Function at 0x4aa770
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x54be42
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x460
mov eax, dword [0x5b8cb0]
push ebp
mov ebp, ecx
push esi
mov ecx, dword [0x5b8cb4]
lea esi, [eax + 0x850]
mov eax, dword [ebp + 0x3948]
add ecx, 0x850
push edi
mov dword [esp + 0x41c], ecx
or edi, 0xffffffff
and ah, 0xf7
lea ecx, [ebp + 0x3970]
mov dword [esp + 0x224], edi
mov dword [esp + 0x21c], 0xffffff97
mov dword [ebp + 0x3948], eax
call fcn.0051286f
lea ecx, [esp + 0x454]
call fcn.00466340
lea edx, [esp + 0x454]
mov ecx, 0x5bc868
push edx
push str.Select.Apps.MinPct
mov dword [esp + 0x47c], 0
call fcn.0046c290
test eax, eax
jle 0x4aa81d
mov eax, dword [esp + 0x464]
mov dword [esp + 0x224], eax
lea ecx, [esp + 0x454]
push ecx
push str.Select.Apps
mov ecx, 0x5bc868
call fcn.0046c290
test eax, eax
jle 0x4aa846
mov edx, dword [esp + 0x464]
mov dword [esp + 0x21c], edx
lea ecx, [esp + 0x454]
mov dword [esp + 0x474], edi
call fcn.004663b0
mov esi, dword [esi + 4]
test esi, esi
mov dword [esp + 0x28], esi
je 0x4aeca9
push ebx
mov ebx, 2
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
mov esi, dword [eax + 8]
mov eax, dword [0x5ab980]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x478], 1
mov dword [esp + 0x14], eax
lea edx, [esi + 4]
xor edi, edi
push edx
lea ecx, [esi + 0x100]
mov byte [esp + 0x47c], bl
mov dword [esi + 0xb4], edi
mov dword [esi + 0xb8], edi
mov dword [esi + 0xbc], edi
mov dword [esi + 0xc0], edi
call fcn.00512a1d
mov eax, dword [esi + 0xa0]
cmp eax, ebx
jne 0x4aa983
cmp dword [esi + 0xa4], ebx
jne 0x4aa8f6
push str.Installer_and_Menu__same_Dir
lea ecx, [esp + 0x20]
call fcn.00512a6d
mov dword [esi + 0xb4], 0x64
jmp 0x4aaa51
cmp eax, ebx
jne 0x4aa983
cmp dword [esi + 0xa4], 1
jne 0x4aa924
push str.Installer__with_Menu_in_subdirs
lea ecx, [esp + 0x20]
call fcn.00512a6d
mov dword [esi + 0xb4], 0x5f
jmp 0x4aaa51
push str.No_Start_Menus_found
lea ecx, [esp + 0x1a8]
call fcn.00512952
lea eax, [esp + 0x1a4]
push edi
lea ecx, [esp + 0x18]
push eax
push ecx
mov byte [esp + 0x484], 3
call fcn.00425570
add esp, 0xc
lea ecx, [esp + 0x1a4]
mov byte [esp + 0x478], bl
call fcn.005128e4
push str.Installer_Only
lea ecx, [esp + 0x20]
call fcn.00512a6d
mov dword [esi + 0xb4], 0x1e
jmp 0x4aaa51
cmp dword [esi + 0xa4], ebx
jne 0x4aaa04
cmp eax, 1
jne 0x4aa9ad
push str.Menu__with_Installer_in_subdirs
lea ecx, [esp + 0x20]
call fcn.00512a6d
mov dword [esi + 0xb4], 0x50
jmp 0x4aaa51
push str.Menu_Only
lea ecx, [esp + 0x20]
call fcn.00512a6d
push str.No_Installer_Found
lea ecx, [esp + 0x1b0]
mov dword [esi + 0xb4], 0x32
call fcn.00512952
lea edx, [esp + 0x1ac]
push edi
lea eax, [esp + 0x18]
push edx
push eax
mov byte [esp + 0x484], 4
call fcn.00425570
add esp, 0xc
mov byte [esp + 0x478], bl
lea ecx, [esp + 0x1ac]
jmp 0x4aaa4c
push 0x598538
lea ecx, [esp + 0x20]
call fcn.00512a6d
push str.Program_path_not_found
lea ecx, [esp + 0x40]
mov dword [esi + 0xb4], edi
call fcn.00512952
lea ecx, [esp + 0x3c]
push edi
lea edx, [esp + 0x18]
push ecx
push edx
mov byte [esp + 0x484], 5
call fcn.00425570
add esp, 0xc
mov byte [esp + 0x478], bl
lea ecx, [esp + 0x3c]
call fcn.005128e4
cmp dword [esi + 0x8c], 1
jle 0x4aaa7a
mov eax, dword [esi + 0xb4]
lea ecx, [eax + eax*8]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [esi + 0xb4], edx
mov edx, dword [esp + 0x1c]
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x34]
push edx
push eax
mov eax, dword [esi + 0x6c]
push ecx
push eax
mov eax, dword [esi + 0x8c]
lea edi, [esi + 0xb0]
push eax
push str.Inst:__i__Menus:__i__Files:__i__Reg:__i_nPath_from__s
push edi
call fcn.0050e6c7
mov eax, dword [esi + 0xa8]
add esp, 0x1c
test eax, eax
je 0x4aab4b
mov eax, dword [0x5ab980]
mov dword [esp + 0x18], eax
mov ecx, dword [edi]
mov edx, dword [esi + 0xb4]
push ecx
push edx
lea eax, [esp + 0x20]
push str._WinOS__i_____s
push eax
mov byte [esp + 0x488], 6
call fcn.0050e6c7
add esp, 0x10
lea ecx, [esp + 0x18]
push ecx
mov ecx, edi
call fcn.00512a1d
push str.Part_of_the_operating_system
lea ecx, [esp + 0x138]
mov dword [esi + 0xb4], 0
call fcn.00512952
lea edx, [esp + 0x134]
push 0
lea eax, [esp + 0x18]
push edx
push eax
mov byte [esp + 0x484], 7
call fcn.00425570
add esp, 0xc
lea ecx, [esp + 0x134]
mov byte [esp + 0x478], 6
call fcn.005128e4
lea ecx, [esp + 0x18]
mov byte [esp + 0x478], bl
call fcn.005128e4
mov eax, dword [esi + 0x8c]
test eax, eax
jle 0x4aabbd
mov edi, dword [esi + 0x84]
test edi, edi
je 0x4aabbd
mov eax, edi
mov edi, dword [edi]
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x194]
test ecx, ecx
jg 0x4aabb9
mov edx, dword [esi + 0xb4]
push str.Unable_to_find_critical_components
add edx, 0xffffffce
lea ecx, [esp + 0x48]
mov dword [esi + 0xb4], edx
call fcn.00512952
lea ecx, [esp + 0x44]
push 0
lea edx, [esp + 0x18]
push ecx
push edx
mov byte [esp + 0x484], 8
call fcn.00425570
add esp, 0xc
lea ecx, [esp + 0x44]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4aab5f
mov dword [esi + 0xac], 0
mov eax, dword [0x5b8cb0]
mov eax, dword [eax + 0x948]
test eax, eax
mov dword [esp + 0x18], eax
je 0x4aac83
mov ecx, eax
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov edi, dword [ecx + 8]
mov ecx, dword [edi + 0xbc]
test ecx, ecx
je 0x4aac6f
lea ecx, [esp + 0x414]
push ecx
mov ecx, edi
call fcn.00441e60
push eax
lea ecx, [esi + 0xc]
mov byte [esp + 0x47c], 9
call fcn.00405890
lea ecx, [esp + 0x414]
mov dword [esp + 0x24], eax
mov byte [esp + 0x478], bl
call fcn.005128e4
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4aac79
lea edx, [esp + 0x234]
mov ecx, edi
push edx
call fcn.00441e60
push eax
lea ecx, [esi + 0x28]
mov byte [esp + 0x47c], 0xa
call fcn.00405890
lea ecx, [esp + 0x234]
mov edi, eax
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4aac79
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4aabde
jmp 0x4aac83
mov dword [esi + 0xac], 1
mov eax, dword [esi + 0xac]
test eax, eax
je 0x4aacda
push str.Program_Drive_is_deselected
lea ecx, [esp + 0x1f0]
mov dword [esi + 0xb4], 0
call fcn.00512952
lea eax, [esp + 0x1ec]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
mov byte [esp + 0x484], 0xb
call fcn.00425570
add esp, 0xc
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x478], bl
call fcn.005128e4
mov eax, dword [esi + 0xa0]
mov dword [esp + 0x18], 0
test eax, eax
jne 0x4ac821
lea edx, [esp + 0x23c]
mov ecx, esi
push edx
call fcn.00419530
push str.PCCMAIN.EXE
push eax
lea eax, [esp + 0x234]
mov byte [esp + 0x480], 0xc
push eax
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push 0
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0xd
call dword [edx + 8]
lea ecx, [esp + 0x22c]
mov edi, eax
mov byte [esp + 0x478], 0xc
call fcn.005128e4
lea ecx, [esp + 0x23c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x244]
mov ecx, esi
push eax
call fcn.00419530
push str.PNTMAIN.EXE
lea ecx, [esp + 0x350]
push eax
push ecx
mov byte [esp + 0x484], 0xe
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0xf
call dword [edx + 8]
lea ecx, [esp + 0x34c]
mov edi, eax
mov byte [esp + 0x478], 0xe
call fcn.005128e4
lea ecx, [esp + 0x244]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x24c]
mov ecx, esi
push eax
call fcn.00419530
push str.SCAN32.EXE
lea ecx, [esp + 0x3d8]
push eax
push ecx
mov byte [esp + 0x484], 0x10
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x11
call dword [edx + 8]
lea ecx, [esp + 0x3d4]
mov edi, eax
mov byte [esp + 0x478], 0x10
call fcn.005128e4
lea ecx, [esp + 0x24c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x254]
mov ecx, esi
push eax
call fcn.00419530
push str.VSMAIN.EXE
lea ecx, [esp + 0x358]
push eax
push ecx
mov byte [esp + 0x484], 0x12
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x13
call dword [edx + 8]
lea ecx, [esp + 0x354]
mov edi, eax
mov byte [esp + 0x478], 0x12
call fcn.005128e4
