Function at 0x439689
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
sub esp, 0x74
push 0xe4
mov eax, 0x4d9ea0
call fcn.004becb0
mov ecx, 0x587bc8
mov dword [ebp - 0xf0], ecx
call fcn.004a451b
and dword [ebp - 4], 0
lea ecx, [ebp + 0x64]
call fcn.004a451b
push 0xffffffffffffffff
push 0
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 1
call fcn.004a459c
push 0x7d
lea eax, [ebp + 0x10]
push eax
call fcn.004159f9
mov dword [ebp - 0xa4], eax
push 0x30
lea eax, [ebp + 0x18]
push eax
mov byte [ebp - 4], 2
call fcn.004159f9
mov dword [ebp - 0x9c], eax
push 0x33
lea eax, [ebp + 0x20]
push eax
mov byte [ebp - 4], 3
call fcn.004159f9
mov dword [ebp - 0x94], eax
push 0x30
lea eax, [ebp + 0x28]
push eax
mov byte [ebp - 4], 4
call fcn.004159f9
mov dword [ebp - 0x8c], eax
push 0x34
lea eax, [ebp + 0x30]
push eax
mov byte [ebp - 4], 5
call fcn.004159f9
mov dword [ebp - 0x84], eax
push 0x39
lea eax, [ebp + 0x38]
push eax
mov byte [ebp - 4], 6
call fcn.004159f9
mov dword [ebp - 0x7c], eax
push 0x46
lea eax, [ebp + 0x40]
push eax
mov byte [ebp - 4], 7
call fcn.004159f9
mov dword [ebp - 0x74], eax
push 0x38
lea eax, [ebp + 0x48]
push eax
mov byte [ebp - 4], 8
call fcn.004159f9
mov dword [ebp - 0x6c], eax
push 0x32
pop edi
push edi
lea eax, [ebp + 0x50]
push eax
mov byte [ebp - 4], 9
call fcn.004159f9
mov dword [ebp - 0x64], eax
push 0x2d
pop ebx
mov byte [ebp - 4], 0xa
push ebx
lea eax, [ebp + 0x58]
push eax
call fcn.004159f9
mov dword [ebp - 0x5c], eax
push edi
lea eax, [ebp + 0x5c]
push eax
mov byte [ebp - 4], 0xb
call fcn.004159f9
mov dword [ebp - 0x54], eax
push 0x34
lea eax, [ebp + 0x60]
push eax
mov byte [ebp - 4], 0xc
call fcn.004159f9
mov dword [ebp - 0x4c], eax
push 0x36
lea eax, [ebp + 0x3c]
push eax
mov byte [ebp - 4], 0xd
call fcn.004159f9
mov dword [ebp - 0x44], eax
push edi
lea eax, [ebp + 0x1c]
push eax
mov byte [ebp - 4], 0xe
call fcn.004159f9
mov dword [ebp - 0xc4], eax
push ebx
lea eax, [ebp + 0x44]
push eax
mov byte [ebp - 4], 0xf
call fcn.004159f9
mov dword [ebp - 0xcc], eax
push 0x33
lea eax, [ebp + 0x2c]
push eax
mov byte [ebp - 4], 0x10
call fcn.004159f9
mov dword [ebp - 0xe0], eax
push edi
lea eax, [ebp + 0x4c]
push eax
mov byte [ebp - 4], 0x11
call fcn.004159f9
mov dword [ebp - 0xd4], eax
push 0x33
lea eax, [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x12
call fcn.004159f9
mov dword [ebp - 0xc8], eax
push 0x35
lea eax, [ebp + 0x54]
push eax
mov byte [ebp - 4], 0x13
call fcn.004159f9
lea ecx, [ebp + 0x34]
push 0x7b
push ecx
mov esi, eax
mov byte [ebp - 4], 0x14
call fcn.00441b37
lea ecx, [ebp + 0x24]
push 0x33
push ecx
mov esi, eax
mov byte [ebp - 4], 0x15
call fcn.00406cd6
mov byte [ebp - 4], 0x16
push dword [ebp - 0xc8]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x18]
push 0x36
push ecx
mov esi, eax
mov byte [ebp - 4], 0x17
call fcn.00406cd6
mov byte [ebp - 4], 0x18
push dword [ebp - 0xd4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004020b5
lea ecx, [ebp + 4]
push 0x43
push ecx
mov esi, eax
mov byte [ebp - 4], 0x19
call fcn.00406cd6
mov byte [ebp - 4], 0x1a
push dword [ebp - 0xe0]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004020b5
add esp, 0x44
lea ecx, [ebp - 0x90]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x1b
call fcn.00406cd6
mov byte [ebp - 4], 0x1c
push dword [ebp - 0xcc]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xb0]
push 0x41
push ecx
mov esi, eax
mov byte [ebp - 4], 0x1d
call fcn.00406cd6
mov byte [ebp - 4], 0x1e
push dword [ebp - 0xc4]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x88]
push 0x39
push ecx
mov esi, eax
mov byte [ebp - 4], 0x1f
call fcn.00406cd6
mov byte [ebp - 4], 0x20
push dword [ebp - 0x44]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.004020b5
mov byte [ebp - 4], 0x21
push ebx
lea ecx, [ebp + 0xc]
push ecx
mov esi, eax
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x22
push dword [ebp - 0x4c]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x48]
push 0x46
push ecx
mov esi, eax
mov byte [ebp - 4], 0x23
call fcn.00406cd6
mov byte [ebp - 4], 0x24
push dword [ebp - 0x54]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x40]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], 0x25
call fcn.00406cd6
mov byte [ebp - 4], 0x26
push dword [ebp - 0x5c]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x34]
push 0x41
push ecx
mov esi, eax
mov byte [ebp - 4], 0x27
call fcn.00406cd6
mov byte [ebp - 4], 0x28
push dword [ebp - 0x64]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp - 0x30]
push 0x46
push ecx
mov esi, eax
mov byte [ebp - 4], 0x29
call fcn.00406cd6
mov byte [ebp - 4], 0x2a
push dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x78]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x2b
call fcn.00406cd6
mov byte [ebp - 4], 0x2c
push dword [ebp - 0x74]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x98]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], bl
call fcn.00406cd6
mov byte [ebp - 4], 0x2e
push dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x70]
push 0x38
push ecx
mov esi, eax
mov byte [ebp - 4], 0x2f
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x30
push dword [ebp - 0x84]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xa8]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], 0x31
call fcn.00406cd6
mov byte [ebp - 4], 0x32
push dword [ebp - 0x8c]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x20]
push 0x38
push ecx
mov esi, eax
mov byte [ebp - 4], 0x33
call fcn.00406cd6
mov byte [ebp - 4], 0x34
push dword [ebp - 0x94]
push eax
lea eax, [ebp]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x38]
push 0x34
push ecx
mov esi, eax
mov byte [ebp - 4], 0x35
call fcn.00406cd6
mov byte [ebp - 4], 0x36
push dword [ebp - 0x9c]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp - 0xb4]
push 0x42
push ecx
mov esi, eax
mov byte [ebp - 4], 0x37
call fcn.00406cd6
mov byte [ebp - 4], 0x38
push dword [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.004020b5
add esp, 0x14
push eax
mov byte [ebp - 4], 0x39
push dword [ebp + 0x6c]
lea ecx, [ebp + 0x64]
call fcn.004a4959
mov ecx, dword [ebp - 0xac]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xbc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x98]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x5c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x7d
lea eax, [ebp - 0xc8]
push eax
call fcn.004159f9
mov dword [ebp + 0x14], eax
push 0x30
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 4], 0x3a
call fcn.004159f9
mov dword [ebp + 0x4c], eax
push 0x33
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0x3b
call fcn.004159f9
mov dword [ebp + 0x2c], eax
push 0x30
lea eax, [ebp - 0xcc]
push eax
mov byte [ebp - 4], 0x3c
call fcn.004159f9
mov dword [ebp + 0x44], eax
push 0x34
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x3d
call fcn.004159f9
mov dword [ebp + 0x1c], eax
push 0x39
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x3e
call fcn.004159f9
mov dword [ebp + 0x3c], eax
push 0x46
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x3f
call fcn.004159f9
mov dword [ebp + 0x60], eax
push 0x38
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x40
call fcn.004159f9
mov dword [ebp + 0x5c], eax
push edi
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 4], 0x41
call fcn.004159f9
mov dword [ebp + 0x58], eax
push ebx
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 0x42
call fcn.004159f9
mov dword [ebp + 0x50], eax
push edi
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x43
call fcn.004159f9
mov dword [ebp + 0x48], eax
push 0x34
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x44
call fcn.004159f9
mov dword [ebp + 0x40], eax
push 0x36
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 0x45
call fcn.004159f9
mov dword [ebp + 0x38], eax
push edi
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0x46
call fcn.004159f9
mov dword [ebp + 0x30], eax
push ebx
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x47
call fcn.004159f9
mov dword [ebp + 0x28], eax
push 0x33
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x48
call fcn.004159f9
mov dword [ebp + 0x20], eax
push edi
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0x49
call fcn.004159f9
mov dword [ebp + 0x18], eax
push 0x33
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x4a
call fcn.004159f9
mov dword [ebp + 0x10], eax
push 0x35
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x4b
call fcn.004159f9
lea ecx, [ebp - 0xb4]
push 0x7b
push ecx
mov esi, eax
mov byte [ebp - 4], 0x4c
call fcn.00441b37
push 0x33
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x4d
push ecx
mov esi, eax
call fcn.00406cd6
mov byte [ebp - 4], 0x4e
push dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004020b5
lea ecx, [ebp]
push 0x36
push ecx
mov esi, eax
mov byte [ebp - 4], 0x4f
call fcn.00406cd6
mov byte [ebp - 4], 0x50
push dword [ebp + 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x28]
push 0x43
push ecx
mov esi, eax
mov byte [ebp - 4], 0x51
call fcn.00406cd6
mov byte [ebp - 4], 0x52
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004020b5
add esp, 0x44
lea ecx, [ebp - 0x14]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x53
call fcn.00406cd6
mov byte [ebp - 4], 0x54
push dword [ebp + 0x28]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004020b5
push 0x41
pop edi
lea ecx, [ebp - 0x1c]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x55
call fcn.00406cd6
mov byte [ebp - 4], 0x56
push dword [ebp + 0x30]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x24]
push 0x39
push ecx
mov esi, eax
mov byte [ebp - 4], 0x57
call fcn.00406cd6
mov byte [ebp - 4], 0x58
push dword [ebp + 0x38]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x2c]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x59
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x5a
push dword [ebp + 0x40]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x3c]
push 0x46
push ecx
mov esi, eax
mov byte [ebp - 4], 0x5b
call fcn.00406cd6
mov byte [ebp - 4], 0x5c
push dword [ebp + 0x48]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xb8]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], 0x5d
call fcn.00406cd6
mov byte [ebp - 4], 0x5e
push dword [ebp + 0x50]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x80]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x5f
call fcn.00406cd6
mov byte [ebp - 4], 0x60
push dword [ebp + 0x58]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp - 0xa0]
push 0x46
push ecx
mov esi, eax
mov byte [ebp - 4], 0x61
call fcn.00406cd6
mov byte [ebp - 4], 0x62
push dword [ebp + 0x5c]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x50]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x63
call fcn.00406cd6
mov byte [ebp - 4], 0x64
push dword [ebp + 0x60]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x58]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], 0x65
call fcn.00406cd6
mov byte [ebp - 4], 0x66
push dword [ebp + 0x3c]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x60]
push 0x38
push ecx
mov esi, eax
mov byte [ebp - 4], 0x67
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x68
push dword [ebp + 0x1c]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x68]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], 0x69
call fcn.00406cd6
mov byte [ebp - 4], 0x6a
push dword [ebp + 0x44]
push eax
lea eax, [ebp + 4]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x10]
push 0x38
push ecx
mov esi, eax
mov byte [ebp - 4], 0x6b
call fcn.00406cd6
mov byte [ebp - 4], 0x6c
push dword [ebp + 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004020b5
lea ecx, [ebp + 8]
push 0x34
push ecx
mov esi, eax
mov byte [ebp - 4], 0x6d
call fcn.00406cd6
mov byte [ebp - 4], 0x6e
push dword [ebp + 0x4c]
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.004020b5
add esp, 0x48
mov byte [ebp - 4], 0x6f
push 0x42
lea ecx, [ebp + 0x34]
push ecx
mov esi, eax
call fcn.00406cd6
mov byte [ebp - 4], 0x70
push dword [ebp + 0x14]
push eax
lea eax, [ebp + 0x54]
push eax
call fcn.004020b5
add esp, 0x14
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0x71
call fcn.00404b4c
mov ecx, dword [ebp + 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x98]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xbc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xac]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x9c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xc4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xcc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xe0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xd4]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xc8]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x7d
lea eax, [ebp - 0xc0]
push eax
call fcn.004159f9
mov dword [ebp + 0x14], eax
push 0x35
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 4], 0x72
call fcn.004159f9
mov dword [ebp + 0x4c], eax
push 0x30
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0x73
call fcn.004159f9
mov dword [ebp + 0x2c], eax
push edi
lea eax, [ebp - 0xcc]
push eax
mov byte [ebp - 4], 0x74
call fcn.004159f9
mov dword [ebp + 0x44], eax
push 0x30
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0x75
call fcn.004159f9
mov dword [ebp + 0x1c], eax
push edi
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x76
call fcn.004159f9
mov dword [ebp + 0x3c], eax
push 0x30
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0x77
call fcn.004159f9
mov dword [ebp + 0x60], eax
push edi
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x78
call fcn.004159f9
mov dword [ebp + 0x5c], eax
mov byte [ebp - 4], 0x79
push 0x44
lea eax, [ebp - 0x5c]
push eax
call fcn.004159f9
mov dword [ebp + 0x58], eax
push ebx
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 0x7a
call fcn.004159f9
mov dword [ebp + 0x50], eax
push 0x63
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x7b
call fcn.004159f9
mov dword [ebp + 0x48], eax
push 0x31
pop edi
push edi
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x7c
call fcn.004159f9
mov dword [ebp + 0x40], eax
push 0x43
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 0x7d
call fcn.004159f9
mov dword [ebp + 0x38], eax
push 0x41
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0x7e
call fcn.004159f9
mov dword [ebp + 0x30], eax
push ebx
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x7f
call fcn.004159f9
mov dword [ebp + 0x28], eax
push 0x43
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x80
call fcn.004159f9
mov dword [ebp + 0x20], eax
push 0x34
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0x81
call fcn.004159f9
mov dword [ebp + 0x18], eax
push 0x41
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x82
call fcn.004159f9
mov dword [ebp + 0x10], eax
push 0x43
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x83
call fcn.004159f9
push 0x7b
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x84
push ecx
mov esi, eax
call fcn.00441b37
lea ecx, [ebp - 0xbc]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x85
call fcn.00406cd6
mov byte [ebp - 4], 0x86
push dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004020b5
lea ecx, [ebp]
push 0x41
push ecx
mov esi, eax
mov byte [ebp - 4], 0x87
call fcn.00406cd6
mov byte [ebp - 4], 0x88
push dword [ebp + 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x28]
push 0x38
push ecx
mov esi, eax
mov byte [ebp - 4], 0x89
call fcn.00406cd6
mov byte [ebp - 4], 0x8a
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004020b5
add esp, 0x44
lea ecx, [ebp - 0x14]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0x8b
call fcn.00406cd6
mov byte [ebp - 4], 0x8c
push dword [ebp + 0x28]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x1c]
push 0x46
push ecx
mov esi, eax
mov byte [ebp - 4], 0x8d
call fcn.00406cd6
mov byte [ebp - 4], 0x8e
push dword [ebp + 0x30]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x24]
push 0x43
push ecx
mov esi, eax
mov byte [ebp - 4], 0x8f
call fcn.00406cd6
mov byte [ebp - 4], 0x90
push dword [ebp + 0x38]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x2c]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x91
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x92
push dword [ebp + 0x40]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x3c]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x93
call fcn.00406cd6
mov byte [ebp - 4], 0x94
push dword [ebp + 0x48]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xb8]
push 0x66
push ecx
mov esi, eax
mov byte [ebp - 4], 0x95
call fcn.00406cd6
mov byte [ebp - 4], 0x96
push dword [ebp + 0x50]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x80]
push 0x39
push ecx
mov esi, eax
mov byte [ebp - 4], 0x97
call fcn.00406cd6
mov byte [ebp - 4], 0x98
push dword [ebp + 0x58]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp - 0xa0]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x99
call fcn.00406cd6
mov byte [ebp - 4], 0x9a
push dword [ebp + 0x5c]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004020b5
mov byte [ebp - 4], 0x9b
push ebx
lea ecx, [ebp - 0x50]
push ecx
mov esi, eax
call fcn.00406cd6
mov byte [ebp - 4], 0x9c
push dword [ebp + 0x60]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x58]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0x9d
call fcn.00406cd6
mov byte [ebp - 4], 0x9e
push dword [ebp + 0x3c]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x60]
push 0x41
push ecx
mov esi, eax
mov byte [ebp - 4], 0x9f
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0xa0
push dword [ebp + 0x1c]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x68]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0xa1
call fcn.00406cd6
mov byte [ebp - 4], 0xa2
push dword [ebp + 0x44]
push eax
lea eax, [ebp + 4]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x10]
push 0x37
push ecx
mov esi, eax
mov byte [ebp - 4], 0xa3
call fcn.00406cd6
mov byte [ebp - 4], 0xa4
push dword [ebp + 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004020b5
lea ecx, [ebp + 8]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], 0xa5
call fcn.00406cd6
mov byte [ebp - 4], 0xa6
push dword [ebp + 0x4c]
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp + 0x34]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0xa7
call fcn.00406cd6
mov byte [ebp - 4], 0xa8
push dword [ebp + 0x14]
push eax
lea eax, [ebp + 0x54]
push eax
call fcn.004020b5
add esp, 0x14
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0xa9
call fcn.00404b4c
mov ecx, dword [ebp + 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x98]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xbc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xac]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x9c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xc4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xcc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xe0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xd4]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xc0]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x41
lea eax, [ebp - 0xd0]
push eax
call fcn.004159f9
mov dword [ebp + 0x28], eax
push edi
lea eax, [ebp + 0x24]
push eax
mov byte [ebp - 4], 0xaa
call fcn.004159f9
mov dword [ebp + 0x20], eax
push 0x34
lea eax, [ebp + 0x34]
push eax
mov byte [ebp - 4], 0xab
call fcn.004159f9
mov dword [ebp + 0x18], eax
push 0x33
lea eax, [ebp + 0x54]
push eax
mov byte [ebp - 4], 0xac
call fcn.004159f9
mov dword [ebp + 0x10], eax
push 0x35
lea eax, [ebp + 0x14]
push eax
mov byte [ebp - 4], 0xad
call fcn.004159f9
mov dword [ebp - 0xc0], eax
push 0x36
lea eax, [ebp + 0x4c]
push eax
mov byte [ebp - 4], 0xae
call fcn.004159f9
lea ecx, [ebp + 0x2c]
push 0x45
push ecx
mov esi, eax
mov byte [ebp - 4], 0xaf
call fcn.00441b37
lea ecx, [ebp + 0x44]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0xb0
call fcn.00406cd6
mov byte [ebp - 4], 0xb1
push dword [ebp - 0xc0]
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x3c]
push 0x35
push ecx
mov esi, eax
mov byte [ebp - 4], 0xb2
call fcn.00406cd6
mov byte [ebp - 4], 0xb3
push dword [ebp + 0x10]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x5c]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0xb4
call fcn.00406cd6
mov byte [ebp - 4], 0xb5
push dword [ebp + 0x18]
push eax
lea eax, [ebp + 0x58]
push eax
call fcn.004020b5
add esp, 0x44
lea ecx, [ebp + 0x50]
push 0x43
push ecx
mov esi, eax
mov byte [ebp - 4], 0xb6
call fcn.00406cd6
mov byte [ebp - 4], 0xb7
push dword [ebp + 0x20]
push eax
lea eax, [ebp + 0x48]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x40]
push 0x36
push ecx
mov esi, eax
mov byte [ebp - 4], 0xb8
call fcn.00406cd6
mov byte [ebp - 4], 0xb9
push dword [ebp + 0x28]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x30]
push 0x7d
push ecx
mov esi, eax
mov byte [ebp - 4], 0xba
call fcn.00406cd6
add esp, 0x30
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0xbb
call fcn.00404b4c
mov ecx, dword [ebp + 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x5c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xd0]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x7d
lea eax, [ebp - 0xe4]
push eax
call fcn.004159f9
mov dword [ebp + 0x2c], eax
push 0x42
lea eax, [ebp - 0xcc]
