Function at 0x41d6e3
Capabilities:
Create directory
Delete directory
Delete file
Enumerate device drivers on windows
Execute command
Manipulate boot configuration
Parse pe header
Persist via active setup registry key
Persist via image file execution options registry key
Persist via run registry key
Persist via windows service
Persist via winlogon helper dll registry key
Set file attributes
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x511b6d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2894
call fcn.005106b0
lea ecx, [ebp - 0x1838]
call sub.MFC42.DLL_CStringArray::CStringArray
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x420]
call sub.MFC42.DLL_CStringArray::CStringArray
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::CString_3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1838]
call fcn.0050f5b0
lea ecx, [ebp - 0x420]
call fcn.0050f5b0
push str.GIDCAI32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SIPSPI32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push str._s180ax.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._s180axhook.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._sHIFGTUT.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._slgbibsn.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._smsbbi.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._s_salm.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._s_salmhook.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.180.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.silent.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.uftsrch.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.witircl.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push str._s_bundles_saie1101.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._sDownloaded_Program_Files180sainstaller.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._sDownloaded_Program_Files180salib.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.180search_assistant_fleokmsbb.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.180solutionsmsbb.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.180solutions_sais.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AdvancedDVDPlayerSaapSAAP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AdvancedDVDPlayerSaapSAAPHOOK.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Search_AssistantSAAP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push str._s2020search2.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push str._sSATMAT.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Duad.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.farmmext.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.mm_reco.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ygfdjd.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.zserv.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.AccoonaTBQUIESCE.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AccoonaASEARCHASSIST.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AccoonaSAREMOVE.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AccoonaSHOWBAR.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AccoonaATOOLBAR.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.E_zShopperCOMPBAR.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.E_zShopperBARLCHER.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSHOST.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SNDVOL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINPUP32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PROTOPRO.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemPROTOPRO.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32PROTOPRO.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sPROT.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sSILENT53.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Lycos___make_LOVE_not_SPAM.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Lycos___make_LOVE_not_SPAM.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Lycos___make_LOVE_not_SPAM.scr
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.NTFSNLPA.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.HELPER.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52d558
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.NAVSHEXT.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sProgram_FilesBlock_CheckerSETUP_FINISH.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sProgram_FilesBlock_CheckerCSRSS.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x52d5cc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x52d5fc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SOCONFIG.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DriversInfSOCONFIG.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SvcHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SvcHost.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DhcpSVCHOST.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push str._sAdvBHO.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.NET.NET
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PRNET.TMP
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdRoar.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ARUpdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cpruninst.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systemdll.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YSTCKAO32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.010_batexxadvl32.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.B5TShareB5TService.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52d730
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.GETSN32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52d74c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.GETWN32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WERTYU.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ActSysActSys.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CashReminderCashReminder.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WNetWNet.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Drivers_asfilterdrv.sys
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Driverscrfilterdrv.sys
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Drivers_ssfilterdrv.sys
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.clicupclicup.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.clicupchrmndr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.clicupwinhyn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KikblasterNSISHelper.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EpsanDriveNSISHelper.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SmartPurpleNSISHelper.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Context2proconadvanced.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Context2procontextprod.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Context2procontextfr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ContextFreecntcmd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ContextFree_nvcmd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ContextFree_framei.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ContextTruecnthlpr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ContextTrue_nvhlpr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DealPlyDealPlyIE.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DealPlyLiveUpdateDealPlyLive.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DefaultTabDefaultTabDefaultTabStart.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DefaultTabDefaultTabDefaultTabStart64.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DefaultTabDefaultTabDefaultTabBHO.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DefaultTabDefaultTabDefaultTabWrap.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DefaultTabDefaultTabDefaultTabWrap64.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DefaultTabDefaultTabDTUpdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.onesoftperdayotutnetwork.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GabPathGabPath.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MinoralMinoral.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UpdCheckerUpdChecker.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NBTNBT.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsAdvService.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LuckyBuyluckybie.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LuckyBuymccmc.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.InternetSpeedTracker_9tEIInstallr2.bin9tEzSetp.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.InternetSpeedTracker_9tEIInstallr2.bin9tEIPlug.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.InternetSpeedTracker_9tEIInstallr2.binNP9tEISb.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.piolock.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._newnext.me_nengine.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.genienext_nengine.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.OfferBoxOfferBox.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.OfferBoxOfferBoxHTTPProxy.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.OfferBoxOfferBoxUpdateService.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.OneStepSearchONESTEP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.OneStepSearchONESTEP.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftLauncher.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pgcchelperpgcchelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.PricePeeppricepeep.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.PricePeeppricepeepupdater.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Jelbruss_Secure_Webprivoxy.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._searchlike_searchlike.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Music_ToolbarDatamngrDatamngrCoordinator.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Music_ToolbarDatamngrDatamngrUI.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Music_ToolbarDatamngrDatamngr.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Music_ToolbarDatamngrmgrldr.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Music_ToolbarDatamngr_apcrtldr.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Music_ToolbarDatamngrx64_apcrtldr.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Music_ToolbarDatamngrSRTool1IE_searchresultsDx.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wincertwin32cert.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wincertwin32prop.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wincertwin64cert.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wincertwin64prop.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SFKSSFK.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SFKSFKEX.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SFKSFKEX.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SFKSFKEX64.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SFKSFKEX64.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamIEwajam.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamIEpriam_bho.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamUpdaterWajamUpdater.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamUpdaterWajamUpdaterV2.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamUpdaterWajamUpdaterV3.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamWajam_Internet_EnhancerWajamInternetEnhancer.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamWajam_Internet_EnhancerWajamInternetEnhancerApp.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WajamWajam_Internet_EnhancerWajamInternetEnhancerService.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b5b48
call fcn.0050f5b0
push str.WaIEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaIEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaIntEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaIntEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaInterEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaInterEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaInterEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaInternetEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaInternetEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaIntEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaInterEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaInterEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaInternetEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaInternetEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaNetEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.Wajam_Web_Enhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaWebE
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaWebEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajaWebEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajIEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajIEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajIntEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajnEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajNEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajNetE
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajNetEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WajWebEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaNetEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaNetEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaNetworkEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaNetworkEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WaNetworkEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WIEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WInterEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WInterEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WNEn
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WNetEnhance
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WNetEnhancer
mov ecx, 0x5b5b48
call fcn.0050f680
push str.WNetworkEn
mov ecx, 0x5b5b48
call fcn.0050f680
push 0x52e2d4
mov ecx, 0x5b5b48
call fcn.0050f680
mov dword [0x5b84b8], 0
jmp 0x41ed18
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
mov ecx, 0x5b5b48
call fcn.0050f110
cmp dword [0x5b84b8], eax
jge 0x41f057
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push str._s_s_Internet_EnhancerInternetEnhancer.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov edx, dword [0x5b84b8]
push edx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov eax, dword [eax]
push eax
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov edx, dword [eax]
push edx
push str._s_s_Internet_EnhancerInternetEnhancerService.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
push str._sWajam.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov edx, dword [0x5b84b8]
push edx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov eax, dword [eax]
push eax
push str._sWajam_64.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7658]
push edx
push str._s_s_s_Internet_Enhancer_sysguard.sys
lea eax, [ebp - 0x1424]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7658]
push edx
push str._s__x86__s_s_Internet_Enhancer_sysguard.sys
lea eax, [ebp - 0x1824]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x183c], esp
lea edx, [ebp - 0x1424]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1db4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1db8], eax
cmp dword [ebp - 0x1db8], 0
jne 0x41ef1a
push ecx
mov ecx, esp
mov dword [ebp - 0x1840], esp
lea eax, [ebp - 0x1824]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1dbc], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1dc0], eax
cmp dword [ebp - 0x1dc0], 0
je 0x41ef41
push 0x5b7db4
push str._sdrivers_sysguard.sys
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7658]
push edx
push str._s_s_s_Internet_Enhancer_tcpiprNet.sys
lea eax, [ebp - 0x1424]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
mov ecx, dword [0x5b84b8]
push ecx
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov edx, dword [eax]
push edx
mov eax, dword [0x5b84b8]
push eax
mov ecx, 0x5b5b48
call fcn.0050f5d0
mov ecx, dword [eax]
push ecx
mov edx, dword [0x5b7658]
push edx
push str._s__x86__s_s_Internet_Enhancer_tcpiprNet.sys
lea eax, [ebp - 0x1824]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x1844], esp
lea edx, [ebp - 0x1424]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1dc4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1dc8], eax
cmp dword [ebp - 0x1dc8], 0
jne 0x41f02b
push ecx
mov ecx, esp
mov dword [ebp - 0x1848], esp
lea eax, [ebp - 0x1824]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1dcc], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1dd0], eax
cmp dword [ebp - 0x1dd0], 0
je 0x41f052
push 0x5b7db4
push str._sdrivers_tcpiprNet.sys
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
jmp 0x41ed0b
push str.Win_Snifferwspass.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SukokuSUKOKU.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SearchesToYesbnd_bugreport.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SearchesToYesbnd_shortboost.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WinsereWinsereWinsere.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WinTaskeWinTaskeWinTaske.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.yesbndCCeuter.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.yesbndFFeuter.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.yesbndprosotain.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.yesbndcleluy.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.NimeckreeluleNmclogservice.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.NimeckreeluleNmclogtask.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.yesbndpefution.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.yesbndphodaing.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CegushcegushHelpersrv.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CegushcegushHelpertsk.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SorawardanagckSorawardanagckmanagerSrv.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SorawardanagckSorawardanagckmanagerTsk.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.QuestServiceQuestService.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.QuestServiceQuestService.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BasicServe_basicstarter.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BasicServe_basicserve.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Zwinky_5qEIInstallr1.bin5qEZSETP.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Zwinky_5qEIInstallr1.bin5qEIPlug.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Zwinky_5qEIInstallr1.binNP5qEISb.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.ZwunziZwunzi.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.ZwunziZwunzi.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AdwareSheriffASHERIFF.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AdwareSheriffPKILL.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AdwareSheriffBZ.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x52e79c
push str.CLSID51508152_55A9_EE33_C720_BE4896723F4BInprocServer32
push 0x80000000
lea ecx, [ebp - 0x184c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1dd4], eax
mov edx, dword [ebp - 0x1dd4]
mov dword [ebp - 0x1dd8], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1dd8]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x184c]
call sub.MFC42.DLL_CString::CString
push 0x52e7dc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x41f301
push 0x5b85b4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x41f301
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x52e7e4
push str.CLSID8BF1632C_8620_20BF_57F5_5A7C9F8AA290InprocServer32
push 0x80000000
lea edx, [ebp - 0x1850]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1ddc], eax
mov eax, dword [ebp - 0x1ddc]
mov dword [ebp - 0x1de0], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1de0]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1850]
call sub.MFC42.DLL_CString::CString
push 0x52e824
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x41f3a2
push 0x5b85b8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x41f3a2
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7ba4
push str._sCAB.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sEXEC.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sMSUPDATE.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sSPOOLER.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sWINSECURE.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sWINTASK.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52e884
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.AXE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52e89c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52e8ac
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SECURITY32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.COMNT32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WALLPAPER.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52e8ec
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HIGHSPEED_CABLE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52e91c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DEFAULT.SCR
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SYSTEMM4.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SYSTEMM7.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ABC2007.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WORMAILILIS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Spoolsvv.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Spoolsvv.sys
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Comdlj32.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Comdlg64.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Winsock64.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.ALXRES.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WebRELATED.HTM
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52e9e8
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Acad.fas
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LINKINFO.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DriversNVMINI.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JAVAW.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.AltNetPoints_ManagerPoints_Manager.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7ba4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program_FilesAltNetPoints_ManagerPoints_Manager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.ADM.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ADM4.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ADMDATA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ADMDLOADER.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ADMFDI.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ADMPROG.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Downloaded_Program_FilesADM4.INF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DMAN25.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52eb0c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52eb18
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINAVXX.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Antivirus2008Antvrs.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Antivirus_2008_PROAntiVirus_2008Pro.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Antivirus_2009Av2009.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SCUI.CPL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.A360AV360.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.WINCONFIG.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LIZKAVD.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WISDSTR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.AntivirusPro_2010AntivirusPro_2010.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x52ec04
push 0x52ec10
push 0x80000002
lea eax, [ebp - 0x1854]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1de4], eax
mov ecx, dword [ebp - 0x1de4]
mov dword [ebp - 0x1de8], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x1de8]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1854]
call sub.MFC42.DLL_CString::CString
push 0x52ec40
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x41fa8b
push 0x5b85bc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x41fa8b
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x52ec48
push 0x52ec54
push 0x80000002
lea ecx, [ebp - 0x1858]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1dec], eax
mov edx, dword [ebp - 0x1dec]
mov dword [ebp - 0x1df0], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x1df0]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1858]
call sub.MFC42.DLL_CString::CString
push 0x52ec90
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x41fb2c
push 0x5b85c0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x41fb2c
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Cachecxtpls_loader.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CxtPls_ace.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CxtPlsCxtPls.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CxtPlsCxtPls.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CxtPlsProxyStub.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CxtPlsuninstaller.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CxtPlsWinGenerics.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AutoUpdateAutoUpdate.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.auto_update_uninstall.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.QWICM32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WZCMS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sjuly14_loader.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.ASK.COMUPDATERUPDATER.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AskBarDis_bar_binAskService.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AskBarDis_bar_binASKUpgrade.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AskTBar_bar1.binA5POPSWT.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AskTBar_bar1.binASKTBAR.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.MSNR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_CorpMicrosoftcorp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.khgcfbhgcmf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52ee80
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hdwwizDiagnosticsHub.StandardCollector.Service.exe.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sMozillaFirefoxGoogleChrome.a3x
lea edx, [ebp - 0x1424]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sGoogleChromeGoogleChrome.a3x
lea ecx, [ebp - 0x1424]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea eax, [ebp - 0x1424]
push eax
call fcn.004aea44
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x185c], esp
lea edx, [ebp - 0x1424]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1df4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1df8], eax
cmp dword [ebp - 0x1df8], 0
je 0x41fddf
push str.GOOGLECHROME.EXE
call fcn.00402131
add esp, 4
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ivguxiProject1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._njq8ishere.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winlogoo2.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winlogin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ef68
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sLogSHOST.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sLogSVCHOST.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sLogINSTALL.DLL
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.AHR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52efb4
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sAUTORUN.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b79a4
mov eax, dword [0x5b7674]
push eax
push 0x52efd0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b79a4
mov ecx, dword [0x5b7670]
push ecx
push 0x52efdc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sArchivos.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RegeditSVCHOST.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52f010
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSTEM.EXE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MASS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinupWINUP.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.InstallW
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sSYSTEM.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MSTMDM.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52f07c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52f0c0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str..VBE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINDOWS.CMD
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52f0dc
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSTEM234.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CTFMONV.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52f104
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x1860], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1dfc], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1e00], eax
cmp dword [ebp - 0x1e00], 0
je 0x4202f5
push ecx
mov ecx, esp
mov dword [ebp - 0x1864], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1e04], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1e08], eax
cmp dword [ebp - 0x1e08], 0xc350
jg 0x4202f5
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysWOW64EXPLORER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x1868], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1e0c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1e10], eax
cmp dword [ebp - 0x1e10], 0
je 0x42038b
push ecx
mov ecx, esp
mov dword [ebp - 0x186c], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1e14], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1e18], eax
cmp dword [ebp - 0x1e18], 0xc350
jg 0x42038b
