new loader decoded strings

Offset: 0x164f88L
DZCW
Offset: 0x164fc8L
http://ds.download.windowsupdate.com/
Offset: 0x164cc8L
Software\QtProject
Offset: 0x164d28L
/c start %s && exit
Offset: 0x1650f0L
{"rep":1,"bid":"%s","tid":"%s","res":%d}
Offset: 0x164d68L
\System32\CompMgmtLauncher.exe
Offset: 0x164ebcL
Check Update
Offset: 0x165018L
{"rep":0,"bid":"%s","ver":%d,"cam":"%s","cis":%d,"lvl":%d,"adm":%d,"bit":%d,"osv":%d,"osb":%d,"tmt":%d}
Offset: 0x164c90L
boom
Offset: 0x164e18L
tmp_file
Offset: 0x164c9cL
http://gdiscoun.org/
Offset: 0x164fa0L
regsvr32.exe %s
Offset: 0x164e30L
Software\Microsoft\Windows\CurrentVersion
Offset: 0x164f94L
6VK3
Offset: 0x164da8L
runas
Offset: 0x164f10L
Content-Type: application/octet-stream
Connection: close
Offset: 0x164ed8L
Windows-Update-Agent
Offset: 0x164decL
\shell\open\command
Offset: 0x165144L
{"rep":2}
Offset: 0x164cf0L
msiexec.exe
Offset: 0x164db8L
Software\Classes\mscfile
Offset: 0x164eb0L
\Run
Offset: 0x164f04L
POST
Offset: 0x164e88L
\Policies\Explorer
Offset: 0x164d54L
cmd.exe
Offset: 0x164d0cL
svchost.exe