push eax
mov byte [ebp - 4], 0xbc
call fcn.004159f9
mov dword [ebp + 0x44], eax
push 0x44
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0xbd
call fcn.004159f9
mov dword [ebp + 0x1c], eax
push 0x41
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xbe
call fcn.004159f9
mov dword [ebp + 0x3c], eax
mov byte [ebp - 4], 0xbf
push 0x38
lea eax, [ebp - 0x4c]
push eax
call fcn.004159f9
mov dword [ebp + 0x60], eax
push 0x36
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0xc0
call fcn.004159f9
mov dword [ebp + 0x5c], eax
push 0x30
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 4], 0xc1
call fcn.004159f9
mov dword [ebp + 0x58], eax
push 0x37
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 0xc2
call fcn.004159f9
mov dword [ebp + 0x50], eax
push 0x46
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0xc3
call fcn.004159f9
mov dword [ebp + 0x48], eax
push ebx
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0xc4
call fcn.004159f9
mov dword [ebp + 0x40], eax
push 0x43
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 0xc5
call fcn.004159f9
mov dword [ebp + 0x38], eax
push edi
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0xc6
call fcn.004159f9
mov dword [ebp + 0x30], eax
push 0x36
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0xc7
call fcn.004159f9
mov dword [ebp + 0x28], eax
push 0x42
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0xc8
call fcn.004159f9
mov dword [ebp + 0x20], eax
push ebx
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0xc9
call fcn.004159f9
mov dword [ebp + 0x18], eax
push 0x46
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0xca
call fcn.004159f9
mov dword [ebp + 0x10], eax
push 0x46
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0xcb
call fcn.004159f9
mov dword [ebp - 0xc0], eax
push 0x41
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 0xcc
call fcn.004159f9
mov dword [ebp - 0xd0], eax
push 0x44
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0xcd
call fcn.004159f9
lea ecx, [ebp - 0x38]
push 0x7b
push ecx
mov esi, eax
mov byte [ebp - 4], 0xce
call fcn.00441b37
lea ecx, [ebp]
push 0x32
push ecx
mov esi, eax
mov byte [ebp - 4], 0xcf
call fcn.00406cd6
mov byte [ebp - 4], 0xd0
push dword [ebp - 0xd0]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x28]
push 0x32
push ecx
mov esi, eax
mov byte [ebp - 4], 0xd1
call fcn.00406cd6
mov byte [ebp - 4], 0xd2
push dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x14]
push 0x35
push ecx
mov esi, eax
mov byte [ebp - 4], 0xd3
call fcn.00406cd6
mov byte [ebp - 4], 0xd4
push dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004020b5
add esp, 0x44
lea ecx, [ebp - 0x1c]
push 0x32
push ecx
mov esi, eax
mov byte [ebp - 4], 0xd5
call fcn.00406cd6
mov byte [ebp - 4], 0xd6
push dword [ebp + 0x18]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x24]
push 0x45
push ecx
mov esi, eax
mov byte [ebp - 4], 0xd7
call fcn.00406cd6
mov byte [ebp - 4], 0xd8
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x2c]
push 0x41
push ecx
mov esi, eax
mov byte [ebp - 4], 0xd9
call fcn.00406cd6
mov byte [ebp - 4], 0xda
push dword [ebp + 0x28]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x3c]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0xdb
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0xdc
push dword [ebp + 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xb8]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0xdd
call fcn.00406cd6
mov byte [ebp - 4], 0xde
push dword [ebp + 0x38]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x80]
push 0x44
push ecx
mov esi, eax
mov byte [ebp - 4], 0xdf
call fcn.00406cd6
mov byte [ebp - 4], 0xe0
push dword [ebp + 0x40]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xa0]
push 0x41
push ecx
mov esi, eax
mov byte [ebp - 4], 0xe1
call fcn.00406cd6
mov byte [ebp - 4], 0xe2
push dword [ebp + 0x48]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp - 0x50]
push 0x33
push ecx
mov esi, eax
mov byte [ebp - 4], 0xe3
call fcn.00406cd6
mov byte [ebp - 4], 0xe4
push dword [ebp + 0x50]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x58]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0xe5
call fcn.00406cd6
mov byte [ebp - 4], 0xe6
push dword [ebp + 0x58]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x60]
push 0x32
push ecx
mov esi, eax
mov byte [ebp - 4], 0xe7
call fcn.00406cd6
mov byte [ebp - 4], 0xe8
push dword [ebp + 0x5c]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x68]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0xe9
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0xea
push dword [ebp + 0x60]
push eax
lea eax, [ebp + 4]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x10]
push 0x43
push ecx
mov esi, eax
mov byte [ebp - 4], 0xeb
call fcn.00406cd6
mov byte [ebp - 4], 0xec
push dword [ebp + 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004020b5
mov byte [ebp - 4], 0xed
push edi
lea ecx, [ebp + 8]
push ecx
mov esi, eax
call fcn.00406cd6
mov byte [ebp - 4], 0xee
push dword [ebp + 0x1c]
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x34]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0xef
call fcn.00406cd6
mov byte [ebp - 4], 0xf0
push dword [ebp + 0x44]
push eax
lea eax, [ebp + 0x54]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp + 0x14]
push 0x37
push ecx
mov esi, eax
mov byte [ebp - 4], 0xf1
call fcn.00406cd6
mov byte [ebp - 4], 0xf2
push dword [ebp + 0x2c]
push eax
lea eax, [ebp + 0x4c]
push eax
call fcn.004020b5
add esp, 0x14
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0xf3
call fcn.00404b4c
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x98]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xbc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xac]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x9c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xc4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xcc]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xe4]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x7d
lea eax, [ebp - 0xd8]
push eax
call fcn.004159f9
mov dword [ebp + 0x44], eax
push 0x46
lea eax, [ebp - 0xc4]
push eax
mov byte [ebp - 4], 0xf4
call fcn.004159f9
mov dword [ebp + 0x1c], eax
push 0x43
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xf5
call fcn.004159f9
mov dword [ebp + 0x3c], eax
push 0x37
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0xf6
call fcn.004159f9
mov dword [ebp + 0x60], eax
mov byte [ebp - 4], 0xf7
push 0x34
lea eax, [ebp - 0x54]
push eax
call fcn.004159f9
mov dword [ebp + 0x5c], eax
push 0x43
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.004159f9
mov dword [ebp + 0x58], eax
push 0x30
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 0xf9
call fcn.004159f9
mov dword [ebp + 0x50], eax
push edi
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0xfa
call fcn.004159f9
mov dword [ebp + 0x48], eax
push 0x44
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0xfb
call fcn.004159f9
mov dword [ebp + 0x40], eax
push ebx
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 0xfc
call fcn.004159f9
mov dword [ebp + 0x38], eax
push 0x44
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0xfd
call fcn.004159f9
mov dword [ebp + 0x30], eax
push edi
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0xfe
call fcn.004159f9
mov dword [ebp + 0x28], eax
push 0x46
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0xff
call fcn.004159f9
mov dword [ebp + 0x20], eax
push 0x38
lea eax, [ebp - 0x9c]
push eax
mov dword [ebp - 4], 0x100
call fcn.004159f9
mov dword [ebp + 0x18], eax
push ebx
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 1
call fcn.004159f9
mov dword [ebp + 0x10], eax
push edi
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 2
call fcn.004159f9
mov dword [ebp - 0xc0], eax
push 0x38
lea eax, [ebp - 0xb4]
push eax
mov byte [ebp - 4], 3
call fcn.004159f9
mov dword [ebp - 0xd0], eax
push 0x46
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 4
call fcn.004159f9
mov dword [ebp - 0xe4], eax
push 0x45
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 5
call fcn.004159f9
lea ecx, [ebp]
push 0x7b
push ecx
mov esi, eax
mov byte [ebp - 4], 6
call fcn.00441b37
lea ecx, [ebp - 0x20]
push 0x38
push ecx
mov esi, eax
mov byte [ebp - 4], 7
call fcn.00406cd6
mov byte [ebp - 4], 8
push dword [ebp - 0xe4]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xa8]
push 0x42
push ecx
mov esi, eax
mov byte [ebp - 4], 9
call fcn.00406cd6
mov byte [ebp - 4], 0xa
push dword [ebp - 0xd0]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x70]
push 0x36
push ecx
mov esi, eax
mov byte [ebp - 4], 0xb
call fcn.00406cd6
mov byte [ebp - 4], 0xc
push dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004020b5
add esp, 0x44
lea ecx, [ebp - 0x98]
push 0x34
push ecx
mov esi, eax
mov byte [ebp - 4], 0xd
call fcn.00406cd6
mov byte [ebp - 4], 0xe
push dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x78]
push 0x35
push ecx
mov esi, eax
mov byte [ebp - 4], 0xf
call fcn.00406cd6
mov byte [ebp - 4], 0x10
push dword [ebp + 0x18]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x30]
push 0x38
push ecx
mov esi, eax
mov byte [ebp - 4], 0x11
call fcn.00406cd6
mov byte [ebp - 4], 0x12
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x34]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x13
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x14
push dword [ebp + 0x28]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x40]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x15
call fcn.00406cd6
mov byte [ebp - 4], 0x16
push dword [ebp + 0x30]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x48]
push 0x32
push ecx
mov esi, eax
mov byte [ebp - 4], 0x17
call fcn.00406cd6
mov byte [ebp - 4], 0x18
push dword [ebp + 0x38]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.004020b5
push 0x39
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x19
push ecx
mov esi, eax
call fcn.00406cd6
mov byte [ebp - 4], 0x1a
push dword [ebp + 0x40]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp - 0x88]
push 0x36
push ecx
mov esi, eax
mov byte [ebp - 4], 0x1b
call fcn.00406cd6
mov byte [ebp - 4], 0x1c
push dword [ebp + 0x48]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xb0]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x1d
call fcn.00406cd6
mov byte [ebp - 4], 0x1e
push dword [ebp + 0x50]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x90]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0x1f
call fcn.00406cd6
mov byte [ebp - 4], 0x20
push dword [ebp + 0x58]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.004020b5
lea ecx, [ebp + 4]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0x21
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x22
push dword [ebp + 0x5c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x18]
push 0x46
push ecx
mov esi, eax
mov byte [ebp - 4], 0x23
call fcn.00406cd6
mov byte [ebp - 4], 0x24
push dword [ebp + 0x60]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x24]
push 0x39
push ecx
mov esi, eax
mov byte [ebp - 4], 0x25
call fcn.00406cd6
mov byte [ebp - 4], 0x26
push dword [ebp + 0x3c]
push eax
lea eax, [ebp + 0x34]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x54]
push 0x35
push ecx
mov esi, eax
mov byte [ebp - 4], 0x27
call fcn.00406cd6
mov byte [ebp - 4], 0x28
push dword [ebp + 0x1c]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp + 0x4c]
push 0x45
push ecx
mov esi, eax
mov byte [ebp - 4], 0x29
call fcn.00406cd6
mov byte [ebp - 4], 0x2a
push dword [ebp + 0x44]
push eax
lea eax, [ebp + 0x2c]
push eax
call fcn.004020b5
add esp, 0x14
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0x2b
call fcn.00404b4c
mov ecx, dword [ebp + 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x98]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xbc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xac]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x9c]
add ecx, 0xfffffff0
call fcn.004027b0
mov dword [ebp - 4], 0xff
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xc4]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xd8]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x7d
lea eax, [ebp - 0xdc]
push eax
call fcn.004159f9
mov dword [ebp + 0x1c], eax
push 0x35
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 4], 0x12c
call fcn.004159f9
mov dword [ebp + 0x3c], eax
push edi
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], bl
call fcn.004159f9
mov dword [ebp + 0x60], eax
push 0x41
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x2e
call fcn.004159f9
mov dword [ebp + 0x5c], eax
push 0x34
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 4], 0x2f
call fcn.004159f9
mov dword [ebp + 0x58], eax
push edi
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 0x30
call fcn.004159f9
mov dword [ebp + 0x50], eax
push 0x30
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x31
call fcn.004159f9
mov dword [ebp + 0x48], eax
push 0x34
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 4], 0x32
call fcn.004159f9
mov dword [ebp + 0x40], eax
push edi
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 0x33
call fcn.004159f9
mov dword [ebp + 0x38], eax
push ebx
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0x34
call fcn.004159f9
mov dword [ebp + 0x30], eax
push 0x44
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x35
call fcn.004159f9
mov dword [ebp + 0x28], eax
push edi
lea eax, [ebp - 0x94]
push eax
mov byte [ebp - 4], 0x36
call fcn.004159f9
mov dword [ebp + 0x20], eax
push 0x37
lea eax, [ebp - 0x9c]
push eax
mov byte [ebp - 4], 0x37
call fcn.004159f9
mov dword [ebp + 0x18], eax
push 0x30
lea eax, [ebp - 0xa4]
push eax
mov byte [ebp - 4], 0x38
call fcn.004159f9
mov dword [ebp + 0x10], eax
push ebx
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x39
call fcn.004159f9
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x3a
push 0x38
lea eax, [ebp - 0xb4]
push eax
call fcn.004159f9
mov dword [ebp - 0xd0], eax
push 0x32
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 0x3b
call fcn.004159f9
mov dword [ebp - 0xe4], eax
push 0x39
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 0x3c
call fcn.004159f9
mov dword [ebp - 0xd8], eax
push 0x43
lea eax, [ebp]
push eax
mov byte [ebp - 4], 0x3d
call fcn.004159f9
lea ecx, [ebp - 0x20]
push 0x7b
push ecx
mov esi, eax
mov byte [ebp - 4], 0x3e
call fcn.00441b37
lea ecx, [ebp - 0x28]
push 0x34
push ecx
mov esi, eax
mov byte [ebp - 4], 0x3f
call fcn.00406cd6
mov byte [ebp - 4], 0x40
push dword [ebp - 0xd8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x14]
push 0x46
push ecx
mov esi, eax
mov byte [ebp - 4], 0x41
call fcn.00406cd6
mov byte [ebp - 4], 0x42
push dword [ebp - 0xe4]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x1c]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x43
call fcn.00406cd6
mov byte [ebp - 4], 0x44
push dword [ebp - 0xd0]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.004020b5
add esp, 0x44
lea ecx, [ebp - 0x24]
push 0x34
push ecx
mov esi, eax
mov byte [ebp - 4], 0x45
call fcn.00406cd6
mov byte [ebp - 4], 0x46
push dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x2c]
push 0x35
push ecx
mov esi, eax
mov byte [ebp - 4], 0x47
call fcn.00406cd6
mov byte [ebp - 4], 0x48
push dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x3c]
push 0x41
push ecx
mov esi, eax
mov byte [ebp - 4], 0x49
call fcn.00406cd6
mov byte [ebp - 4], 0x4a
push dword [ebp + 0x18]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xb8]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x4b
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x4c
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x80]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x4d
call fcn.00406cd6
mov byte [ebp - 4], 0x4e
push dword [ebp + 0x28]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004020b5
lea ecx, [ebp - 0xa0]
push 0x33
push ecx
mov esi, eax
mov byte [ebp - 4], 0x4f
call fcn.00406cd6
mov byte [ebp - 4], 0x50
push dword [ebp + 0x30]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004020b5
mov byte [ebp - 4], 0x51
push 0x39
lea ecx, [ebp - 0x50]
push ecx
mov esi, eax
call fcn.00406cd6
mov byte [ebp - 4], 0x52
push dword [ebp + 0x38]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp - 0x58]
push 0x34
push ecx
mov esi, eax
mov byte [ebp - 4], 0x53
call fcn.00406cd6
mov byte [ebp - 4], 0x54
push dword [ebp + 0x40]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x60]
push ebx
push ecx
mov esi, eax
mov byte [ebp - 4], 0x55
call fcn.00406cd6
mov byte [ebp - 4], 0x56
push dword [ebp + 0x48]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x68]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0x57
call fcn.00406cd6
mov byte [ebp - 4], 0x58
push dword [ebp + 0x50]
push eax
lea eax, [ebp + 4]
push eax
call fcn.004020b5
lea ecx, [ebp - 0x10]
push 0x30
push ecx
mov esi, eax
mov byte [ebp - 4], 0x59
call fcn.00406cd6
add esp, 0x44
mov byte [ebp - 4], 0x5a
push dword [ebp + 0x58]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004020b5
lea ecx, [ebp + 8]
push 0x42
push ecx
mov esi, eax
mov byte [ebp - 4], 0x5b
call fcn.00406cd6
mov byte [ebp - 4], 0x5c
push dword [ebp + 0x5c]
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x34]
push edi
push ecx
mov esi, eax
mov byte [ebp - 4], 0x5d
call fcn.00406cd6
mov byte [ebp - 4], 0x5e
push dword [ebp + 0x60]
push eax
lea eax, [ebp + 0x54]
push eax
call fcn.004020b5
lea ecx, [ebp + 0x14]
push 0x43
push ecx
mov esi, eax
mov byte [ebp - 4], 0x5f
call fcn.00406cd6
mov byte [ebp - 4], 0x60
push dword [ebp + 0x3c]
push eax
lea eax, [ebp + 0x4c]
push eax
call fcn.004020b5
add esp, 0x48
lea ecx, [ebp + 0x2c]
push 0x45
push ecx
mov esi, eax
mov byte [ebp - 4], 0x61
call fcn.00406cd6
mov byte [ebp - 4], 0x62
push dword [ebp + 0x1c]
push eax
lea eax, [ebp + 0x44]
push eax
call fcn.004020b5
add esp, 0x14
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0x63
call fcn.00404b4c
mov ecx, dword [ebp + 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x68]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x60]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x58]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x88]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x78]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x98]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x38]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xbc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xb4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xac]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xa4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x9c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x94]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x64]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x5c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.004027b0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0xdc]
add ecx, 0xfffffff0
call fcn.004027b0
push str.00022603_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MIDFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AVIFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00022602_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SafeIT
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push str.lavasoft
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push str.pctools
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push 0x52edbc
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push str.zoombli
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push str._softwareonline
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push str.xeriton
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push str._brother
call fcn.00439630
push eax
lea ecx, [ebp + 0x64]
call fcn.00404b4c
push str.msxml
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msdraw
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.advanced_inf_setup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msidxs
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e4b28371
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ff160650
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msttseng
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._termmgr.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wbem.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msitfs
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.devmgr
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._nav
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._norton
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Security
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Update
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Frontpage
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Symantec
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NavScanFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7C4A248B_0FD7_4ED9_8365_B93ECACB9CCE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3050f4f8_98b5_11cf_bb82_00aa00bdce0b
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MailFileAtt
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mapifvbx.object