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52f12c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.YT8A.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TDIRS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DDCS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.XP_64ED98D9.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.AFEA18ED98D9.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.6C7FF7A859A2.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52f190
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52f19c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52f1a8
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WebPICTURE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsFONT.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52f1dc
push 0x52f1e4
push 0x80000002
lea edx, [ebp - 0x1870]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e1c], eax
mov eax, dword [ebp - 0x1e1c]
mov dword [ebp - 0x1e20], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1e20]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1870]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x52f21c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x4205ac
push 0x52f228
push 0x52f230
push 0x80000002
call fcn.00402ed5
add esp, 0xc
push 0x5b78a4
push 0x52f268
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x52f2a4
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x52f2ac
push 0x52f2b4
push 0x80000002
lea eax, [ebp - 0x1874]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e24], eax
mov ecx, dword [ebp - 0x1e24]
mov dword [ebp - 0x1e28], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x1e28]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1874]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x52f2f8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x420681
push 0x52f304
push 0x52f30c
push 0x80000002
call fcn.00402ed5
add esp, 0xc
push 0x5b78a4
push 0x52f350
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x52f38c
push 0x5b6504
push 0x80000003
call fcn.00402ed5
add esp, 0xc
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7bb4
push 0x52f394
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b79a4
push 0x5b7eb4
push 0x52f39c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DriversSVCHOST.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TXOMOU.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sMS_DOS.COM
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MEDIARNDLL32.PIF
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FONTSFONTS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FONTSTSKMGR.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PCHEALTHGLOBAL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PCHEALTHHELPCTRBINARIESHELPHOST.COM
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSTEMKEYBOARD.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DRIVERSDRIVERS.CAB.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DLLCACHEDEFAULT.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DLLCACHERECYCLER.645FF040_5081_101B_9F08_00AA002F954EGLOBAL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DLLCACHERECYCLER.645FF040_5081_101B_9F08_00AA002F954ESVCHOST.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DLLCACHERECYCLER.645FF040_5081_101B_9F08_00AA002F954ESYSTEM.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERS_1_5_21_1482476501_1644491937_682003330_1013DRV32.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERS_1_5_21_1482476501_1644491937_682003330_1013ISE32.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52f5f4
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52f600
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52f60c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CSRSC.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sRECICLAJE.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.RUNEXE.BAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft1.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52f654
push str.SoftwareMicrosoftActive_SetupInstalled_Components254F4E25_A65F_2764_0003_070806050704
push 0x80000002
lea ecx, [ebp - 0x1878]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e2c], eax
mov edx, dword [ebp - 0x1e2c]
mov dword [ebp - 0x1e30], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x1e30]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1878]
call sub.MFC42.DLL_CString::CString
push 0x52f6bc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x420a83
push 0x5b85c4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x420a83
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x52f6c4
push str.SoftwareMicrosoftActive_SetupInstalled_Components36A5A0DB_297E_FDE2_0501_060104070800
push 0x80000002
lea edx, [ebp - 0x187c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e34], eax
mov eax, dword [ebp - 0x1e34]
mov dword [ebp - 0x1e38], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x1e38]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x187c]
call sub.MFC42.DLL_CString::CString
push 0x52f72c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x420b24
push 0x5b85c8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x420b24
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x52f734
push str.SoftwareWow6432NodeMicrosoftActive_SetupInstalled_Components254F4E25_A65F_2764_0003_070806050704
push 0x80000002
lea eax, [ebp - 0x1880]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e3c], eax
mov ecx, dword [ebp - 0x1e3c]
mov dword [ebp - 0x1e40], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x1e40]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1880]
call sub.MFC42.DLL_CString::CString
push 0x52f7a8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x420bc5
push 0x5b85cc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x420bc5
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x52f7b0
push str.SoftwareWow6432NodeMicrosoftActive_SetupInstalled_Components36A5A0DB_297E_FDE2_0501_060104070800
push 0x80000002
lea ecx, [ebp - 0x1884]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e44], eax
mov edx, dword [ebp - 0x1e44]
mov dword [ebp - 0x1e48], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x1e48]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1884]
call sub.MFC42.DLL_CString::CString
push 0x52f824
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x420c66
push 0x5b85d0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x420c66
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7ba4
push str._sCon.sys_svchost.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sCon.sysigfxgui.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Microsoft_CommonWUAUCLT.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Common_FilesSms.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Common_FilesSysAnti.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.FOTO.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINDOWS_UPDATE.BAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINDOW.BAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SistemaFoto.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sFotoFoto.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sDriverFilesDRAGO.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sDriverFilesDRIVER.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sDriverFilesDT.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sNOTGLOWEKN.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sVidiUnukDRG.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sCONFIGS_1_5_21_1482476501_1644491937_682003330_1013USR.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLED_0_060_0000000000_1_11111_2222222WINDM.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERk_1_3542_4232123213_7676767_8888886ROOT.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERk_1_3542_4232123213_7676767_8888886WINS.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.3055CRRSS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CZRSS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NTUSER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SVCHOSTX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SCSSRR.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52faa4
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Hhyden.dll.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x52fac4
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Itwainn32.dll.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.POWERFILE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.POWERFILE.EXE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ARCHIVO1.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.JAVAMACHINE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CSRS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52fb3c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PROTECTIVEBEE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52fb5c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DriversGTHOOK.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemWMISYNC.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DriversSYSDRV32.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.EXPLORES.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fbb8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.TWAIN32.DLL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fbdc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.HYDEN.DLL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52fbfc
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x52fc0c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MCVMMC.DLL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINLOGON.BAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERS_1_5_21_1482476501_1644491937_682003330_1013SYSYER.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERSYSYER.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINLOGO.BAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERSYSYERY.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HIDSERV.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINTER.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.AFIDO.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fce4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ariana.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.usersdat.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fd0c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CKOR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fd24
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AsSysCtrlSrvcIns.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERWINLOGON.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Common_FilesSystemEXPLORER.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CRSSCR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AKARO.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fd9c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DebugDIDO.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fdb8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WarAgentWaragent.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SYSDEVOP.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52fdf0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemsSysWindows.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TAMILO.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sUSB.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push str._sTarantulaSMSS.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sTARANTULA.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sMUSIC.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Securities_scan.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftPC_BOOSTER.vbe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._susbdriver.vbe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SoftwareDistributionWebsetupCNTMON.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.NTMON.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINPRINT.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b79a4
push 0x5b7778
push 0x52fef4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ff08
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ff18
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ff28
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7668
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ff38
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ff48
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ff58
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Anytime_Upgrade.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x52ff88
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b766c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Fax_y_Esc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7668
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_DVD_Maker.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_Explorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7660
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Media_Center.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PUMAS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows32Shield.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows32Update.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HYNZEINGAFR.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CONMSYRTL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sARERUNNINGOF.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sTHEDANCEDeaTH.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemWindows_UpdateWXZ.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftSystemCSTE
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea edx, [ebp - 0x1424]
push edx
call fcn.004aea44
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x1888], esp
lea eax, [ebp - 0x1424]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1e4c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1e50], eax
cmp dword [ebp - 0x1e50], 0
je 0x421ce2
push 0x5300d0
call fcn.00402131
add esp, 4
push str.fuckOffice.vbs
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.gusano.vbs
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.regsvc.vbs
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SETHC.HTA
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Config...SETHC.VBE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sMKG.VBS
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sNuevos____.hta
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sVENDETTA.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINDOWS.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WIND.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ShockX.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push str._sK_37763_383_2847_00WINSRC.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push str._sP_7_78_8964_9648_3874WINCRS.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push str._sP_7_78_8964_9648_3874WINDLL.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5301ec
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7ba4
push str._sSafeDrv.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PATTERNSISC.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Newbin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysTuwin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sontiwin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemMSVS32S.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WIN32DLL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x53027c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5302b0
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x188c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e54], eax
mov edx, dword [ebp - 0x1e54]
mov dword [ebp - 0x1e58], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x1e58]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188c]
call sub.MFC42.DLL_CString::CString
push 0x5302c8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4220dd
push 0x5b85d4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4220dd
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7ba4
push str._sRESTOREk_1_3542_4232123213_7676767_8888886OGARD.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERS_1_5_21_7519231414_5162749137_7531231582_0000SYSTEM.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERS_1_5_21_5311846712_4121495154_682003330_5111SYSTEM.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERS_1_5_21_1482976101_1677491937_661001330_9999SYSTEM.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRECYCLERS_1_5_21_1482476501_1644491937_682003330_1013WINSE32.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AZENTRETIEN.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.AZESEARCH4.OCX
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IASADA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fuksifksjf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hkV1O41V.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x530470
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DRCT16.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSZX23.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.KLOGINI.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftAudioEndpointBuilder.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftBrokerInfrastructure.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsScreenToGif_netprotocol.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x530518
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Update.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows_update_notepad.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ONENOTEM.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Cpudlls.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HE_gp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.spoolsc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.system.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.arcfilharfil.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.fintincatsin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder_attribute.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder_audit.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder_request.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Takshost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftBlend14.0FeedCachecontainer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftBlend14.0FeedCacheprotocolhost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x530680
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.drvhandler.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ism.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsAppMgnt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowshknswc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CHP.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7608
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.utilityyyWsfghjklkjhgfd.exeutilityyy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MSUPDATE32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSUPDATE32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsSystem.exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MsappsEXPLORER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoftconhost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Qkqbuwmwf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.svchost__center.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sProgram_FilesCommon_FilesMicrosoft_SharedMSInfoRo5Po4IX.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sProgram_FilesCommon_FilesMicrosoft_SharedMSInfoWejrz6gl.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Java_SE_Platform_Updaterjusched.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svhcost_svhcost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hRTTASBgciHgShMR.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsupdater.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.checkupdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsgupdater.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5308e0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Appdat_appd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x530900
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x53090c
lea edx, [ebp - 0x1424]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x530940
lea eax, [ebp - 0x1424]
push eax
push 0x80000003
lea ecx, [ebp - 0x1890]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e5c], eax
mov edx, dword [ebp - 0x1e5c]
mov dword [ebp - 0x1e60], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x1e60]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1890]
call sub.MFC42.DLL_CString::CString
push 0x530948
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x422c30
push 0x5b85d8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x422c30
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x530950
lea edx, [ebp - 0x1424]
push edx
push 0x80000003
lea eax, [ebp - 0x1894]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e64], eax
mov ecx, dword [ebp - 0x1e64]
mov dword [ebp - 0x1e68], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x1e68]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1894]
call sub.MFC42.DLL_CString::CString
push 0x530958
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x422cd3
push 0x5b85dc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x422cd3
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.Defender
lea ecx, [ebp - 0x1424]
push ecx
push 0x80000003
lea edx, [ebp - 0x1898]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e6c], eax
mov eax, dword [ebp - 0x1e6c]
mov dword [ebp - 0x1e70], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x1e70]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1898]
call sub.MFC42.DLL_CString::CString
push 0x53096c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x422d76
push 0x5b85e0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x422d76
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x530974
lea eax, [ebp - 0x1424]
push eax
push 0x80000003
lea ecx, [ebp - 0x189c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e74], eax
mov edx, dword [ebp - 0x1e74]
mov dword [ebp - 0x1e78], edx
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1e78]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x189c]
call sub.MFC42.DLL_CString::CString
push 0x53097c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x422e19
push 0x5b85e4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x422e19
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x530984
lea edx, [ebp - 0x1424]
push edx
push 0x80000003
lea eax, [ebp - 0x18a0]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e7c], eax
mov ecx, dword [ebp - 0x1e7c]
mov dword [ebp - 0x1e80], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x1e80]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18a0]
call sub.MFC42.DLL_CString::CString
push 0x530990
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x422ebc
push 0x5b85e8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x422ebc
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x530998
lea ecx, [ebp - 0x1424]
push ecx
push 0x80000003
lea edx, [ebp - 0x18a4]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e84], eax
mov eax, dword [ebp - 0x1e84]
mov dword [ebp - 0x1e88], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1e88]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18a4]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x5309a0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x422f88
push 0x5b85ec
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x422f88
push 0x5309a8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x422f88
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x5309b4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5309f8
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x18a8]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1e8c], eax
mov ecx, dword [ebp - 0x1e8c]
mov dword [ebp - 0x1e90], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x1e90]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18a8]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x530a00
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x423049
mov eax, dword [0x5b7664]
push eax
push str._sVideoLAN_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x530a24
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7ba4
push str._sonSrPCkEjSKGfbHw.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aadauthhelpermsdt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aadtbUsoClient.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aepicRtDCpl64.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appdatahayeierd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appdatahghdje.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appdatajdhyei.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appdataMp3.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appdata_swisscheck.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appdatawdiirdha.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._azarHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AZzzVJXXFY.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Batley.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bcnvdxcz_asvcbfgh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bcxvfgdscvbdfgsd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Blasthost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BokuhIjeaygls.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bxvc_sfxcv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cbfdvcxsd_vbcdfxc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cbqhslexwmcrlklhiexkrsgqd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cbvfsdhjdfasd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvbndgscvnbhfe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cxvbr_fdxgbxcve.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvvxfds_bnfgddvvc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvxcz_vxcsd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cxvbner_vbnme.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CyllbulIvoZC.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dfgbnsdfxcbve.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DnvvneZyNN.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.docuonedocuone.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dwm.exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ELAMBKUPhh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.eldmbwmuflaoexejyilf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fasys.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fatbtifdnumsaioldfli.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fcvbn_vbftyuj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fdrdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fgdxvcjghcve.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fggfdxcvdfge.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fghbvcdsf_bcvdfge.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fhgvcxcvbe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._folgfbvc_vxcxsdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._frdbjxcclax.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fsdbner_sdfnme.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gffbcvx_vcbvc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gfgfd_vbfdcv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gmstxrvb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Google_incGoogle_inc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gqgtycopkc_vnvhbjyyqigwezh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gtudyuuqs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gvcc_bvzxc_.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hpes_bibrqnq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iiqwvjighvecq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ImgburnHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Installcal.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InstallExcel.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InstallHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InstallHostes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InstalliHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Installimages.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Installjavawin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Installlocal.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Installlsia.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Installmswords.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InstallMutevx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Installoutlook.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InstallSkype.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.InstallwinHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.intelGraphicintelGraphic.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LocalMicrosoftOneDriveOneDrive.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Luck8lLuck8.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.meysg_ahef.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftIexploreriexplorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftInternet_ExplorerQuick_Launchexplorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsiem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Moxilla_firefox.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mozilla_firefox.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nTTB.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NuSAEgjggtcD.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nvidial_nvidial.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OfficeMicrosoft0fficeMicrosoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ofvvalwqefgcntlwrlhelttum.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pogbuuafvb_nnliabvwif.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QQ360.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rtytkjuy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdbcviuyghe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdfgfscxcvredgs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sfdfbvc_fsdxsdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SkypeSkype.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._smile_smile.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SnglasyiIensawb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sorpbrgsjnoaxiszhzqywdcvy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._spgoh_amex.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SubDirs_ssrss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder_agent.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systemproquota.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemSystem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._systemtaskl_fgh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tjxruxolpube_sjdyafkdcai.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbcxcvxcbvsdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbnmer_bmnfge.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbmn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vcbdvcxsdgfhdfxc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vcibealcns_rootvimkvddoarv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vcxbv_bcvncx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Videolan_vlc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vmilheifddmqmumnsmkexpiut.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vxdsfccxvgdff.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wDDgXZwA_brcyBoxA.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows_taskmgr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5313d8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windowsInstallHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winpcswinpcs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinRAR_nvvswc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinRAR_nwtray.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinSxSdpapimig.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xncvbnsdfxcvbhte.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xzvc_sdfcve.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YfwaegzjizjFookcv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.yngrlnveevgugd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZnufrnkwgrrPxieoaobn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zcrfmszmkp_voxxdaatraftuxd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zvcxvbnxcvftyuj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._broker.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ecddfgh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._realtek.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sccs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scdsgd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scxcf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scxz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._scxzca.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdvsad.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svcs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcbvdgfscbvredgs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xczas.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JpxqJpxqtne.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QxbfQxbftne.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XcstXcsttne.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XggqXggqrwe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalgbOAvvgbOAv.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalQetXmAQetXm.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b79a4