lea ecx, [esp + 0x254]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x25c]
mov ecx, esi
push eax
call fcn.00419530
push str.NAVW32.EXE
lea ecx, [esp + 0x458]
push eax
push ecx
mov byte [esp + 0x484], 0x14
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x15
call dword [edx + 8]
lea ecx, [esp + 0x454]
mov edi, eax
mov byte [esp + 0x478], 0x14
call fcn.005128e4
lea ecx, [esp + 0x25c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x264]
mov ecx, esi
push eax
call fcn.00419530
push str.NORTON.EXE
lea ecx, [esp + 0x360]
push eax
push ecx
mov byte [esp + 0x484], 0x16
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x17
call dword [edx + 8]
lea ecx, [esp + 0x35c]
mov edi, eax
mov byte [esp + 0x478], 0x16
call fcn.005128e4
lea ecx, [esp + 0x264]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x26c]
mov ecx, esi
push eax
call fcn.00419530
push str.RESCUE32.EXE
lea ecx, [esp + 0x3e0]
push eax
push ecx
mov byte [esp + 0x484], 0x18
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x19
call dword [edx + 8]
lea ecx, [esp + 0x3dc]
mov edi, eax
mov byte [esp + 0x478], 0x18
call fcn.005128e4
lea ecx, [esp + 0x26c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x274]
mov ecx, esi
push eax
call fcn.00419530
push str.CS32.EXE
lea ecx, [esp + 0x368]
push eax
push ecx
mov byte [esp + 0x484], 0x1a
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x1b
call dword [edx + 8]
lea ecx, [esp + 0x364]
mov edi, eax
mov byte [esp + 0x478], 0x1a
call fcn.005128e4
lea ecx, [esp + 0x274]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x27c]
mov ecx, esi
push eax
call fcn.00419530
push str.N2000.EXE
lea ecx, [esp + 0x420]
push eax
push ecx
mov byte [esp + 0x484], 0x1c
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x1d
call dword [edx + 8]
lea ecx, [esp + 0x41c]
mov edi, eax
mov byte [esp + 0x478], 0x1c
call fcn.005128e4
lea ecx, [esp + 0x27c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x284]
mov ecx, esi
push eax
call fcn.00419530
push str.CGMAIN.EXE
lea ecx, [esp + 0x370]
push eax
push ecx
mov byte [esp + 0x484], 0x1e
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x1f
call dword [edx + 8]
lea ecx, [esp + 0x36c]
mov edi, eax
mov byte [esp + 0x478], 0x1e
call fcn.005128e4
lea ecx, [esp + 0x284]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x28c]
mov ecx, esi
push eax
call fcn.00419530
push str.LUALL.EXE
lea ecx, [esp + 0x3e8]
push eax
push ecx
mov byte [esp + 0x484], 0x20
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x21
call dword [edx + 8]
lea ecx, [esp + 0x3e4]
mov edi, eax
mov byte [esp + 0x478], 0x20
call fcn.005128e4
lea ecx, [esp + 0x28c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x294]
mov ecx, esi
push eax
call fcn.00419530
push str.VPC32.EXE
lea ecx, [esp + 0x378]
push eax
push ecx
mov byte [esp + 0x484], 0x22
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x23
call dword [edx + 8]
lea ecx, [esp + 0x374]
mov edi, eax
mov byte [esp + 0x478], 0x22
call fcn.005128e4
lea ecx, [esp + 0x294]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x29c]
mov ecx, esi
push eax
call fcn.00419530
push str.CMGRDIAN.EXE
lea ecx, [esp + 0x440]
push eax
push ecx
mov byte [esp + 0x484], 0x24
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x25
call dword [edx + 8]
lea ecx, [esp + 0x43c]
mov edi, eax
mov byte [esp + 0x478], 0x24
call fcn.005128e4
lea ecx, [esp + 0x29c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2a4]
mov ecx, esi
push eax
call fcn.00419530
push str.RULAUNCH.EXE
lea ecx, [esp + 0x380]
push eax
push ecx
mov byte [esp + 0x484], 0x26
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x27
call dword [edx + 8]
lea ecx, [esp + 0x37c]
mov edi, eax
mov byte [esp + 0x478], 0x26
call fcn.005128e4
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2ac]
mov ecx, esi
push eax
call fcn.00419530
push str.ALOGSERV.EXE
lea ecx, [esp + 0x3f0]
push eax
push ecx
mov byte [esp + 0x484], 0x28
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x29
call dword [edx + 8]
lea ecx, [esp + 0x3ec]
mov edi, eax
mov byte [esp + 0x478], 0x28
call fcn.005128e4
lea ecx, [esp + 0x2ac]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2b4]
mov ecx, esi
push eax
call fcn.00419530
push str.AVCONSOL.EXE
lea ecx, [esp + 0x388]
push eax
push ecx
mov byte [esp + 0x484], 0x2a
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x2b
call dword [edx + 8]
lea ecx, [esp + 0x384]
mov edi, eax
mov byte [esp + 0x478], 0x2a
call fcn.005128e4
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2bc]
mov ecx, esi
push eax
call fcn.00419530
push str.MCAGENT.EXE
lea ecx, [esp + 0x428]
push eax
push ecx
mov byte [esp + 0x484], 0x2c
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x2d
call dword [edx + 8]
lea ecx, [esp + 0x424]
mov edi, eax
mov byte [esp + 0x478], 0x2c
call fcn.005128e4
lea ecx, [esp + 0x2bc]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2c4]
mov ecx, esi
push eax
call fcn.00419530
push str.MCSHIELD.EXE
lea ecx, [esp + 0x390]
push eax
push ecx
mov byte [esp + 0x484], 0x2e
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x2f
call dword [edx + 8]
lea ecx, [esp + 0x38c]
mov edi, eax
mov byte [esp + 0x478], 0x2e
call fcn.005128e4
lea ecx, [esp + 0x2c4]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2cc]
mov ecx, esi
push eax
call fcn.00419530
push str.MCVSSHLD.EXE
lea ecx, [esp + 0x3f8]
push eax
push ecx
mov byte [esp + 0x484], 0x30
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x31
call dword [edx + 8]
lea ecx, [esp + 0x3f4]
mov edi, eax
mov byte [esp + 0x478], 0x30
call fcn.005128e4
lea ecx, [esp + 0x2cc]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2d4]
mov ecx, esi
push eax
call fcn.00419530
push str.VSSTAT.EXE
lea ecx, [esp + 0x398]
push eax
push ecx
mov byte [esp + 0x484], 0x32
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x33
call dword [edx + 8]
lea ecx, [esp + 0x394]
mov edi, eax
mov byte [esp + 0x478], 0x32
call fcn.005128e4
lea ecx, [esp + 0x2d4]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2dc]
mov ecx, esi
push eax
call fcn.00419530
push str.VSHWIN32.EXE
lea ecx, [esp + 0x450]
push eax
push ecx
mov byte [esp + 0x484], 0x34
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x35
call dword [edx + 8]
lea ecx, [esp + 0x44c]
mov edi, eax
mov byte [esp + 0x478], 0x34
call fcn.005128e4
lea ecx, [esp + 0x2dc]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2e4]
mov ecx, esi
push eax
call fcn.00419530
push str.WEBSCANX.EXE
lea ecx, [esp + 0x3a0]
push eax
push ecx
mov byte [esp + 0x484], 0x36
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x37
call dword [edx + 8]
lea ecx, [esp + 0x39c]
mov edi, eax
mov byte [esp + 0x478], 0x36
call fcn.005128e4
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2ec]
mov ecx, esi
push eax
call fcn.00419530
push str.PCCIOMON.EXE
lea ecx, [esp + 0x400]
push eax
push ecx
mov byte [esp + 0x484], 0x38
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x39
call dword [edx + 8]
lea ecx, [esp + 0x3fc]
mov edi, eax
mov byte [esp + 0x478], 0x38
call fcn.005128e4
lea ecx, [esp + 0x2ec]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2f4]
mov ecx, esi
push eax
call fcn.00419530
push str.PNTIOMON.EXE
lea ecx, [esp + 0x3a8]
push eax
push ecx
mov byte [esp + 0x484], 0x3a
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x3b
call dword [edx + 8]
lea ecx, [esp + 0x3a4]
mov edi, eax
mov byte [esp + 0x478], 0x3a
call fcn.005128e4
lea ecx, [esp + 0x2f4]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2fc]
mov ecx, esi
push eax
call fcn.00419530
push str.POPTRAP.EXE
lea ecx, [esp + 0x430]
push eax
push ecx
mov byte [esp + 0x484], 0x3c
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x3d
call dword [edx + 8]
lea ecx, [esp + 0x42c]
mov edi, eax
mov byte [esp + 0x478], 0x3c
call fcn.005128e4
lea ecx, [esp + 0x2fc]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x304]
mov ecx, esi
push eax
call fcn.00419530
