0412C4C: 'winmm.dll',0
00412C5C: 'mciSendStringA',0
00412CA4: 'advapi32.dll',0
00412CB8: 'GetUserNameA',0
00412D0C: '<unknown>',0000h
00412D24: 'tencent://message/?uin=442685579',0000h
00412D6C: 'tencent://message/?uin=',0000h
00412DFC: 'taskkill /f /im explorer.exe',0000h
00412E50: 'explorer',0000h
00412EAC: 'net send',0000h
00412EDC: 'explorer ',0000h
00412EF4: 'http://',0000h
00412F08: 'mspaint',0000h
00412F1C: 'http://user.free2.77169.net/442685579/music.wma',0000h
00412FFC: 'ftp',0000h
00413008: 'taskmgr',0000h
00413034: 'shutdown -s -t 0',0000h
0041305C: 'Sndvol32',0000h
00413088: 'shutdown -r -t 0',0000h
004130B0: 'dcomcnfg',0000h
004130C8: 'taskkill /f /im',0000h
004130EC: ' ',0000h
004130F4: 'telnet',0000h
00413108: 'mstsc -v',0000h
00413120: ':',0000h
00413128: 'shutdown -s -t',0000h
0041314C: 'shutdown -a',0000h
00413168: 'cmd',0000h
00413174: 'notepad',0000h
00413188: 'control.exe',0000h
004131A4: 'regedit',0000h
004131B8: 'set CDAudio door open',0000h
00413208: 'set CDAudio door closed',0000h
004132A4: 'explorer h**p://blackhumor520.hackbase.com',0000h |