push 0x5b7ba4
push str._sUsers_sAppDataLocalTbgZOCTbgZO.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Chromes.eseChromes.eseChromes.eseChromes.eseChromes.eseGoogleChromes.ese.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Itunesituned.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.livewinhelpApps.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mgrsermgrser.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ptyisputtyco.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._runpclinked_runpclinked.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._startes_starts.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._startes_startes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._testing_tes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._testing_testg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._testing_testing.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VideoPro_vlx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._affyredespreaggrava.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ALLERFARVCAECUMCHA.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.APMonLanguageComponentsInstallerComHandler.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appcompatdriverquery.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppContractsPickerHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppContractsSppExtComObj.Exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._arachnidialDziggetai3.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._assemblyInstallAgent.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Baadev4_armestbo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BATTElevte.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bisrv_autochk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BitLockerDeviceEncryptiondcomcnfg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bnmanagerMBR2GPT.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BootCloudNotifications.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Brandingodbcad32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bvcdzf_bvcdzf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Circumve4Ungenerou.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Contactspmseo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvbcvbsdcvbcvbsd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvbgdfasdcvbgdfasd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvsdfcvsdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvxsdfgcvxsdfg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cvzsdfcvzsdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DigitalLockerdtdump.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.displaymediadisplaymedia.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EhStorAuthnActiveSyncProvider.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ENGLEBLIDTSarcostosis.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Form1Prve8Form1SENIO.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Form1screwForm1trans.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FocusableBretonernes9.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GFDGHHGFSVCXS.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Gidselt9Temp4.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Gyrodactyl9Ionsfrance4.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hjfdsghjfdsg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ieUnatt_basecsp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.immobiliBALDAC.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Inderzones9_filmk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.INFInstallAgent.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.INFRAORBIT_tarboos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ingreswcancerr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JAGTTAcoco9.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.javask.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Jegern3Udskcari1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jettesunembedd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kjdhfgkjdhfg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Krystalkasses3habronemic.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kukukuku.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.L2SchemasRdpSaProxy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.L2Schemas_sdbinst.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LandingFIXATIFS.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lfhgcvblfhgcvb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LiveKernelReportschkdsk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Livskvalit3Snigmyrdes3.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LockAppHostdpnsvr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Lser_apsi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.marianotornensHJERTESOR.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MaxxAudioMeters64BingMaps.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mell4Evange.pif
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcat
add esp, 8
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x1424]
push ecx
call fcn.004aea44
add esp, 4
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MERGEDADMRXULattices.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.NETwermgr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.Uev.SyncController_acmigration.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftEdgeDevToolsAssignedAccessShellProxy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MiracastViewmobsync.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MiracastView_netiougc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MonarkisAngribere7.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msconfig_runas.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Nabobish1Beskytte.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Nonmali8Piggedean.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NONSUPPLICATION_tyrannousness.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.outputmediaoutputmedia.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PrintDialogRdpSaProxy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Prio_towardn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Prefetch_tasklist.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.prosysmodifiedproextractenhanced.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._refsutilimecfmui.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._saddeningOdysse7.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sadsgs_sadsgsadsgs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._servicingwin32calc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sfds_sfds.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._shrpubw_spaceman.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SKBRdpSaUacHelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SoftwareDistributionSystemPropertiesRemote.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SpeechSystemPropertiesProtection.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Structimonogra.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._stuvningiBevidstgresm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolderquote.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolderquotation.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder1_filename1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder1_nxcvip.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder1OneDrive.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sundhed6Driftssi8.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemResources_regedit.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysWOW64_find.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysWOW64SecEdit.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TAPIMSINF16H.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempPauolosettingsTemplateCatalog.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._thermolThreateni.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tracingmshta.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tracing_syskey.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Travers3Pitchpine.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Trimme_begramsede.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UpdateNotificationMgrActivationManager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vbnfghcbv_bcvdfgsd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vcbxbv_vnbmvb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VELETABLEUdmeldte.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Vikote_pajiq_losiw_tojoyafe_volij_tohiddoreledo_kecoya_bil.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winloadBdeUISrv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsTermswindowterms.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcvbfsdxcvbfsd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xcvbdsdfxcvbdsdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_AudioWindows_logon_sound.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_AudioWindows_logon_sounds.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_AudioWindows_logoff_sound.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_DisplayWindows_logon_sound.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53242c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DJEFd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Legos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Licensee.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MailspringSetup.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rundlll32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Trevorrendo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov edx, dword [0x5b7674]
push edx
push 0x53249c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.rundlll32..lnk
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Absolv5Jomf8.vbs
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.appwhey_appwhey.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.bambusfljGENN.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.barnagtiHOTSPRINGS.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BLUSEVitiligoid.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BremsePitang.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Canv9Indl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CAPULETPYTRAP.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CaravanernerMechanico7.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dateddatemonitor.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dougherty_forfoelger.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FarahraSmithsonia5.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FolderNMicrosoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FolderN_sysmx9.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Jagt5Triunal6.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.forbudspolPazazzbis3.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gdfgdfgdfgdf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HulkortindlsernechigISNETKASTRERESSPILLE.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HYPERBRACH_alcoabagtungenh.exe
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
push ecx
mov ecx, esp
mov dword [ebp - 0x18ac], esp
lea eax, [ebp - 0x1424]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1e94], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1e98], eax
cmp dword [ebp - 0x1e98], 0
je 0x426f27
push str.IEINSTAL.EXE
call fcn.00402131
add esp, 4
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Inddrhardrecl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Indgivende5FRASERIN.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jernindus_aftraadtaz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Korist9Undiapered.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MANUFA_styresystemu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.microsoftexplorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mutineerso_restorationist.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OctaStre.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.0FFICEWORD.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Oversk5Rootfin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Paakr3_rockw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PcHelppcsllwn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PENGEOVERFRSLENSOmhu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RemotePackagesMuiUnattend.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.selindasjes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Shlumpyss7Depe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.skdehundhomogenrernes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.skype_vbc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.spinundu.scr
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subcon_subcon.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subdfolder_nosawe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subdfolder_notrewa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderCPUdriver.com
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfoldercrome.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder_filebrowser.com
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder_firefox.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderghr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderGracious.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderhdftjg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderme.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder_notepad.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderoffices.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderopera.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolderupdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder1_filename1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subshrsffolder_sgme.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ToucheensBeccaficoes9.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tracrs8hypochon.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tragedie4Pasun3.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VALENTINTilraad6.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.vlsovttsv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.vpddutgk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windwswindws.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winPCwinPC.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsbwinsb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.brwinup.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.comx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532a98
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x18b0], esp
lea eax, [ebp - 0x1424]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1e9c], eax
call fcn.004ae8a4
add esp, 4
mov dword [ebp - 0x1ea0], eax
cmp dword [ebp - 0x1ea0], 0
je 0x42790c
lea ecx, [ebp - 0x1424]
push ecx
push 0x532aa4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_system]
add esp, 4
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ViaFolderViaFile.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ViaFolderXViaFileX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asa1231sds9s4hv_fd545sddv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.win64.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.mssrv32.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7db4
push str._sdrivers_nethost.sys
lea edx, [ebp - 0x1424]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x18b4], esp
lea eax, [ebp - 0x1424]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1ea4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1ea8], eax
cmp dword [ebp - 0x1ea8], 0
je 0x427a6c
push 0x532b48
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.drivers_nethost.sys
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7db4
push str._sdrivers_str.sys
lea ecx, [ebp - 0x1424]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b7eb4
push str._sSysWOW64drivers_str.sys
lea edx, [ebp - 0x1824]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x18b8], esp
lea eax, [ebp - 0x1424]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1eac], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1eb0], eax
cmp dword [ebp - 0x1eb0], 0
jne 0x427b04
push ecx
mov ecx, esp
mov dword [ebp - 0x18bc], esp
lea edx, [ebp - 0x1824]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1eb4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1eb8], eax
cmp dword [ebp - 0x1eb8], 0
je 0x427b44
lea eax, [ebp - 0x1424]
push eax
push 0x532b98
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
cmp dword [0x5b851c], 0
jne 0x427b35
push 0
push 0
push 0x5b6504
call sub.MFC42.DLL_AfxMessageBox
push 0x5b6504
mov ecx, 0x5b5b78
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TaskmanagerTaskmanager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dllshost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532c20
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinsoundHD_soundHD.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hlak.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZeDihni9NbrCzW6eeF.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.C_726519.NLS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.C_7265154.NLS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.C_7265170.NLS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.5689.SYS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.5728.SYS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.5807.SYS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.11338.SYS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CvxjhCpsvfeirn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_audiohd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWUDFHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftSystemWUDFHost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.RPC.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sDirectorySYSTEM.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Winlogon.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DebugGLKOP.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532d78
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532d80
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32Chrome.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532db4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532dc0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532dcc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532de4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sServicePackLIVE.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sServicePackCPOUTLOOK.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VIDEOVRX.VXD
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SERVICES
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x532e44
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.REMOTE.CMD
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ServiceSERVICES.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ServiceNAVUPDT.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ServiceNAVUPDT2.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ServiceSERVICE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WMEDIA16.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MONITOR1A.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINDL.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.EXPLORI.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ASH.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x532eec
push 0x532ef8
push 0x80000002
lea ecx, [ebp - 0x18c0]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1ebc], eax
mov edx, dword [ebp - 0x1ebc]
mov dword [ebp - 0x1ec0], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x1ec0]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18c0]
call sub.MFC42.DLL_CString::CString
push 0x532f28
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42834c
push 0x5b85f0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42834c
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x532f30
push 0x532f3c
push 0x80000002
lea edx, [ebp - 0x18c4]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1ec4], eax
mov eax, dword [ebp - 0x1ec4]
mov dword [ebp - 0x1ec8], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x1ec8]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18c4]
call sub.MFC42.DLL_CString::CString
push 0x532f78
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4283ed
push 0x5b85f4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4283ed
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.LSD_F3.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IESPRT.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TIMESTAMP.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.NBTHLP.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SvchostSVCHOST.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x532fc8
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x532fd4
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RSASEC.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RSACB.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IEMPVIEW.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.3041CSRSS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TASK.SCR
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sMessengerPlusEXPLORE.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sSvcHosts.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINLOADER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.TASKMGRA.COM
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HelpOMDSN.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HelpOSQM.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINDOWSLIVESYSTEM.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.K.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.K1.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.K2.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.K3.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5330cc
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5330d8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.JWT32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5330f0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SPOOLSVT.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSNMSGRS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MSNMSGSGRS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DriversXIMXCRX.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x533144
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MYDPLA.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SPOOL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FINDX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sFOTO12.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.ICPLDRVX.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SVCHOST32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5331a8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KMSNG.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UDLL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Conexao.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dados.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5331ec
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7bb4
push 0x533200
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x533208
push 0x80000002
lea eax, [ebp - 0x18c8]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1ecc], eax
mov ecx, dword [ebp - 0x1ecc]
mov dword [ebp - 0x1ed0], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x1ed0]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18c8]
call sub.MFC42.DLL_CString::CString
push 0x533238
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x428a10
push 0x5b85f8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x428a10
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b6504
push 0x533240
push 0x80000002
lea ecx, [ebp - 0x18cc]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1ed4], eax
mov edx, dword [ebp - 0x1ed4]
mov dword [ebp - 0x1ed8], edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x1ed8]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18cc]
call sub.MFC42.DLL_CString::CString
push 0x53327c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x428ab1
push 0x5b85fc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x428ab1
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7bb4
push 0x533284
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
push 0x53328c
push 0x80000002
lea edx, [ebp - 0x18d0]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1edc], eax
mov eax, dword [ebp - 0x1edc]
mov dword [ebp - 0x1ee0], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x1ee0]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18d0]
call sub.MFC42.DLL_CString::CString
push 0x5332bc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x428b6a
push 0x5b8600
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x428b6a
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b6504
push 0x5332c4
push 0x80000002
lea eax, [ebp - 0x18d4]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1ee4], eax
mov ecx, dword [ebp - 0x1ee4]
mov dword [ebp - 0x1ee8], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x1ee8]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18d4]
call sub.MFC42.DLL_CString::CString
push 0x533300
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x428c0b
push 0x5b8604
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x428c0b
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.BIOS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.JVM0.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x533320
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CRYPTED.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.AUDIOHQ.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SuSoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x18d8], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1eec], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1ef0], eax
cmp dword [ebp - 0x1ef0], 0
je 0x428d03
cmp dword [0x5b851c], 0
jne 0x428cef
push 0
push 0
push str.Detectado_BanLoad.IHM_nReinicie_el_Sistema_para_completar_la_Limpieza.