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0006F083_11D3_B8AF_00105A19CDC6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x53182c
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9EFBF860
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.188a4c39
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.bb784125
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Access.OLE2Link
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msdds.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Environment
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.outlook
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..hta__winme_help_error
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x531924
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x531930
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._assembly
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.htafile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.htcfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.batfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cmdfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.comfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.exefile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov edi, str.default.hta
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CachePath
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Admin
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Boot
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.I386
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Java_VM
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._setup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.setupx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VarLDID
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Kernel
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.macromedia_flash
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x527edc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OldWinBootDir
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.UninstallDir
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BackupDir
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.explorer.exe
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.InstallSource
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Repair
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_Office
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Msocache
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Msicache
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mspaint.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..arx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..ast
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..hta
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..htc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..manifest
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..net
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov ebx, str..PDF
push ebx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..sys
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..url
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..vxd
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..com
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..lnk
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e4b28371
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ff160650
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.drivers_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.hardware_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.hewlett_packarddigitalimaging
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.hewlett_packardhpz_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.inetsrv_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..pcj
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..doc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.docfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..xls
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.xlsfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..ppt
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.pptfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..pst
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.pstfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftexcel_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftmoney_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftoffice
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftwindows_media_device_manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftword_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.publisher
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msdraw
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msidxs
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msxml
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._network_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ODBC_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._security_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._setup_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._tracing_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3DA165B6_CC41_11d2_BDC6_00C04F79EC6B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A623BDA1_8744_4974_AFAC_5568D44F890C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00021401_0000_0000_c000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0006f083
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0006f083_11d3_b8af_00105a19cdc6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0D452ee1_e08f_101a_852e_02608c4d0bb4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.188a4c39
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2272ae7a_0c30_48e1_91df_f9e666276c0c
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.28d557d9_9f72_4a93_87c2_8a0d7dcea0cd
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.29ff67ff_8050_480f_9f30_cc41635f2f9d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3050f4f8_98b5_11cf_bb82_00aa00bdce0b
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3e4e1b80_781c_11d3_9c30_00c04fb59d98
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4498e2c0_8f1f_41d0_adb3_c00b2e43ff59
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4810a750_4318_11d0_a5c8_00a0c922e752
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.53362c32_a296_4f2d_a2f8_fd984d08340b
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.549b5ca7_4a86_11d7_a4df_000874180bb3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.65014010_9f62_11d1_a651_00600811d5ce
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6f66ddad_fc5d_41ac_9d4e_0be553e7e618
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.70b51430_b6ca_11d0_b9b9_00a0c922e750
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7c4a248b_0fd7_4ed9_8365_b93ecacb9cce
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8298d101_f992_43b7_8eca_5052d885b995
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.89e30300_764d_11d0_b282_00a0c90f56fc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.90280409_6000_11d3_8cfe_0050048383c9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9efbf860
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.a4c4671c_499f_101b_bb78_00aa00383cbb
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.a9cc9305_0a30_4015_92a0_0711ee24e720
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.a9e69612_b80d_11d0_b9b9_00a0c922e750
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.bb784125
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.bbc3e9e0_6f97_11d3_83b7_00805f4b2398
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.bc87773a_5476_41c5_83cc_d79c92cb64c0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.be2df74c_bdc0_4411_9641_4b811b82a3af
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.c1aa48c0_facc_11cf_9d1a_00aa00a70d51
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.c3edea8d_ce3f_4af2_a883_2069306215ba
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.c49f2184_50a7_11d3_9144_00104ba11c5e
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.d2670018_a8ea_f4a3_f586_aafab396bb1a
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.d26f1500_f14e_4552_bd7a_cd22d15bd64a
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.d2a2f5f2_eba6_11cd_af37_02608ca1d0b7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.dcd53c71_6fa1_11d3_83b7_00805f4b2398
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e6f787c2_c759_4403_b1bd_9359cb96eb04
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e8fb8614_588f_11d2_9d61_00c04f79c5fe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.eec2dafd_5558_40ac_8e9c_5005c8f810e8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.f612954d_3b0b_4c56_9563_227b7be624b4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F9DB5320_233E_11D1_9F84_707F02C10627
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.fdd3b846_8d59_4ffb_8758_209b6ad74acc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3201590C_8C63_4558_8142_82C29FC695E9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.53CED51D_432B_45b2_A3E0_0CE2C24235D4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.218CB45F_20B6_11d2_8E17_0000F803A446
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.57A0E746_3863_4D20_A811_950C84F1DB9B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11d3_83b7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11d3_8b2d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11d3_9c30
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11d3_b8af_00105a19cdc6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2272ae7a_0c30
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3dsetup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3e4e1b8d_781c_11d3_9c30_00c04fb59d98
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.access.ole2link
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.acroexch.document
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.active_setup_temp_folders
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.advanced_inf_setup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.aff0fe9f_ca4f_4020_9d22_b0e9790f01d6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.agtinst.inf
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.alg.algsetup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.altiris
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.autocad
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.backupdir
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.batfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cae323c3_7fe8_11d3_8b2d_005004d71baf
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.client_recovery_agent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cmdfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.comfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.dragent.dragent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.drivers
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e6155314c16a
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.exefile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FireWall
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.formfill
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.frontpage
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.history.ie
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.hp_scanjet
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.htafile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.htcfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.islalert
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.itsprotocol
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.java_vm
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.javaclasses
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.jtpfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.kernel
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mailfileatt
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mailui.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mapifvbx.object
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x52f798
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mcafee
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.messenger.msgrsessionmanager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microangelo
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_office
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x527b74
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft.vswizards
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftcryptographyoid
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftexchange
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoftimapi_stashinfo
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_speech_recognizers
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x533114
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NetMeetingcontrol_panel
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.niscfgwiz
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.nismediator
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.norton
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.oldwinbootdir
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.repair
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.security
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.services_vxd
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.software_autodesk_autocad
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwarehewlett_packardhpz_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwarelexmark
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mcafee.com
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwaremicrosoftwindows_ntcurrentversion_aedebug
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwaremicrosoftwindowsntcurrentversion_systemrestore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwareodbc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREPolicies
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwarewow6432nodemcafee.com
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREWow6432NodePolicies
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.swplugin
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.symantec
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.syntpplugins
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.sysmonlogmanager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.systemcurrentcontrolsetcontrol
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.systemcurrentcontrolset_services
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.termmgr.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.the_bat_mail_smimernd.bin
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.tnslsnr
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.tracing
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.tslv.tslv
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstall_information_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstalldirectdrawex
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstalldxm_runtime
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstall_fontcore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallicw
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallie40
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallie4data
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallie5bakex
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstalliedata
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallmicrosoft_netshow_player
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallmobileoptionpack
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallmplayer2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallmsjavavm
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstallmstask
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstall_netmeeting
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstall_schedulingagent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstall_vgx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.uninstalldir
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.varldid
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.windows_media_device_manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.windowscurrentversion_setup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wmppublsihcntr.wmppublsihcntr
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wmpshell.hweventhandler
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.fwui.varbstr.col
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.niscfgwizdll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cae323b1_7fe8_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.01ed40c5_78a0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.a9cc9305_0a30
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.arpcachemsdn
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.netmeeting
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.fontcore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.dxm_runtime
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.directanimation
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mplayer
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msdn
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_device_em
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.directdraw
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.addressbook
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.incredimail
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.yahoo
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x533adc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.iedata
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msjavavm
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AppIDFCA7EB04_D708_11D3_BBAE_0050DA276194
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CLSID00E9F275_1525_4fd3_8CEE_6BAF5B4A4B4A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CLSID44C8EC50_93BD_4633_9A82_CA0D4F1DD3A7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CLSIDE9BC70A8_D70C_11D3_BBAE_0050DA276194
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Component_Categories12A4DA65_C409_41AF_8759_3D51A438E026
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Component_CategoriesC535D6AD_3FBB_4F39_B60E_34B9187D8D54
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IncrediContent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IncrediImport.IncrediMailImporter
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IncrediLicense
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IncrediMail
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IncrediMessage
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Interface133483C3_5BAB_45DD_94EE_1857CB47C6E5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TypeLib00E677A7_A7A5_4819_9580_1681BE30E28E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareIncrediMail
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareNetscapeNetscape_NavigatorViewers
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREClassesInterface133483C3_5BAB_45DD_94EE_1857CB47C6E5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREClassesTypeLib00E677A7_A7A5_4819_9580_1681BE30E28E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREClientsMail
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov edi, str.Online
push edi
lea ecx, [ebp - 0xe8]
call fcn.00410881
push eax
mov esi, str.SOFTWARESoftware
lea eax, [ebp - 0xdc]
push esi
push eax
mov dword [ebp - 4], 0x164
call fcn.0040f56d
add esp, 0xc
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0x65
call fcn.00404b4c
mov ecx, dword [ebp - 0xdc]
add ecx, 0xfffffff0
call fcn.004027b0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0xe8]
add ecx, 0xfffffff0
call fcn.004027b0
push edi
lea ecx, [ebp - 0xec]
call fcn.00410881
mov edi, eax
mov dword [ebp - 4], 0x166
push 0x5340f0
lea ecx, [ebp - 0xd8]
call fcn.00410881
push eax
lea eax, [ebp - 0xdc]
push esi
push eax
mov byte [ebp - 4], 0x67
call fcn.0040f56d
push edi
push eax
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x68
call fcn.004020b5
add esp, 0x18
push eax
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0x69
call fcn.00404b4c
mov ecx, dword [ebp - 0xe8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xdc]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0xd8]
add ecx, 0xfffffff0
call fcn.004027b0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0xec]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x5340f4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREEliaShimProtectBrowsers
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallIncrediMail
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.fwUI.VarBstrCol
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IoutlookPlug
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x534220
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NISPlug