push str.ALUNOTIFY.EXE
lea ecx, [esp + 0x3b0]
push eax
push ecx
mov byte [esp + 0x484], 0x3e
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x3f
call dword [edx + 8]
lea ecx, [esp + 0x3ac]
mov edi, eax
mov byte [esp + 0x478], 0x3e
call fcn.005128e4
lea ecx, [esp + 0x304]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x30c]
mov ecx, esi
push eax
call fcn.00419530
push str.AUPDATE.EXE
lea ecx, [esp + 0x408]
push eax
push ecx
mov byte [esp + 0x484], 0x40
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x41
call dword [edx + 8]
lea ecx, [esp + 0x404]
mov edi, eax
mov byte [esp + 0x478], 0x40
call fcn.005128e4
lea ecx, [esp + 0x30c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x314]
mov ecx, esi
push eax
call fcn.00419530
push str.CCAPP.EXE
lea ecx, [esp + 0x3b8]
push eax
push ecx
mov byte [esp + 0x484], 0x42
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x43
call dword [edx + 8]
lea ecx, [esp + 0x3b4]
mov edi, eax
mov byte [esp + 0x478], 0x42
call fcn.005128e4
lea ecx, [esp + 0x314]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x31c]
mov ecx, esi
push eax
call fcn.00419530
push str.CCEVTMGR.EXE
lea ecx, [esp + 0x448]
push eax
push ecx
mov byte [esp + 0x484], 0x44
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x45
call dword [edx + 8]
lea ecx, [esp + 0x444]
mov edi, eax
mov byte [esp + 0x478], 0x44
call fcn.005128e4
lea ecx, [esp + 0x31c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x324]
mov ecx, esi
push eax
call fcn.00419530
push str.CCPXYSVC.EXE
lea ecx, [esp + 0x3c0]
push eax
push ecx
mov byte [esp + 0x484], 0x46
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x47
call dword [edx + 8]
lea ecx, [esp + 0x3bc]
mov edi, eax
mov byte [esp + 0x478], 0x46
call fcn.005128e4
lea ecx, [esp + 0x324]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x32c]
mov ecx, esi
push eax
call fcn.00419530
push str.NAVAPSVC.EXE
lea ecx, [esp + 0x410]
push eax
push ecx
mov byte [esp + 0x484], 0x48
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x49
call dword [edx + 8]
lea ecx, [esp + 0x40c]
mov edi, eax
mov byte [esp + 0x478], 0x48
call fcn.005128e4
lea ecx, [esp + 0x32c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x334]
mov ecx, esi
push eax
call fcn.00419530
push str.NAVAPW32.EXE
lea ecx, [esp + 0x3c8]
push eax
push ecx
mov byte [esp + 0x484], 0x4a
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x4b
call dword [edx + 8]
lea ecx, [esp + 0x3c4]
mov edi, eax
mov byte [esp + 0x478], 0x4a
call fcn.005128e4
lea ecx, [esp + 0x334]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x33c]
mov ecx, esi
push eax
call fcn.00419530
push str.NOPDB.EXE
lea ecx, [esp + 0x438]
push eax
push ecx
mov byte [esp + 0x484], 0x4c
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x4d
call dword [edx + 8]
lea ecx, [esp + 0x434]
mov edi, eax
mov byte [esp + 0x478], 0x4c
call fcn.005128e4
lea ecx, [esp + 0x33c]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x344]
mov ecx, esi
push eax
call fcn.00419530
push str.NPROTECT.EXE
lea ecx, [esp + 0x3d0]
push eax
push ecx
mov byte [esp + 0x484], 0x4e
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x4f
call dword [edx + 8]
lea ecx, [esp + 0x3cc]
mov edi, eax
mov byte [esp + 0x478], 0x4e
call fcn.005128e4
lea ecx, [esp + 0x344]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x238]
mov ecx, esi
push eax
call fcn.00419530
push str.POPROXY.EXE
lea ecx, [esp + 0x234]
push eax
push ecx
mov byte [esp + 0x484], 0x50
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x51
call dword [edx + 8]
lea ecx, [esp + 0x230]
mov edi, eax
mov byte [esp + 0x478], 0x50
call fcn.005128e4
lea ecx, [esp + 0x238]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x248]
mov ecx, esi
push eax
call fcn.00419530
push str.NVCPL.DLL
lea ecx, [esp + 0x244]
push eax
push ecx
mov byte [esp + 0x484], 0x52
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x53
call dword [edx + 8]
lea ecx, [esp + 0x240]
mov edi, eax
mov byte [esp + 0x478], 0x52
call fcn.005128e4
lea ecx, [esp + 0x248]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x258]
mov ecx, esi
push eax
call fcn.00419530
push str.NVSVC.EXE
lea ecx, [esp + 0x254]
push eax
push ecx
mov byte [esp + 0x484], 0x54
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x55
call dword [edx + 8]
lea ecx, [esp + 0x250]
mov edi, eax
mov byte [esp + 0x478], 0x54
call fcn.005128e4
lea ecx, [esp + 0x258]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x268]
mov ecx, esi
push eax
call fcn.00419530
push str.NVSVC32.EXE
lea ecx, [esp + 0x264]
push eax
push ecx
mov byte [esp + 0x484], 0x56
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x57
call dword [edx + 8]
lea ecx, [esp + 0x260]
mov edi, eax
mov byte [esp + 0x478], 0x56
call fcn.005128e4
lea ecx, [esp + 0x268]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x278]
mov ecx, esi
push eax
call fcn.00419530
push str.NWIZ.EXE
lea ecx, [esp + 0x274]
push eax
push ecx
mov byte [esp + 0x484], 0x58
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x59
call dword [edx + 8]
lea ecx, [esp + 0x270]
mov edi, eax
mov byte [esp + 0x478], 0x58
call fcn.005128e4
lea ecx, [esp + 0x278]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x288]
mov ecx, esi
push eax
call fcn.00419530
push str.VSMON.EXE
lea ecx, [esp + 0x284]
push eax
push ecx
mov byte [esp + 0x484], 0x5a
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x5b
call dword [edx + 8]
lea ecx, [esp + 0x280]
mov edi, eax
mov byte [esp + 0x478], 0x5a
call fcn.005128e4
lea ecx, [esp + 0x288]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x298]
mov ecx, esi
push eax
call fcn.00419530
push str.VSMON.EXE
lea ecx, [esp + 0x294]
push eax
push ecx
mov byte [esp + 0x484], 0x5c
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x5d
call dword [edx + 8]
lea ecx, [esp + 0x290]
mov edi, eax
mov byte [esp + 0x478], 0x5c
call fcn.005128e4
lea ecx, [esp + 0x298]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2a8]
mov ecx, esi
push eax
call fcn.00419530
push str.ZAPRO.EXE
lea ecx, [esp + 0x2a4]
push eax
push ecx
mov byte [esp + 0x484], 0x5e
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x5f
call dword [edx + 8]
lea ecx, [esp + 0x2a0]
mov edi, eax
mov byte [esp + 0x478], 0x5e
call fcn.005128e4
lea ecx, [esp + 0x2a8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2b8]
mov ecx, esi
push eax
call fcn.00419530
push str.ZONEALARM.EXE
lea ecx, [esp + 0x2b4]
push eax
push ecx
mov byte [esp + 0x484], 0x60
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x61
call dword [edx + 8]
lea ecx, [esp + 0x2b0]
mov edi, eax
mov byte [esp + 0x478], 0x60
call fcn.005128e4
lea ecx, [esp + 0x2b8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2c8]
mov ecx, esi
push eax
call fcn.00419530
push str.ATI2CWXX.EXE
lea ecx, [esp + 0x2c4]
push eax
push ecx
mov byte [esp + 0x484], 0x62
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x63
call dword [edx + 8]
lea ecx, [esp + 0x2c0]
mov edi, eax
mov byte [esp + 0x478], 0x62
call fcn.005128e4
lea ecx, [esp + 0x2c8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2d8]
mov ecx, esi
push eax
call fcn.00419530
push str.CMESYS.EXE
lea ecx, [esp + 0x2d4]
push eax
push ecx
mov byte [esp + 0x484], 0x64
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x65
call dword [edx + 8]
lea ecx, [esp + 0x2d0]
mov edi, eax
mov byte [esp + 0x478], 0x64
call fcn.005128e4
lea ecx, [esp + 0x2d8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2e8]
mov ecx, esi
push eax
call fcn.00419530
push str.DATEMANAGER.EXE
lea ecx, [esp + 0x2e4]
push eax
push ecx
mov byte [esp + 0x484], 0x66
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x67
call dword [edx + 8]
lea ecx, [esp + 0x2e0]
mov edi, eax
mov byte [esp + 0x478], 0x66
call fcn.005128e4
lea ecx, [esp + 0x2e8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x2f8]
mov ecx, esi
push eax
call fcn.00419530
push str.GMT.EXE
lea ecx, [esp + 0x2f4]