call sub.MFC42.DLL_AfxMessageBox
call fcn.004ae964
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ProFileServices
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ProFileSusoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Musica.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PeerNetUPDATE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PeerNetSVCHOST.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Win_Nt_Sec.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sDVDWIN54.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINGATEX.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WUFTPD.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sWAKELUAN3.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LOGCPU.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CTTFMON.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WindowsUpgrade.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VistaXPUpgrade.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._s_Recycle.BinS_1_5_21_1617006194_1496205833_3322326483_1000DARIUS.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sDariusWWW.MUYZORRAS.COM.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b79a4
push 0x5b7eb4
push str._s_s.BAT
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BootDariusENDISK.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Bargain_BuddyBARGAINS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Bargain_BuddyAPUC.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Bargain_BuddyBinAPUC.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BullsEye_NetworkUNINSTALL.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BullsEye_NetworkBinBARGAINS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BullsEye_NetworkBinADV.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BullsEye_NetworkBinADX.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CashBackBinCASHBACK.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CashBackBinCB.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CashBackBinFLASH.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CashBackUninstall.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.ANGELEX.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.winb2s32.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ic2_win.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BERSEKSVR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BERZK.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PRESIONDLL.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Bersek1.0BERSEK.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Bersek1.0SERVER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Bersek1.1BERSEK.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Bersek1.1SERVER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.TbonbinTBON.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.TbonbinTBONWND.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BI.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PREINSBI.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Microsoft_CommonSVCHOST.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CTFMONA.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53376c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7db4
push 0x53377c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x533780
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7db4
push 0x53378c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x533790
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7db4
push 0x53379c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5337a0
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push 0x5337ac
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.BLPHC.SCR
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push 0x5337c8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.LPHC.EXE
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push 0x5337e4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.PHC.BMP
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program_FilesWindowsSAOMNISCIENT.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program_FilesWindowsSAOMNISCIENTHOOK.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program_FilesWindowsSAWSAUPDATER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53388c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BXXS5.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MMSAssistMMSAssist.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.STDUP.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RQQSND.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.RUNDLL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XPUPDATE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program_FilesBraveSentryBraveSentry.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RNCSYS32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LYESYS32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ISQSYS32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x53394c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DFQUPD32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MHBUPD32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WWWPOS32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RARYPE32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MONNID32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINESM32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MONYMI32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ALGKIR32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SISZPE32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NETTIR32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WWWZUC32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeAdobeUtil.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MGJWIN32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IKOWIN32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WBHWIN32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSRDA32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSCRON.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEB3DSETUP.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEBDECLEAN.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEBDEDETECT1.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEBDEENGINE3.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEBDEIMAGE.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEBDEPLAYER3.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEBDEVIEWER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BDEBDEWRAPPER3.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.BROWSELA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rundll16.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rundll16.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uptodate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.INETP60.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.STLBDIST.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x533b78
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EXPLORER.NEW
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push ecx
mov ecx, esp
mov dword [ebp - 0x18dc], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1ef4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1ef8], eax
cmp dword [ebp - 0x1ef8], 0
je 0x429d16
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WININIT.INI
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PSD_ToolsChannelUp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.game_dl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.game_install.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.buddylinks.netGamesSaddam_Game_shell.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Downloaded_Program_FilesShellInstaller.ocx
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.STRAD.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZSER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.XSFR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.XEYU.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AVCONSOL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZAP.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.HIDE32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TTT.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SPOOLSC.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x533ca4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINMEDIA.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KYSVR.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SplmNCSJAPI32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DOSKEYS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DLLHOSTS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SYSMGR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x533d0c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.JAVAME.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x533d24
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sVSHOST.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x533d40
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x533d74
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x18e0]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1efc], eax
mov edx, dword [ebp - 0x1efc]
mov dword [ebp - 0x1f00], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x1f00]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18e0]
call sub.MFC42.DLL_CString::CString
push 0x533d8c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42a11e
push 0x5b8608
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42a11e
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemDLLCACHE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RAIDHOST.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x533dbc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x533dcc
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.PCSUITE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWINLOGOM.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SPYWINCLEAN.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._adaptermob.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._burnnls.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chkbit.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.comsetup.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dllhelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dplaysvr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.expanddll.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.helperAdapter.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hostdll.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kbkb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.krnlcom.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.queryimig.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._schedmode.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tablhst.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tunectrl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._algdll.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cfgManage.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.compdefrag.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.configbin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ctrlhelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dpapmob.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.expandc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fscomp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iscsiresult.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.isohelp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kbnotify.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.labelplay.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mobdpap.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uifast.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.algkb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.bcsdisk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.charload
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.charsrv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.defragexpand.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dxpget.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.getbcd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.helpcfg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.labelmsh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.netcsr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.nlschar.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.raidnls.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.resultcert.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.rssbin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemUSERINFO32.GGT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WALG.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OUT.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CFMOM.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CDTI.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5340d4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AMOUMAIN.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ODB.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RUNSQL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SERVICELAYER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534120
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534128
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SVHOSTER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SVW.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SVX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SVZIP.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VLC.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WDMON.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Microsoft_Security_AdviserMSAVSV.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Microsoft_Security_AdviserMSCTRL.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Microsoft_Security_AdviserMSFW.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Microsoft_Security_AdviserMSIEMON.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Microsoft_Security_AdviserMSSCAN.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Microsoft_Security_AdviserMSSADV.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b78a4
push 0x53426c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5342a0
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x18e4]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f04], eax
mov eax, dword [ebp - 0x1f04]
mov dword [ebp - 0x1f08], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x1f08]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18e4]
call sub.MFC42.DLL_CString::CString
push 0x5342a8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42af74
push 0x5b860c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42af74
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MiningWUAUCLT.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MiningCOIN_MINER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MSIEV32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINVBIE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IETB.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SBB.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BABEIE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CNBABE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CNBARIE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DriversWINIK.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DownloadWareDW.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.CommonNameAddressBarWINNET.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov dword [0x5b84b8], 0x41
jmp 0x42b09f
mov eax, dword [0x5b84b8]
add eax, 1
mov dword [0x5b84b8], eax
cmp dword [0x5b84b8], 0x5b
jge 0x42b0d3
mov ecx, dword [0x5b84b8]
push ecx
push str._c:RECYCLERS_5_3_42_2819952290_8240758988_879315005_3665JWGKVSQ.VMX
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
jmp 0x42b092
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5343c0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5343d0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IEDLL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LOADER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Windows_Media_PlayerIEDLL.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Windows_Media_PlayerLOADER.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BROWSERHELPER.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53444c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DNSERR.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534464
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DNSE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LD.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINSHOW.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534494
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSUPDATER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinShowWINSHOW.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5344cc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINLINK.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5344e8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.IEFEATSL.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CLCRB.LOG
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BOOTCONF.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TOOLBAND.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RUNDLG32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DNSRELAY.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ASTCTL32.OCX
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSWSC10.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSWSC20.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DREPLACE.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SEARCHADDON.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.AUTOSEARCH.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WEBINFO.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Internet_ExplorerToolbarSEARCHADDON.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Internet_ExplorerToolbarAUTOSEARCH.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Internet_ExplorerToolbarWEBINFO.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x534640
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GOOGLEMS.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SEARCHWORD.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WORD10.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftOfficeWORD10.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.EXCEL10.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftOfficeEXCEL10.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LOAD.BAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SHELL.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WIN64.DRV
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5346ec
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MSCONFD.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534708
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.AVPCC.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534720
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x534730
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53473c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CPAN.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Internet_ExplorerToolbarMGS_32.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53477c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_SharedMsinfoMSINFO.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MSSPI.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ServicesMSXMIDI.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5347d0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.OLEHELP.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QTTASKS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MGS_32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.NVIDIA32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.GFMNAAA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MTWIRL32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSHELPER.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSHELPER_BETA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DirectxDIRECTX.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SNDBDRV3104.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53487c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534888
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSSYS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5348a4
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5348b0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5348c0
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSIN32.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5348d8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7670
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYTEM32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7aa4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5348f8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_SharedMsinfoINFO32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QUICKEN.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EDITPAD.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WAOL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINPROC32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ServicesY.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ServicesSERVICES.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.inet10054SERVICES.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.inet20001SERVICES.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.inet20002SERVICES.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.inet20009SERVICES.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.inetdataSERVICES.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.inetsrvwinlogon.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ServicePackFilesSERVICES.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CUSTOMIE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CUSTOMIE32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CouponicaCouponica.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.SmartURLSMARTURL.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CFREER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NZIL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.JUEGS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.NEGDO.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.READER_S.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RESTORER32_A.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RESTORER64_A.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinHost32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CSecCS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7db4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CD_CLINT.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x18e8], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1f0c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1f10], eax
cmp dword [ebp - 0x1f10], 0
je 0x42bf7f
push ecx
mov ecx, esp
mov dword [ebp - 0x18ec], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1f14], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1f18], eax
cmp dword [ebp - 0x1f18], 0xbe00
je 0x42bf7f
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysWOW64CD_CLINT.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x18f0], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1f1c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1f20], eax
cmp dword [ebp - 0x1f20], 0
je 0x42c015
push ecx
mov ecx, esp
mov dword [ebp - 0x18f4], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1f24], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1f28], eax
cmp dword [ebp - 0x1f28], 0xbe00
je 0x42c015
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CD_GIF.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CD_HTM.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CD_SWF.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CD_LOAD.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RUNSRV32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RUNSRV32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SPOOLSRV32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SPOOLSRV32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SRPCSRV32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TXFDB32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINNOOK.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WebDESKTOP.HTML
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534be4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534bf4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x534c04
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.max.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.new.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x534c28
push str.SystemCurrentControlSetServicesyyooyyoo
push 0x80000002
lea edx, [ebp - 0x18f8]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f2c], eax
mov eax, dword [ebp - 0x1f2c]
mov dword [ebp - 0x1f30], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1f30]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18f8]
call sub.MFC42.DLL_CString::CString
push 0x534c60
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c252
push 0x5b8610
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c252
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.hra8.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x534c74
push str.SystemCurrentControlSetServicesWindows_Help_System_Myss
push 0x80000002
lea eax, [ebp - 0x18fc]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f34], eax
mov ecx, dword [ebp - 0x1f34]
mov dword [ebp - 0x1f38], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x1f38]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18fc]
call sub.MFC42.DLL_CString::CString
push 0x534cbc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c303
push 0x5b8614
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c303
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534cc4
push str.SystemCurrentControlSetServicesVwxyab_Defghijk_Mno
push 0x80000002
lea ecx, [ebp - 0x1900]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f3c], eax
mov edx, dword [ebp - 0x1f3c]
mov dword [ebp - 0x1f40], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x1f40]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1900]
call sub.MFC42.DLL_CString::CString
push 0x534d08
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c3a4
push 0x5b8618
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c3a4
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534d10
push str.SystemCurrentControlSetServices57252
push 0x80000002
lea edx, [ebp - 0x1904]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f44], eax
mov eax, dword [ebp - 0x1f44]
mov dword [ebp - 0x1f48], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x1f48]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1904]
call sub.MFC42.DLL_CString::CString
push 0x534d44
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c445
push 0x5b861c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c445
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534d4c
push str.SystemCurrentControlSetServices453543
push 0x80000002
lea eax, [ebp - 0x1908]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f4c], eax
mov ecx, dword [ebp - 0x1f4c]
mov dword [ebp - 0x1f50], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x1f50]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1908]
call sub.MFC42.DLL_CString::CString
push 0x534d84
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c4e6
push 0x5b8620
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c4e6
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534d8c
push str.SystemCurrentControlSetServicesStuvwx_Aberer_Jkl
push 0x80000002
lea ecx, [ebp - 0x190c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f54], eax
mov edx, dword [ebp - 0x1f54]
mov dword [ebp - 0x1f58], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x1f58]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x190c]
call sub.MFC42.DLL_CString::CString
push 0x534dcc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c587
push 0x5b8624
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c587
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.hra33.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x534de0
push str.SystemCurrentControlSetServices53543
push 0x80000002
lea edx, [ebp - 0x1910]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f5c], eax
mov eax, dword [ebp - 0x1f5c]
mov dword [ebp - 0x1f60], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x1f60]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1910]
call sub.MFC42.DLL_CString::CString
push 0x534e14
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c638
push 0x5b8628
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c638
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534e1c
push str.SystemCurrentControlSetServices542453
push 0x80000002
lea eax, [ebp - 0x1914]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f64], eax
mov ecx, dword [ebp - 0x1f64]
mov dword [ebp - 0x1f68], ecx
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x1f68]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1914]
call sub.MFC42.DLL_CString::CString
push 0x534e54
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c6d9
push 0x5b862c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c6d9
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534e5c
push str.SystemCurrentControlSetServicesAbcdef_ewrewrw_Qrs
push 0x80000002
lea ecx, [ebp - 0x1918]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f6c], eax
mov edx, dword [ebp - 0x1f6c]
mov dword [ebp - 0x1f70], edx
mov byte [ebp - 4], 0x25
mov eax, dword [ebp - 0x1f70]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1918]
call sub.MFC42.DLL_CString::CString
push 0x534ea0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c77a
push 0x5b8630
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c77a
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534ea8
push str.SystemCurrentControlSetServicesAbcdef_wewewno_Qrs
push 0x80000002
lea edx, [ebp - 0x191c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f74], eax
mov eax, dword [ebp - 0x1f74]
mov dword [ebp - 0x1f78], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x1f78]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x191c]
call sub.MFC42.DLL_CString::CString
push 0x534eec
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c81b
push 0x5b8634
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c81b
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534ef4
push str.SystemCurrentControlSetServicesGhijkl_Nopqrstu_Wxy
push 0x80000002
lea eax, [ebp - 0x1920]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f7c], eax
mov ecx, dword [ebp - 0x1f7c]
mov dword [ebp - 0x1f80], ecx
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x1f80]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1920]
call sub.MFC42.DLL_CString::CString
push 0x534f38
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c8bc
push 0x5b8638
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c8bc
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x534f40
push str.SystemCurrentControlSetServicesGhijkl_werwerweru_Wxy
push 0x80000002
lea ecx, [ebp - 0x1924]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f84], eax
mov edx, dword [ebp - 0x1f84]
mov dword [ebp - 0x1f88], edx
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x1f88]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1924]
call sub.MFC42.DLL_CString::CString
push 0x534f84
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42c95d
push 0x5b863c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42c95d
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.WaaSMedicSbr.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DHUPDT.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DHBRWSR.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DHP2.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.EXEHA2.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.EXEHA3.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BIRDIHUY.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BIRDIHUY32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XPSYS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.RUNDDLL32.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEXPLORER.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.EXPLORERR.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IE_BARDMSCHED.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.IE_BARDMBAR.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.IE_BARDMIPN.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.IE_BARDMSHELL.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.IE_BARDMPLAYER.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WSEM302.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WSEM303.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program_FilesInternet_OptimizerACTALERT.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Program_FilesInternet_OptimizerOPTIMIZE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PASSEPARTOUT_LIGHT.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TjdTJ.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.COOL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSMPENG.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DelsimDEL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DONNE_BELLISSIME.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.LINKPRD.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PROCIA.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5351a0
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5351b0
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SARISTAR.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CTFMGR.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WSCMGR.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DIALSYS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DR32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SRVHOST64.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TFTP.NFO
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53521c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SYSINIT32Z.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSOLE32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7ba4
push str._sWINSTALL.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Smss.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x535260
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CSSRSS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53527c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x535288
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x535294
push 0x5352a4
push 0x80000002
lea edx, [ebp - 0x1928]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f8c], eax
mov eax, dword [ebp - 0x1f8c]
mov dword [ebp - 0x1f90], eax
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x1f90]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1928]
call sub.MFC42.DLL_CString::CString
push 0x5352d4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42cf87
push 0x5b8640
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42cf87
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5352dc
push 0x5352ec
push 0x80000002
lea eax, [ebp - 0x192c]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f94], eax
mov ecx, dword [ebp - 0x1f94]
mov dword [ebp - 0x1f98], ecx
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0x1f98]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x192c]
call sub.MFC42.DLL_CString::CString
push 0x535328
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42d028
push 0x5b8644
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42d028
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.PRVDI.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DLOAD.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSXMIDI.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINS32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSUPD.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSUPD4.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSUPD5.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RELOADMEDUDE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PLICK.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZOS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5353b0
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.REQ.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.REQ.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WIN32HLP.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5353dc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5353ec
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemRUNDLL32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SYSTEMINIT.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CSRSSC.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7644
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempImagesIOMEM102.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SMANAGER.7.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x535458
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MGRS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PROG.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x53547c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5354b0
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x1930]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1f9c], eax
mov edx, dword [ebp - 0x1f9c]
mov dword [ebp - 0x1fa0], edx
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x1fa0]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1930]
call sub.MFC42.DLL_CString::CString
push 0x5354bc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42d3c5
push 0x5b8648
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42d3c5
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x5354c4
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5354f8
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x1934]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1fa4], eax
mov eax, dword [ebp - 0x1fa4]
mov dword [ebp - 0x1fa8], eax
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x1fa8]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1934]
call sub.MFC42.DLL_CString::CString
push 0x535504
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42d47e
push 0x5b864c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42d47e
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x53550c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x535540
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x1938]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1fac], eax
mov ecx, dword [ebp - 0x1fac]
mov dword [ebp - 0x1fb0], ecx
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x1fb0]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1938]
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [ebp - 0x193c], esp
lea eax, [ebp - 0x824]
push eax
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x1fb4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1fb8], eax
cmp dword [ebp - 0x1fb8], 0
je 0x42d548
cmp dword [0x5b851c], 0
jne 0x42d534
push 0
push 0
push str.Detectado_DownLoader.Claretore_nReinicie_el_Sistema_para_completar_la_Limpieza.