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x534280
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IwinPWDSvc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x5342e8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VarBstrCol
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MPlayer2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SharePoint.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ATLService.sy
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ATLService.n
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ATLService.XLInit
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IOutlookPlug
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A9CC9305_0A30_4015_92A0_0711EE24E720
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4A3451BE_99E0_476C_AE7F_C2A5671AC22E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IWinPwdSvc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.01ED40C5_78A0_496c_93F3_CF449D18078A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5C66E8D6_FA42_4172_A0E7_F1591EAD43EB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IAlgSetup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A779AF1A_009A_4C44_B9F0_8F0F4CF2AE49
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.43E734CA_043D_4A70_9A2C_A8F254063D91
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Vmappsdk.QuickSwitchToolbarCt
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Srdrv1.SREngine
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.44EC0535_400F_11D0_9DCD_00A0C90391D3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.56D04F5D_964F_4DBF_8D23_B97989E53418
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3B7C8863_D78F_101B_B9B5_04021C009402
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2F42C683_C6A4_11D0_93E9_00AA0064D470
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.38E6F584_0767_11D3_9AA9_00C04F79EFC3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.773F1B9A_35B9_4E95_83A0_A210F2DE3B37
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.831FDD16_0C5C_11D2_A9FC_0000F8754DA1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.648A5603_2C6E_101B_82B6_000000000014
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5B87B6F0_17C8_11D0_AD41_00A0C90DC8D9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5F847504_3E17_11D3_BABB_00C04F72FB4E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2DF8D04C_5BFA_101B_BDE5_00AA0044DE52
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3C4F3BE7_47EB_101B_A3C9_08002B2F49FB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7629CFA2_3FE5_101B_A3C9_08002B2F49FB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov edi, str.CAE323B1_7FE8_11D3_8B2D_005004D71BAF
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C7310691_AC80_11D1_8DF3_00C04FB6EF4F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C7310692_AC80_11D1_8DF3_00C04FB6EF4F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C9DD4A56_47FB_11D2_83E7_00C04F9902C1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.disasterrecovery
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vcecominterfaces
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vjupgradeenginelib
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cddbcontrolroxio
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.612DE685_FCC5_11D1_8A36_00A0C9B82ABC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B0AC6ABA_AB35_4AEE_8D3D_6C55FA34F6A9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1C6E0E46_4E5F_492D_B946_44291B931361
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.macromediaflash
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FlashFactory
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ShockwaveFlash
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.winrar
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.winzip
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.quicktime
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.shellex64
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Nvdmcpl
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CLUADMEX
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VisShe.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DirectAnimation
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ELMFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.STFFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VSTA_IP.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.XPSViewer
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CompressedFolder
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Tahoe.FolderControl
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.InfoPath.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OPCFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OneNoteMobile.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OneNote.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VSTA.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.urn:content_classes:
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FlashProp.FlashProp
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.acrobat.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.acrobatinfo.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.acrodist.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ccapp.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cmmgr32.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.conf.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.devenv.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.dexplore.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.excel.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.firefox.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.formdesigner.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.groove.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.iexplore.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.illustrator.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.imageready.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.inetwiz.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.infopath.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.isignup.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.luall.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mplayer2.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msaccess.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msimn.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msinfo32.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msnmsgr.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msohtmed.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msoxmled.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mspub.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mspview.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.newsrover.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ois.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.onenote.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.outlook.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.photoshop.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.powerpnt.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.quicktimeplayer.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.quicktimeupdater.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.spdesign.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vcspawn.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.visio.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vmware.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vpc32.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vptray.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vsaenv.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vsta.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wab.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wabmig.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.winnt32.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.winproj.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.winrar.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.winword.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wmplayer.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wordpad.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.xpsviewer.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcroExch.Document
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push ebx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e357fccd_a995_4576_b01f_234630154e96
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.777BA811_2498_4875_933A_3067DE883070
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftDirectPlayServices
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftShared_ToolsText_Converters_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftWindowsCurrentVersionRenameFiles
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftWindows_SearchGatherWindowsSystemIndex
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemCurrentControlSetControlSession_ManagerSubSystems
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREWMP.PlayCD_shellPlay
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.30c3f6cd_98b5_11cf_bb82_00aa00bdce0b
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RTCCore.RTCClient
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Plenoptic.Plenoptic
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftCryptographyOID
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ADMWPROX.DLL
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.InterfaceE6F787C2_C759_4403_B1BD_9359CB96EB04
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Interface29FF67FF_8050_480f_9F30_CC41635F2F9D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Interface70B51430_B6CA_11D0_B9B9_00A0C922E750
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Interface8298d101_f992_43b7_8eca_5052d885b995
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.InterfaceA9E69612_B80D_11D0_B9B9_00A0C922E750
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Interfacef612954d_3b0b_4c56_9563_227b7be624b4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Act_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.App_Launcher
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.camerapath
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Copernic
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CyottoMi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Dash
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Data_Becker
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.dfrg.msc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Databe1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.enable.dvd
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Fleet_Command
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Gravity
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.HotBar
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IconPackager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.idapinst.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IE_Zone_Editor
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ImageDB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftSpeechRecognizers
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Pact_Software
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Picture_It_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PCForrest
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ScanSys
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ShellFind
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Signal9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Stardock
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Speed_Disk
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PalTalk
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.:Fragmented_Files
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Talk_n_Mail
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.The_Digital_Village
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Trellix
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WeatherBug
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinFax
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Visual_Favorites
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JawsSystemsPDFCreatorConfiguration
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._axdb16.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcETransmit.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcFocusCtrl16.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcInetUI.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcMPolygonCOM.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcProject16.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcStDStyle.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcStLay.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcStLtype.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcStMgr.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcStTStyle.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcTc.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AdFTP.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Assist.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cao16.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.csp16.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ProjectPointClient.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WSCommCntrUI1.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.explorerUser_Shell_Folders
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftIMAPIStashInfo
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesVxDMSTCP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlContentIndexCatalogsSystem
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AutodeskAutoCAD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CONTROL_PANELDESKTOPCONVERTEDWALLPAPER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EXPLORERMENUORDERFAVORITESWEB_DESIGN
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PERKELE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..defaultcontrol_paneldesktopconvertedwallpaper
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemCurrentControlSetServicesSr
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemCurrentControlSetServicesSrservice
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemCurrentControlSetServicesWinsock
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindows_NTCurrentVersionSystemRestore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareLexmark
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindows_NTcurrentVersionAeDebug
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MSFSStore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MSITStore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RoxioPhotoSuiteProjectLocations_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Wow6432Nodejtpfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_Windows_Journal_Viewer_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREPolicies_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREWow6432NodePolicies_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RoxioD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RxSBDViewEx.SBDGroupCtrl
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RoxioMediaFrameworkDirectories
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7495CF57_E208_4DF0_A8C5_9E17ECC51490
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RoxioDVDLVM
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RoxioDVDLogicalVolumeManager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LVM_Logical_Volume_Manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftWindows_Media_Device_Manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareRoxioMediaFrameworkDirectories
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMacromedia_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FlashFactory.FlashFactory
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MacromediaFlashPaper.MacromediaFlashPaper
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ShockwaveFlash.ShockwaveFlash
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D27CDB70_AE6D_11cf_96B8_444553540000
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Hewlett_PackardHPZ_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Hewlett_PackardDigitalImaging
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft.InformationCard
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWord_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftExcel_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AFF0FE9F_CA4F_4020_9D22_B0E9790F01D6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREMicrosoftOfficeDeliverySourceEngine
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.06DD38D3_D187_11CF_A80D_00C04FD74AD8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.188a4c39_df85_4881_8c94_29b69c307ecf
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.90110409_6000_11D3_8CFE_0150048383C9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftMoney
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.quicken
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._turbotax
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._turbo_tax
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftExchange
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6000_11D3_8CFE_0150048383C9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9EFBF860_5685_11D3_AA3D_00C04F4C5275
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.bb784125_ea2c_4aab_862f_8191a7440fa0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._seal.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msnmetal.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._navaps
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._navui
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._naverror
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._navui.dll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FREIntegrator
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.28D557D9_9F72_4A93_87C2_8A0D7DCEA0CD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NSCFrame
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NSCPluginProduct
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NSCHomeCategory
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Norton
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E704BD33_6AB6_4981_871B_1D64E78DD1E9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NAVComUI
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LuCallback
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.454E64D6_28AA_4539_BE09
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4CC0C3345D33
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DE54081F_08ED_44AE_AE80_13DEAA19A44A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CAE323C3_7FE8_11D3_8B2D_005004D71BAF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.3E4E1B8D_781C_11D3_9C30_00C04FB59D98
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DCD53C71_6Fa1_11D3_83B7_00805F4B2398
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2272AE7A_0C30
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ORACLE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareWinsock2PAV_Layered_Provider
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftRSSearch_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RSSearch.CustomWordbreaker
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wdsShell.WDSCalendar
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.36563653_76FC_4EBA_ACC0_2F53457C1D96
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CorelGraphics10Location_of_Files
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CorelUser_Assistant10SettingsProject_Folders
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..AST_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.corelwthst_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.corelwtuwl_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PerfectExpertDBDefaultIcon
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6A89524B_E1B6_4D71_972A_8FD53F240936
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ECF21EAB_3AA8_4355_82BE_F777990001DD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.37294E01_DB54_43AF_9D50_93FF7267DF5D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CF7C3CE2_4B15_11D1_ABED_709549C10000
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ACB27D7C_76ED_46CB_BE8C_E831839F29DA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CCB56A12_86CE_41DB_8320_376611A2F667
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1C13629E_23C5_4A3F_AE92_2E6350ABDC81
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0A398EE6_277C_480D_BD4F_3288EA3AB8E2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9828129C_6EE8_4ae7_BA58_F8B2FA3BED70
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9ECB9560_04F9_4bbc_943D_298DDF1699E1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.72E492DD_B841_4D9C_8EBC_3BAC9711F6E5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7CA87530_E5EB_4B82_92DB_6299B2116A0A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3D975EF4_F5AF_4B9A_AF62_BB8616BF0C50
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.74C90354_7254_4F45_A9B3_CB28DC16931F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.67B81FA9_84AB_4779_9CF8_D7A0DEB91298
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FFA6F3AA_2B29_4EA0_ABB0_C8C5EE9D3871
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.93156B26_5354_474E_BD56_C2CEB190C4F5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0E1CDAA7_9F9E_4BD2_A9A8_46E6F9082ED2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.62F84090_A87D_4fa9_BF65_2AAB91B61CE5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1708F2CA_DCD5_4492_8260_FC9F58358478
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftWindows_NTCurrentVersionPrintProvidersLanMan_Print_ServicesServers
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.COMPLUSMETADATA.MSCORHOST
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CONNECTION_MANAGER_PROFILE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.HEADERFOOTER.HEADERFOOTER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.HTMLFILE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MHTMLFILE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SYMWRITER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WBEMCOMCONNECTION
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.XMLFILE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.XSLFILE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Declined_Install_On_Demand_IEv5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ACTIVE_SETUP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesIpFilterDriver
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesMpFilter
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesMSFW
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesMSFWDrv
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesMSFWHLPR
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Servicesmsfwsvc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesOneCareMP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ServicesPxHelp
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftESENTProcess
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DriverStorempfilter
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DriverStoremsfwdrv
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DriverStoremsfwhlpr
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREMicrosoftUpdatesWindows
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREMicrosoftEventSystem
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1EB06D67_16AD_4E08_82D7_22A7B7C468C3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.87905465_C0DA_45ee_8015_02BE639FB435
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A1E30BDE_E2AC_48d0_AA64_BBF63F0BDE8F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MaintenanceDiskCleanupServ.EXE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Providers.DLL
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinSSWebAgent.DLL
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BACKUPENGINE.BackupEngine
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.06A81CEC_6821_4ab7_BA9B_12E01E136AA6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.597F0032_FD2E_4962_9C0E_1A3F0F2FD191
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.74F777F9_6EB9_4939_9707_C5026A1FAB6F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.882C09F9_FE0A_4881_812E_F7B2366FE3D8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.919C671F_629D_451f_90CD_A06CEE72D64F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A1E309DF_E2AC_48d0_AA64_BBF63F0BDE8F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BE79B9C8_9791_41d3_9267_C4123AC0AEAE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E2609C67_49AF_439f_B3E6_C24FF472DB36
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Component_Categories16E6DB1D_94CF_4945_871F_CE9FB746555D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Drive_shellexContextMenuHandlersAntivirusShlExt
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4B7FC59380EB6514791EAEA175F0EA77
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6030E61781384634B8F8C04C9E73B6CA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9196B1C16D00C9A49B39E18FF2595603
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.968E3156F746DF045AD5FC9C52979BAB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov edi, str.E22006652F3F6214C85C79624C1705BE
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov ebx, str.E741158319A59644ABD431FFCF8C9A02
push ebx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.E7E8A70D423D5494ABC85E23DA00F83F
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4B7FC59380EB6514791EAEA175F0EA77
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6030E61781384634B8F8C04C9E73B6CA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9196B1C16D00C9A49B39E18FF2595603
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.968E3156F746DF045AD5FC9C52979BAB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push ebx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1ECB2791569889041966B3AE18B8F0EF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4CDAC858035ECE3449ED653DD1AC3164
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.951AF60498AAAA641BBD9E0673392E6A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BE33170C794B51A45B0FEFE9D7D4BB94
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EA58AE077B617FA4BA798493E1C4E1D2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.InstallerWin32AssembliesGlobal
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1572EA51_2E25_4E62_8C8D_07FE2FC703AE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.597F0032_FD2E_4962_9C0E_1A3F0F2FD191
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A1E308E2_E2AC_48d0_AA64_BBF63F0BDE8F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OneCare.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.16980B75_6025_435C_92EA_51AB38365A98
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.615B6FA5_128D_4A94_88DB_C79CE78333B5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6D6AE2EE_FF7A_416E_A161_55F35A78E88A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x5389a8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinssProvDll.AntiVirusProvider
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinssProvDll.BackupProvider
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinssProvDll.MaintenanceProvider
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinssProvDll.NetworkSecurityProvider
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinssProvDll.SecuritySettingsProvider
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WinSSWebAgent.Controller1C1B6919_00D6_4A9C_B993_1EF82F956530
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1C1B6919_00D6_4A9C_B993_1EF82F956530
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3851147E_5A91_4469_BA4D_13FFFCC8A920
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.395CF7B4_BE08_4156_97E1_EA1A570FAE77
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5660022E_F3F2_4126_8CC5_9726C47150EB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6513E869_647F_40FD_A55D_CFC92579B9BA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.716E0306_8318_4364_8B8F_0CC4E9376BAC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D07A8E7E_D324_4945_BA8C_E532AD008FF3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OneCare_Live
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OneCare_Protection
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Protection_Service
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C9C05A42_D571_4B3C_8F11_D6D6A81C90EB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BEEDEB31_5B44_46eb_A004_2675DD094E2F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.6B5AD95D_2729_49EF_88B0_B2CBF1161EC1
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9A8F3979_D2DD_4b4a_949E_B70CCE2DC4AA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.HTMLFILE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FULLWINDOWEMBED
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BROWSEINPLACE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SURFBOARD.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.68213E0D_E2B5_43D8_9683_080885FB7E24
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BEEDEB31_5B44_46EB_A004_2675DD094E2F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.money
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ComputerAssociates
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Dell
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Dell_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_money
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.connection_manager_profile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.googledesktop.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.googletalk.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.scansrv.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov ebx, str.Hewlett_Packard
push ebx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.acropdf.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msmail.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.office.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1BF6CB2D_2AE0_4879_A7AA_A75834FBD0E3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5697942D_8A7C_426d_B2BE_CD43C00765AC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A4199E55_EBB9_49E5_AF1A_7A5408B2E206
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6EF8E539_12E9_4595_A7C6_3DDA8A4069B2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DE2069CF_2AE3_4057_B17F_0206317935E3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E28EE682_E406_4254_8CEB_736616138E89
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F969D287_C839_43c2_97AB_E4B03FB3474D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.222456BE_755F_4859_B547_FC366F22CB82
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.910EC5DD_BD74_4B82_8394_926ED2D993A5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WLANImportFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WLIHVUI.IntelDOT11
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._softwareintel
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WBEMComLocator
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SonicStage
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Sony_Corporation
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OpenMG_M4a
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CDDBControlSony
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A7215BC3_0BEF_454A_9CC9_5896AD7AD682
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F505B799_CD67_4ECC_AE43_49CA5395ED19
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4D692D2E_8035_3338_368E_5B7F6F895B8B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ZoneLabs
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Zone_Labs
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.kaspersky
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cisco
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Session_ManagerEnvironment
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WebRoot
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SpySweeper
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.InternetSettings_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NewTech_Infosystems
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1AD2CB67_D1CD_4253_8F60_E223DD118D5D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6841760D_68BE_4C62_AE77_AB2AA4F7818E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.34FE8786_AFDA_4AF1_A1EA_2BD3F5DFA11D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D6159E936489F6E479C9B882EBEC1940
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6EE4DCBB_CE99_4994_A12A_242CEBDD691C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1A9D7D6D_6041_471B_B7BB_3E446DD8CA60
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mvbasictext
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2a9fc36d_364d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.81fa39e8_8c74
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..bwp
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.bwpfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Data_Fellows
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DataFellows
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F_Secure
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.80E9F7A7_1DB1_4DAF_8110_1AE4341DB193
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1DD48BFE_26E6_11D9_AA4A_00065B846093
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6AA36298_AF5F_42fc_9957_417E01141D52
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8257D1D6_AC65_462B_9465_3F904518AF85
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A9ADADC2_0D22_49fd_A666_44692DF53423
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D0A03AD0_F49C_4e01_9C1D_CA3B7B73B08E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D1E5FD88_3953_4780_8F30_3FA2EC573425
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FBAA5B17_1739_403B_BF39_D6060DA0B6F3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BB39AFF7_5937_49A2_A5FE_04A466E4BC27
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PodPhotoLibrary
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vpngui
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.729BB3D4_7ECB_4A21_BCAC_BB0A52B44838
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.05630408_223E_4F9D_9AD7_B0AC397574FD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.84EEA60F_C2C0_4C02_8295_0666F6A754DF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.92EAA7CC_2A87_4F96_A8DD_F87F77AF9232
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_digital
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_pic
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_pub
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ulead
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.14E90026_66B8_4D2D_9DB8_AEE792CFD37F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.10EF951A_3138_43CC_B3B4_8C2C2EDA2936
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, 0x539e80
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D597FAD1_5B9F_11D1_8DD2_00AA004ABD5E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A1E309E1_E2AC_48d0_AA64_BBF63F0BDE8F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A1E30ADE_E2AC_48d0_AA64_BBF63F0BDE8F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Ulead_Systems
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9A3B2A70_F17C_44CF_9963_83487DB174CC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F10C8C41_65C8_47F0_97BB_23D8717FA053
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3C4F3BE3_47EB_101B_A3C9_08002B2F49FB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7629CFA4_3FE5_101B_A3C9_08002B2F49FB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7C4E1804_E342_483D_A43E_A850CFCC8D18
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EB196614_FB4E_42a2_BA16_8EE5392968F8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0ADB5617_AF5C_43cd_A1AD_1F08804BE552
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9d095b89_37d6_4877_afed_62a297dc6dbe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.c686dcee_54f2_419e_9a27_2fc7f2e98f9e
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.fc4767c1_c8b3_48a2_9cfa_2e90cb3d3590
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.a6c5a715_8c6e_11d2_977a_0000f87a926f
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.49EB98D0_2AE4_462b_BAA3_D6F1EEF919F4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F10E0DAF_3EF7_4b39_9945_24BF98957F8A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6bdd1fc6_810f_11d0_bec7_08002be2092f
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov edi, str.4DB1AD10_3391_11D2_9A33_00C04FA36145
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.192EDB33_396A_4128_8765_3E6FA8A0DDE7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CCCPages
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MOH.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.netwaiting
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BVRP_Software
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ws_ftp
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._ad_aware
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._firefoxhtml
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EB196614_FB4E_42a2_BA16_8EE5392968F8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0ADB5617_AF5C_43cd_A1AD_1F08804BE552
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9d095b89_37d6_4877_afed_62a297dc6dbe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.fc4767c1_c8b3_48a2_9cfa_2e90cb3d3590
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.a6c5a715_8c6e_11d2_977a_0000f87a926f
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.49EB98D0_2AE4_462b_BAA3_D6F1EEF919F4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F10E0DAF_3EF7_4b39_9945_24BF98957F8A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6bdd1fc6_810f_11d0_bec7_08002be2092f
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftOffice
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwarePoliciesMicrosoft
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WMVFile_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CurrentControlSetControl
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CurrentControlSetEnum
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CurrentControlSetHardware_Profiles
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet001Control
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet001Enum
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet001Hardware_Profiles
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet002Control
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet002Enum
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet002Hardware_Profiles
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet003Control
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet003Enum
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ControlSet003Hardware_Profiles
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CurrentVersionPrint
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Printers
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LimeWire
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FedEx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.58FC39EB_9DBD_4EA7_B7B4_9404CC6ACFAB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A138CF39_2CAE_42c2_ADB3_022658D79F2F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.24800CD0_0F4E_4df7_9F69_3C6903C89224
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Document_WordPerfect
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WPEDoc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WPSDoc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WordPerfect
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AccessIBM
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._vcexpress
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._visualstudio.launcher
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._visualstudio.Text
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.encarta
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msworld6.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NetHood_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PrintHood_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREBrother
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftSystemCertificates
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.twain_32_b
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..lnk
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.lnkfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.00021401_0000_0000_C000_000000000046
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.microsoft_visualstudio
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.85D9EEC6_1951_434b_983C_F62FB696C2A5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4774555C_A58C_4106_B127_440473ED2F9C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F3591115_C179_4449_8375_44CEA57DF2F4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D55E00CB_6A2E_4811_9D70_BC4AF6DAF33A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E3E8AAAD_BBE6_4203_A58E_A2E250A022DD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EF05516F_17F6_486A_AF35_F929B008BDC1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BDC217C8_ED16_11CD_956C_0000C04E4C0A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0EC1191F_EA4D_4DB6_A194_6333FA6ED721
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2FC8F894_3409_4F69_BFD8_9A489511B40C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.39375E83_642C_46CE_9B74_510F42381710