push eax
push ecx
mov byte [esp + 0x484], 0x68
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x69
call dword [edx + 8]
lea ecx, [esp + 0x2f0]
mov edi, eax
mov byte [esp + 0x478], 0x68
call fcn.005128e4
lea ecx, [esp + 0x2f8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x308]
mov ecx, esi
push eax
call fcn.00419530
push str.GATOR.EXE
lea ecx, [esp + 0x304]
push eax
push ecx
mov byte [esp + 0x484], 0x6a
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x6b
call dword [edx + 8]
lea ecx, [esp + 0x300]
mov edi, eax
mov byte [esp + 0x478], 0x6a
call fcn.005128e4
lea ecx, [esp + 0x308]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x318]
mov ecx, esi
push eax
call fcn.00419530
push str.OFFERS.EXE
lea ecx, [esp + 0x314]
push eax
push ecx
mov byte [esp + 0x484], 0x6c
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x6d
call dword [edx + 8]
lea ecx, [esp + 0x310]
mov edi, eax
mov byte [esp + 0x478], 0x6c
call fcn.005128e4
lea ecx, [esp + 0x318]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x328]
mov ecx, esi
push eax
call fcn.00419530
push str.PRECISIONTIME.EXE
lea ecx, [esp + 0x324]
push eax
push ecx
mov byte [esp + 0x484], 0x6e
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x6f
call dword [edx + 8]
lea ecx, [esp + 0x320]
mov edi, eax
mov byte [esp + 0x478], 0x6e
call fcn.005128e4
lea ecx, [esp + 0x328]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x338]
mov ecx, esi
push eax
call fcn.00419530
push str.CREATECD.EXE
lea ecx, [esp + 0x334]
push eax
push ecx
mov byte [esp + 0x484], 0x70
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x71
call dword [edx + 8]
lea ecx, [esp + 0x330]
mov edi, eax
mov byte [esp + 0x478], 0x70
call fcn.005128e4
lea ecx, [esp + 0x338]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x348]
mov ecx, esi
push eax
call fcn.00419530
push str.CREATECD50.EXE
lea ecx, [esp + 0x344]
push eax
push ecx
mov byte [esp + 0x484], 0x72
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x73
call dword [edx + 8]
lea ecx, [esp + 0x340]
mov edi, eax
mov byte [esp + 0x478], 0x72
call fcn.005128e4
lea ecx, [esp + 0x348]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x358]
mov ecx, esi
push eax
call fcn.00419530
push str.DIRECTCD.EXE
lea ecx, [esp + 0x354]
push eax
push ecx
mov byte [esp + 0x484], 0x74
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x75
call dword [edx + 8]
lea ecx, [esp + 0x350]
mov edi, eax
mov byte [esp + 0x478], 0x74
call fcn.005128e4
lea ecx, [esp + 0x358]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x368]
mov ecx, esi
push eax
call fcn.00419530
push str.CTLAUNCHER.EXE
lea ecx, [esp + 0x364]
push eax
push ecx
mov byte [esp + 0x484], 0x76
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x77
call dword [edx + 8]
lea ecx, [esp + 0x360]
mov edi, eax
mov byte [esp + 0x478], 0x76
call fcn.005128e4
lea ecx, [esp + 0x368]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x378]
mov ecx, esi
push eax
call fcn.00419530
push str.CTMIX32.EXE
lea ecx, [esp + 0x374]
push eax
push ecx
mov byte [esp + 0x484], 0x78
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x79
call dword [edx + 8]
lea ecx, [esp + 0x370]
mov edi, eax
mov byte [esp + 0x478], 0x78
call fcn.005128e4
lea ecx, [esp + 0x378]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x388]
mov ecx, esi
push eax
call fcn.00419530
push str.DADAPP.EXE
lea ecx, [esp + 0x384]
push eax
push ecx
mov byte [esp + 0x484], 0x7a
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x7b
call dword [edx + 8]
lea ecx, [esp + 0x380]
mov edi, eax
mov byte [esp + 0x478], 0x7a
call fcn.005128e4
lea ecx, [esp + 0x388]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x398]
mov ecx, esi
push eax
call fcn.00419530
push str.DADTRAY.EXE
lea ecx, [esp + 0x394]
push eax
push ecx
mov byte [esp + 0x484], 0x7c
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x7d
call dword [edx + 8]
lea ecx, [esp + 0x390]
mov edi, eax
mov byte [esp + 0x478], 0x7c
call fcn.005128e4
lea ecx, [esp + 0x398]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x3a8]
mov ecx, esi
push eax
call fcn.00419530
push str.DAMON.EXE
lea ecx, [esp + 0x3a4]
push eax
push ecx
mov byte [esp + 0x484], 0x7e
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x7f
call dword [edx + 8]
lea ecx, [esp + 0x3a0]
mov edi, eax
mov byte [esp + 0x478], 0x7e
call fcn.005128e4
lea ecx, [esp + 0x3a8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x3b8]
mov ecx, esi
push eax
call fcn.00419530
push str.CPD.EXE
lea ecx, [esp + 0x3b4]
push eax
push ecx
mov byte [esp + 0x484], 0x80
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x81
call dword [edx + 8]
lea ecx, [esp + 0x3b0]
mov edi, eax
mov byte [esp + 0x478], 0x80
call fcn.005128e4
lea ecx, [esp + 0x3b8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
je 0x4ac6f2
lea eax, [esp + 0x3c8]
mov ecx, esi
push eax
call fcn.00419530
push str.MCAFEEPF.DLL
lea ecx, [esp + 0x3c4]
push eax
push ecx
mov byte [esp + 0x484], 0x82
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push 0
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x83
call dword [edx + 8]
lea ecx, [esp + 0x3c0]
mov edi, eax
mov byte [esp + 0x478], 0x82
call fcn.005128e4
lea ecx, [esp + 0x3c8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
jne 0x4ac7d2
lea eax, [esp + 0x3d8]
mov ecx, esi
push eax
call fcn.00419530
push str.CLAUNCH.EXE
lea ecx, [esp + 0x3d4]
push eax
push ecx
mov byte [esp + 0x484], 0x84
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push 0
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x85
call dword [edx + 8]
lea ecx, [esp + 0x3d0]
mov edi, eax
mov byte [esp + 0x478], 0x84
call fcn.005128e4
lea ecx, [esp + 0x3d8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
je 0x4ae4b6
lea eax, [esp + 0x3e8]
mov ecx, esi
push eax
call fcn.00419530
push str.CENTRAL.DLL
lea ecx, [esp + 0x3e4]
push eax
push ecx
mov byte [esp + 0x484], 0x86
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push 0
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0x87
call dword [edx + 8]
lea ecx, [esp + 0x3e0]
mov edi, eax
mov byte [esp + 0x478], 0x86
call fcn.005128e4
lea ecx, [esp + 0x3e8]
mov byte [esp + 0x478], bl
call fcn.005128e4
test edi, edi
je 0x4ae4b6
lea eax, [esp + 0x3f0]
push 0x56bb
push eax
mov dword [esp + 0x20], 1
mov dword [esi + 0xb4], 0
call fcn.00422640
push 0
lea ecx, [esp + 0x20]
push eax
push ecx
mov byte [esp + 0x48c], 0x88
call fcn.00425570
add esp, 0x14
mov byte [esp + 0x478], bl
lea ecx, [esp + 0x3f0]
jmp 0x4ae4b1
push str.SCAN32.EXE
lea ecx, [esp + 0x1e4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x47c], 0x89
call fcn.00512952
lea edx, [esp + 0x1e0]
lea edi, [esi + 0x28]
lea eax, [esp + 0x1d8]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0x8a
call fcn.004057d0
test eax, eax
jne 0x4ae433
push str.VSMAIN.EXE
lea ecx, [esp + 0x140]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x50]
mov byte [esp + 0x47c], 0x8b
call fcn.00512952
lea ecx, [esp + 0x13c]
lea edx, [esp + 0x4c]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0x8c
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x478], 0x8b
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x13c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NAVW32.EXE
lea ecx, [esp + 0x1b8]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x58]
mov byte [esp + 0x47c], 0x8d
call fcn.00512952
lea eax, [esp + 0x1b4]
lea ecx, [esp + 0x54]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0x8e
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x478], 0x8d
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NORTON.EXE
lea ecx, [esp + 0x148]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x60]
mov byte [esp + 0x47c], 0x8f
call fcn.00512952
lea edx, [esp + 0x144]
lea eax, [esp + 0x5c]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0x90
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x478], 0x8f