call sub.MFC42.DLL_AfxMessageBox
call fcn.004ae964
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WLCTRL32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINCTRL32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINNT32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINNT64.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DriversUPY10.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobePLAYER.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DXDIAG.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x1940], esp
push 0x5b6504
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x1fbc], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x1fc0], eax
cmp dword [ebp - 0x1fc0], 0
je 0x42d656
cmp dword [0x5b851c], 0
jne 0x42d642
push 0
push 0
push str.Detectado_DownLoader.Dxdiag_nReinicie_el_Sistema_para_completar_la_Limpieza.
call sub.MFC42.DLL_AfxMessageBox
call fcn.004ae964
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KGEHIA.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DriversSYSDRV.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x535680
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x535690
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MROFINU.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RETADPU.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.URLMON.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7644
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempImagesISPR107.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Internet_ExplorerWindows_Update.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Common_FilesSvchostsysSVCHOSTRUN.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Common_FilesSvchostsysSVCHOSTSYS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Common_FilesSvchostsysSVCHOSTUPDATE.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.NETMicrosoft.NET.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DriversUZCX.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5357c0
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PowerControlPowerControl_Svc.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b78a4
push 0x5357f0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x535824
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x1944]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1fc4], eax
mov edx, dword [ebp - 0x1fc4]
mov dword [ebp - 0x1fc8], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x1fc8]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1944]
call sub.MFC42.DLL_CString::CString
push 0x53582c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42d910
push 0x5b8650
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42d910
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nightupdate_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7db4
push 0x535850
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x535854
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push 0x535864
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.DLH9JKD1Q.EXE
push 0x5b6504
call fcn.0049757d
add esp, 8
push str.KERNELS32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x535894
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.KERNELS88.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SVCCHOST.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Taskscsrss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.LSHPRN.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5358e4
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DriversSPOOLS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.FTP34.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.EXXE2BIN.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x535920
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MAXPAYNOWTI1.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MAXPAYNOW1.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.V6.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str._SVCHOST.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WOCUALTS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Msxsltsso.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Internet_ExplorerWMPSCFGS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AdobeACROTRAY.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5359bc
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ISWpkNsw.com_
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsISWpkNsw.com
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ISWpkNsw.com
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x535a00
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ISWpkNsw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SYSMON.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x535a2c
push 0x535a38
push 0x80000002
lea edx, [ebp - 0x1948]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1fcc], eax
mov eax, dword [ebp - 0x1fcc]
mov dword [ebp - 0x1fd0], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x1fd0]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1948]
call sub.MFC42.DLL_CString::CString
push 0x535a68
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42dcdf
push 0x5b8654
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42dcdf
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x535a70
push 0x535a7c
push 0x80000002
lea eax, [ebp - 0x194c]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1fd4], eax
mov ecx, dword [ebp - 0x1fd4]
mov dword [ebp - 0x1fd8], ecx
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x1fd8]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x194c]
call sub.MFC42.DLL_CString::CString
push 0x535ab8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42dd80
push 0x5b8658
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42dd80
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.WIND32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DLLGH8jkd1q8.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WUAUCLDT.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7778
push str._sWUAUCLDT.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindows_vtjhdhjj_vthvehbv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SwvUpdaterUpdater.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sDriverLoadSvcHost.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.RAR_AV.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ANTIVIIRUS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_SharedTriedit29C400A3_2669_43D2_A1F1_0D0DB9453F5F.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_SharedTriedit29C400A3_2669_43D2_A1F1_0D0DB9453F5F.sys
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sTempTrustedInstaller.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sTMPTrustedInstaller.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sMSITrustedInstaller.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.PASO.EL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.NVRSOL32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RS32NET.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LSPRN.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DIVXDRV32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PRINTDRV.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SHAPI32.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.APIBSC32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.39UPD.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Iexplore.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EWWSETUP.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UNINSTALLTB.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftAddinsEWWOTB.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DropSpamEWW.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpamOESRV.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpamSETUP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpam_SETUPX.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpamANSMTP.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpamEWWIE.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpamOEHK.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpamPASSWORDDLL.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DropSpamUNINSTALLTB.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DsLifeStyleDSLIFESTYLE.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DsLifeStylePS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DsLifeStyleSETUP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7ba4
push str._sWP.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sBSW.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WLDR.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.INTELL32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.OLELOA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.OLELOA32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.OLEADM.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.OLEADM32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.OLEEXT.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.OLEEXT32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UNINSTIU.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.WINLDRA.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DVPD.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WINSMS.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.E2GIEBHOS.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push str._sEliteBar_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.EliteBar.dll
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push str._sEliteToolBar_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.EliteToolBar.dll
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push str._sETB_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.PokaPoka.exe
push 0x5b6504
call fcn.0049757d
add esp, 8
push str.Eliteyza32.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Eliteryc32.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push str._sEliteSideBar_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.EliteSideBar.dll
push 0x5b6504
call fcn.0049757d
add esp, 8
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x535fb4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemWINCIRL.COM
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.ErrorSafeERS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Error_Safe_FreeERS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DriversERSD.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DF_KME.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSBE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MSCB.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.NVMS.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.EXDL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MQEXDLM.SRG
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.EXUL.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.JAVEXULM.VXD
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.NaviSearchBinNLS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.NaviSearchUNINSTALL.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.INSTALLER_SIAC.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.eXactEXACTTOOLBAR.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.eXactEXACTUPDATE.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemEXACTTOOLBAR.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32EXACCSETUP3.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32EXACTSETUP.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32EXACTTOOLBAR.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32EZSTUBI.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32EZSTUBI.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sEZSTUB.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.eZulaeZinstall.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.eZulachcon.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.eZulaeabh.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.eZula_seng.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.eZulammod.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.FRMWRK32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SYS32_NOV.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TSTSC.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.STAT_CPE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SSHNAS.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SSHNAS21.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x536250
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53625c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536268
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.BRASTK.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.KARNA.DAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53628c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53629c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5362ac
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.BRAVIAX.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BURITOS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.KARINA.DAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SERES.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SVCST.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PROTECTXSGX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Antivirus_Protection_2012AntivirusProtection2012.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Antivirus_Protection_2012_securitymanager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Antivirus_Protection_2012_securityhelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Antivirus_ProtectionAntivirusProtection2012.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Antivirus_Protection_securitymanager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Antivirus_Protection_securityhelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiVirus_System_2011AntiVirus_System_2011.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiVirus_System_2011AntiVirus__System__2011.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiVirus_System_2011_securitymanager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiVirus_System_2011_securityhelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiVirus_AntiSpyware_2011AntiVirus_AntiSpyware_2011.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiVirus_AntiSpyware_2011_securitymanager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AntiVirus_AntiSpyware_2011_securityhelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536588
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x1950]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x1fdc], eax
mov edx, dword [ebp - 0x1fdc]
mov dword [ebp - 0x1fe0], edx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x1fe0]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1950]
call sub.MFC42.DLL_CString::CString
push 0x5b865c
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42ed35
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AVE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5365b8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x1954]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x1fe4], eax
mov ecx, dword [ebp - 0x1fe4]
mov dword [ebp - 0x1fe8], ecx
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x1fe8]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1954]
call sub.MFC42.DLL_CString::CString
push 0x5b8660
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42ee17
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5365d0
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5365e0
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.AVR09.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINUPDATE86.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53660c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53661c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.AVR10.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AV.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x536640
push str.CLSID3F2BBC05_40DF_11D2_9455_00104BC936FFLocalServer32
push 0x80000000
lea edx, [ebp - 0x1958]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1fec], eax
mov eax, dword [ebp - 0x1fec]
mov dword [ebp - 0x1ff0], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x1ff0]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1958]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x536680
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42efb7
push 0x5b8664
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42efb7
push str.QI.EXE
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42efb7
push str.FLASHCR.EXE
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42efb7
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.3F2BBC05_40DF_11D2_9455_00104BC936FF
mov ecx, 0x5b5ba8
call fcn.0050f680
push str.Defense_CenterDEFCNT.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Digital_ProtectionDIGPROT.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536704
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x195c]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x1ff4], eax
mov ecx, dword [ebp - 0x1ff4]
mov dword [ebp - 0x1ff8], ecx
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x1ff8]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x195c]
call sub.MFC42.DLL_CString::CString
push 0x5b8668
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f080
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x536728
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x53675c
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x1960]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x1ffc], eax
mov eax, dword [ebp - 0x1ffc]
mov dword [ebp - 0x2000], eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2000]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1960]
call sub.MFC42.DLL_CString::CString
push 0x536768
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42f139
push 0x5b866c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f139
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.SMSS32.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53677c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x53678c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IS15.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b78a4
push 0x5367a8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5367dc
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x1964]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2004], eax
mov ecx, dword [ebp - 0x2004]
mov dword [ebp - 0x2008], ecx
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0x2008]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1964]
call sub.MFC42.DLL_CString::CString
push 0x5367f0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42f232
push 0x5b8670
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f232
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5367f8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x1968]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x200c], eax
mov edx, dword [ebp - 0x200c]
mov dword [ebp - 0x2010], edx
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x2010]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1968]
call sub.MFC42.DLL_CString::CString
push 0x5b8674
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f2db
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ANTISPY.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HOTFIX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PRIVACY.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.PersSecurityPSecurity.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0xffffffffffffffa0
mov eax, dword [0x5b7630]
push eax
push 0x53685c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
push 0
lea ecx, [ebp - 0x196c]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2014], eax
mov edx, dword [ebp - 0x2014]
mov dword [ebp - 0x2018], edx
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x2018]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x196c]
call sub.MFC42.DLL_CString::CString
push 0x5b8678
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f430
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x536878
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SE15.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b78a4
push 0x536894
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5368c8
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x1970]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x201c], eax
mov ecx, dword [ebp - 0x201c]
mov dword [ebp - 0x2020], ecx
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x2020]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1970]
call sub.MFC42.DLL_CString::CString
push 0x5368dc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42f509
push 0x5b867c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f509
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5368e4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x1974]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2024], eax
mov edx, dword [ebp - 0x2024]
mov dword [ebp - 0x2028], edx
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x2028]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1974]
call sub.MFC42.DLL_CString::CString
push 0x5b8680
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f5b2
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5368fc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x1978]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x202c], eax
mov ecx, dword [ebp - 0x202c]
mov dword [ebp - 0x2030], ecx
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x2030]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1978]
call sub.MFC42.DLL_CString::CString
push 0x5b8684
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f65b
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536918
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x197c]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2034], eax
mov eax, dword [ebp - 0x2034]
mov dword [ebp - 0x2038], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x2038]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x197c]
call sub.MFC42.DLL_CString::CString
push 0x5b8688
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f704
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x536934
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x536968
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x1980]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x203c], eax
mov edx, dword [ebp - 0x203c]
mov dword [ebp - 0x2040], edx
mov byte [ebp - 4], 0x3d
mov eax, dword [ebp - 0x2040]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1980]
call sub.MFC42.DLL_CString::CString
push 0x53697c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x42f7bd
push 0x5b868c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f7bd
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536984
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x1984]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2044], eax
mov eax, dword [ebp - 0x2044]
mov dword [ebp - 0x2048], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x2048]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1984]
call sub.MFC42.DLL_CString::CString
push 0x5b8690
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f866
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5369a0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x1988]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x204c], eax
mov edx, dword [ebp - 0x204c]
mov dword [ebp - 0x2050], edx
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x2050]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1988]
call sub.MFC42.DLL_CString::CString
push 0x5b8694
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f90f
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AM.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5369cc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x198c]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2054], eax
mov ecx, dword [ebp - 0x2054]
mov dword [ebp - 0x2058], ecx
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x2058]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x198c]
call sub.MFC42.DLL_CString::CString
push 0x5b8698
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42f9f1
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.JAVASDK.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FLASHSDK.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRESTOREk_1_3542_4232123213_7676767_8888886WINS32.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536a40
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str._SCUI.CPL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WSCSVC32.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536a68
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x1990]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x205c], eax
mov eax, dword [ebp - 0x205c]
mov dword [ebp - 0x2060], eax
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x2060]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1990]
call sub.MFC42.DLL_CString::CString
push 0x5b869c
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42fb86
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536a7c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x1994]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2064], eax
mov edx, dword [ebp - 0x2064]
mov dword [ebp - 0x2068], edx
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x2068]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1994]
call sub.MFC42.DLL_CString::CString
push 0x5b86a0
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42fc2f
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536a90
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x1998]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x206c], eax
mov ecx, dword [ebp - 0x206c]
mov dword [ebp - 0x2070], ecx
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x2070]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1998]
call sub.MFC42.DLL_CString::CString
push 0x5b86a4
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42fcd8
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536aa4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x199c]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2074], eax
mov eax, dword [ebp - 0x2074]
mov dword [ebp - 0x2078], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x2078]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x199c]
call sub.MFC42.DLL_CString::CString
push 0x5b86a8
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42fd81
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536ab8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x19a0]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x207c], eax
mov edx, dword [ebp - 0x207c]
mov dword [ebp - 0x2080], edx
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x2080]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19a0]
call sub.MFC42.DLL_CString::CString
push 0x5b86ac
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42fe2a
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536acc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x19a4]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2084], eax
mov ecx, dword [ebp - 0x2084]
mov dword [ebp - 0x2088], ecx
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x2088]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19a4]
call sub.MFC42.DLL_CString::CString
push 0x5b86b0
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42fed3
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536ae0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x19a8]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x208c], eax
mov eax, dword [ebp - 0x208c]
mov dword [ebp - 0x2090], eax
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x2090]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19a8]
call sub.MFC42.DLL_CString::CString
push 0x5b86b4
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x42ff7c
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SMART_HDD.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x19ac]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2094], eax
mov edx, dword [ebp - 0x2094]
mov dword [ebp - 0x2098], edx
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x2098]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19ac]
call sub.MFC42.DLL_CString::CString
push 0x5b86b8
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430025
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b00
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x19b0]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x209c], eax
mov ecx, dword [ebp - 0x209c]
mov dword [ebp - 0x20a0], ecx
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x20a0]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19b0]
call sub.MFC42.DLL_CString::CString
push 0x5b86bc
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4300ce
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b14
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x19b4]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20a4], eax
mov eax, dword [ebp - 0x20a4]
mov dword [ebp - 0x20a8], eax
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x20a8]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19b4]
call sub.MFC42.DLL_CString::CString
push 0x5b86c0
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430177
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b24
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x19b8]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20ac], eax
mov edx, dword [ebp - 0x20ac]
mov dword [ebp - 0x20b0], edx
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x20b0]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19b8]
call sub.MFC42.DLL_CString::CString
push 0x5b86c4
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430220
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b3c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x19bc]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20b4], eax
mov ecx, dword [ebp - 0x20b4]
mov dword [ebp - 0x20b8], ecx
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x20b8]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19bc]
call sub.MFC42.DLL_CString::CString
push 0x5b86c8
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4302c9
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b50
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x19c0]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20bc], eax
mov eax, dword [ebp - 0x20bc]
mov dword [ebp - 0x20c0], eax
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x20c0]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19c0]
call sub.MFC42.DLL_CString::CString
push 0x5b86cc
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430372
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b68
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x19c4]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20c4], eax
mov edx, dword [ebp - 0x20c4]
mov dword [ebp - 0x20c8], edx
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x20c8]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19c4]
call sub.MFC42.DLL_CString::CString
push 0x5b86d0
