Function at 0x1000e5a0
Capabilities:
Enumerate processes

Disassembly:
sub esp, 0x32c
xor eax, eax
mov ecx, 0x41
push esi
push edi
lea edi, [esp + 8]
push eax
rep stosd dword es:[edi], eax
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0x1000f8f3
mov ecx, 0x49
xor eax, eax
lea edi, [esp + 0x210]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x20c]
mov dword [esp + 0x20c], 0x128
push eax
push esi
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x1000f8ec
mov edi, dword [esp + 0x338]
mov eax, dword [esp + 0x214]
cmp edi, eax
je 0x1000e62a
lea ecx, [esp + 0x20c]
push ecx
push esi
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x1000f8ec
cmp edi, dword [esp + 0x214]
jne 0x1000e60b
lea edx, [esp + 0x230]
push 0x104
lea eax, [esp + 0xc]
push edx
push eax
call fcn.10007670
lea ecx, [esp + 0x14]
push str.winword.exe
push ecx
call fcn.100063e0
add esp, 0x14
test eax, eax
jne 0x1000e66c
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 1
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.excel.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e697
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 2
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.winproj.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e6c2
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 3
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.visio.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e6ed
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 4
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.msdev.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e718
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 5
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.xtop.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e743
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 6
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.uedit32.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e76e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 7
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.eb.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e799
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 8
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.ironcad.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e7c4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x29
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.acad.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e7ef
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 9
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.coreldrw.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e81a
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0xa
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.rave.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e845
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x34
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.sldworks.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e870
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0xb
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.capture.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e89b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0xc
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.concepthdl.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e8c6
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0xd
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.allegro.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
je 0x1000f8d7
lea edx, [esp + 8]
push str.allegro_librarian.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
je 0x1000f8d7
lea eax, [esp + 8]
push str.powerpnt.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e925
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0xf
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.acrord32.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e96b
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x11
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.acrobat.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e9b1
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x10
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.ustation.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000e9f7
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x12
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.draft.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ea3d
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x3a
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.ugraf.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ea83
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x13
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.mspaint.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000eac9
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x14
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.vb6.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000eb0f
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x15
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.kmcapp.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000eb55
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x16
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.km.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000eb9b
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x17
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.edge.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ebe1
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x18
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.insight3.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ec27
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x19
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.photoshop.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ec50
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
jmp 0x1000ec77
lea ecx, [esp + 8]
push str.photoshp.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ec96
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x1b
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.dssched.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ecdc
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x1c
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.Inventor.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ed22
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x1e
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.design9.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ed68
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x1f
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.lathe9.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000edae
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x20
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.mill9.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000edf4
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x21
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.wire9.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ee3a
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x22
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.jhcad.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ee80
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x23
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.acdsee.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000eec6
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x24
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.acdsee8.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ef0c
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x35
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.ccdraft.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ef52
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x26
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.delphi32.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000ef98
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x27
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.dxp.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000efde
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x1a
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.3dsmax.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f024
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x28
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.cadt2000.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f06a
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x2a
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.winwps.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f0b0
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x2b
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.winwpp.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f0f6
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x2d
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.wps.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f13c
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x2e
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.et.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f182
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x2c
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.wpp.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f1c8
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x2f
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.mathcad.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f20e
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x30
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.multisim.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f254
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x31
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.cnext.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f29a
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x32
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.matlab.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f2e0
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x33
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.designstar.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f326
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x36
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push 0x1002f390
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f36c
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x37
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push 0x1002f384
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f3b2
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x38
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push 0x1002f378
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f3f8
lea edx, [esp + 8]
lea eax, [esp + 0x10c]
push edx
push 0x1002f528
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x39
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.zwcad.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f423
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x3c
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.FreeHand_Mx.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f44e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x3d
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.powerpcb.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f479
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x3e
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.BlazeRouter.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f4a4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x3f
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.powerlogic.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f4cf
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x40
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.KODAKIMG.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f4fa
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x41
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.devenv.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f525
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x42
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.MSPVIEW.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f550
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x43
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.AcmeCadConverter.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
je 0x1000f8c2
lea ecx, [esp + 8]
push str.CadConverter.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
je 0x1000f8c2
lea edx, [esp + 8]
push str.CADConverter.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f5af
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x53
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.Illustrator.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f5da
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x45
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.ironcad.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f605
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x46
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.aclt.EXE
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f630
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x47
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.KMCAD.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f65b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x48
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.soffice.bin
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f686
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x49
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.Trace.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f6b1
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x4a
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.CorelPP.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f6dc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x4b
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.Capp.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f707
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x4c
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.ICAD.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f732
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x4d
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.proii.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f75d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x4e
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.OIS.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f788
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x4f
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.ACDSee5.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
je 0x1000f8ad
lea eax, [esp + 8]
push str.ACDSee6.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
je 0x1000f8ad
lea ecx, [esp + 8]
push str.ACDSee7.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
je 0x1000f8ad
lea edx, [esp + 8]
push str.VisView.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f801
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x51
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.acmecadsee.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f82c
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x54
pop esi
add esp, 0x32c
ret
lea ecx, [esp + 8]
push str.xnView.exe
push ecx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f857
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x55
pop esi
add esp, 0x32c
ret
lea edx, [esp + 8]
push str.pview.exe
push edx
call fcn.100063e0
add esp, 8
test eax, eax
jne 0x1000f882
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x56
pop esi
add esp, 0x32c
ret
lea eax, [esp + 8]
push str.avwin.exe
push eax
call fcn.100063e0
add esp, 8
test eax, eax
push esi
jne 0x1000f8ed
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x57
pop esi
add esp, 0x32c
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x50
pop esi
add esp, 0x32c
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0x44
pop esi
add esp, 0x32c
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, 0xe
pop esi
add esp, 0x32c
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
xor eax, eax
pop esi
add esp, 0x32c
ret