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x144]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.RESCUE32.EXE
lea ecx, [esp + 0x210]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x68]
mov byte [esp + 0x47c], 0x91
call fcn.00512952
lea ecx, [esp + 0x20c]
lea edx, [esp + 0x64]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0x92
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x478], 0x91
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x20c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CS32.EXE
lea ecx, [esp + 0x150]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x70]
mov byte [esp + 0x47c], 0x93
call fcn.00512952
lea eax, [esp + 0x14c]
lea ecx, [esp + 0x6c]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0x94
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x478], 0x93
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x14c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.N2000.EXE
lea ecx, [esp + 0x1c0]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x78]
mov byte [esp + 0x47c], 0x95
call fcn.00512952
lea edx, [esp + 0x1bc]
lea eax, [esp + 0x74]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0x96
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x478], 0x95
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CGMAIN.EXE
lea ecx, [esp + 0x158]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x80]
mov byte [esp + 0x47c], 0x97
call fcn.00512952
lea ecx, [esp + 0x154]
lea edx, [esp + 0x7c]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0x98
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x478], 0x97
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x154]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.LUALL.EXE
lea ecx, [esp + 0x1f8]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x88]
mov byte [esp + 0x47c], 0x99
call fcn.00512952
lea eax, [esp + 0x1f4]
lea ecx, [esp + 0x84]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0x9a
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x478], 0x99
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.VPC32.EXE
lea ecx, [esp + 0x160]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x90]
mov byte [esp + 0x47c], 0x9b
call fcn.00512952
lea edx, [esp + 0x15c]
lea eax, [esp + 0x8c]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0x9c
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0x478], 0x9b
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x15c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.PCCMAIN.EXE
lea ecx, [esp + 0x1c8]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x98]
mov byte [esp + 0x47c], 0x9d
call fcn.00512952
lea ecx, [esp + 0x1c4]
lea edx, [esp + 0x94]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0x9e
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x94]
mov byte [esp + 0x478], 0x9d
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.PNTMAIN.EXE
lea ecx, [esp + 0x168]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xa0]
mov byte [esp + 0x47c], 0x9f
call fcn.00512952
lea eax, [esp + 0x164]
lea ecx, [esp + 0x9c]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xa0
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x478], 0x9f
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x164]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.ALOGSERV.EXE
lea ecx, [esp + 0x220]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xa8]
mov byte [esp + 0x47c], 0xa1
call fcn.00512952
lea edx, [esp + 0x21c]
lea eax, [esp + 0xa4]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xa2
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x478], 0xa1
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x21c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.AVCONSOL.EXE
lea ecx, [esp + 0x170]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xb0]
mov byte [esp + 0x47c], 0xa3
call fcn.00512952
lea ecx, [esp + 0x16c]
lea edx, [esp + 0xac]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xa4
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xac]
mov byte [esp + 0x478], 0xa3
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x16c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.MCAGENT.EXE
lea ecx, [esp + 0x1d0]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xb8]
mov byte [esp + 0x47c], 0xa5
call fcn.00512952
lea eax, [esp + 0x1cc]
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xa6
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xb4]
mov byte [esp + 0x478], 0xa5
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.MCSHIELD.EXE
lea ecx, [esp + 0x178]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xc0]
mov byte [esp + 0x47c], 0xa7
call fcn.00512952
lea edx, [esp + 0x174]
lea eax, [esp + 0xbc]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xa8
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0x478], 0xa7
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x174]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.MCVSSHLD.EXE
lea ecx, [esp + 0x200]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xc8]
mov byte [esp + 0x47c], 0xa9
call fcn.00512952
lea ecx, [esp + 0x1fc]
lea edx, [esp + 0xc4]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xaa
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xc4]
mov byte [esp + 0x478], 0xa9
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.VSSTAT.EXE
lea ecx, [esp + 0x180]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xd0]
mov byte [esp + 0x47c], 0xab
call fcn.00512952
lea eax, [esp + 0x17c]
lea ecx, [esp + 0xcc]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xac
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xcc]
mov byte [esp + 0x478], 0xab
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x17c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.VSHWIN32.EXE
lea ecx, [esp + 0x1d8]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xd8]
mov byte [esp + 0x47c], 0xad
call fcn.00512952
lea edx, [esp + 0x1d4]
lea eax, [esp + 0xd4]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xae
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xd4]
mov byte [esp + 0x478], 0xad
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.WEBSCANX.EXE
lea ecx, [esp + 0x188]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xe0]
mov byte [esp + 0x47c], 0xaf
call fcn.00512952
lea ecx, [esp + 0x184]
lea edx, [esp + 0xdc]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xb0
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x478], 0xaf
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x184]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.PCCIOMON.EXE
lea ecx, [esp + 0x218]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xe8]
mov byte [esp + 0x47c], 0xb1
call fcn.00512952
lea eax, [esp + 0x214]
lea ecx, [esp + 0xe4]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xb2
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xe4]
mov byte [esp + 0x478], 0xb1
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x214]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.PNTIOMON.EXE
lea ecx, [esp + 0x190]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xf0]
mov byte [esp + 0x47c], 0xb3
call fcn.00512952
lea edx, [esp + 0x18c]
lea eax, [esp + 0xec]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xb4
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xec]
mov byte [esp + 0x478], 0xb3
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x18c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.POPTRAP.EXE
lea ecx, [esp + 0x1e0]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xf8]
mov byte [esp + 0x47c], 0xb5
call fcn.00512952
lea ecx, [esp + 0x1dc]
lea edx, [esp + 0xf4]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xb6
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xf4]
mov byte [esp + 0x478], 0xb5
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.ALUNOTIFY.EXE
lea ecx, [esp + 0x198]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x100]
mov byte [esp + 0x47c], 0xb7
call fcn.00512952
lea eax, [esp + 0x194]
lea ecx, [esp + 0xfc]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xb8
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xfc]
mov byte [esp + 0x478], 0xb7
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x194]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.AUPDATE.EXE
lea ecx, [esp + 0x208]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x108]
mov byte [esp + 0x47c], 0xb9
call fcn.00512952
lea edx, [esp + 0x204]
lea eax, [esp + 0x104]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xba
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x104]
mov byte [esp + 0x478], 0xb9
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x204]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CCAPP.EXE
lea ecx, [esp + 0x1a0]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x110]
mov byte [esp + 0x47c], 0xbb
call fcn.00512952
lea ecx, [esp + 0x19c]
lea edx, [esp + 0x10c]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xbc
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x10c]
mov byte [esp + 0x478], 0xbb
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x19c]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CCEVTMGR.EXE
lea ecx, [esp + 0x1e8]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x118]
mov byte [esp + 0x47c], 0xbd
call fcn.00512952
lea eax, [esp + 0x1e4]
lea ecx, [esp + 0x114]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xbe
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x114]
mov byte [esp + 0x478], 0xbd
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1e4]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CCPXYSVC.EXE
lea ecx, [esp + 0x34]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x120]
mov byte [esp + 0x47c], 0xbf
call fcn.00512952
lea edx, [esp + 0x30]
lea eax, [esp + 0x11c]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xc0
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x11c]
mov byte [esp + 0x478], 0xbf
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x30]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NAVAPSVC.EXE
lea ecx, [esp + 0x228]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x128]
mov byte [esp + 0x47c], 0xc1
call fcn.00512952
lea ecx, [esp + 0x224]
lea edx, [esp + 0x124]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xc2
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x124]
mov byte [esp + 0x478], 0xc1
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x224]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NAVAPW32.EXE
lea ecx, [esp + 0x38]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x130]
mov byte [esp + 0x47c], 0xc3
call fcn.00512952
lea eax, [esp + 0x34]
lea ecx, [esp + 0x12c]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xc4
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x12c]
mov byte [esp + 0x478], 0xc3
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x34]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NOPDB.EXE
lea ecx, [esp + 0x44]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x3c]
mov byte [esp + 0x47c], 0xc5
call fcn.00512952
lea edx, [esp + 0x40]
lea eax, [esp + 0x38]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xc6
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x478], 0xc5
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x40]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NPROTECT.EXE
lea ecx, [esp + 0x54]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x4c]
mov byte [esp + 0x47c], 0xc7
call fcn.00512952
lea ecx, [esp + 0x50]
lea edx, [esp + 0x48]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xc8
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x478], 0xc7
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x50]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.POPROXY.EXE
lea ecx, [esp + 0x64]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x5c]
mov byte [esp + 0x47c], 0xc9
call fcn.00512952
lea eax, [esp + 0x60]
lea ecx, [esp + 0x58]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xca
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x478], 0xc9
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x60]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NVCPL.DLL
lea ecx, [esp + 0x74]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x6c]
mov byte [esp + 0x47c], 0xcb
call fcn.00512952
lea edx, [esp + 0x70]
lea eax, [esp + 0x68]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xcc
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x478], 0xcb
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x70]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NVSVC.EXE
lea ecx, [esp + 0x84]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x7c]
mov byte [esp + 0x47c], 0xcd
call fcn.00512952
lea ecx, [esp + 0x80]
lea edx, [esp + 0x78]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xce
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x478], 0xcd
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x80]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NVSVC32.EXE
lea ecx, [esp + 0x94]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x8c]
mov byte [esp + 0x47c], 0xcf
call fcn.00512952
lea eax, [esp + 0x90]
lea ecx, [esp + 0x88]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xd0
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x478], 0xcf
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x90]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.NWIZ.EXE
lea ecx, [esp + 0xa4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x9c]
mov byte [esp + 0x47c], 0xd1
call fcn.00512952
lea edx, [esp + 0xa0]
lea eax, [esp + 0x98]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xd2
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x98]
mov byte [esp + 0x478], 0xd1
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0xa0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.VSMON.EXE
lea ecx, [esp + 0xb4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xac]
mov byte [esp + 0x47c], 0xd3
call fcn.00512952
lea ecx, [esp + 0xb0]
lea edx, [esp + 0xa8]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xd4
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xa8]
mov byte [esp + 0x478], 0xd3
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0xb0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.VSMON.EXE
lea ecx, [esp + 0xc4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xbc]
mov byte [esp + 0x47c], 0xd5
call fcn.00512952
lea eax, [esp + 0xc0]
lea ecx, [esp + 0xb8]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xd6
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xb8]
mov byte [esp + 0x478], 0xd5
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0xc0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.ZAPRO.EXE
lea ecx, [esp + 0xd4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xcc]
mov byte [esp + 0x47c], 0xd7
call fcn.00512952
lea edx, [esp + 0xd0]
lea eax, [esp + 0xc8]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xd8
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xc8]
mov byte [esp + 0x478], 0xd7
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0xd0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.ZONEALARM.EXE
lea ecx, [esp + 0xe4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xdc]
mov byte [esp + 0x47c], 0xd9
call fcn.00512952
lea ecx, [esp + 0xe0]
lea edx, [esp + 0xd8]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xda
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xd8]
mov byte [esp + 0x478], 0xd9
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0xe0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.ATI2CWXX.EXE
lea ecx, [esp + 0xf4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xec]
mov byte [esp + 0x47c], 0xdb
call fcn.00512952
lea eax, [esp + 0xf0]
lea ecx, [esp + 0xe8]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xdc
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xe8]
mov byte [esp + 0x478], 0xdb
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0xf0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CMESYS.EXE
lea ecx, [esp + 0x104]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0xfc]
mov byte [esp + 0x47c], 0xdd
call fcn.00512952
lea edx, [esp + 0x100]
lea eax, [esp + 0xf8]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xde
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0xf8]
mov byte [esp + 0x478], 0xdd
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x100]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.DATEMANAGER.EXE
lea ecx, [esp + 0x114]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x10c]
mov byte [esp + 0x47c], 0xdf
call fcn.00512952
lea ecx, [esp + 0x110]
lea edx, [esp + 0x108]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xe0
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x108]
mov byte [esp + 0x478], 0xdf
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x110]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.GMT.EXE
lea ecx, [esp + 0x124]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x11c]
mov byte [esp + 0x47c], 0xe1
call fcn.00512952
lea eax, [esp + 0x120]
lea ecx, [esp + 0x118]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xe2
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x118]
mov byte [esp + 0x478], 0xe1
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x120]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.PRECISIONTIME.EXE
lea ecx, [esp + 0x134]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x12c]
mov byte [esp + 0x47c], 0xe3
call fcn.00512952
lea edx, [esp + 0x130]
lea eax, [esp + 0x128]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xe4
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x128]
mov byte [esp + 0x478], 0xe3
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x130]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.GATOR.EXE
lea ecx, [esp + 0x144]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x13c]
mov byte [esp + 0x47c], 0xe5
call fcn.00512952
lea ecx, [esp + 0x140]
lea edx, [esp + 0x138]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xe6
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x138]
mov byte [esp + 0x478], 0xe5
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x140]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.OFFERS.EXE
lea ecx, [esp + 0x154]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x14c]
mov byte [esp + 0x47c], 0xe7
call fcn.00512952
lea eax, [esp + 0x150]
lea ecx, [esp + 0x148]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xe8
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x148]
mov byte [esp + 0x478], 0xe7
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x150]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CREATECD.EXE
lea ecx, [esp + 0x164]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x15c]
mov byte [esp + 0x47c], 0xe9
call fcn.00512952
lea edx, [esp + 0x160]
lea eax, [esp + 0x158]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xea
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x158]
mov byte [esp + 0x478], 0xe9
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x160]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CREATECD50.EXE
lea ecx, [esp + 0x174]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x16c]
mov byte [esp + 0x47c], 0xeb
call fcn.00512952
lea ecx, [esp + 0x170]
lea edx, [esp + 0x168]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xec
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x168]
mov byte [esp + 0x478], 0xeb
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x170]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.DIRECTCD.EXE
lea ecx, [esp + 0x184]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x17c]
mov byte [esp + 0x47c], 0xed
call fcn.00512952
lea eax, [esp + 0x180]
lea ecx, [esp + 0x178]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xee
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x178]
mov byte [esp + 0x478], 0xed
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x180]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CTLAUNCHER.EXE
lea ecx, [esp + 0x194]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x18c]
mov byte [esp + 0x47c], 0xef
call fcn.00512952
lea edx, [esp + 0x190]
lea eax, [esp + 0x188]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xf0
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x188]
mov byte [esp + 0x478], 0xef
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x190]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.CTMIX32.EXE
lea ecx, [esp + 0x1a4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x19c]
mov byte [esp + 0x47c], 0xf1
call fcn.00512952
lea ecx, [esp + 0x1a0]
lea edx, [esp + 0x198]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xf2
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x198]
mov byte [esp + 0x478], 0xf1
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.DADAPP.EXE
lea ecx, [esp + 0x1b4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x47c], 0xf3
call fcn.00512952
lea eax, [esp + 0x1b0]
lea ecx, [esp + 0x1a8]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], 0xf4
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x478], 0xf3
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.DADTRAY.EXE
lea ecx, [esp + 0x1c4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x47c], 0xf5
call fcn.00512952
lea edx, [esp + 0x1c0]
lea eax, [esp + 0x1b8]
push edx
push eax
mov ecx, edi
mov byte [esp + 0x480], 0xf6
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x478], 0xf5
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
jne 0x4ae433
push str.DAMON.EXE
lea ecx, [esp + 0x1d4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x47c], 0xf7
call fcn.00512952
lea ecx, [esp + 0x1d0]
lea edx, [esp + 0x1c8]
push ecx
push edx
mov ecx, edi
mov byte [esp + 0x480], 0xf8
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x478], 0xf7
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x478], 0x8a
call fcn.005128e4
mov al, byte [esp + 0x13]
mov byte [esp + 0x13], 0
test al, al
je 0x4ae438
mov byte [esp + 0x13], 1
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x478], 0x89
call fcn.005128e4
lea ecx, [esp + 0x1e0]
mov byte [esp + 0x478], bl
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
je 0x4ae4b6
lea eax, [esp + 0x3f8]
push 0x56bb
push eax
mov dword [esp + 0x20], 1
mov dword [esi + 0xb4], 0
call fcn.00422640
push 0
lea ecx, [esp + 0x20]
push eax
push ecx
mov byte [esp + 0x48c], 0xf9
call fcn.00425570
add esp, 0x14
mov byte [esp + 0x478], bl
lea ecx, [esp + 0x3f8]
call fcn.005128e4
lea edx, [esp + 0x408]
mov ecx, esi
push edx
call fcn.00419530
push str.WINDVD.EXE
push eax
lea eax, [esp + 0x408]
mov byte [esp + 0x480], 0xfa
push eax
call fcn.00512b79
mov ecx, dword [ebp + 0x38]
mov eax, dword [eax]
push 0
push eax
mov edx, dword [ecx]
mov byte [esp + 0x480], 0xfb
call dword [edx + 8]
test eax, eax
jne 0x4ae576
push str.WINDVD.EXE
lea ecx, [esp + 0x1f4]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x47c], 0xfc
call fcn.00512952
lea eax, [esp + 0x1f0]
lea ecx, [esp + 0x1e8]
push eax
push ecx
lea ecx, [esi + 0x28]
mov byte [esp + 0x480], 0xfd
call fcn.004057d0
lea ecx, [esp + 0x1e8]
mov edi, eax
mov byte [esp + 0x478], 0xfc
call fcn.005128e4
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x478], 0xfb
call fcn.005128e4
test edi, edi
mov byte [esp + 0x13], 0
je 0x4ae57b
mov byte [esp + 0x13], 1
lea ecx, [esp + 0x400]
mov byte [esp + 0x478], 0xfa
call fcn.005128e4
lea ecx, [esp + 0x408]
mov byte [esp + 0x478], bl
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
je 0x4ae5f9
lea edx, [esp + 0x410]
push 0x56bc
push edx
mov dword [esp + 0x20], 1
mov dword [esi + 0xb4], 0
call fcn.00422640
push 0
push eax
lea eax, [esp + 0x24]
mov byte [esp + 0x488], 0xfe
push eax
call fcn.00425570
add esp, 0x14
lea ecx, [esp + 0x410]
mov byte [esp + 0x478], bl
call fcn.005128e4
push str.ALOHABOB.EXE
lea ecx, [esp + 0x214]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x20c]
mov byte [esp + 0x47c], 0xff
call fcn.00512952
lea ecx, [esp + 0x210]
lea edi, [esi + 0x28]
lea edx, [esp + 0x208]
push ecx
push edx
mov ecx, edi
mov dword [esp + 0x480], 0x100
call fcn.004057d0
test eax, eax
jne 0x4ae6d4
push str.ALOHAPRO.EXE
lea ecx, [esp + 0x204]
call fcn.00512952
push 0x5b0738
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x47c], 1
call fcn.00512952
lea eax, [esp + 0x200]
lea ecx, [esp + 0x1f8]
push eax
push ecx
mov ecx, edi
mov byte [esp + 0x480], bl
call fcn.004057d0
test eax, eax
lea ecx, [esp + 0x1f8]
mov byte [esp + 0x478], 1
setne byte [esp + 0x13]
call fcn.005128e4
lea ecx, [esp + 0x200]
mov byte [esp + 0x478], 0
call fcn.005128e4
mov al, byte [esp + 0x13]
mov byte [esp + 0x13], 0
test al, al
je 0x4ae6d9
mov byte [esp + 0x13], 1
lea ecx, [esp + 0x208]
mov dword [esp + 0x478], 0xff
call fcn.005128e4
lea ecx, [esp + 0x210]
mov byte [esp + 0x478], bl
call fcn.005128e4
mov al, byte [esp + 0x13]
test al, al
je 0x4ae75c
lea edx, [esp + 0x418]
xor edi, edi
push 0x56c0
push edx
mov dword [esp + 0x20], 1
mov dword [esi + 0xb4], edi
call fcn.00422640
push edi
push eax
lea eax, [esp + 0x24]
mov dword [esp + 0x488], 0x103
push eax
call fcn.00425570
add esp, 0x14
lea ecx, [esp + 0x418]
mov dword [esp + 0x478], ebx
call fcn.005128e4
jmp 0x4ae75e
xor edi, edi
mov ecx, dword [0x5b8cb4]
mov edx, dword [ecx]
call dword [edx + 0x18]
test eax, eax
jne 0x4ae9b5
mov eax, dword [0x5ab980]
mov dword [esp + 0x218], edi
mov dword [esp + 0x20], eax
mov edx, dword [0x5b8cb4]
lea ecx, [esp + 0x218]
push ecx
mov ecx, dword [esp + 0x424]
push esi
push edx
mov dword [esp + 0x484], 0x104
call fcn.0041a980
cmp eax, edi
je 0x4ae8db
lea edi, [eax + 8]
mov dword [esp + 0x18], 1
mov dword [esi + 0xb4], 0
mov eax, dword [edi]
push eax
mov eax, dword [esi + 8]
push eax
call fcn.004f9670
add esp, 8
test eax, eax
jne 0x4ae7eb
push str.Program_already_exists_on_this_PC
lea ecx, [esp + 0x24]
call fcn.00512a6d
jmp 0x4ae8c5
mov ecx, dword [edi]
lea edx, [esp + 0x20]
push ecx
push str.Program_files_already_exists_in__s_on_this_PC
push edx
call fcn.0050e6c7
mov eax, dword [0x5bc5bc]
add esp, 0xc
test eax, 0x60000
je 0x4ae8c5
mov eax, dword [esp + 0x218]
test eax, eax
je 0x4ae8c5
mov ecx, dword [0x5ab980]
mov dword [esp + 0x24], ecx
lea edx, [eax + 0xc]
add eax, 8
push edx
push eax
lea eax, [esp + 0x430]
mov byte [esp + 0x480], 5
push eax
call fcn.00512b13
mov ecx, dword [eax]
lea edx, [esp + 0x24]
push ecx
push 0x5a41c0
push edx
mov byte [esp + 0x484], 6
call fcn.0050e6c7
add esp, 0xc
lea ecx, [esp + 0x428]
mov byte [esp + 0x478], 5
call fcn.005128e4
lea eax, [esp + 0x24]
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x434]
push ecx
push edx
call fcn.00512b13
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x47c], 7
call fcn.00512a1d
lea ecx, [esp + 0x430]
mov byte [esp + 0x478], 5
call fcn.005128e4
lea ecx, [esp + 0x24]
mov byte [esp + 0x478], 4
call fcn.005128e4
lea eax, [esp + 0x20]
push 0
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.00425570
add esp, 0xc
xor edi, edi
mov edx, dword [0x5b8cb0]
mov ecx, dword [0x5b8cb4]
mov eax, dword [edx + 0x84c]
mov ecx, dword [ecx + 0x84c]
shr eax, 0x10
shr ecx, 0x10
cmp cx, ax
jae 0x4ae9a5
mov eax, dword [esi + 0x84]
cmp eax, edi
je 0x4ae9a5
mov edx, 0x1e
mov ecx, eax
mov eax, dword [eax]
mov ecx, dword [ecx + 8]
cmp dword [ecx + 4], edx
je 0x4ae927
cmp eax, edi
jne 0x4ae915
jmp 0x4ae9a5
push str.Need_to_upgrade_Windows_Installer_on_the_Target
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 1
mov dword [esi + 0xb4], edi
call fcn.00512a6d
lea edx, [esp + 0x20]
push edi
lea eax, [esp + 0x18]
push edx
push eax
call fcn.00425570
mov eax, dword [ebp + 0x3948]
add esp, 0xc
lea ecx, [esp + 0x438]
or ah, 8
push ecx
mov ecx, esi
mov dword [ebp + 0x3948], eax
call fcn.00419510
push 0x597ee0
push eax
lea eax, [ebp + 0x3970]
mov byte [esp + 0x480], 8
push eax
call fcn.00425570
add esp, 0xc
lea ecx, [esp + 0x438]
mov byte [esp + 0x478], 4
call fcn.005128e4
lea ecx, [esp + 0x20]
mov dword [esp + 0x478], ebx
call fcn.005128e4
mov eax, dword [esi + 0xb4]
cmp eax, 0x64
jle 0x4ae9cc
mov dword [esi + 0xb4], 0x64
jmp 0x4ae9d6
cmp eax, edi
jge 0x4ae9d6
mov dword [esi + 0xb4], edi
mov eax, dword [esi + 0xb4]
cmp eax, 0x3c
jl 0x4ae9fa
mov ecx, 1
mov dword [esi + 0xb8], ecx
mov dword [esi + 0xbc], ecx
mov dword [esi + 0xc0], ecx
jmp 0x4aea16
cmp eax, 0x1e
jge 0x4ae9e1
mov dword [esi + 0xb8], edi
mov dword [esi + 0xbc], edi
mov dword [esi + 0xc0], ebx
mov ecx, 1
cmp dword [esi + 0xa8], edi
jne 0x4aea24
cmp dword [esp + 0x18], edi
je 0x4aea36
mov dword [esi + 0xb8], edi
mov dword [esi + 0xbc], edi
mov dword [esi + 0xc0], edi
cmp dword [esi + 0xac], edi
je 0x4aea44
mov dword [esi + 0xc0], edi
test byte [0x5bc5c0], 0x80
jne 0x4aea53
mov dword [esi + 0xb8], edi
cmp dword [esi + 0xc0], edi
jle 0x4aec2b
mov edx, dword [esp + 0x220]
lea eax, [edx + 0x65]
cmp eax, 0x66
ja case.0x4aea76.99
xor edx, edx
mov dl, byte [eax + 0x4aecd4]
jmp dword [edx*4 + 0x4aecc8]
mov dword [esi + 0xb8], edi
mov dword [esi + 0xbc], edi
jmp case.0x4aea76.99
mov dword [esi + 0xb8], ecx
mov dword [esi + 0xbc], ecx
mov eax, dword [esp + 0x228]
cmp eax, edi
jl 0x4aeabd
mov edx, dword [esi + 0xb4]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, ecx
mov dword [esi + 0xb8], eax
mov dword [esi + 0xbc], eax
lea edi, [esi + 8]
mov ecx, 0x5b8a8c
push edi
call fcn.00423db0
test eax, eax
jle 0x4aead6
mov eax, 1
jmp 0x4aeae7
push edi
mov ecx, 0x5b8aa8
call fcn.00423db0
test eax, eax
jle 0x4aeaf3
xor eax, eax
mov dword [esi + 0xb8], eax
mov dword [esi + 0xbc], eax
mov edx, dword [0x5ab980]
mov dword [esp + 0x28], edx
mov edi, dword [esi + 0x2c]
mov dword [esp + 0x478], 0x109
test edi, edi
je 0x4aebfd
lea ecx, [esp + 0x458]
call fcn.00466340
mov eax, edi
mov edi, dword [edi]
mov byte [esp + 0x478], 0xa
mov eax, dword [eax + 8]
cmp dword [eax + 4], 0x65
jne 0x4aebe1
add eax, 0xc
push eax
lea eax, [esp + 0x44c]
push eax
call fcn.004b25e0
add esp, 8
push eax
lea ecx, [esp + 0x444]
push str.select.apps.
push ecx
mov byte [esp + 0x484], 0xb
call fcn.00512bed
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x47c], 0xc
call fcn.00512a1d
lea ecx, [esp + 0x440]
mov byte [esp + 0x478], 0xb
call fcn.005128e4
lea ecx, [esp + 0x448]
mov byte [esp + 0x478], 0xa
call fcn.005128e4
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x458]
push edx
push eax
mov ecx, 0x5bc868
call fcn.0046c290
test eax, eax
jle 0x4aebe1
lea ecx, [esp + 0x458]
call fcn.004676a0
test eax, eax
je 0x4aebd3
mov eax, 1
jmp 0x4aebd5
xor eax, eax
mov dword [esi + 0xb8], eax
mov dword [esi + 0xbc], eax
lea ecx, [esp + 0x458]
mov byte [esp + 0x478], 9
call fcn.004663b0
test edi, edi
jne 0x4aeb13
lea eax, [esi + 8]
mov ecx, 0x5b8ac4
push eax
call fcn.00423db0
test eax, eax
jle 0x4aec19
mov dword [esi + 0xc0], 0xfffffffe
lea ecx, [esp + 0x28]
mov dword [esp + 0x478], ebx
call fcn.005128e4
xor edi, edi
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 8], edi
je 0x4aec72
lea edx, [esp + 0x14]
push 0x2e
lea eax, [esp + 0x454]
push edx
push eax
call fcn.0050dd7d
push eax
lea ecx, [esi + 0x104]
mov dword [esp + 0x47c], 0x10d
call fcn.00512a1d
lea ecx, [esp + 0x450]
mov dword [esp + 0x478], ebx
call fcn.005128e4
lea ecx, [esp + 0x14]
mov byte [esp + 0x478], 1
call fcn.005128e4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x478], 0xffffffff
call fcn.005128e4
cmp dword [esp + 0x2c], edi
jne 0x4aa86e
mov eax, 1
pop ebx
jmp 0x4aecae
mov eax, 1
mov ecx, dword [esp + 0x46c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x46c
ret