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43041b
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b80
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x19c8]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20cc], eax
mov ecx, dword [ebp - 0x20cc]
mov dword [ebp - 0x20d0], ecx
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x20d0]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19c8]
call sub.MFC42.DLL_CString::CString
push 0x5b86d4
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4304c4
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536b94
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x19cc]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20d4], eax
mov eax, dword [ebp - 0x20d4]
mov dword [ebp - 0x20d8], eax
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x20d8]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19cc]
call sub.MFC42.DLL_CString::CString
push 0x5b86d8
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43056d
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536bac
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x19d0]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20dc], eax
mov edx, dword [ebp - 0x20dc]
mov dword [ebp - 0x20e0], edx
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x20e0]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19d0]
call sub.MFC42.DLL_CString::CString
push 0x5b86dc
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430616
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536bc4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x19d4]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20e4], eax
mov ecx, dword [ebp - 0x20e4]
mov dword [ebp - 0x20e8], ecx
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x20e8]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19d4]
call sub.MFC42.DLL_CString::CString
push 0x5b86e0
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4306bf
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536be0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x19d8]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20ec], eax
mov eax, dword [ebp - 0x20ec]
mov dword [ebp - 0x20f0], eax
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x20f0]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19d8]
call sub.MFC42.DLL_CString::CString
push 0x5b86e4
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430768
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536bf8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x19dc]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20f4], eax
mov edx, dword [ebp - 0x20f4]
mov dword [ebp - 0x20f8], edx
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x20f8]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19dc]
call sub.MFC42.DLL_CString::CString
push 0x5b86e8
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430811
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536c0c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x19e0]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x20fc], eax
mov ecx, dword [ebp - 0x20fc]
mov dword [ebp - 0x2100], ecx
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x2100]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19e0]
call sub.MFC42.DLL_CString::CString
push 0x5b86ec
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4308ba
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536c24
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x19e4]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2104], eax
mov eax, dword [ebp - 0x2104]
mov dword [ebp - 0x2108], eax
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x2108]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19e4]
call sub.MFC42.DLL_CString::CString
push 0x5b86f0
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430963
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Restore.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea ecx, [ebp - 0x19e8]
push ecx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x210c], eax
mov edx, dword [ebp - 0x210c]
mov dword [ebp - 0x2110], edx
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x2110]
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19e8]
call sub.MFC42.DLL_CString::CString
push 0x5b86f4
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430a0c
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_XP_Restore.lnk
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea eax, [ebp - 0x19ec]
push eax
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x2114], eax
mov ecx, dword [ebp - 0x2114]
mov dword [ebp - 0x2118], ecx
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x2118]
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19ec]
call sub.MFC42.DLL_CString::CString
push 0x5b86f8
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430ab5
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536c6c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
push 0
lea edx, [ebp - 0x19f0]
push edx
call fcn.004978a3
add esp, 0xc
mov dword [ebp - 0x211c], eax
mov eax, dword [ebp - 0x211c]
mov dword [ebp - 0x2120], eax
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x2120]
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19f0]
call sub.MFC42.DLL_CString::CString
push 0x5b86fc
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430b5e
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UpdatesUpdates.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x536c9c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.CTFCTFMON.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CTFCTFMON.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.CTFCTFS.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SEAWDURLIE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.S4BARSP.FASTERXP.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.FRSWRP10147.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ENDAT.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.FasterXPUNINSTALL_FASTERXP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.FasterXPSOFTWRAP.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.FasterXPFASTERXP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FVU1010.DAT
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FSVF1201.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NVCHOST.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x536d9c
push 0x536da8
push 0x80000002
lea ecx, [ebp - 0x19f4]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2124], eax
mov edx, dword [ebp - 0x2124]
mov dword [ebp - 0x2128], edx
mov byte [ebp - 4], 0x5a
mov eax, dword [ebp - 0x2128]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19f4]
call sub.MFC42.DLL_CString::CString
push 0x536dd8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x430daa
push 0x5b8700
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430daa
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32msacrohlp.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32mscgp32.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32msadocm32.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32_sqlpool.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MSNMGR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.HGQHP.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.YAEMU.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x536e64
push 0x536e6c
push 0x80000002
lea edx, [ebp - 0x19f8]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x212c], eax
mov eax, dword [ebp - 0x212c]
mov dword [ebp - 0x2130], eax
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x2130]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19f8]
call sub.MFC42.DLL_CString::CString
push 0x536ea4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x430f48
push 0x5b8704
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430f48
lea edx, [ebp - 0x824]
push edx
lea ecx, [ebp - 0x1838]
call fcn.0050f0c0
push 0x536eac
push 0x536eb4
push 0x80000002
lea eax, [ebp - 0x19fc]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2134], eax
mov ecx, dword [ebp - 0x2134]
mov dword [ebp - 0x2138], ecx
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x2138]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x19fc]
call sub.MFC42.DLL_CString::CString
push 0x536ef8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x430fea
push 0x5b8708
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x430fea
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebp - 0x1838]
call fcn.0050f0c0
push str.DriversNDISPROT.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Privacy_ComponentsPC.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x536f34
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RICHTX64.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SETTDEBUGX.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SYWSVCS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CMEIICMESYS.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CMEIIGTOOLS.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SYA.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SYA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WINGUIS.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ZSYHIDE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ZSYDLL.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Googlegoogleupdater.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GoogleUpdategupdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NVIDIA_CorporationUpdatedaemonupd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowswinupdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NVIDIA_CorporationUpdate_nvupd32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.AGSeyAppAGSEYAPP.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.AGSeyAppGEHP.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.MocosofttKKPPEEEM.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.ESETMiNODLoginLauncher.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.ESETMiNODLoginMiNODLogin.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.2t1q1a2t1q1a.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.bind.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x53712c
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DriversATI.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.SNDU32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SNDU64.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.QM.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.QM.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MMXF32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MMXF64.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SSLX32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SSLX64.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TCPR32.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TCPR64.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.QZ.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.QZ.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.XPTPTT.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.XPTPMM.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SD.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SD.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MFREEDFT.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.RFDKERNL.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.QO.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.QO.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.YVSVGA.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.YVSVGA.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.YCSVGA.SYS
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PS.A3D
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.FUX87.INI
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.STT82.INI
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.KLGCPTINI.DAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.GSVGA.BIN
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.LPS.DAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MNSVGAS.BIN
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SHSVGA.BIN
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TNSTT.A3D
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TTSVGA.DAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.WAGFOLA4W.DAT
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.STA_CSS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MS18_WORD.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.HBINST.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.HBHOSTIE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.HOTTVPLAYER.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.HOTTVPLAYER.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NETI.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Common_FilesSystemSlsvce.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MS32DLL.DLL.VBS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WIN31.DLL.VBS
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.IEAntiVirusANTIVIR.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7ba4
push str._sOVERPRO323.EXE
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DATASTORE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DP_HIM.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEHOST.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MASTER.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.SUB.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TERRABYTE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEDRIVER.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.TD.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEDriverIEDRIVER.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEDriverIEUPDATE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEDriverIEXPLORE.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEDriver3.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEDriver5.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.IEDriverTD.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.PschostSVCHOST.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5374a0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SYSTB.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Inet_DeliveryINTDEL.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Internet_Antivirus_ProIAPRO.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.InetGet2INSTALLEUR.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.IpwindowsIPWINS.EXE
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.IpwindowsIPWINS.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.ISTsvcISTsvc.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.ISTbarISTBAR.DLL
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IINSTALL.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Downloaded_Program_FilesISTACTIVEX.DLL
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.IESearchToolbarIESearchToolbar.dll
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.2_0_1browserhelper2_dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.5_0_1browserhelper5.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UnstSA5.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.W32Word.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Kernel23.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x537630
push 0x53763c
push 0x80000002
lea ecx, [ebp - 0x1a00]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x213c], eax
mov edx, dword [ebp - 0x213c]
mov dword [ebp - 0x2140], edx
mov byte [ebp - 4], 0x5d
mov eax, dword [ebp - 0x2140]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a00]
call sub.MFC42.DLL_CString::CString
push 0x53766c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x431a97
push 0x5b870c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x431a97
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x537674
push 0x537680
push 0x80000002
lea edx, [ebp - 0x1a04]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2144], eax
mov eax, dword [ebp - 0x2144]
mov dword [ebp - 0x2148], eax
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x2148]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a04]
call sub.MFC42.DLL_CString::CString
push 0x5376bc
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x431b38
push 0x5b8710
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x431b38
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.DriversSMSS.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PMGPMG.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PMGViewer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.javaupdateupdate_java.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.javaupdateexpa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.28463SIVG.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.expa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.myfile.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.A.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BRIDGE.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.JAO.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DriversWIN.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537784
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537794
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.MPKmpk.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.MPKmpk.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Updater.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dull32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Google_.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lxly.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5377f0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537808
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Tempcsrss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537824
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Java_update.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53784c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53785c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ggt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GTkl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hBRR.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Hdfv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Jke.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mydd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NGpp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Pc_ProfilePc_Profile.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ProPlayerWindowsDefender.exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SAff.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sys.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tPom.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._trV.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537944
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.yyE.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.clean.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cemapimmc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537990
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Chorme_browser.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.diagnosticschoice.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Font_browser.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5379e4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5379f0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537a08
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov eax, dword [0x5b7654]
push eax
push str._sG2fbP87M2bHen79a_
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x537a30
push 0x5b6504
call fcn.0049757d
add esp, 8
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JavaJavaUpdtr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.clientsvr.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x5b78a4
push 0x537a5c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x537a68
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x1a08]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x214c], eax
mov edx, dword [ebp - 0x214c]
mov dword [ebp - 0x2150], edx
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0x2150]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a08]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x537a6c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x432682
push 0x5b8714
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x432682
push str.REGSVCS.EXE
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x432682
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x537a80
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x537a8c
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x1a0c]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2154], eax
mov eax, dword [ebp - 0x2154]
mov dword [ebp - 0x2158], eax
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x2158]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a0c]
call sub.MFC42.DLL_CString::CString
push 0x537a90
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x432758
push 0x5b8718
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x432758
mov edx, dword [ebp - 0x824]
push edx
push 0x5b7ba4
push 0x537a98
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0x5b6504
mov ecx, 0x5b5bd8
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolderchrome.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x537ab8
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.clientmonitor.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._adminWinLoad.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.microsoftxwinsnap.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._smicrosoftxwinsnap.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537b28
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.clientmon.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asdasd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._axxzd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._azxxpp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fffe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdadp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._selfinj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._veve.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xzxzdp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xzzesf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zax.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zsdafg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Adobepdf.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.svchost_svchost.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push 0x537bfc
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Clientclient.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537c1c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.BinarySound_soundbinary.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537c48
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Programjhdfhhj.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.DefenderWindowsDefender.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.system32_svchost.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.winlogoms.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WipeShadow.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WipeShadowc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WipeShadowMK.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WipfdeShadow.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.notepad_notepad.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.Defender_FoldersDefender_Scan.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.IrcamBundleFluxbundle.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BackVst.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PowerBlank.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.VanillaClientRunStatics.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
push str.BackCounter.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AvastBreakstand.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Client_file.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vsnkj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7634
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UpdaterUpdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RealPRealPlayer.exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537e00
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
push ecx
mov ecx, esp
mov dword [ebp - 0x1a10], esp
lea edx, [ebp - 0x1424]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x215c], eax
call fcn.004ae8a4
add esp, 4
mov dword [ebp - 0x2160], eax
cmp dword [ebp - 0x2160], 0
je 0x432efb
lea eax, [ebp - 0x1424]
push eax
push 0x537e08
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_system]
add esp, 4
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MakerMaker.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsThemesSlideshowsSlideshowService.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppDataLocalTempKlawiaturaklawsterowniki.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x537eac
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x537ee0
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2164], eax
mov edx, dword [ebp - 0x2164]
mov dword [ebp - 0x2168], edx
mov byte [ebp - 4], 0x61
mov eax, dword [ebp - 0x2168]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a14]
call sub.MFC42.DLL_CString::CString
push 0x537ef0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x433059
push 0x5b871c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x433059
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x537ef8
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x537f2c
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x1a18]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x216c], eax
mov eax, dword [ebp - 0x216c]
mov dword [ebp - 0x2170], eax
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x2170]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a18]
call sub.MFC42.DLL_CString::CString
push 0x537f30
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x433112
push 0x5b8720
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x433112
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537f38
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tmp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FontsScvhost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Dllhost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.0zWLc8kNJcUtkkAEjNlUYKQumKdayZ.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.5ksHcbx1tOfruJpQKBSWcJx3.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csAiprbfef.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csp6VUuIR4mYAMbroab1A.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xxZbEWSnqt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x537ffc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.Clientexplore.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538024
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x538034
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x538068
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x1a1c]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2174], eax
mov ecx, dword [ebp - 0x2174]
mov dword [ebp - 0x2178], ecx
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0x2178]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a1c]
call sub.MFC42.DLL_CString::CString
push 0x53807c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43344e
push 0x5b8724
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43344e
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SubDirClient.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x538098
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5380cc
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x1a20]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x217c], eax
mov edx, dword [ebp - 0x217c]
mov dword [ebp - 0x2180], edx
mov byte [ebp - 4], 0x64
mov eax, dword [ebp - 0x2180]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a20]
call sub.MFC42.DLL_CString::CString
push 0x5380d8
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x433540
push 0x5b8728
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x433540
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x5b78a4
push 0x5380e0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x538114
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x1a24]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x2184], eax
mov eax, dword [ebp - 0x2184]
mov dword [ebp - 0x2188], eax
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x2188]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a24]
call sub.MFC42.DLL_CString::CString
push 0x538120
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x4335f9
push 0x5b872c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x4335f9
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push str.DGLSvchost.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DGLHelperKbs.dll
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DGLServices.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.DGLDouglas.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Boligkonsulenter.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Preenlighten.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Rekvirenter5.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chlzchlz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.googlesgoogle.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ProPlayerPlayer.exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tub_tub.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sound_Card.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pioneer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538220
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chrmo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dgjh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Recentwrite.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.margenstrNongr1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder1_new.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempMicrosoft_HP.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._srbjj_tocks.exe
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x1424]
push edx
call fcn.0050c963
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x1a28], esp
lea eax, [ebp - 0x1424]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x218c], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2190], eax
cmp dword [ebp - 0x2190], 0
je 0x433a3b
cmp dword [0x5b851c], 0
jne 0x433a25
push 0
push 0
push 0x5382b0
call sub.MFC42.DLL_AfxMessageBox
call fcn.004ae964
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qtyh_tyrhd.exe
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1424]
push ecx
call fcn.0050c963
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x1a2c], esp
lea edx, [ebp - 0x1424]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x2194], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x2198], eax
cmp dword [ebp - 0x2198], 0
je 0x433ad7
cmp dword [0x5b851c], 0
jne 0x433ac1
push 0
push 0
push str.Detectado_KeyLogger.Ekstak_nReinicie_el_Sistema_para_completar_la_Limpieza.