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.957191F2_F78B_41C6_87D6_87D562930EA9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CurrentVersionExplorerVolumeCaches
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SoftwareMicrosoftCTF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov edi, str.645ff040_5081_101b_9f08_00aa002f954e
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.20d04fe0_3aea_1069_a2d8_08002b30309d
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.d20ea4e1_3957_11d2_a40b_0c5020524153
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.85bbd92o_42a0_1o69_a2e4_08002b30309d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.21ec2o2o_3aea_1o69_a2dd_08002b30309d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.d20ea4e1_3957_11d2_a40b_0c5020524152
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ff393560_c2a7_11cf_bff4_444553540000
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020d75_0000_0000_c000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00028b00_0000_0000_c000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.450d8fba_ad25_11d0_98a8_0800361b1103
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.208d2c60_3aea_1069_a2d7_08002b30309d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1f4de370_d627_11d1_ba4f_00a0c91eedba
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7007acc7_3202_11d1_aad2_00805fc1270e
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2227a280_3aea_1069_a2de_08002b30309d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7be9d83c_a729_4d97_b5a7_1b7313c39e0a
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e211b736_43fd_11d1_9efb_0000f8757fcd
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.d6277990_4c6a_11cf_8d87_00aa0060f5bf
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.48e7caab_b918_4e58_a94d_505519c795dc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7bd29e00_76c1_11cf_9dd0_00a0c9034933
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.bdeadf00_c265_11d0_bced_00a0c90ab50f
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREMicrosoftADsProviders
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MIMEDatabase
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.715F10EB_9E99_11D2_BFC2_00C04F990235
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_Internet_Mail_Message
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5645C8C3_E277_11CF_8FDA_00AA00A14F93
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindowsShell
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WindowsCurrentVersionControl_Panel
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WindowsWebFoldersWellKnownServices
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Image_File_Execution_Options_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftInternet_ExplorerMAIN
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftDRM
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._network_associates_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._nai_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.epolicy
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._virtualstore_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PrintShop
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.photoimpact
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F792AC35_0222_433C_A85D_5AD818092284
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ABF2F4CF_B087_4063_8BB4_D240355AA9B1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.sm_un.u32
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1BE4674C_B51D_40AA_9D2D_FD5211E3C1E3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1C3AD23B_6426_5A94_735D_288C908CA7B2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..petrial
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BearShare
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Webroot
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.76F8CB2B_6516_4E1E_B6F1_AED4ABDB4B0A
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.877883EB_56B2_4736_815E_1BA97B44D3E5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Image_Line_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.iMesh.file
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AdobePageMaker
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Corel_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A3CF662F_5DEF_46C0_BAF5_0E00E1B4C5B0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A58F47CC_FF65_4152_B0B1_666C643A5BFC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.progeCAD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.YinstHelper
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x53b568
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3753737C_DD75_11D2_966A_00C04F79487A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3753737A_DD75_11D2_966A_00C04F79487A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.0948E980_3A31_11D3_83CF_00C04F505F43
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3753737B_DD75_11D2_966A_00C04F79487A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9020EB60_77B2_11D3_83DA_00C04F505F43
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F84399C0_18A1_11D3_83C5_00C04F505F43
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A5B020FD_E04B_4E67_B65A_E7DEED25B2CF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.773F1B9A_35B9_4E95_83A0A210F2DE3B37
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EADA914E_5B08_4E85_8440_5A087504DF87
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.UploadStatusRequestHandler
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NAAuthTool
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AccessCredentials
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9D9B61F7_9E2B_492A_81B3_AA5A1CCFBC3A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.QBDAgent2003
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Agent2003.1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x53b980
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, 0x53b9d0
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AuthInfo
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AF5E0A13_CEAB_47ce_991D_77E82CD1BF3F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DrawAttrsXP_Class
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E9A6AB1B_0C9C_44AC_966E_560C2771D1E8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.775B9D31_BF5F_4AFB_8F51_8A88D7F5E3FF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TpcCom
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DrawAttrsXP.1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ChNotify
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.QBDAgent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ChNotify.1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x53bba8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CredentialsInfo
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CompanyVault
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CredentialsRecord
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FcsSession
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.QuickBooks
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Intuit
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.01FB4998_33C4_4431_85ED_079E3EEFE75D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..download
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Shockwave_Player
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ClassesAIM_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0AF768AC_4FBD_4914_B847_F4E13C984926
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5bdb98cc_b3f5_4d33_9a91_cbc986bea087
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.d4704c9e_adbf_411a_9ef2_87feb99ccf69
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8bb882d5_de37_4630_84e9_cc4bd7c44cb1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2c079982_25c8_4edf_9840_21d863a4716c
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.63338267_37c4_44cf_8e46_756fbe9c8fdc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.aef7e664_dc9b_48b2_8b35_5422d3f08c77
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e73e119c_be36_4693_8a47_88c16829008c
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.24cdf6ea_0b88_4d7a_aaf0_2048f90c2e1c
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.aa9c1a1e_b91a_424e_9e27_3f1967b707f1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7312c0a0_a397_4a19_b432_9ac90c4466af
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.b4774192_c038_4350_986d_1bd91c20379a
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3ba4407d_a51f_4cfb_9768_511b51bc2f5b
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D775A119_EAC2_4F28_B06E_8AC16F2695DA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.80EE9910_D470_4AED_AC5D_987046FDB574
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D6995525_B33A_4980_A106_9DF58570CC66
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.915DA835_02FE_4953_92FA_624BDF5D85AB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B80C6976_50C0_4110_BC85_44EB975CDCA0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C1D8C091_AC66_4159_B738_E70A12B983A4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7C1E4FCC_B47E_44AE_8EA7_FA66EBC8BAC4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.itunes
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cddb
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DbgClr
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Audio_Compression_Manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Keyboard_Layout_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_Management_Console
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SMax4.Exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SMax4Wiz.Exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SMWizard.Exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Google_Chrome
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.11dbb47c_a525_400b_9e80_a54615a090c0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.99969a8f_27e6_4adf_ab9f_b5b5e90d4733
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.opensearchfilefolderresult
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.opennewprocess
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.opennewwindow
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Enqueue
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WMP11.AssocFile.m3u_shellEnqueuecommand
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.45597c98_80f6_4549_84ff_752cf55e2d29
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DelegateExecute
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Folder_shellopennewwindowcommand
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Folder_shellexplorecommand
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindows_NTCurrentVersionProfileList
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ResumeGrabber.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.eGrabber
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ResumeGrabber
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ResumeGrabber_Pro
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8A2B3DEC_D8A5_4199_BB0F_1180993826FF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PowerShell
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WindowsPowerShell
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Function_Discovery
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RegistryStore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MediaCenterPeripheral
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Superfetch
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Windows_Media_Player
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftMSF_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.citrix
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TCPIP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TCP_IP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..wll
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..acc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.word.addin
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JSFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JSEFile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JScript
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JSPFIle
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VBSfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.vbscript
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov edi, str.911051fa_c21c_4246_b470_070cd8df6dc4
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
mov esi, str.34449847_FD14_4fc8_A75A_7432F5181EFB
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OISbmpfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OISemffile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OISgiffile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OISjpegfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OISpngfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OIStiffile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OISwmffile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Autodesk
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..gadget
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x53c9fc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DirectShow
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Panda_Software
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.winsock
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.internet_settings
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwaremicrosoftwbem
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.elevationpolicy
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mmc_snapins
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.da67b8ad_e81b_4c70_9b91b417b5e33527
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.da67b8ad_e81b_4c70_9b91_b417b5e33527
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.softwaremicrosoft_tablettip
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.powerpoint_viewer
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.049F1876_4C2F_4DAA_89A4_742AAB74AD66
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Diagnostic.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.InstallerComponentsB4AE92CC2CB71D119A12000A9CE1A22A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Canon
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.sinf.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Acro_Software_Inc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Windows_Messaging_Subsystem
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Identities_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftOffice
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Outlook_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x53cd9c
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x53182c
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ClientExtensions
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Account_Emails_Files_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Personal_Address_Book_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftSignatures
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_SharedStationery
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Dictionary_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Macros_and_VBA_programs_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Offline_folders_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SettingsAccount_Manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Internet_Account_Manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.outlookAdd
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_antimalware_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AVG_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.personal_finan
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.personal_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.private_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_Small_Business_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Office_Accounting
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Business_Contact_Manager_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.HPDigital_Imaging_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.GOOGLE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MICROSOFTBUSINESS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MICROSOFTGENUINE_ADVANTAGE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NVIDIA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.REALTEK
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B32C4059_6E7A_41EF_AD20_56DF1872B923
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9504C23BA7E6FE14DA0265FD81279B32
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft.AnalysisServices
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.iPod_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Business_Contact_Manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Content.Outlook_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CurrentVersionConsole
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RIA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Thomson_Reuters
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RIA_Group
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RIAGroup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DownloadManager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2B402EEC_0C7F_447C_8D44_E816888B1115
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B3FD0790_E46D_44D8_A88C_FCD99771DA5E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B69B7CC0_0E89_46D0_A99E_ABDDD4B61743
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftRestartManager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AppDataLow
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RAS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DFS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MSMQ
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TermServLicensing
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Windows_Script_Host
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.UPnP_Device_Host
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftScrunch
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._softwareHP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Google_Toolbar
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcadX.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AccServerDocMgr.AcPiPropertyIdentifier.3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcPEXCtl.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B0A3B9DC_3263_1E54_9BE1_7EFD0686A63E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E0B5A24B_99CD_FB5E_A9FB_1E5452B0EB23
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3F3A5945_B6E6_CE43_D3E9_29992210A498
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EMDMgmt
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.efs
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2DC94AFD_A6E2_4AB4_9132_4A3F8E07B386
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CACAEB5F_174D_4C7C_AC56_A33289A807CA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C41300B9_185D_475E_BFEC_39EF732F19B1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2A981294_F14C_4F0F_9627_D793270922F8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2A697B53_0DE3_42DA_B41D_C3F804B1C538
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.57752979_A1C9_4C02_856B_FBB27AC4E02C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9B00314CD581E574FBCE93FE37F2911B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DFA49CD22E6A4BA41923A4F3E8703B68
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F5BEACACD471C7C4CA653A23988A70AC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.35B796A23ED0AD244BD13C8F401B5C83
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.492189A2C41FF0F469727D397290228F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.979257759C1A20C458B6BF2BA74C0EC2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DIRECTORY_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..JTP_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ECMASCRIPT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JAVASCRIPT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JAVASCRIPT1.1_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JAVASCRIPT1.2_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JAVASCRIPT1.3_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OLESCRIPT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.INSERTABLE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DOCOBJECT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B05F498F_4FD6_4AE6_87A4_D99E2198B737_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.APPGPFAULT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CLOSE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MAXIMIZE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MENUCOMMAND_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MENUPOPUP_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MINIMIZE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OPEN_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PRINTCOMPLETE.DEFAULT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RESTOREDOWN.DEFAULT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RESTOREUP.DEFAULT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SYSTEMQUESTION.DEFAULT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LANGUAGECONFIGURATION_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DESKTOP_SLIDESHOW_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FAX_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EVENT_CONFIG_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.REMOTE_ASSISTANCE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.GADGETS_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WFS_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F94DFE99_024C_11DF_B483_806E6F6E6963_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TABLETPC_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WINDOWS_ERROR_REPORTING_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WINDOWS_MAIL_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WMSDK_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWAREPROTECTIONPLATFORM_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WISP_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CLIENT_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.desktop_slideshow
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._fth_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.identitystore_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msdtc_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._radar_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._reliability_analysis_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._shared_tools_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.wimmount
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AdaptiveDisplayBrightness
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._resourcetypes
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.cid.local_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6CBB5D4607251173AA93131C80A74F6E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._stickynotes_shell
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.windows.xps
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..jtp
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TPG_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Virtual_Machine_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PeerDist_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SPP_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Multimedia_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..CHESSTITANSSAVE_MS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..FREECELLSAVE_MS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..HEARTSSAVE_MS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..MAHJONGTITANSSAVE_MS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..MINESWEEPERSAVE_MS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..PURBLEPAIRSSAVE_MS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..SOLITAIRESAVE_MS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.OLESCRIPT
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.INSERTABLE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PRINTCOMPLETE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RESTOREDOWN
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RESTOREUP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SYSTEMQUESTION
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LANGUAGECONFIGURATION
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.INKBALL
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DONTSHOWAGAIN
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FIND
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JOURNALNOTEWRITER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TOOLBARS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VIEWS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ZOOM
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SPACETOOL
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PORTRAIT
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.STATIONERY
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CORRECTIONUI
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CUSTOMCOLORS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PENS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MOBILEPC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PEERNET
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.REMOTE_ASSISTANCE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.GADGETS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FBA9A838_5E68_11DD_B051_806E6F6E6963
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.APP_CONFIGURATION
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.54883061_2B90_4CFF_A28B_45A9DDFF2375
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6B43BD98_416F_42B4_9BE0_63386B860173
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CB1538F1_FE8F_4A21_A994_554340C30571
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7B75291D_7A37_415D_B32C_1B82A3AE3D23
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.12E17C21_532C_4A6E_8A1C_40825A736397
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.12E17C21_532C_4A6E_8A1C_40825A736397
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.01366D42_C04E_11D1_B1C0_00C04FC2F3EF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.488091F0_BFF6_11CE_9DE8_00AA00A3F464
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6407E780_7E5D_11D0_8CE6_00C04FDC877E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CED2DE40_BFF6_11CE_9DE8_00AA00A3F464
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BIDINTERFACE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.095B9B12_8BDE_49D2_984B_BF01B4F8CDAF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.46AE633A_032B_41CC_8FC7_E26E246E6CB8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MSDFMAP.HANDLER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MSDFMAP_VB.HANDLER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MSDFMAP_VC.HANDLER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LOBBY_PROVIDERS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SERVICE_PROVIDERS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DPNHUPNP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.HTMLHELP1.X
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8CDE1CC8_0D3A_4B60_99EA_27EF3D7C0174
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11D0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11D2_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11D3_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._11D1_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ASR
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.STORE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DIAGNOSEDAPPLICATIONS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AUTOWAKE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DISABLEDSESSIONS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TRUSTEDGATEWAYS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MISCELLANEOUS_CONFIGURATION
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SOFTWARE_EXPLORERS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.APPCOMPATFLAGS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CORRUPTEDFILERECOVERY
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NVCACHE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MACHINENAMEPUBLICATION
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PREFETCHER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.HANDLERS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WBEMPERF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AUTOLOGONCHECKED
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WINDOWSEXPERIENCEINDEXOEMINFO
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WOW_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PORTABLE_DEVICESDEVICES
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WINDOWSANYTIMEUPGRADE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TPPRNUI
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TPVMW32
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.journal_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..SpiderSolitaireSave_ms
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..PurbleShopSave_ms
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.com3_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.htmlhelp1.x
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mmc_nodetypes_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._sqmclient
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WMPCD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1FF84C3B_1140_4EB6_BE38_4BE618D2E7D6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9DAA7B9D_CE5B_42CE_B942_32BBC284AC44
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CLSIDINPROCSERVER32
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B0E28D63_52F6_4E30_992B_78ECF97268E9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020430_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.43136EB0_D36C_11CF_ADBC_00AA00A80033
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WDF01005
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SCREEN_SAVER.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FILE_MANAGER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IEAK
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NTBACKUP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DISABLEDLOGONSOUNDS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.VISUAL_BASIC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DF0C6351_9BB9_11DF_9CF8_806D6172696F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.THEMESLASTTHEME
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WMSDK
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DEVICES
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PROGRAM_MANAGER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.UNICODE_PROGRAM_GROUPS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CID_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SVCIDCED2DE40_BFF6_11CE_9DE8_00AA00A3F464_DATAFACTORY_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BUSTYPES
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DIRECTPLAY
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IMAPI
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IPSEC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8CDE1CC8_0D3A_4B60_99EA_27EF3D7C0174
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9D5EB218_8EA3_4EE9_B120_52FC68C8D128
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DFA38559_8B35_42EF_8B00_E8F6CBF99BC0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MR._ENIGMA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MSLICENSING
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MPLAYER2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WMPLAYER
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PARAMETERSGENERAL
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PARAMETERSNDDEAGNT
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PARAMETERSNDDEAPI
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PARAMETERSNETBIOS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.PCHEALTH_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NETBIOS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SECURE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LASTTYPE1SWEEP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TYPE_1_FONTS
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NONWINDOWSAPP
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.THINPRINT
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._shellnoroam_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._appfixfile_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5A8371A3_0C6D_487b_B3C8_46D785C4C940
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.16E13837CF4220A3F828A91632D798D8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ppifile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..ppi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MessengerService
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._applets_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.16E13837CF4220A3F828A91632D798D8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.73831E61_24FC_3A02_8F82_9A61237D898D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindows_shell
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LanguagePack
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._related.desc
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ExplorerWebViewTemplateMacros_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.05589FA1_C356_11CE_BF01_00AA0055595A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8A03567A_63CB_4BA8_BAF6_52119816D1EF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2179C5D3_EBFF_11CF_B6FD_00AA00B4E220
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.b5f8350b_0548_48b1_a6ee_88bd00b4a5e7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4ECB650F_4630_41D3_AC9A_C8F926FC5907
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A0F93E27_F05D_4153_A151_F3720369A4C7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A1E75357_881A_419E_83E2_BB16DB197C68
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.566A2EFF_5651_4020_AC1A_EB48E4571EA3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DCF6C8B2_F6C0_461b_82DA_35945EADF54A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FB74F625_7D25_4455_B840_7B870B5B9322
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.89E30300_764D_11d0_B282_00A0C90F56FC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.75f599b6_0242_11df_8f49_806e6f6e6963_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.evtfile_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.evtxfile_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NapServer_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.96236A85_9DBC_11DA_9E3F_0011114AE311_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.72d3edc2_a4c4_11d0_8533_00c04fd8d503_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..DVR_MS_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Internet_ExplorerLow_RightsDragDrop_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.migwiz.exe
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.91ADC906_6722_4B05_A12B_471ADDCCE132
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.777BA816_2498_4875_933A_3067DE883070
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.777BA815_2498_4875_933A_3067DE883070
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F479A18A22A86E3429341589FF57D81A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FA20CB7A821113A4CB8FA1E38E303D3B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SafeMode_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NetDDE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Program_Groups
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..QUE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.255b3f60_829e_11cf_8d8b_00aa0060f5bf_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.203B1EED_DB9F_40FB_87BD_1990982017D2_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.31DCBC0C_20D8_40B0_A409_F4474A942358_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.385A91BC_1E8A_4E4A_A7A6_F4FC1E6CA1BD_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3918D75F_0ACB_41F2_B733_92AA15BCECF6_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.457A23DF_6F2A_4684_91D0_317FB768D87C_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5440837F_4BFF_4AE5_A1B1_7722ECC6332A_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6089A37E_EB8A_482D_BD6F_F9F46904D16D_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.649EEC1E_B579_4E8C_BB3B_4997F8426536_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6572EE16_5FE5_4331_BB6D_76A49C56E423_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.7D4734E6_047E_41E2_AEAA_E763B4739DC4_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.81397204_F51A_4571_8D7B_DC030521AABD_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8DD448E6_C188_4AED_AF92_44956194EB1F_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A7EE7F34_3BD1_427F_9231_F941E9B7E1FE_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AD763FA6_3B90_41AB_BD44_4F832BEEE55F_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B2A7FD52_301F_4348_B93A_638C6DE49229_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B5F8350B_0548_48B1_A6EE_88BD00B4A5E7_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BF426F7E_7A5E_44D6_830C_A390EA9462A3_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CE3FB1D1_02AE_4A5F_A6E9_D9F1B4073E6C_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D9F6EE60_58C9_458B_88E1_2F908FD7F87C_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F1B9284F_E9DC_4E68_9D7E_42362A59F0FD_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FC48CC30_4F3E_4FA1_803B_AD0E196A83B1_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.QueueObject
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..que
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8D2A317B_D98B_4efa_89D6_E49F0ACF98A1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A0AEE837_4A5E_41d8_A2B2_376CDC896416
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.68ff6973_d55b_4252_821e_4b44ae677299
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.e0a56635_2fea_4d6b_8afe_0bbb823502cf
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1DD02726_012D_48e7_80E1_BA8E00A20ECB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.52A41805_2F37_11D3_83EB_00A0C92A2F2D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D5AB5662_131D_453D_88C8_9BBA87502ADE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.07ACE060_1846_4AA0_8A2C_ACDAD3924C36
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B5359CA1_EF40_4C31_8C5F_4B4CFC0D3439
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F36D755D_17E6_404E_954F_0FC07574C78D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2B493B7A_3CBA_4170_9C8B_76A9DACDD644
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EC7C8096_B918_4044_94F1_E4FBA0361D5C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.176DDFBE_FEC0_4D55_BC87_84CFF1EF7F91
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.13FA24C7_5748_4B21_91F5_7397609CE747
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4C23BF51_390C_4992_A41D_41EEC05B2A4B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.099944FB_BCDA_453E_8C41_E13DA2ADF7F3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D3609541_1B29_4DE5_A4AD_5AEBAF319512
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.09BCB597_F0FA_48F9_B420_468CEA7FDE04
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.62D0991B_50AB_4F02_B948_CA94F26F8F95
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A6BFF4C0_F7C8_4D3C_9A41_3550F78A95B0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B5BAD703_5952_48B3_9321_7F4500521506
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F30D7261_587A_424F_822C_312788F43548
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.56A868B4_0AD4_11CE_B03A_0020AF0BA770
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CD260094_DE10_4AEE_AC73_EF87F6E12683
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.52A41805_2F37_11D3_83EB_00A0C92A2F2D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.32683183_48a0_441b_a342_7c2a440a9478
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020420_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020421_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020424_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DF0B3D60_548F_101B_8E65_08002B2BD119
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020425_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020422_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00020423_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0B5A2C52_3EB9_470a_96E2_6C6D4570E40F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.84015C41_291D_49e6_BF7F_DD40AE93632B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1C5221CB_C1F6_4999_8936_501C2023E4CD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C5599E1B_FC7B_4883_9FF4_581BBAEF8DBA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1D0FFECA_EDB9_4F7A_AA04_F4CAB711DD35
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Windows_NTCurrentVersionSeCEdit
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft.ManagementConsole
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft.Workflow.
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCBuddyEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCClientEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCCollection
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCDispatchEventNotification
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCEventNotification
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCIntensityEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCMediaEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCMessagingEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCParticipantStateChangeEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCRegistrationStateChangeEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCSessionOperationCompleteEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCSessionStateChangeEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IRTCWatcherEvent
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.IVideoWindow
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.mcstore
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._sim_packages_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Microsoft_Internet_News_Message
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindowsCurrentVersionExplorerMenuOrderStart_Menu2ProgramsAccessories
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindowsCurrentVersionExplorerMenuOrderStart_Menu2ProgramsGames
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindowsCurrentVersionExplorerMenuOrderStart_Menu2ProgramsMicrosoft_Visual_Studio
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWindowsCurrentVersionExplorerMenuOrderStart_Menu2ProgramsStartup
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A81A974F_8A22_43E6_9243_5198FF758DA1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A7BC02AF_1128_4A31_BCF8_1A3EE803D3B3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4433F8FE_A2C6_4987_9C46_0D27BBD50921
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D9D26565_B430_46CE_84FD_0545FEBC8EF9
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D88B44DB_6C5C_4501_B7FC_3E7476275C84
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.08F16BA2_945B_43fa_A230_972DBA0377A0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F88A4455_BEB8_4D91_8C13_6807B0147727
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.22F7AE15_E8CB_4A96_A9E6_570DF6A33645
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.07461CC0_878C_4C0F_9255_7DDB269B363B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B6F604C4_7FED_4EFC_A5F2_E29C0971A237
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.478DD7E7_228D_44B7_9854_DFB0E818D8A7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.df2d2967_9f0b_479d_830c_22886fdd74db
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AFF4A44B_1897_453F_B6A1_BE152D0A0F75
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D3295D87_D604_11D4_A704_00C04FA137E4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D10DF471_8E15_4524_A8B6_00779A1231FD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9D59F513_509F_4A94_96DE_559AFAC0BA0E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F0B14D86_2673_443b_AE9B_1E274E229D19
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8C8700B3_7247_4990_A1CA_A2C9DC16CDBF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C3F8B282_5B69_47F0_80C3_A22A97FF2EB5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A96434FF_30F1_430E_B568_DCCCB831FFCE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3cf4c3ff_e8b6_439f_9d9d_4bb108682a80
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.26FA7C37_2CD3_4897_9499_33330E075CBD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2acad1f7_4560_4904_af6f_db0ed3e19fb8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0228576F_6E6C_4E1A_B175_0E46A316AFE2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.58D9D598_CA08_466F_9B9E_3E59B8F4599B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A24BCC4A_448D_41CA_92BB_3DC15D81C16C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AA75334BD6A349D45BE6344CD4905E84
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DDE7F2BCF1D91C3409CFF425AE1E271A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.RDP.File
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9DBC_11DA_9E3F_0011114AE311
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.777BA812_2498_4875_933A_3067DE883070
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0F61EC39_FE82_45F2_A3F0_768B5D427102
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C276BA54_F480_455b_BD51_8AB05331FFBA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.06DD38D0_D187_11CF_A80D_00C04FD74AD8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.215D64D2_031C_33C7_96E3_61794CD1EE61
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4FB2D46F_EFC8_4643_BCD0_6E5BFA6A174C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BEE4BFEC_6683_3E67_9167_3C0CBC68F40A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C4F9D6EB_4FBB_3341_A582_AEA37ED6DA94
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D3295D86_D604_11D4_A704_00C04FA137E4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D37E2A3E_8545_3A39_9F4F_31827C9124AB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Control_PanelMMCPL
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MountPoints2_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Group_Policy_Management_Console
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.NetscapeNetscape_Navigator
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.msbackupfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemFileAssociations.eml
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemFileAssociations.htm
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemFileAssociations.html
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemFileAssociations.mht
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemFileAssociations.mhtml
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemFileAssociations.nws
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemFileAssociations.xml
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.zapfile
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Virtual_Machine
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.UnattendSettings
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CrawlScopeManager_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B43357AA_3A6D_4D94_B56E_43C44D09E548
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CB2F7EDD_9D1F_43C1_90FC_4F52EAE172A1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MicrosoftWZCSVC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.SystemIndex
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DownloadManager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.853FE2B1_B769_11d0_9C4E_00C04FB6C6FA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.764BF0E1_F219_11ce_972D_00AA00A14F56
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push edi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1b24a030_9b20_49bc_97ac_1be4426f9e59
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push esi
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0F8604A5_4ECE_4DE1_BA7D_CF10F8AA4F48
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2C2577C2_63A7_40e3_9B7F_586602617ECB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E29F9716_5C08_4FCD_955A_119FDB5A522D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C8494E42_ACDD_4739_B0FB_217361E4894F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.da67b8ad_e81b_4c70_9b91b417b5e33527
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ADCS_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JobObject_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.217C3F53_0458_425B_925D_6653795F221F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.21BBF7A3_1C63_4C58_8EDC_810333E34932
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.520DC67A_752E_11D3_8D56_00C04F680B2B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6BC09692_0CE6_11D1_BAAE_00C04FC2E20D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.727CDF4F_3BA0_11D3_8738_00C04F79ED0D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.98D9A6F1_4696_4B5E_A2E8_36B3F9C1E12C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.b5f8350b_0548_48b1_a6ee_88bd00b4a5e7
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C523F39F_9C83_11D3_9094_00104BD0D535
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CC2C83A6_9BE4_11D0_98E7_00C04FC2CAF5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DE43C480_3D61_480E_8DB9_CC22422A878D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0729A372_1480_4749_B126_B9357926FEBA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.24881A40_5261_421E_A9D8_290DFF1C4C0F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.36124697_19BB_4a77_964F_AC2D44BE7D01
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.37CA5841_74CC_41A3_959B_F22B182A49C1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4746C79A_2042_4332_8650_48966E44ABA8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.721B8BC2_0857_4053_A66C_D56BA16F9236
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.75993FB3_2496_40CA_ACCD_8152FE0B7EFF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8FACEB4E_3644_41e2_BDA8_5F348C217C4E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B9FA1A8D_50A8_4A11_85A1_F687288E8CC0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E992BEE7_16D3_494F_801B_A27E2AB364C5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F7404E17_C927_43a6_AAB1_57AB3595C584
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.36CFF953_FB06_45AD_896F_94A0259AB3DD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.17492023_C23A_453E_A040_C7C580BBF700
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.32be5ed2_5c86_480f_a914_0ff8885a1b3f
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A373F27E_7B87_11D3_B1C1_00C04F68155C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.10935444_7CC4_483B_9FDB_37560F5F3BBF2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9E175BB4_F52A_11D8_B9A5_505054503030
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0A9B27F1_F902_43a1_8663_BFF940E2F280
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0E3F1A07_DA76_4168_BA0F_4AFA3007CEFF
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4CE3F02C_E146_4C4F_A35D_16C9DA764CC2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.70AE37AD_5507_4fe0_9691_563A55D71F18
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.94F5EA4D_7E59_4388_9B8D_151501CF480B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D578D806_C260_4321_9AE0_3B181B39538C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E4B7322B_83E2_4715_80E5_85ACD95AE7DE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F5C2CD90_ECE8_4BF8_9C76_36A09732F222
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.McProxy
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.LEGACY_MCPROXY
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0x527bd0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.siteadvisor
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B58C2440_A1A3_11d1_B024_006097C9A284
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B58C2441_A1A3_11d1_B024_006097C9A284
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.80EE4901_33A8_11d1_A213_0080C88593A5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.80EE4902_33A8_11d1_A213_0080C88593A5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.20A10BD4_0FF4_45e8_87EF_D2708E99CEAA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.20A10BD7_FF8F_4eb0_9754_7F9641B35BB5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Intuit
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Quickbooks
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.91C4C540_9FDD_11D2_AFAA_00105A305A2B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MediaPlayer
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MPlayer2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WMPlayer
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.playback_DefaultPlaylist
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Audio_Compression_Manager
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push ebx
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DC6EFB56_9CFA_464D_8880_44885D7DC193
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WindowsFirewall
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CachePaths
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Safer_Networking
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0002C800_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1FC39BE1_E39B_11d1_8D72_00805F93627E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.A2FE74E1_B743_11d0_AE1A_00A0C90FFFC3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FAE04EC0_301F_11d3_BF4B_00C04F79EFBC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.FAE04EC1_301F_11D3_BF4B_00C04F79EFBC
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F184B08F_C81C_45f6_A57F_5ABD9991F28F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F5E7E720_1401_11d1_883B_0000F87579D2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DA9FB551_C724_11d0_AE1F_00A0C90FFFC3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E24C65DC_7377_472b_9ABA_BC803B73C61A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.39c9c826_8ef8_4079_8c95_428f5b1c323f
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ADA715A0_A2E7_41DE_AD35_1F09C801F764
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.20A10BD3_64C9_4aeb_8C2B_EDED0B6958F5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.00000000_0000_0000_C000_000000000046
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.9903F14C_12CE_4c99_9986_2EE3D7D588A8
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4f15a451_b14f_4067_8b78_50e7837148d2
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CC12D59D_1FE0_4297_850C_B0F9E22BD7BE
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.39A2C297_4778_11D2_9BDB_204C4F4F5020
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.179C8845_1F8D_498D_82BB_949CDF2C7236
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.246E5F49_035B_4962_B353_6861193396FB
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C49F2184_50A7_11D3_9144_00104BA11C5E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0EF20641_8773_4B65_955C_C12C206EB86C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.636CCDDF_0D74_11d3_8694_00C04F6890ED
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E4B28371_83B0_11d0_8259_00C04FD85AB4
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.410B4FEB_339A_11D2_9602_00C04F8EE628
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4B288991_E57A_4400_B6A2_89CE10F9F520
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.888D5473_CABB_11D1_8505_00A0C91F9CA0
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.273380E8_1438_4B2C_95B0_713284FBC302
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.99F74582_8CF1_11D1_BF92_0060081ED811
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1a37cba3_a2ad_48c3_aae2_434623d2f90d
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.39AAF44F_1256_11d3_869A_00C04F6890ED
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.39AAF451_1256_11d3_869A_00C04F6890ED
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1D0FFECA_EDB9_4F7A_AA04_F4CAB711DD35
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.TrendMicro
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.google
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.ImmersiveShell_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.CFD2C1F142D260E3CB8B271543DA9F98
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1007C6B46D7C017319E3B52CF3EC196E
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.26F949DB585D99647B7DAB4DC5066A73
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.4B6C7001_C7D6_3710_913E_5BC23FCE91E6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E6FB5E20_DE35_11CF_9C87_00AA005127ED
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.BD949F62_D585_4699_B7D7_BAD45C60A637
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.315A8872_923E_4EA2_9889_33CD4754BF64
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str..eml
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AppearanceNew_Schemes
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.currentcontrolsetPolicies
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Extensions_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._network
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Parental_Controls_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2CE4D4CF_B278_4126_AD1E_B622DA2E8339_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.41738EEA_442F_477F_92CF_2889BD6CD7E71.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AcroExch.RMFFile_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.785DCDE4_F5BE_4264_BC16_31EF48229B641.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.6F74E663_6237_46E5_A403_1FDED57A38451.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.92BAB64C_1FC7_405F_B033_BF4D88BC7A881.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.1D1708DE_F500_4402_92ED_5CA693DABE72
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B4928187_D2E3_4CFA_A2C2_A9C97B4956EA
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.E6DDEC0E_1E17_404E_8EA9_EACEBC9B2D2B1.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2CE2313B_A62B_47C3_BE83_5170E53E208E1.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.35D7A7FA_8AB2_401c_983E_919903F5D5AD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.08FD8A78_64B6_4692_96D2_1A363A7E3B9A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.137A78D3_65B7_4e2f_851C_6EC4B633B436
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.protector_dll.ProtectorBho.1
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.protector_dll.ProtectorBho
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5924C60B_6D7F_4AD6_8084_24A59431C9671.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.2CE4D4CF_B278_4126_AD1E_B622DA2E8339
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.46B89F5A_769D_4792_AD9A_E3755915CBC3
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.D28A7584_FA85_422B_8367_F8E07E78662B
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.780885F5_EFC3_4092_BD0E_FD9B8A08D3153.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.86676E13_D6D8_4652_9FCF_F2047F1FB0001.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8FCDFC2F_4873_440E_A9EE_3691C111B4421.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.24E92E7A_6848_4747_A3EA_3AAC0576BE52
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.DFEAF541_F3E1_4c24_ACAC_99C30715084A
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str._acrobat_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B786AA8A_3748_4cf4_9F64_F4077DA25F0F
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8E93A1B1_8EF0_42e9_AC76_D2CA4CF28681
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.214FF71D_8D03_4817_90AA_5D195ABC90AA1.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5D850D28_5597_48E9_9D80_0D0A1A88584B1.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C7CB459A_7261_4AE6_A87A_17041EE98A4018.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.C7CB459A_7261_4AE6_A87A_17041EE98A401a.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.B7DE8AC9_9CAD_4B18_A7CE_42F3362D2B971.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.28F69C2F_0073_4EDF_9AB9_97BB8C55C1661.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.8852ECE8_595D_427E_B5A0_F8D2E62FABBD
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.68A9B6C0_580E_4014_A30A_51F9E0BC09F31.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.EE0D5357_A96D_4454_A9A3_A013E2B36AA21.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WindowsLiveMail.Email.1_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WindowsLiveMail.News.1_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.3A76B708_DCA6_43F2_AF76_ADE7DBDF04761.0_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.0563DB41_F538_4B37_A92D_4659049B7766
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AF69DE43_7D58_4638_B6FA_CE66B5AD205D
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.5645C8C3_E277_11CF_8FDA_00AA00A14F93
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.MAGIXFirebird
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.WATCHTOWER_
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.Adobe.adobebridgeCS6
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.F0C3E5D1_1ADE_321E_8167_68EF0DE699A5
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AdobeBridge
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.92D58719_BBC1_4CC3_A08B_56C9E884CC2C
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.08D2E121_7F6A_43EB_97FD_629B44903403
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.AdobeFlash
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push str.JavaSoft
lea ecx, [ebp + 0x64]
call fcn.0040ab49
push 0xffffffffffffffff
xor esi, esi
push esi
mov ecx, 0x587bc8
call fcn.004a459c
mov eax, dword [ebp + 0x6c]
cmp eax, esi
mov dword [ebp - 0xec], eax
jle 0x441a26
mov eax, esi
lea ecx, [ebp + 0x64]
call fcn.00406f3a
push eax
lea ecx, [ebp - 0xc8]
call fcn.004022a8
lea edi, [ebp - 0xc8]
mov dword [ebp - 4], 0x16a
call fcn.00415c5a
mov ebx, edi
call fcn.0040f613
call fcn.0040f5c6
mov eax, edi
push eax
mov ecx, 0x587bc8
call fcn.00404b4c
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0xc8]
add ecx, 0xfffffff0
call fcn.004027b0
inc esi
cmp esi, dword [ebp - 0xec]
jl 0x4419c7
push 0xffffffffffffffff
push 0
lea ecx, [ebp + 0x64]
call fcn.004a459c
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0
call fcn.004a47f7
mov eax, 0x587bc8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x78
leave
ret