Stack string detection combines multiple short strings into a longer one

[xusheng6]

In the following screenshot, we can see there are multiple null-terminated strings on the stack:

However, the stack string detection combines them and thinks it is a longer string:

We should either automatically detect the case and create multiple strings from it, or, at least offer a way to override the behavior of the stack string detection and make it possible for the user to fix the situation

[xusheng6]

I tested and found that settings the type of _Str2_4 at rbp-0x4b produces weird result: the HLIL does not set the first two bytes of the string:

Though it looks normal at the disassembly:

[xusheng6]

malware warning, pw: infected

18390775977.zip