call sub.MFC42.DLL_AfxMessageBox
call fcn.004ae964
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, dword [0x5b764c]
push ecx
push str._sMozilla_
lea edx, [ebp - 0x1424]
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b78a4
push 0x538364
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x538398
push 0x5b6504
push 0x80000003
lea eax, [ebp - 0x1a30]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x219c], eax
mov ecx, dword [ebp - 0x219c]
mov dword [ebp - 0x21a0], ecx
mov byte [ebp - 4], 0x66
mov edx, dword [ebp - 0x21a0]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a30]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x1424]
push eax
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
je 0x433b91
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempExplorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TempTaskmgr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sgFnFILdcVsPsGUhq.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sWindupdtwinupdate.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5383fc
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push 0x538410
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538424
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538438
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53844c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b762c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538464
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53847c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Google_Chrome_Plugin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Identitiesmanifest.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IMJDC.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5384d4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5384e8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mail_origin_steam_120rbrutaaa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.servies.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.emilie_et_moi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FUCK.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msnmsgr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WinLogon.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Smss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._s021_251860923_12_5_1_SS_1_5_21_329068152_120.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._s223_1876133383_12_5_1_SS_1_5_21_3833316781_322.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sChromecloud.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._siiiiffi_sighos.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRgsmRgsm.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sRoamingApplication_Frame_Host.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sSkype_UpdateUpdater.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._swindlogomntwimdowslogt.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sWindows_Con_Hostwinconhost.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sWindows_Session_smss.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5386c4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.coreloader.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.oconor.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fdxdv_ame.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iiiiffi_sighos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.im_vlhost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IntelServicejiservice.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Internet_Command_Hostsicshosts.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538764
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ProgramDatamicrosoftNT.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.q9w8d498wrd89qw4dqw98e.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RgsmRgsm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RoamingApplication_Frame_Host.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SbietrayHmstcop.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Skype_UpdateUpdater.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wcindowsdefeninicwimadefem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windlogomntwimdowslogt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Con_Hostwinconhost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Session_smss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Update_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftMsf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5388dc
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nero.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winran.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Ldabldab.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kzlabkclab.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Chromecloud.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538940
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ccaqwesadaa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538964
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x538974
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5389a8
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x1a34]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x21a4], eax
mov eax, dword [ebp - 0x21a4]
mov dword [ebp - 0x21a8], eax
mov byte [ebp - 4], 0x67
mov ecx, dword [ebp - 0x21a8]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a34]
call sub.MFC42.DLL_CString::CString
push 0x5389b0
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43494e
push 0x5b8730
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43494e
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5389b8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EHZGSPPEHZGSPP.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TESRLEQTESRLEQ.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UDMYKPKUDMYKPK.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UICBMLGUICBMLG.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XWVWKXDXWVWKXD.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YMRYOAHYMRYOAH.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Luck9lLuck9.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mkl_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NN_nan.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cBqOhp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.uhn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RfrnkwgrrxiGeoaobnai.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.logAutoUpdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.BPK.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BPKR.EXE
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BPKHK.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.BPKWB.DLL
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RegistriesCalender.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EASPolicyManagerBrokerHostBWContextHandler.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._agent.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._appraiser.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fvecezit.scr
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.igfxext.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Magnify.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.meviBibewapo_kar_sef.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538bb4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RtDCpl64.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Yarexs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._atmosfretrykNonresponsibilities5.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sil_ske.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.REAUha.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._visualPrint_visualPrintDev.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YahooCSKMHSKSS.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7778
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YahooGMYLEAKSS.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7678
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Trigonometria.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sjava1java1.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._smswordmsword.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicDocumentsqqvceyewtbbthrihpoqhobah_svchost.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicDocumentsUSglaGIbBWVMgAoJxEBltgDILKthqkcuSKeHF_svchost.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicLibraries_tizecevf.pif
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicRemc.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicWATPCSP.dll
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ajune.exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._anydeskMR.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538dc0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x538dd0
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodga.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodgbc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodgc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodgcg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.B2DAD187.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ffp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._filesssss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.javajava.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._newone.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QWRTYDSHJ.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ssd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sddystem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Shmffhjfem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Stem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sybehehstem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sybehestem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syhdustem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syhggfjdjdfstem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syndnsstem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Synxnstem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syrhhfdhddstem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syscode.exe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SySDGDSstem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sysdggutem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysFFDDFDtem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syshdhftem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syshdudhdtem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syshshsshem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Syshygtem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sysjdjdtem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sysjejetem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sysjsjsjtem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Sysssdbgsdstem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systbebem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._systdfhhfdhdfem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysteAm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysteGJFDJGSGKSDGJm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systensnsnm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systern.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystGJKem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systhgghhem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Systhshshsem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Twozero.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.vkl.exe
lea ecx, [ebp - 0x420]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str..echosft_echosoftwarelic.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AgzgaLjmntf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ahnlab_ahn7464.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._aiepianhcjk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._anpfix_anpfix32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._anydeskMRX.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppBrowserUpadets.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppDatakample.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppDatamicrosoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AppDatawindowsupdater.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ATM_Machineexplorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Audiohd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AvjeeWxcoqeshwp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._axd00000000000000000523kjiutj.scr
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._b2b_abj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BbojoUtlzn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BeaemLfdrtv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bffa_nmcmckolk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BmsaMrica.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BqfzxKcfcgvzqh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BrlaiGijgxgfm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._browser_browser.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BskmvGuvfnfttt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BssgjAqctgzcfc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BulpnQrzgdtep.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CdbsdKdomdv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CdudmHvzwf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chrom.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x539334
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ChromeChrome.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cmsscs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.conorconor.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CrcvcAfyxoxgok.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Csmme.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csrisscsriss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csscr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ctdosobbbjwthnd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cudcud.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cuppcupp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CvexlGtkzvinxul.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CwrbjVuzahqjxdr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CyavsGvnolwksjuh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DarlfSpjox.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ddrw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DFQCPQDFQCPQ.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dllVetox.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.doc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DqavwNdjjtqsvd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DqtzyDnqbnalgv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DtjsqmHxcqbknccv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DufozKqlrganqsc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dygjhkm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.eldeskfixeldesk32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EmwhrBmmddra.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Encoronate0.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EntxqesuZzmmu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.erasboerasbo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.etiwaetiwa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EXCELEXCEL.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EyghoKbvypcxq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FaiassUlmrz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FblpolBgfxn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FcpepiaxIylqcdnbjqv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FesmqlMwlxsp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._firefox_firefox
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcat
add esp, 8
lea edx, [ebp - 0x1424]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea eax, [ebp - 0x1424]
push eax
call fcn.004aea44
add esp, 4
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea ecx, [ebp - 0x1424]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._firefox1_firefox1
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcat
add esp, 8
lea eax, [ebp - 0x1424]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f680
lea ecx, [ebp - 0x1424]
push ecx
call fcn.004aea44
add esp, 4
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._firefoxx_firefoxx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FkgfqcjzllFiyjdwaazb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fkvd_fkvd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FLAUQGFLAUQG.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._flfdae_tsfyykcqrchh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FmqofhAnscrdlp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FnbovhWjzsclsz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FoacgbXtnzjqxz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FokfvkMbuvbrwo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fovoevdobvj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FqngzgRdazwlzi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fsd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Fsmss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gasimages.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gfdfkgfdfk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ggfdggfd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ghtght.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GizdalSwnfskt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GksgmnNfpglk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GltkijBvsqlki.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Google_Updater_2Google_Updater_2.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GpaercIniwuvgwq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GqfhsbMpybzmyqp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GpgqevKqrgsylgj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GqjxniBjmnhzewb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.gqpltjepusyp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GST_SOAGST_SOA.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GuntxqErbonoxoqa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GvgizsPvwbcupcpi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GxpvlmCewfjhjcvxu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GzgshbSiqzuwnwtja.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GznylrFqaecahub.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.handdicks.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HAU.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hdklhdkl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HedajyOwlwi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HkxrjvcNkenebb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hmnsqhntxxawxpfxuocnsbtmj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hylblxykoecwcco.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HukkujKgydkvge.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IExkysehGJO.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IfbksiwWigwvr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IoeqhgsGdgjgtfv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x5399d4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IwezteQsvdsykhl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.iys.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IyigsfFdhxirirf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IzxihzzRiivcavepny.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JavaJvaruntime.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JbbozaxvTaxgay.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jdrpglhjidwvmrd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jggvvnmn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JGXYXYJGXYXY.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JipaxzrHolzupo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jkcgjj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jmlyaxsgmbdblbvkx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JmtxwscExeudmir.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JohmfgPjxswwt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KdfrgbiFrtnc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KgypucfHahmkq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KjlbyzAljkqj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kjtxdyrvijyfjfn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.klGoldll.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.klistdrvinst.exe.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KqjdtbqZqqteqyda.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KrjlazyHwjqncovk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KwtbbtyXyalynxmlsm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KxFFstCGVgkM.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lbltebvinfyvwplgrhulfhnvtgw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lhcnlwjkjhhurdfc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LmiajkdJfbabodo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LnpozjsGkubanm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.los.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lsccss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.lsrccs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LxacpjdbPupdhwyswij.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MainProc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MainProcc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mauverlite.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mccrei.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MdxdxtzjhfIaobqlmo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.microservicesmicroservices.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_adobe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_app.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoftieinstal.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoftmicrosoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftTerminal.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsTemplates_sbietrcl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Audio_CardMicrosoft_Audio_Card.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Hd_AudioMicrosoft_Hd_Audio.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Hd_CardMicrosoft_Hd_Card.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Window_Client_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MicrosoftWindowsRecentRZTHXRZTHXHelper.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MircaMicar.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Moe1Moe1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MqqypeagJeleqromb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Mrca_rmca.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MrcaRmcra.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MrjdvzwuVqdbpemci.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msbuld.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msccts.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mssrce.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MtessczUtycdtwu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MxwmzifDmywyhizg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mysoftware.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ncdsynuuc_aiaf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NfjkanmfWvytob.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NMQRRBQR.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nnjk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nnscvehhrasynrlqje.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._nrvgcfyksvarqcidrcgh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NtgkrtdfLotisebqnp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NtjcgFxsflcst.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NuzbtuvxCchxxhlype.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NvebzjySyradykik.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NxqovtxAyodbxbwt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Nydelsesmidlets1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NyivcnojFwacfnzeblz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NzlrgytKcdizpjdv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NzxwpaucDnyglkmpzau.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OcxaOcxa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OepgerccOxmdfp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.officeconhosts.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.omqvbhcoes_nmvchnxgq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.oos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OoxphyiaZbialdpk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OqcikzhmDgxiwfghf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OrjynhrCpptcuba.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OuiiumgzJdmcfworvo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OUTLOOKS.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.owtmaqokwjmvytfwkck.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.oxtdmirbwgcluq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PhotosPhotos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PilcidlbpDxcfbpp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PimmscmpuHqmumpt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PivzwrahjFggvtoo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pldrbjtblr_sbutmnwfcjii.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PmhoazlfoHnhppluq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ppbfaecldr_rfthlhfptic.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PpozehtoqOkdaybwqr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ppwcvqqkvmlqtjpa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PqcstpzxyTngwgerhy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pqjfqjmygi_nqomvqiqsn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PwmdpurryHkyaajrsgqa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pyLWjVX_rDOVb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QaglqicZlivaeqjz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qhljktwjwytphqqqbsbjd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QhmmoskghYxiahgt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QlcjghotcRvizrano.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QmzznwuxtQccdwzzu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qoc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qqs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QsbhheuvbIngzodxue.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QsqfklbnaUesxsjsntd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qukgi_tytqmprhjhaoj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.qvqlh_baprmqduwndjwj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RbevyyPiaqp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rcbrxjjuohhkn_tkfxqlsnum.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._re.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._regntiderne.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RemcRemc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._remcosconhosts.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._remcoscos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._remcosEXCEL.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._remcos_rem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._remcos_remcos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._remcos_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._remcos_svchosts.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RemcosIng_remcos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._reoupmywscdqdtbvsuofhl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RetbdeiolPozfkw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rhlaovfllkvuvdcayipccca.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RhorbhyklYslijsm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RMSitunes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ros.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rocksfolds_rocksfolds.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rtyutgjh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RvbxmcojjCtezvnscve.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RvwvvicFtevxnut.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rxtjpewlkvdhelgviay.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ScndnpryrJjred.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ScopazopHpuqt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SCSNKTSCSNKT.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdfge.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Service.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._siHoast.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sjdkyjgdhesrdytfkljhgf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SMMNWASMMNWA.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SmgjjfmxqNhhkjnvs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SntqxfhpsWikhqpjb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._spoolse.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SppptjohtxYjtxdgoza.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ssdii.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ssdr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._stle_stle.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.StlvjxwdmZrgbtiovya.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfoldercommoprintersoundx.pif
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._suwpherqbptq_vjprshuurgbbx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svcHoise.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._svchosts.exe_svchosts.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SvqcjzlvZmgtuhjwg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SwgosuucknQjscytuqaqq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysdirSysdiagnostic.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32PXServiceNet.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32PxxoServicesNet.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32PxxoServicesTrialNet1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32PxxoServicesTrialNet48.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System32winsoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System64ProService.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemSecurityDefenderWirelessSecurityV5.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SzszulugRfmlnfoaw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TaskmgrAppVStreamingUX.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._taxrecords_taxrecords.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tdOIW.cmd
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._thistime_thistime.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._titobmevvwpl_shyvhtanicwn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TjepjjlcRiofvb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TncjnufwqpEwxrpfqp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TqqdnxwkYmrpoege.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._trs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TxqxgjwwkqDmjblmtdbve.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UbkidoxrllMgmfk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UDP.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UizcoetewdMdpkpmf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UjebhbdwyfMbmmitz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UNSDGUNSDG.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UoghhibqwjQreoogsj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UTVOEIUTVOEI.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UyukbxzmNpnhfvtou.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VaojwjkcxzVaolk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vft_vft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VftahfwqxaKeszie.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VhjktcygqeRglwhox.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vkl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vkyrsunhaixyhyyqseyqlqafjwf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vlc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vlc_remcos.exe
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1824]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vlc_vlc.exe
lea eax, [ebp - 0x1824]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
push ecx
mov ecx, esp
mov dword [ebp - 0x1a38], esp
lea edx, [ebp - 0x1424]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x21ac], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x21b0], eax
cmp dword [ebp - 0x21b0], 0
jne 0x43a0fc
push ecx
mov ecx, esp
mov dword [ebp - 0x1a3c], esp
lea eax, [ebp - 0x1824]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x21b4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x21b8], eax
cmp dword [ebp - 0x21b8], 0
je 0x43a125
mov ecx, dword [0x5b7654]
push ecx
push 0x53abb0
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bc0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VnasrsgzmsSbwnkuvr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VoitbeejpkPzkyjinfb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vonss_vonss.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VqxdqtztaKhdvjerr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VsiibiypxaExbqzyawb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VssxrnnvjSoclexeh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VsylrnnqkSxwpcmmu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._vukftiaoyndhdemtwf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VxlvwjazdoVnjvctedqso.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WabfnbyhyggGthvk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WeChatWeChatx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WeChatxWeChatsetup.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wee.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.widowwid.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53ad04
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53ad10
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_RT_ServerWindows_RT_Server.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Winrar.exe.bat
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winsrarwinsrar.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wintaskhostwintaskhost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wis.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WreydxcvsZvieez.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WtlusloofeVjbknfzgrf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WvshspnfgxaIsoczsiogu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wynyodmaqndnrl_fqwqaj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XaxucdbzpdeRjdvb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XhbfjozGevokbsybda.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XpyoyfrgtleZjrjwxsrv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XrqguzlrpxxTqpjlcosl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XtjpewlkvDelgviay.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XxmjgocbsUgueiwalf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.yakkk_sonic.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YgbidpkecdlZupdby.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ylluulabiqirrmthco.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YndvodmwsclYnhycd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YqxsvaorwniShhejayly.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.yvnculvyhbubdhwvriarrqtfddba.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZdosbzkfdDjfiu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Zeeesnwvoodtghfkgh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZgbbnjshlygHzzlsg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZkidxbqemHpphmd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZlivzcbevlzXpsynhca.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZmuiokppqwaIkxrqwdk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zoomzoom.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZqzicdfdyevYtzuwvgjf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZwhtpizsgxcMzayevhg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZzgmbbvnxKiiyswrwr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chromeschromes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CL_remcos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.machinesexplorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Net_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RemcosDate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sdfghjklkjhg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TerminalTerminal.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._audiodialog.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ertfhgjhfdghfdgh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hxastqhxastq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jgrbumjgrbum.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jkcgjjjkcgjj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ndjqzl_ndjqzl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._notepadnote_firefox.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tczycl_tczycl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.wscsvc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b761c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chrorne.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.x64winrar.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AbxrtUpnxd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Admin.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobecloud.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobephotoshop.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Application88chrome.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asrdvuijwhhndi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BecdyXkpikf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BzekhQyobzcvkays.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.downloaddownload.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ex.great.ee.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._firewall.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.GniggWhbxmco.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.H.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.H2.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hfshmxtcmibtq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hussan.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JabojcnMhybo.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LfqxtnrqOdnexc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._newphone.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mrfeabtwlmeklbjqt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MrphyfywMmngswxwk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msbulmsbul.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msbuldmsbuld.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mtixspx_bgecsflz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NzyukyadChejsvkefxu.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RcbimcxfhVxzkp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RzdkloiluQyqawfinqwp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._system32_autofmt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystFGGGem.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winrarGavjogb.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winrarx64.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Xlsx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Y.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.YY.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZgmasrlAsfyrilxd.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7664
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.zilnic.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobe_adobefile.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AffedniUNWIP.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CHROEnergiudla5.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DARBIrrorate5.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FODBOLDBANES_acrochordon.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Fortegnelsen_scrunchy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.fqytce.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Ilte8Cunnil8.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.imagesimages.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.izspkwfa.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.jaqkuz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.loyxsna.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53b574
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
lea edx, [ebp - 0x1424]
push edx
call fcn.004aea44
add esp, 4
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MIRIafbrydelsesvektorer.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ortod.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.otjhuvh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pcnhtrbc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.remcos_remcos.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SHELLFISHORPHANISES.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.source_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.suffixionophiuchid.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Superev3_trykmaale.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.taskmgrs_taskmgrs.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.taxing2_taxchallan3.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.texture.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.tusindbenetsFORFJAMSKETS.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.vanowituyh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.vujonlni.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Wealth.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Webinternets.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.xyoabf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.1877_svshost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Audio_MicrosoftMicrosoft_Intel_Audio.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Cursors6caSXRLgRupP2V2Hm_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CursorsDBACFBCAADCBEEACFFABDCEBD_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Media_CorpWindows_Audio_Play.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Media_CorpWindows_Audio_Service.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Start_Up_MediaWindows_Audio_Device_Pictures.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft_Start_Up_MediaWindows_Start_Up_Audio.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.NETFramework437CE198_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Microsoft.NETFrameworkl81EyIfzlz_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ResourcesThemescotanffe_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ResourcesThemesOuXuwjjo9jc08koh8_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Data_Start_UpWindows_Data_Start.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Secure_StartMicrosoft_Security_Start.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_SecurityMicrosoft_Security_Health.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Security_HealthWindows_Health_Security.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Start_Ups_ManagerWindows_NT_session.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Start_Ups_ManagerWindows_NT_sessions.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_Start_Ups_Sound_AudioWindows_NT_Audio_Jack_Device_Pictures.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.chrome_teewire.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.InstallCalcInstallCalc.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.rem_rem.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.vlc_vlc.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.Windows_Defenderdefender.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
push str.wscp.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RemDRemD.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.RemRRemR.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Realtek_AudioREALTEK.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Realtek_AudioSERVICE.EXE
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7674
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.WordPad.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dwm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dwn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53bb7c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tsk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winpro.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.winservices.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push str.DUCDUC.exe
lea ecx, [ebp - 0x1838]
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.msbuildpfile.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SysLogslogmanager.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._tesst.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov eax, dword [0x5b7674]
push eax
push 0x53bbfc
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push str.tesst..lnk
push 0x5b6504
call fcn.0049757d
add esp, 8
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53bc0c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53bc18
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b78a4
push 0x53bc2c
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x53bc60
push 0x5b6504
push 0x80000003
lea ecx, [ebp - 0x1a40]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x21bc], eax
mov edx, dword [ebp - 0x21bc]
mov dword [ebp - 0x21c0], edx
mov byte [ebp - 4], 0x68
mov eax, dword [ebp - 0x21c0]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a40]
call sub.MFC42.DLL_CString::CString
push 0x53bc6c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43c6f7
push 0x5b8734
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43c6f7
lea ecx, [ebp - 0x824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x53bc74
push 0x5b6504
push 0x80000003
lea edx, [ebp - 0x1a44]
push edx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x21c4], eax
mov eax, dword [ebp - 0x21c4]
mov dword [ebp - 0x21c8], eax
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x21c8]
push ecx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a44]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x53bc88
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43c7c1
push 0x5b8738
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43c7c1
push 0x53bc90
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43c7c1
lea edx, [ebp - 0x824]
push edx
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x53bca0
push 0x53bcb4
push 0x80000002
lea eax, [ebp - 0x1a48]
push eax
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x21cc], eax
mov ecx, dword [ebp - 0x21cc]
mov dword [ebp - 0x21d0], ecx
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0x21d0]
push edx
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a48]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x53bce4
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43c88b
push 0x5b873c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43c88b
push 0x53bcec
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43c88b
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x5b5bf0
call fcn.0050f0c0
push 0x53bd0c
push 0x53bd20
push 0x80000002
lea ecx, [ebp - 0x1a4c]
push ecx
call fcn.00402f37
add esp, 0x10
mov dword [ebp - 0x21d4], eax
mov edx, dword [ebp - 0x21d4]
mov dword [ebp - 0x21d8], edx
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a4c]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x824]
call sub.MFC42.DLL_CString::MakeUpper
push 0x53bd5c
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43c955
push 0x5b8740
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call sub.MSVCRT.dll_strcmp
add esp, 8
test eax, eax
je 0x43c955
push 0x53bd64
lea ecx, [ebp - 0x824]
call fcn.0050f0b0
push eax
call dword [sym.imp.MSVCRT.dll_strstr]
add esp, 8
test eax, eax
jne 0x43c955
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mstwain32.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.cmsetac.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7eb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ntdtcstp.dll
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.loads_vol.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MSBuildmsn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder_build.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolderconfig.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder_filename.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder_systemfile.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder_systm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._subfolder_till.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UpdateSetup.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7cb4
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.subfolder_filename.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
push 0x5b7ba4
push str._sUsersPublicDocuments990497818655_svchost.exe
push 0x5b6504
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SystemIThkhrobUZ_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b765c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.System_s212328722981877_svchost.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AdobeCSShl4q5gkwOzkP.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Adobes9MCEVQZmSx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Chromesoft.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QsvrsbiyOpbsddh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TzifzwYougmju.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b764c
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UobvapRsfyibdr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.876545TYJ.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._ad1AutoDrum_4_4.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._adobesfx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ADSFEDGRFHGJH.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._asdreti.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.AwsmttwuimdGzqtg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BbyroVxdrh.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BdpssrcqdbdYdsfchwj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.BjcbeZrjfpix.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._bnmj_bnmj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.chromes.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.clock.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csdtram.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c08c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.csimage.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ctrssv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.CxAudioSvx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.dergt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.DjrczMdnmly.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Edge_HYkajrcn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EuafniQvvhkeremx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.EukziOsjoeyda.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._folder_file.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._fxgtqqoptvlldry.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.FxvscvvxincDzozf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hajbion.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HDAudioProcessi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c194
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hdimages.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.HfevsjbkwHqvvw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Hfujotter.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.hyustr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c1e8
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c1f4
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c200
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c20c
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.img.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IogxnuHjjhear.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JctlnygaFrowslz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.JlyzbonHkzkftxn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.IsgmtvwnnhfJwvnyampmi.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kdiurdjk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c294
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.kellerimages.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.KynvtqKgwyivvxe.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LiujhamPrbtpzdw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LnohbfvXbomvdl.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LrhkjnmjwqRbfztxhn.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.LsdemvpkvCwftzj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.mgmypwofhfmqopyicqbqrjvpw.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MheslpkDuxdemiezai.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c374
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c388
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.MknxsnkynCthyhtxxy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NdhpudmztZpxcst.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.NlktzmskzsVsjftuub.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ogdg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.OqnrnxpVceknnavarr.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.pbxtgftlcb_biug.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PriuunaiippJfrxhimgtye.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PrusegipyywLtcqz.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.PummzkwKxkldp.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QlagkhxgVllmzvwq.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.QqkogdxrOlnggruwyjc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._server1.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SFDGRTHJYKH.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sppolsv.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._sviwk_sviwk.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.SytjuoamNuoslbxxt.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TbyzfuvcaZhpasnkvid.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TlnqalbgztpQxqdgybrol.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TxveneaflxBpnbwsuohrj.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.TzqsjvhUjrzsryqc.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.UjehdfutnuwOcreanxstg.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Usercefvvm.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VskanpkoobdHhjkf.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.VzjyejnbDopwurdx.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.warzone.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.win_services.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c600
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.Windows_AVGWindows_AVG.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windows_updaters.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windowsupdate.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c664
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7650
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.windowsupdater.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.XrgfrndukxdLsdkpcwfy.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
push 0x5b6504
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.ZisizgeefssJoxoyku.exe
push 0x5b6504
call sub.MSVCRT.dll_strcat
add esp, 8
push 0x5b6504
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1424]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x53c6c4
lea eax, [ebp - 0x1424]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1424]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1824]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.imagew.exe
lea eax, [ebp - 0x1824]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1824]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x40c]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.imagxxxxxxes.exe
lea eax, [ebp - 0x40c]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x40c]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x820]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.microsoftudate.exe
lea eax, [ebp - 0x820]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x820]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0xc24]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str.microsoftupdate.exe
lea eax, [ebp - 0xc24]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0xc24]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
mov ecx, 0x5b7654
call fcn.0050f0b0
push eax
lea edx, [ebp - 0x1024]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push str._rundll.exe
lea eax, [ebp - 0x1024]
push eax
call sub.MSVCRT.dll_strcat
add esp, 8
lea ecx, [ebp - 0x1024]
push ecx
mov ecx, 0x5b5bf0
call fcn.0050f680
push ecx
mov ecx, esp
mov dword [ebp - 0x1a50], esp
lea edx, [ebp - 0x1424]
push edx
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x21dc], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x21e0], eax
cmp dword [ebp - 0x21e0], 0
jne 0x43e422
push ecx
mov ecx, esp
mov dword [ebp - 0x1a54], esp
lea eax, [ebp - 0x1824]
push eax
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x21e4], eax
call fcn.004ae7b8
add esp, 4
mov dword [ebp - 0x21e8], eax
cmp dword [ebp - 0x21e8], 0
jne 0x43e422
cmp dword [0x5b851c], 0
jne 0x43e439