sub_31432C62(11f6): "Cryptographic Service" "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... |
sub_31432239(3338): "GET" "HTTP/1.1 200 OK\r\nContent-Type: applicat"... "Content-Length: %u\r\n\r\n" "HTTP/1.1 200 OK\r\n\r\n\r\n" |
sub_31431F23(4891): "advapi32" "OpenProcessToken" "LookupPrivilegeValueA" "AdjustTokenPrivileges" "SeDebugPrivilege" |
sub_31431313(48f8): "ABCDEFGHIJKLMNOPQRSTUVWXYZ" "abcdefghijklmnopqrstuvwxyz" |
sub_3143237F(52a4): "Cryptographic Service" "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... |
sub_314311A0(531a): "Mozilla/4.0 (compatible; MSIE 6.0; Wind"... |
sub_31432BAD(7561): "Windows Security Manager" "Disk Defragmenter" "System Restore Service" "Bot Loader" "WinUpdate" "Windows Update Service" "avserve.exe" "avserve2.exeUpdate Service" "MS Config v13" "Windows Update" "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... |
sub_3143141F(7c7c): "zer0" "zer1" "Software\\Microsoft\\Wireless" "%d" |
sub_31431FAB(7e12): "kernel32" "VirtualAllocEx" "CreateRemoteThread" "uterm19-2" |
sub_3143256D(99a0): "u10x" "u11x" "u12x" "u13x" "u14x" "u15x" "u16x" "u17x" "u18x" "u19x" "u8" "u9" "u10" "u11" "u12" "u13" "u13i" "u14" "u15" "u16" "u17" "u18" "u19" "u20" "u20x" "ws2_32" "wininet" "msvcrt" "advapi32" "user32" "uterm20" |
sub_31432D2E(99c3): "Software\\Microsoft\\Wireless" "ID" "lveqikdgsunkenaetn" "ID" "lveqikdgsunkenaetn" "Cryptographic Service" "SOFTWARE\\Microsoft\\Windows\\CurrentVersi"... "1" "Client" "Client" |
sub_314328D7(a67f): "http://%s:%d/x.exe" |
sub_31431782(b40f): "lveqikdgsunkenaetn" "http://%s/index.php?id=%s&scn=%d&inf=%d"... "http://%s" "Mozilla/4.0 (compatible; MSIE 6.0; Wind"... |