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12c]
call fcn.0051046c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.0051046c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret