Function at 0x4227c6
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Parse pe header
Persist via com hijack
Persist via filter handlers registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4394fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf3c
push 0x4a4014
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 4], 0
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0xd0], esp
push str.PIPFile
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x5a8], eax
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0xd4], esp
push 0x4a4018
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5ac], eax
mov ecx, dword [ebp - 0x5ac]
mov dword [ebp - 0x5b0], ecx
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0xd8], esp
push str.SOFTWAREClasses.pip
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5b4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
jne 0x4228b1
push str._C_reg_add_HKCRSOFTWAREClasses.pip__v___t_REG_SZ__d__PIPFile__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x488ee0
push 0x488ee8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0xdc], esp
push 0x488ef0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5bc], eax
mov edx, dword [ebp - 0x5bc]
mov dword [ebp - 0x5c0], edx
mov byte [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0xe0], esp
push 0x4a401c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x5c8], eax
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0xe4], esp
push str.SOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547B
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5cc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0
jne 0x42296a
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547B__v___t_REG_SZ__d__Document_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x488fd0
push 0x488fd8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0xe8], esp
push 0x488fe0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5d4], eax
mov ecx, dword [ebp - 0x5d4]
mov dword [ebp - 0x5d8], ecx
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0xec], esp
push 0x4a4020
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5dc], eax
mov edx, dword [ebp - 0x5dc]
mov dword [ebp - 0x5e0], edx
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0xf0], esp
push 0x48902c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5e4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0
jne 0x422a23
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BInprocServer32__v___t_REG_SZ__d__C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MDIVWCTL.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489158
push 0x489160
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0xf4], esp
push 0x489168
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x5f0], eax
mov byte [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0xf8], esp
push 0x489174
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5f4], eax
mov ecx, dword [ebp - 0x5f4]
mov dword [ebp - 0x5f8], ecx
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0xfc], esp
push str.SOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BInprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x5fc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 0
jne 0x422adc
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BInprocServer32__v_ThreadingModel__t_REG_SZ__d__Apartment__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48927c
push 0x489284
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x100], esp
push 0x48928c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x604], eax
mov edx, dword [ebp - 0x604]
mov dword [ebp - 0x608], edx
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x104], esp
push 0x4a4024
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x610], eax
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x108], esp
push str.SOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x614], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
jne 0x422b95
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgID__v___t_REG_SZ__d_MODI.Document.1__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48937c
push 0x489384
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x10c], esp
push 0x4a4028
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
mov dword [ebp - 0x620], ecx
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x110], esp
push 0x4a402c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x624], eax
mov edx, dword [ebp - 0x624]
mov dword [ebp - 0x628], edx
mov byte [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x114], esp
push str.SOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgrammable
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x62c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jne 0x422c4e
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgrammable__v___t_REG_SZ__d___F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489464
push 0x48946c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x118], esp
push 0x489474
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x638], eax
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x11c], esp
push 0x4a4030
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x63c], eax
mov ecx, dword [ebp - 0x63c]
mov dword [ebp - 0x640], ecx
mov byte [ebp - 4], 0xe
push ecx
mov ecx, esp
mov dword [ebp - 0x120], esp
push str.SOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BTypeLib
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x644], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0
jne 0x422d07
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BTypeLib__v___t_REG_SZ__d_A5EDEDF4_2BBC_45F3_822B_E60C278A1A79__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489594
push 0x48959c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x124], esp
push 0x4895a4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x64c], eax
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x650], edx
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x128], esp
push 0x4a4034
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x658], eax
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x12c], esp
push str.SOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BVersionIndependentProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x65c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0
jne 0x422dc0
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BVersionIndependentProgID__v___t_REG_SZ__d_MODI.Document__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4896b4
push 0x4896bc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x130], esp
push 0x4896c4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x664], eax
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x668], ecx
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x134], esp
push 0x4a4038
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x66c], eax
mov edx, dword [ebp - 0x66c]
mov dword [ebp - 0x670], edx
mov byte [ebp - 4], 0x12
push ecx
mov ecx, esp
mov dword [ebp - 0x138], esp
push str.SOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AF
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x674], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0
jne 0x422e79
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AF__v___t_REG_SZ__d_MiDocument_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4897a8
push 0x4897b0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x13c], esp
push 0x4897b8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x680], eax
mov byte [ebp - 4], 0x13
push ecx
mov ecx, esp
mov dword [ebp - 0x140], esp
push 0x4a403c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x684], eax
mov ecx, dword [ebp - 0x684]
mov dword [ebp - 0x688], ecx
mov byte [ebp - 4], 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x144], esp
push 0x489804
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x68c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0
jne 0x422f32
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFInprocServer32__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPCORE.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48992c
push 0x489934
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x148], esp
push 0x48993c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x694], eax
mov edx, dword [ebp - 0x694]
mov dword [ebp - 0x698], edx
mov byte [ebp - 4], 0x15
push ecx
mov ecx, esp
mov dword [ebp - 0x14c], esp
push 0x489948
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x6a0], eax
mov byte [ebp - 4], 0x16
push ecx
mov ecx, esp
mov dword [ebp - 0x150], esp
push str.SOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFInprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6a4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0
jne 0x422feb
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFInprocServer32__v_ThreadingModel__t_REG_SZ__d_Apartment__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489a50
push 0x489a58
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x154], esp
push 0x489a60
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6ac], eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b0], ecx
mov byte [ebp - 4], 0x17
push ecx
mov ecx, esp
mov dword [ebp - 0x158], esp
push 0x4a4040
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6b4], eax
mov edx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b8], edx
mov byte [ebp - 4], 0x18
push ecx
mov ecx, esp
mov dword [ebp - 0x15c], esp
push str.SOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6bc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0
jne 0x4230a4
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFProgID__v___t_REG_SZ__d_Midoc.MiDocument.1__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489b54
push 0x489b5c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x160], esp
push 0x489b64
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x6c8], eax
mov byte [ebp - 4], 0x19
push ecx
mov ecx, esp
mov dword [ebp - 0x164], esp
push 0x4a4044
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6cc], eax
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d0], ecx
mov byte [ebp - 4], 0x1a
push ecx
mov ecx, esp
mov dword [ebp - 0x168], esp
push str.SOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFVersionIndependentProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6d4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 0
jne 0x42315d
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFVersionIndependentProgID__v___t_REG_SZ__d_Midoc.MiDocument__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489c78
push 0x489c80
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x16c], esp
push 0x489c88
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6dc], eax
mov edx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e0], edx
mov byte [ebp - 4], 0x1b
push ecx
mov ecx, esp
mov dword [ebp - 0x170], esp
push 0x4a4048
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x6e8], eax
mov byte [ebp - 4], 0x1c
push ecx
mov ecx, esp
mov dword [ebp - 0x174], esp
push str.SOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6ec], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 0
jne 0x423216
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5__v___t_REG_SZ__d_MiEngine_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489d68
push 0x489d70
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x178], esp
push 0x489d78
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6f4], eax
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp - 0x6f8], ecx
mov byte [ebp - 4], 0x1d
push ecx
mov ecx, esp
mov dword [ebp - 0x17c], esp
push 0x489d80
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x6fc], eax
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x700], edx
mov byte [ebp - 4], 0x1e
push ecx
mov ecx, esp
mov dword [ebp - 0x180], esp
push str.SOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5InprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x704], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 0
jne 0x4232cf
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5InprocServer32__v_ThreadingModel__t_REG_SZ__d_Both__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489e80
push 0x489e88
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
push 0x489e90
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x710], eax
mov byte [ebp - 4], 0x1f
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
push 0x4a404c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x714]
mov dword [ebp - 0x718], ecx
mov byte [ebp - 4], 0x20
push ecx
mov ecx, esp
mov dword [ebp - 0x18c], esp
push str.SOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5ProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x71c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 0
jne 0x423388
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5ProgID__v___t_REG_SZ__d_MiEng.MiEngine.1__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x489f84
push 0x489f8c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x190], esp
push 0x4a4050
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x724], eax
mov edx, dword [ebp - 0x724]
mov dword [ebp - 0x728], edx
mov byte [ebp - 4], 0x21
push ecx
mov ecx, esp
mov dword [ebp - 0x194], esp
push 0x4a4054
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x730], eax
mov byte [ebp - 4], 0x22
push ecx
mov ecx, esp
mov dword [ebp - 0x198], esp
push str.SOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5Programmable
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x734], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 0
jne 0x423441
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5Programmable__v___t_REG_SZ__d___F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a06c
push 0x48a074
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x19c], esp
push 0x48a07c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x73c], eax
mov ecx, dword [ebp - 0x73c]
mov dword [ebp - 0x740], ecx
mov byte [ebp - 4], 0x23
push ecx
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push 0x4a4058
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x744], eax
mov edx, dword [ebp - 0x744]
mov dword [ebp - 0x748], edx
mov byte [ebp - 4], 0x24
push ecx
mov ecx, esp
mov dword [ebp - 0x1a4], esp
push str.SOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5TypeLib
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x74c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 0
jne 0x4234fa
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5TypeLib__v___t_REG_SZ__d_BEB70C92_90A2_4166_A7F5_DD648E36594A__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a19c
push 0x48a1a4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1a8], esp
push 0x48a1ac
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x758], eax
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push 0x4a405c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x760], ecx
mov byte [ebp - 4], 0x26
push ecx
mov ecx, esp
mov dword [ebp - 0x1b0], esp
push str.SOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5VersionIndependentProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x764], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0
jne 0x4235b3
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5VersionIndependentProgID__v___t_REG_SZ__d_MiEng.MiEngine__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a2bc
push 0x48a2c4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1b4], esp
push 0x48a2cc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x76c], eax
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x770], edx
mov byte [ebp - 4], 0x27
push ecx
mov ecx, esp
mov dword [ebp - 0x1b8], esp
push 0x4a4060
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x778], eax
mov byte [ebp - 4], 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x1bc], esp
push str.SOFTWAREClassesWow6432NodeCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507E
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x77c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 0
jne 0x42366c
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507E__v___t_REG_SZ__d_Microsoft_Office_Document_Imaging_Application__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a3e8
push 0x48a3f0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1c0], esp
push 0x48a3f8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x784], eax
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x788], ecx
mov byte [ebp - 4], 0x29
push ecx
mov ecx, esp
mov dword [ebp - 0x1c4], esp
push 0x4a4064
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x78c], eax
mov edx, dword [ebp - 0x78c]
mov dword [ebp - 0x790], edx
mov byte [ebp - 4], 0x2a
push ecx
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push str.SOFTWAREClassesWow6432NodeCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EPersistentHandler
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x794], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0
jne 0x423725
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EPersistentHandler__v___t_REG_SZ__d_58F2E3BB_72BD_46DF_B134_1B50628668FB__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a528
push 0x48a530
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1cc], esp
push 0x48a538
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push 0x4a4068
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7a4], eax
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x7a8], ecx
mov byte [ebp - 4], 0x2c
push ecx
mov ecx, esp
mov dword [ebp - 0x1d4], esp
push str.SOFTWAREClassesWow6432NodeCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EProgId
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7ac], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x7b0], eax
cmp dword [ebp - 0x7b0], 0
jne 0x4237de
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EProgId__v___t_REG_SZ__d_MSPaper.Document__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a62c
push 0x48a634
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1d8], esp
push 0x48a63c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7b4], eax
mov edx, dword [ebp - 0x7b4]
mov dword [ebp - 0x7b8], edx
mov byte [ebp - 4], 0x2d
push ecx
mov ecx, esp
mov dword [ebp - 0x1dc], esp
push 0x4a406c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x7c0], eax
mov byte [ebp - 4], 0x2e
push ecx
mov ecx, esp
mov dword [ebp - 0x1e0], esp
push str.SOFTWAREClassesWow6432NodeCLSIDE4425E53_7859_4889_A3E8_3900877BB241
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7c4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x7c8], eax
cmp dword [ebp - 0x7c8], 0
jne 0x423897
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSIDE4425E53_7859_4889_A3E8_3900877BB241__v___t_REG_SZ__d_MiTextLayoutPage_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a72c
push 0x48a734
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1e4], esp
push 0x48a73c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7cc], eax
mov ecx, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d0], ecx
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, esp
mov dword [ebp - 0x1e8], esp
push 0x4a4070
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7d4], eax
mov edx, dword [ebp - 0x7d4]
mov dword [ebp - 0x7d8], edx
mov byte [ebp - 4], 0x30
push ecx
mov ecx, esp
mov dword [ebp - 0x1ec], esp
push str.SOFTWAREClassesWow6432NodeCLSIDE4425E53_7859_4889_A3E8_3900877BB241InprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7dc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 0
jne 0x423950
push str._C_reg_add_HKCRSOFTWAREClassesWow6432NodeCLSIDE4425E53_7859_4889_A3E8_3900877BB241InprocServer32__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPCORE.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a8b0
push 0x48a8b8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1f0], esp
push 0x48a8c0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7e4], eax
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x7e8], eax
mov byte [ebp - 4], 0x31
push ecx
mov ecx, esp
mov dword [ebp - 0x1f4], esp
push 0x48a8cc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7ec], eax
mov ecx, dword [ebp - 0x7ec]
mov dword [ebp - 0x7f0], ecx
mov byte [ebp - 4], 0x32
push ecx
mov ecx, esp
mov dword [ebp - 0x1f8], esp
push 0x48a8dc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7f4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 0
jne 0x423a09
push 0x48a938
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48a9d4
push 0x48a9dc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x1fc], esp
push str.Document_Class
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x7fc], eax
mov edx, dword [ebp - 0x7fc]
mov dword [ebp - 0x800], edx
mov byte [ebp - 4], 0x33
push ecx
mov ecx, esp
mov dword [ebp - 0x200], esp
push 0x4a4074
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x808], eax
mov byte [ebp - 4], 0x34
push ecx
mov ecx, esp
mov dword [ebp - 0x204], esp
push str.SOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547B
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x80c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 0
jne 0x423ac2
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547B__v___t_REG_SZ__d_Document_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48aac4
push 0x48aacc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x208], esp
push 0x48aad4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x818], ecx
mov byte [ebp - 4], 0x35
push ecx
mov ecx, esp
mov dword [ebp - 0x20c], esp
push 0x4a4078
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x81c], eax
mov edx, dword [ebp - 0x81c]
mov dword [ebp - 0x820], edx
mov byte [ebp - 4], 0x36
push ecx
mov ecx, esp
mov dword [ebp - 0x210], esp
push 0x48ab20
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x824], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x828], eax
cmp dword [ebp - 0x828], 0
jne 0x423b7b
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BInprocServer32__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MDIVWCTL.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48ac4c
push 0x48ac54
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push 0x48ac5c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x830], eax
mov byte [ebp - 4], 0x37
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push 0x48ac68
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x834], eax
mov ecx, dword [ebp - 0x834]
mov dword [ebp - 0x838], ecx
mov byte [ebp - 4], 0x38
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.SOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BInprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x83c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 0
jne 0x423c34
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BInprocServer32__v_ThreadingModel__t_REG_SZ__d_Apartment__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48ad70
push 0x48ad78
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x220], esp
push 0x48ad80
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x844], eax
mov edx, dword [ebp - 0x844]
mov dword [ebp - 0x848], edx
mov byte [ebp - 4], 0x39
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x4a407c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x850], eax
mov byte [ebp - 4], 0x3a
push ecx
mov ecx, esp
mov dword [ebp - 0x228], esp
push str.SOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x854], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 0
jne 0x423ced
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgID__v___t_REG_SZ__d_MODI.Document.1__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48ae70
push 0x48ae78
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0x4a4080
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x85c], eax
mov ecx, dword [ebp - 0x85c]
mov dword [ebp - 0x860], ecx
mov byte [ebp - 4], 0x3b
push ecx
mov ecx, esp
mov dword [ebp - 0x230], esp
push 0x4a4084
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x864], eax
mov edx, dword [ebp - 0x864]
mov dword [ebp - 0x868], edx
mov byte [ebp - 4], 0x3c
push ecx
mov ecx, esp
mov dword [ebp - 0x234], esp
push str.SOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgrammable
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x86c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x870], eax
cmp dword [ebp - 0x870], 0
jne 0x423da6
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BProgrammable__v___t_REG_SZ__d___F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48af58
push 0x48af60
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x238], esp
push str.A5EDEDF4_2BBC_45F3_822B_E60C278A1A79
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x878], eax
mov byte [ebp - 4], 0x3d
push ecx
mov ecx, esp
mov dword [ebp - 0x23c], esp
push 0x4a4088
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x87c], eax
mov ecx, dword [ebp - 0x87c]
mov dword [ebp - 0x880], ecx
mov byte [ebp - 4], 0x3e
push ecx
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.SOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BTypeLib
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x884], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 0
jne 0x423e5f
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BTypeLib__v___t_REG_SZ__d_A5EDEDF4_2BBC_45F3_822B_E60C278A1A79__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b088
push 0x48b090
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x244], esp
push 0x48b098
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x88c], eax
mov edx, dword [ebp - 0x88c]
mov dword [ebp - 0x890], edx
mov byte [ebp - 4], 0x3f
push ecx
mov ecx, esp
mov dword [ebp - 0x248], esp
push 0x4a408c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x898], eax
mov byte [ebp - 4], 0x40
push ecx
mov ecx, esp
mov dword [ebp - 0x24c], esp
push str.SOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BVersionIndependentProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x89c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 0
jne 0x423f18
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID40942A6C_1520_4132_BDF8_BDC1F71F547BVersionIndependentProgID__v___t_REG_SZ__d_MODI.Document__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b1a8
push 0x48b1b0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x250], esp
push str.MiDocument_Class
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a8], ecx
mov byte [ebp - 4], 0x41
push ecx
mov ecx, esp
mov dword [ebp - 0x254], esp
push 0x4a4090
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8ac], eax
mov edx, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b0], edx
mov byte [ebp - 4], 0x42
push ecx
mov ecx, esp
mov dword [ebp - 0x258], esp
push str.SOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AF
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8b4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x8b8], 0
jne 0x423fd1
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AF__v___t_REG_SZ__d_MiDocument_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b29c
push 0x48b2a4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x25c], esp
push 0x48b2ac
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c0], eax
mov byte [ebp - 4], 0x43
push ecx
mov ecx, esp
mov dword [ebp - 0x260], esp
push 0x4a4094
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
mov dword [ebp - 0x8c8], ecx
mov byte [ebp - 4], 0x44
push ecx
mov ecx, esp
mov dword [ebp - 0x264], esp
push 0x48b2f8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8cc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x8d0], eax
cmp dword [ebp - 0x8d0], 0
jne 0x42408a
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFInprocServer32__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPCORE.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b420
push 0x48b428
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x268], esp
push 0x48b430
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8d4], eax
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d8], edx
mov byte [ebp - 4], 0x45
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push 0x48b43c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x8e0], eax
mov byte [ebp - 4], 0x46
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push str.SOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFInprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8e4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0
jne 0x424143
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFInprocServer32__v_ThreadingModel__t_REG_SZ__d_Apartment__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b544
push 0x48b54c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x274], esp
push str.Midoc.MiDocument.1
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp - 0x8ec]
mov dword [ebp - 0x8f0], ecx
mov byte [ebp - 4], 0x47
push ecx
mov ecx, esp
mov dword [ebp - 0x278], esp
push 0x4a4098
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8f4], eax
mov edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x8f8], edx
mov byte [ebp - 4], 0x48
push ecx
mov ecx, esp
mov dword [ebp - 0x27c], esp
push str.SOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x8fc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x900], eax
cmp dword [ebp - 0x900], 0
jne 0x4241fc
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFProgID__v___t_REG_SZ__d_Midoc.MiDocument.1__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b648
push 0x48b650
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x280], esp
push str.Midoc.MiDocument
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x908], eax
mov byte [ebp - 4], 0x49
push ecx
mov ecx, esp
mov dword [ebp - 0x284], esp
push 0x4a409c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x90c], eax
mov ecx, dword [ebp - 0x90c]
mov dword [ebp - 0x910], ecx
mov byte [ebp - 4], 0x4a
push ecx
mov ecx, esp
mov dword [ebp - 0x288], esp
push str.SOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFVersionIndependentProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x914], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x918], eax
cmp dword [ebp - 0x918], 0
jne 0x4242b5
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID863305F6_E822_4C08_9BE1_F1C7CFC919AFVersionIndependentProgID__v___t_REG_SZ__d_Midoc.MiDocument__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b76c
push 0x48b774
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push str.MiEngine_Class
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x91c], eax
mov edx, dword [ebp - 0x91c]
mov dword [ebp - 0x920], edx
mov byte [ebp - 4], 0x4b
push ecx
mov ecx, esp
mov dword [ebp - 0x290], esp
push 0x4a40a0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x928], eax
mov byte [ebp - 4], 0x4c
push ecx
mov ecx, esp
mov dword [ebp - 0x294], esp
push str.SOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x92c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x930], eax
cmp dword [ebp - 0x930], 0
jne 0x42436e
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5__v___t_REG_SZ__d_MiEngine_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b85c
push 0x48b864
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x298], esp
push 0x48b86c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x934], eax
mov ecx, dword [ebp - 0x934]
mov dword [ebp - 0x938], ecx
mov byte [ebp - 4], 0x4d
push ecx
mov ecx, esp
mov dword [ebp - 0x29c], esp
push 0x4a40a4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x93c], eax
mov edx, dword [ebp - 0x93c]
mov dword [ebp - 0x940], edx
mov byte [ebp - 4], 0x4e
push ecx
mov ecx, esp
mov dword [ebp - 0x2a0], esp
push 0x48b8b8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x944], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x948], 0
jne 0x424427
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5InprocServer32__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPCORE.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48b9e0
push 0x48b9e8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2a4], esp
push str.Both
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x950], eax
mov byte [ebp - 4], 0x4f
push ecx
mov ecx, esp
mov dword [ebp - 0x2a8], esp
push 0x48b9f8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
mov dword [ebp - 0x958], ecx
mov byte [ebp - 4], 0x50
push ecx
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push str.SOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5InprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x95c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x960], eax
cmp dword [ebp - 0x960], 0
jne 0x4244e0
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5InprocServer32__v_ThreadingModel__t_REG_SZ__d_Both__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48baf8
push 0x48bb00
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2b0], esp
push str.MiEng.MiEngine.1
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x964], eax
mov edx, dword [ebp - 0x964]
mov dword [ebp - 0x968], edx
mov byte [ebp - 4], 0x51
push ecx
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push 0x4a40a8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x970], eax
mov byte [ebp - 4], 0x52
push ecx
mov ecx, esp
mov dword [ebp - 0x2b8], esp
push str.SOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5ProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x974], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x978], eax
cmp dword [ebp - 0x978], 0
jne 0x424599
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5ProgID__v___t_REG_SZ__d_MiEng.MiEngine.1__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48bbfc
push 0x48bc04
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push 0x4a40ac
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x97c], eax
mov ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x980], ecx
mov byte [ebp - 4], 0x53
push ecx
mov ecx, esp
mov dword [ebp - 0x2c0], esp
push 0x4a40b0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x984], eax
mov edx, dword [ebp - 0x984]
mov dword [ebp - 0x988], edx
mov byte [ebp - 4], 0x54
push ecx
mov ecx, esp
mov dword [ebp - 0x2c4], esp
push str.SOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5Programmable
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x98c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x990], eax
cmp dword [ebp - 0x990], 0
jne 0x424652
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5Programmable__v___t_REG_SZ__d___F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48bce4
push 0x48bcec
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2c8], esp
push str.BEB70C92_90A2_4166_A7F5_DD648E36594A
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x998], eax
mov byte [ebp - 4], 0x55
push ecx
mov ecx, esp
mov dword [ebp - 0x2cc], esp
push 0x4a40b4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x99c], eax
mov ecx, dword [ebp - 0x99c]
mov dword [ebp - 0x9a0], ecx
mov byte [ebp - 4], 0x56
push ecx
mov ecx, esp
mov dword [ebp - 0x2d0], esp
push str.SOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5TypeLib
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9a4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 0
jne 0x42470b
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5TypeLib__v___t_REG_SZ__d_BEB70C92_90A2_4166_A7F5_DD648E36594A__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48be14
push 0x48be1c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2d4], esp
push str.MiEng.MiEngine
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9ac], eax
mov edx, dword [ebp - 0x9ac]
mov dword [ebp - 0x9b0], edx
mov byte [ebp - 4], 0x57
push ecx
mov ecx, esp
mov dword [ebp - 0x2d8], esp
push 0x4a40b8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x9b8], eax
mov byte [ebp - 4], 0x58
push ecx
mov ecx, esp
mov dword [ebp - 0x2dc], esp
push str.SOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5VersionIndependentProgID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9bc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x9c0], eax
cmp dword [ebp - 0x9c0], 0
jne 0x4247c4
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSID9D13E607_106F_4892_8A83_FF9827C0A3D5VersionIndependentProgID__v___t_REG_SZ__d_MiEng.MiEngine__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48bf34
push 0x48bf3c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2e0], esp
push str.Microsoft_Office_Document_Imaging_Application
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9c4], eax
mov ecx, dword [ebp - 0x9c4]
mov dword [ebp - 0x9c8], ecx
mov byte [ebp - 4], 0x59
push ecx
mov ecx, esp
mov dword [ebp - 0x2e4], esp
push 0x4a40bc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9cc], eax
mov edx, dword [ebp - 0x9cc]
mov dword [ebp - 0x9d0], edx
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, esp
mov dword [ebp - 0x2e8], esp
push str.SOFTWAREWow6432NodeClassesCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507E
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9d4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x9d8], eax
cmp dword [ebp - 0x9d8], 0
jne 0x42487d
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507E__v___t_REG_SZ__d_Microsoft_Office_Document_Imaging_Application__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48c060
push 0x48c068
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2ec], esp
push str.58F2E3BB_72BD_46DF_B134_1B50628668FB
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x9e0], eax
mov byte [ebp - 4], 0x5b
push ecx
mov ecx, esp
mov dword [ebp - 0x2f0], esp
push 0x4a40c0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9e4], eax
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp - 0x9e8], ecx
mov byte [ebp - 4], 0x5c
push ecx
mov ecx, esp
mov dword [ebp - 0x2f4], esp
push str.SOFTWAREWow6432NodeClassesCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EPersistentHandler
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9ec], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0x9f0], eax
cmp dword [ebp - 0x9f0], 0
jne 0x424936
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EPersistentHandler__v___t_REG_SZ__d_58F2E3BB_72BD_46DF_B134_1B50628668FB__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48c1a0
push 0x48c1a8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2f8], esp
push str.MSPaper.Document
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9f4], eax
mov edx, dword [ebp - 0x9f4]
mov dword [ebp - 0x9f8], edx
mov byte [ebp - 4], 0x5d
push ecx
mov ecx, esp
mov dword [ebp - 0x2fc], esp
push 0x4a40c4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0xa00], eax
mov byte [ebp - 4], 0x5e
push ecx
mov ecx, esp
mov dword [ebp - 0x300], esp
push str.SOFTWAREWow6432NodeClassesCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EProgId
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa04], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 0
jne 0x4249ef
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSIDE1D05D9E_AEB3_49A4_A95E_1663676A507EProgId__v___t_REG_SZ__d_MSPaper.Document__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48c2a4
push 0x48c2ac
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x304], esp
push str.MiTextLayoutPage_Class
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa0c], eax
mov ecx, dword [ebp - 0xa0c]
mov dword [ebp - 0xa10], ecx
mov byte [ebp - 4], 0x5f
push ecx
mov ecx, esp
mov dword [ebp - 0x308], esp
push 0x4a40c8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa14], eax
mov edx, dword [ebp - 0xa14]
mov dword [ebp - 0xa18], edx
mov byte [ebp - 4], 0x60
push ecx
mov ecx, esp
mov dword [ebp - 0x30c], esp
push str.SOFTWAREWow6432NodeClassesCLSIDE4425E53_7859_4889_A3E8_3900877BB241
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa1c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0xa20], 0
jne 0x424aa8
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSIDE4425E53_7859_4889_A3E8_3900877BB241__v___t_REG_SZ__d_MiTextLayoutPage_Class__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48c3a4
push 0x48c3ac
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x310], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPCORE.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0xa28], eax
mov byte [ebp - 4], 0x61
push ecx
mov ecx, esp
mov dword [ebp - 0x314], esp
push 0x4a40cc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa2c], eax
mov ecx, dword [ebp - 0xa2c]
mov dword [ebp - 0xa30], ecx
mov byte [ebp - 4], 0x62
push ecx
mov ecx, esp
mov dword [ebp - 0x318], esp
push 0x48c400
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa34], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 0
jne 0x424b61
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSIDE4425E53_7859_4889_A3E8_3900877BB241InprocServer32__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPCORE.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48c528
push 0x48c530
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x31c], esp
push str.Apartment
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa3c], eax
mov edx, dword [ebp - 0xa3c]
mov dword [ebp - 0xa40], edx
mov byte [ebp - 4], 0x63
push ecx
mov ecx, esp
mov dword [ebp - 0x320], esp
push str.ThreadingModel
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0xa48], eax
mov byte [ebp - 4], 0x64
push ecx
mov ecx, esp
mov dword [ebp - 0x324], esp
push str.SOFTWAREWow6432NodeClassesCLSIDE4425E53_7859_4889_A3E8_3900877BB241InprocServer32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa4c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 0
jne 0x424c1a
push str._C_reg_add_HKCRSOFTWAREWow6432NodeClassesCLSIDE4425E53_7859_4889_A3E8_3900877BB241InprocServer32__v_ThreadingModel__t_REG_SZ__d_Apartment__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48c64c
push 0x48c654
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x328], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE111033WWASUM.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa54], eax
mov ecx, dword [ebp - 0xa54]
mov dword [ebp - 0xa58], ecx
mov byte [ebp - 4], 0x65
push ecx
mov ecx, esp
mov dword [ebp - 0x32c], esp
push 0x48c6a0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa5c], eax
mov edx, dword [ebp - 0xa5c]
mov dword [ebp - 0xa60], edx
mov byte [ebp - 4], 0x66
push ecx
mov ecx, esp
mov dword [ebp - 0x330], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components03F7DEBB17FCAE748854C391D706C4F4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa64], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 0
jne 0x424cd3
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components03F7DEBB17FCAE748854C391D706C4F4__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE111033WWASUM.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48c834
push 0x48c83c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x334], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.02052OFETOC.XML
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa6c], eax
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0xa70], eax
mov byte [ebp - 4], 0x67
push ecx
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x48c894
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa74]
mov dword [ebp - 0xa78], ecx
mov byte [ebp - 4], 0x68
push ecx
mov ecx, esp
mov dword [ebp - 0x33c], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components04429D73A2BFA484A8A9B09B0C8EDABC
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa7c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xa80], eax
cmp dword [ebp - 0xa80], 0
jne 0x424d8c
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components04429D73A2BFA484A8A9B09B0C8EDABC__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.02052OFETOC.XML__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48ca38
push 0x48ca40
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x340], esp
push str.C_Program_Files__x86_Common_FilesMicrosoft_SharedOFFICE11MSO.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa84], eax
mov edx, dword [ebp - 0xa84]
mov dword [ebp - 0xa88], edx
mov byte [ebp - 4], 0x69
push ecx
mov ecx, esp
mov dword [ebp - 0x344], esp
push 0x48ca90
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xa90], eax
mov byte [ebp - 4], 0x6a
push ecx
mov ecx, esp
mov dword [ebp - 0x348], esp
push 0x48cab4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa94], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xa98], eax
cmp dword [ebp - 0xa98], 0
jne 0x424e45
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components0EAE1CE3652AD1140BB010C68A730687__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_Program_Files__x86_Common_FilesMicrosoft_SharedOFFICE11MSO.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48cc28
push 0x48cc30
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x34c], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE112052_
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xa9c], eax
mov ecx, dword [ebp - 0xa9c]
mov dword [ebp - 0xaa0], ecx
mov byte [ebp - 4], 0x6b
push ecx
mov ecx, esp
mov dword [ebp - 0x350], esp
push 0x48cc70
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xaa4], eax
mov edx, dword [ebp - 0xaa4]
mov dword [ebp - 0xaa8], edx
mov byte [ebp - 4], 0x6c
push ecx
mov ecx, esp
mov dword [ebp - 0x354], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components194C4107BD597554AB9AEBEE5F7F3102
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xaac], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xab0], eax
cmp dword [ebp - 0xab0], 0
jne 0x424efe
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components194C4107BD597554AB9AEBEE5F7F3102__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE112052__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48cdfc
push 0x48ce04
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x358], esp
push str.C_WINDOWSSysWOW64VBACHS32.OLB
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0xab8], eax
mov byte [ebp - 4], 0x6d
push ecx
mov ecx, esp
mov dword [ebp - 0x35c], esp
push 0x48ce30
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0xabc]
mov dword [ebp - 0xac0], ecx
mov byte [ebp - 4], 0x6e
push ecx
mov ecx, esp
mov dword [ebp - 0x360], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components19845F63F1722D111A58000A9CA05BF0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xac4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0xac8], 0
jne 0x424fb7
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components19845F63F1722D111A58000A9CA05BF0__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_WINDOWSSysWOW64VBACHS32.OLB__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48cfa4
push 0x48cfac
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x364], esp
push str.00:.pip_
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xacc], eax
mov edx, dword [ebp - 0xacc]
mov dword [ebp - 0xad0], edx
mov byte [ebp - 4], 0x6f
push ecx
mov ecx, esp
mov dword [ebp - 0x368], esp
push 0x48cfc0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xad4], eax
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0xad8], eax
mov byte [ebp - 4], 0x70
push ecx
mov ecx, esp
mov dword [ebp - 0x36c], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components19C2DC6651A24AD4BB2DE51C70F5C3E0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xadc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xae0], eax
cmp dword [ebp - 0xae0], 0
jne 0x425070
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components19C2DC6651A24AD4BB2DE51C70F5C3E0__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_00:.pip__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48d11c
push 0x48d124
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x370], esp
push str.C_Program_Files__x86_Common_FilesSYSTEMOLE_DBMSDAPML.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xae4], eax
mov ecx, dword [ebp - 0xae4]
mov dword [ebp - 0xae8], ecx
mov byte [ebp - 4], 0x71
push ecx
mov ecx, esp
mov dword [ebp - 0x374], esp
push 0x48d16c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xaec], eax
mov edx, dword [ebp - 0xaec]
mov dword [ebp - 0xaf0], edx
mov byte [ebp - 4], 0x72
push ecx
mov ecx, esp
mov dword [ebp - 0x378], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components1EEA4119AF532D11AA98000A9CF0750B
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xaf4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xaf8], eax
cmp dword [ebp - 0xaf8], 0
jne 0x425129
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components1EEA4119AF532D11AA98000A9CF0750B__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_Program_Files__x86_Common_FilesSYSTEMOLE_DBMSDAPML.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48d2fc
push 0x48d304
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x37c], esp
push str.C_Program_Files__x86_Common_FilesMicrosoft_SharedOFFICE11RICHED20.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0xafc]
mov dword [ebp - 0xb00], eax
mov byte [ebp - 4], 0x73
push ecx
mov ecx, esp
mov dword [ebp - 0x380], esp
push 0x48d358
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
mov dword [ebp - 0xb08], ecx
mov byte [ebp - 4], 0x74
push ecx
mov ecx, esp
mov dword [ebp - 0x384], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components1F53EF4649650FD468E7990AAA2398BA
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb0c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xb10], eax
cmp dword [ebp - 0xb10], 0
jne 0x4251e2
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components1F53EF4649650FD468E7990AAA2398BA__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_Program_Files__x86_Common_FilesMicrosoft_SharedOFFICE11RICHED20.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48d4f8
push 0x48d500
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x388], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE112052PSS10R.CHM
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb14], eax
mov edx, dword [ebp - 0xb14]
mov dword [ebp - 0xb18], edx
mov byte [ebp - 4], 0x75
push ecx
mov ecx, esp
mov dword [ebp - 0x38c], esp
push 0x48d54c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb1c], eax
mov eax, dword [ebp - 0xb1c]
mov dword [ebp - 0xb20], eax
mov byte [ebp - 4], 0x76
push ecx
mov ecx, esp
mov dword [ebp - 0x390], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components23C8DE57102B6F94A925735EB12F229E
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb24], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xb28], eax
cmp dword [ebp - 0xb28], 0
jne 0x42529b
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components23C8DE57102B6F94A925735EB12F229E__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE112052PSS10R.CHM__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48d6e0
push 0x48d6e8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x394], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE11MULTIQ.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb2c], eax
mov ecx, dword [ebp - 0xb2c]
mov dword [ebp - 0xb30], ecx
mov byte [ebp - 4], 0x77
push ecx
mov ecx, esp
mov dword [ebp - 0x398], esp
push 0x48d72c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb34], eax
mov edx, dword [ebp - 0xb34]
mov dword [ebp - 0xb38], edx
mov byte [ebp - 4], 0x78
push ecx
mov ecx, esp
mov dword [ebp - 0x39c], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components23DF352E8C3D6A24DA15686574D34AB6
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb3c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xb40], eax
cmp dword [ebp - 0xb40], 0
jne 0x425354
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components23DF352E8C3D6A24DA15686574D34AB6__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE11MULTIQ.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48d8bc
push 0x48d8c4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3a0], esp
push str.C_Program_Files__x86_Microsoft_OfficeOFFICE11HLP95EN.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0xb48], eax
mov byte [ebp - 4], 0x79
push ecx
mov ecx, esp
mov dword [ebp - 0x3a4], esp
push 0x48d90c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb4c], eax
mov ecx, dword [ebp - 0xb4c]
mov dword [ebp - 0xb50], ecx
mov byte [ebp - 4], 0x7a
push ecx
mov ecx, esp
mov dword [ebp - 0x3a8], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components24E217412F532D116BB6000A9CF065F9
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb54], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xb58], eax
cmp dword [ebp - 0xb58], 0
jne 0x42540d
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components24E217412F532D116BB6000A9CF065F9__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_Program_Files__x86_Microsoft_OfficeOFFICE11HLP95EN.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48da9c
push 0x48daa4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3ac], esp
push str.C_Program_Files__x86_Microsoft_OfficeOFFICE11MSOSTYLE.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb5c], eax
mov edx, dword [ebp - 0xb5c]
mov dword [ebp - 0xb60], edx
mov byte [ebp - 4], 0x7b
push ecx
mov ecx, esp
mov dword [ebp - 0x3b0], esp
push 0x48daec
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0xb68], eax
mov byte [ebp - 4], 0x7c
push ecx
mov ecx, esp
mov dword [ebp - 0x3b4], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components2516E66D0FE30B64EB1CDE1F52E7C357
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb6c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xb70], eax
cmp dword [ebp - 0xb70], 0
jne 0x4254c6
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components2516E66D0FE30B64EB1CDE1F52E7C357__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_Program_Files__x86_Microsoft_OfficeOFFICE11MSOSTYLE.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48dc7c
push 0x48dc84
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3b8], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE112052MSE10.XML
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb74], eax
mov ecx, dword [ebp - 0xb74]
mov dword [ebp - 0xb78], ecx
mov byte [ebp - 4], 0x7d
push ecx
mov ecx, esp
mov dword [ebp - 0x3bc], esp
push 0x48dccc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb7c], eax
mov edx, dword [ebp - 0xb7c]
mov dword [ebp - 0xb80], edx
mov byte [ebp - 4], 0x7e
push ecx
mov ecx, esp
mov dword [ebp - 0x3c0], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components302623B42A36F6D44958083E97ACD8D7
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb84], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xb88], eax
cmp dword [ebp - 0xb88], 0
jne 0x42557f
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components302623B42A36F6D44958083E97ACD8D7__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE112052MSE10.XML__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48de60
push 0x48de68
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3c4], esp
push str.C_Program_Files__x86_Common_FilesMicrosoft_SharedOFFICE112052MSOINTL.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0xb8c]
mov dword [ebp - 0xb90], eax
mov byte [ebp - 4], 0x7f
push ecx
mov ecx, esp
mov dword [ebp - 0x3c8], esp
push 0x48dec0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb94], eax
mov ecx, dword [ebp - 0xb94]
mov dword [ebp - 0xb98], ecx
mov byte [ebp - 4], 0x80
push ecx
mov ecx, esp
mov dword [ebp - 0x3cc], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components32D4E7B3EE189BA43A8F778557FB693E
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xb9c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xba0], eax
cmp dword [ebp - 0xba0], 0
jne 0x425638
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components32D4E7B3EE189BA43A8F778557FB693E__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_Program_Files__x86_Common_FilesMicrosoft_SharedOFFICE112052MSOINTL.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48e064
push 0x48e06c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3d0], esp
push str.C_WINDOWSSysWOW64FM20.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xba4], eax
mov edx, dword [ebp - 0xba4]
mov dword [ebp - 0xba8], edx
mov byte [ebp - 4], 0x81
push ecx
mov ecx, esp
mov dword [ebp - 0x3d4], esp
push 0x48e094
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0xbb0], eax
mov byte [ebp - 4], 0x82
push ecx
mov ecx, esp
mov dword [ebp - 0x3d8], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components379E92CC2CB71D119A12000A9CE1A22A
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbb4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xbb8], eax
cmp dword [ebp - 0xbb8], 0
jne 0x4256f1
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components379E92CC2CB71D119A12000A9CE1A22A__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_WINDOWSSysWOW64FM20.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48e204
push 0x48e20c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3dc], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0SCCODE.UNI
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp - 0xbc0], ecx
mov byte [ebp - 4], 0x83
push ecx
mov ecx, esp
mov dword [ebp - 0x3e0], esp
push 0x48e260
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbc4], eax
mov edx, dword [ebp - 0xbc4]
mov dword [ebp - 0xbc8], edx
mov byte [ebp - 4], 0x84
push ecx
mov ecx, esp
mov dword [ebp - 0x3e4], esp
push 0x48e284
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbcc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0xbd0], 0
jne 0x4257aa
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components4080B9FA1A0BBF34FB7813E87159FC64__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0SCCODE.UNI__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48e3fc
push 0x48e404
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3e8], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0XPAGE3C.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0xbd4]
mov dword [ebp - 0xbd8], eax
mov byte [ebp - 4], 0x85
push ecx
mov ecx, esp
mov dword [ebp - 0x3ec], esp
push 0x48e458
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbdc], eax
mov ecx, dword [ebp - 0xbdc]
mov dword [ebp - 0xbe0], ecx
mov byte [ebp - 4], 0x86
push ecx
mov ecx, esp
mov dword [ebp - 0x3f0], esp
push 0x48e47c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbe4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xbe8], eax
cmp dword [ebp - 0xbe8], 0
jne 0x425863
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components656FC74EF9CF31E489052EA838626D68__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0XPAGE3C.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48e5f8
push 0x48e600
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x3f4], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE112052VBETOC.XML
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbec], eax
mov edx, dword [ebp - 0xbec]
mov dword [ebp - 0xbf0], edx
mov byte [ebp - 4], 0x87
push ecx
mov ecx, esp
mov dword [ebp - 0x3f8], esp
push 0x48e64c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0xbf4]
mov dword [ebp - 0xbf8], eax
mov byte [ebp - 4], 0x88
push ecx
mov ecx, esp
mov dword [ebp - 0x3fc], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components8854556CB1AD27447A0770116F1AF175
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xbfc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xc00], eax
cmp dword [ebp - 0xc00], 0
jne 0x42591c
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components8854556CB1AD27447A0770116F1AF175__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE112052VBETOC.XML__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48e7e0
push 0x48e7e8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x400], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0ENGLISH.LNG
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc04], eax
mov ecx, dword [ebp - 0xc04]
mov dword [ebp - 0xc08], ecx
mov byte [ebp - 4], 0x89
push ecx
mov ecx, esp
mov dword [ebp - 0x404], esp
push 0x48e83c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc0c], eax
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0xc10], edx
mov byte [ebp - 4], 0x8a
push ecx
mov ecx, esp
mov dword [ebp - 0x408], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components9040B9FA1A0BBF34FB7813E87159FC64
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc14], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xc18], eax
cmp dword [ebp - 0xc18], 0
jne 0x4259d5
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components9040B9FA1A0BBF34FB7813E87159FC64__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0ENGLISH.LNG__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48e9dc
push 0x48e9e4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x40c], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedPROOFMSLID.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0xc20], eax
mov byte [ebp - 4], 0x8b
push ecx
mov ecx, esp
mov dword [ebp - 0x410], esp
push 0x48ea34
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc24], eax
mov ecx, dword [ebp - 0xc24]
mov dword [ebp - 0xc28], ecx
mov byte [ebp - 4], 0x8c
push ecx
mov ecx, esp
mov dword [ebp - 0x414], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components94BE92CC2CB71D119A12000A9CE1A22A
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc2c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xc30], eax
cmp dword [ebp - 0xc30], 0
jne 0x425a8e
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components94BE92CC2CB71D119A12000A9CE1A22A__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedPROOFMSLID.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48ebcc
push 0x48ebd4
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x418], esp
push 0x4a40d0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc34], eax
mov edx, dword [ebp - 0xc34]
mov dword [ebp - 0xc38], edx
mov byte [ebp - 4], 0x8d
push ecx
mov ecx, esp
mov dword [ebp - 0x41c], esp
push 0x48ebdc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0xc40], eax
mov byte [ebp - 4], 0x8e
push ecx
mov ecx, esp
mov dword [ebp - 0x420], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components987E83843F00AC84188BFB846FC86492
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc44], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xc48], eax
cmp dword [ebp - 0xc48], 0
jne 0x425b47
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Components987E83843F00AC84188BFB846FC86492__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d___F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48ed30
push 0x48ed38
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x424], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE11GDIPLUS.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc4c], eax
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0xc50], ecx
mov byte [ebp - 4], 0x8f
push ecx
mov ecx, esp
mov dword [ebp - 0x428], esp
push 0x48ed80
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc54], eax
mov edx, dword [ebp - 0xc54]
mov dword [ebp - 0xc58], edx
mov byte [ebp - 4], 0x90
push ecx
mov ecx, esp
mov dword [ebp - 0x42c], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsA0A0D0E3C44EB1CDFB76A4AAA464D8DC
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc5c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xc60], 0
jne 0x425c00
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsA0A0D0E3C44EB1CDFB76A4AAA464D8DC__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE11GDIPLUS.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48ef10
push 0x48ef18
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x430], esp
push str.C_WINDOWSSysWOW64FM20CHS.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc64], eax
mov eax, dword [ebp - 0xc64]
mov dword [ebp - 0xc68], eax
mov byte [ebp - 4], 0x91
push ecx
mov ecx, esp
mov dword [ebp - 0x434], esp
push 0x48ef40
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc6c], eax
mov ecx, dword [ebp - 0xc6c]
mov dword [ebp - 0xc70], ecx
mov byte [ebp - 4], 0x92
push ecx
mov ecx, esp
mov dword [ebp - 0x438], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsCCF41B38ABA24D116BB50001A5898679
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc74], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xc78], eax
cmp dword [ebp - 0xc78], 0
jne 0x425cb9
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsCCF41B38ABA24D116BB50001A5898679__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_WINDOWSSysWOW64FM20CHS.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48f0b4
push 0x48f0bc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x43c], esp
push str.C:Program_Files__x86_Microsoft_OfficeOFFICE11WDBIMP.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc7c], eax
mov edx, dword [ebp - 0xc7c]
mov dword [ebp - 0xc80], edx
mov byte [ebp - 4], 0x93
push ecx
mov ecx, esp
mov dword [ebp - 0x440], esp
push 0x48f100
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0xc88], eax
mov byte [ebp - 4], 0x94
push ecx
mov ecx, esp
mov dword [ebp - 0x444], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsDBA0D1302088D1E44B6F7E0DC6732662
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc8c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xc90], eax
cmp dword [ebp - 0xc90], 0
jne 0x425d72
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsDBA0D1302088D1E44B6F7E0DC6732662__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Microsoft_OfficeOFFICE11WDBIMP.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48f290
push 0x48f298
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x448], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPVIEW.EXE
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc94], eax
mov ecx, dword [ebp - 0xc94]
mov dword [ebp - 0xc98], ecx
mov byte [ebp - 4], 0x95
push ecx
mov ecx, esp
mov dword [ebp - 0x44c], esp
push 0x48f2ec
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xc9c], eax
mov edx, dword [ebp - 0xc9c]
mov dword [ebp - 0xca0], edx
mov byte [ebp - 4], 0x96
push ecx
mov ecx, esp
mov dword [ebp - 0x450], esp
push 0x48f310
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xca4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xca8], eax
cmp dword [ebp - 0xca8], 0
jne 0x425e2b
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsEE944586907222A45916AB460C3EA7C6__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MSPVIEW.EXE__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48f48c
push 0x48f494
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x454], esp
push str.C_Program_Files__x86_Microsoft_OfficeOFFICE11SAEXT.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xcac], eax
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0xcb0], eax
mov byte [ebp - 4], 0x97
push ecx
mov ecx, esp
mov dword [ebp - 0x458], esp
push 0x48f4d8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0xcb8], ecx
mov byte [ebp - 4], 0x98
push ecx
mov ecx, esp
mov dword [ebp - 0x45c], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsFE6545E80813C4542A70D28194279382
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xcbc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xcc0], eax
cmp dword [ebp - 0xcc0], 0
jne 0x425ee4
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18ComponentsFE6545E80813C4542A70D28194279382__v_4080110900063D11C8EF10054038389C__t_REG_SZ__d_C_Program_Files__x86_Microsoft_OfficeOFFICE11SAEXT.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48f668
push 0x48f670
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 0x70], 0x26
mov byte [ebp - 0x6f], 0
mov byte [ebp - 0x6e], 0x61
mov byte [ebp - 0x6d], 0
mov byte [ebp - 0x6c], 0x45
mov byte [ebp - 0x6b], 0
mov byte [ebp - 0x6a], 0x4d
mov byte [ebp - 0x69], 0
mov byte [ebp - 0x68], 0x61
mov byte [ebp - 0x67], 0
mov byte [ebp - 0x66], 0x65
mov byte [ebp - 0x65], 0
mov byte [ebp - 0x64], 0x2c
mov byte [ebp - 0x63], 0
mov byte [ebp - 0x62], 0x37
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x60], 0x71
mov byte [ebp - 0x5f], 0
mov byte [ebp - 0x5e], 0x39
mov byte [ebp - 0x5d], 0
mov byte [ebp - 0x5c], 0x2a
mov byte [ebp - 0x5b], 0
mov byte [ebp - 0x5a], 0x44
mov byte [ebp - 0x59], 0
mov byte [ebp - 0x58], 0x58
mov byte [ebp - 0x57], 0
mov byte [ebp - 0x56], 0x64
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 0x55
mov byte [ebp - 0x53], 0
mov byte [ebp - 0x52], 0x40
mov byte [ebp - 0x51], 0
mov byte [ebp - 0x50], 0x45
mov byte [ebp - 0x4f], 0
mov byte [ebp - 0x4e], 0x50
mov byte [ebp - 0x4d], 0
mov byte [ebp - 0x4c], 0x69
mov byte [ebp - 0x4b], 0
mov byte [ebp - 0x4a], 0x3d
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x48], 2
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 0x50
mov byte [ebp - 0x45], 0
mov byte [ebp - 0x44], 0x72
mov byte [ebp - 0x43], 0
mov byte [ebp - 0x42], 0x6f
mov byte [ebp - 0x41], 0
mov byte [ebp - 0x40], 0x6f
mov byte [ebp - 0x3f], 0
mov byte [ebp - 0x3e], 0x66
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x3c], 0x69
mov byte [ebp - 0x3b], 0
mov byte [ebp - 0x3a], 0x6e
mov byte [ebp - 0x39], 0
mov byte [ebp - 0x38], 0x67
mov byte [ebp - 0x37], 0
mov byte [ebp - 0x36], 0x54
mov byte [ebp - 0x35], 0
mov byte [ebp - 0x34], 0x6f
mov byte [ebp - 0x33], 0
mov byte [ebp - 0x32], 0x6f
mov byte [ebp - 0x31], 0
mov byte [ebp - 0x30], 0x6c
mov byte [ebp - 0x2f], 0
mov byte [ebp - 0x2e], 0x73
mov byte [ebp - 0x2d], 0
mov byte [ebp - 0x2c], 0x46
mov byte [ebp - 0x2b], 0
mov byte [ebp - 0x2a], 0x69
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x28], 0x6c
mov byte [ebp - 0x27], 0
mov byte [ebp - 0x26], 0x65
mov byte [ebp - 0x25], 0
mov byte [ebp - 0x24], 0x73
mov byte [ebp - 0x23], 0
mov byte [ebp - 0x22], 0x5f
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x20], 0x31
mov byte [ebp - 0x1f], 0
mov byte [ebp - 0x1e], 0x30
mov byte [ebp - 0x1d], 0
mov byte [ebp - 0x1c], 0x33
mov byte [ebp - 0x1b], 0
mov byte [ebp - 0x1a], 0x33
mov byte [ebp - 0x19], 0
mov byte [ebp - 0x18], 0
mov byte [ebp - 0x17], 0
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x15], 0
push 0x4a40d4
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x42607a
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x89
jge 0x426095
mov eax, dword [ebp - 0x14]
mov cl, byte [ebp + eax - 0x70]
push ecx
lea ecx, [ebp - 0x10]
call fcn.004354fe
jmp 0x426071
push 7
push ecx
mov ecx, esp
mov dword [ebp - 0x460], esp
lea edx, [ebp - 0x10]
push edx
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0xcc4]
mov dword [ebp - 0xcc8], eax
mov byte [ebp - 4], 0x99
push ecx
mov ecx, esp
mov dword [ebp - 0x464], esp
push 0x48f678
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0xccc]
mov dword [ebp - 0xcd0], ecx
mov byte [ebp - 4], 0x9a
push ecx
mov ecx, esp
mov dword [ebp - 0x468], esp
push 0x48f684
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xcd4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xcd8], eax
cmp dword [ebp - 0xcd8], 0
jne 0x42614d
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures__v_OCR_1033__t_REG_SZ__d_aEMae_7q9DXdU_EPi.ProofingToolsFiles_1033__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48f7d8
push 0x48f7e0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 0xcc], 0x25
mov byte [ebp - 0xcb], 0
mov byte [ebp - 0xca], 0x6d
mov byte [ebp - 0xc9], 0
mov byte [ebp - 0xc8], 0x45
mov byte [ebp - 0xc7], 0
mov byte [ebp - 0xc6], 0x4d
mov byte [ebp - 0xc5], 0
mov byte [ebp - 0xc4], 0x61
mov byte [ebp - 0xc3], 0
mov byte [ebp - 0xc2], 0x65
mov byte [ebp - 0xc1], 0
mov byte [ebp - 0xc0], 0x2c
mov byte [ebp - 0xbf], 0
mov byte [ebp - 0xbe], 0x37
mov byte [ebp - 0xbd], 0
mov byte [ebp - 0xbc], 0x71
mov byte [ebp - 0xbb], 0
mov byte [ebp - 0xba], 0x39
mov byte [ebp - 0xb9], 0
mov byte [ebp - 0xb8], 0x2a
mov byte [ebp - 0xb7], 0
mov byte [ebp - 0xb6], 0x44
mov byte [ebp - 0xb5], 0
mov byte [ebp - 0xb4], 0x58
mov byte [ebp - 0xb3], 0
mov byte [ebp - 0xb2], 0x64
mov byte [ebp - 0xb1], 0
mov byte [ebp - 0xb0], 0x55
mov byte [ebp - 0xaf], 0
mov byte [ebp - 0xae], 0x40
mov byte [ebp - 0xad], 0
mov byte [ebp - 0xac], 0x45
mov byte [ebp - 0xab], 0
mov byte [ebp - 0xaa], 0x50
mov byte [ebp - 0xa9], 0
mov byte [ebp - 0xa8], 0x69
mov byte [ebp - 0xa7], 0
mov byte [ebp - 0xa6], 0x3d
mov byte [ebp - 0xa5], 0
mov byte [ebp - 0xa4], 2
mov byte [ebp - 0xa3], 0
mov byte [ebp - 0xa2], 0x50
mov byte [ebp - 0xa1], 0
mov byte [ebp - 0xa0], 0x72
mov byte [ebp - 0x9f], 0
mov byte [ebp - 0x9e], 0x6f
mov byte [ebp - 0x9d], 0
mov byte [ebp - 0x9c], 0x6f
mov byte [ebp - 0x9b], 0
mov byte [ebp - 0x9a], 0x66
mov byte [ebp - 0x99], 0
mov byte [ebp - 0x98], 0x69
mov byte [ebp - 0x97], 0
mov byte [ebp - 0x96], 0x6e
mov byte [ebp - 0x95], 0
mov byte [ebp - 0x94], 0x67
mov byte [ebp - 0x93], 0
mov byte [ebp - 0x92], 0x54
mov byte [ebp - 0x91], 0
mov byte [ebp - 0x90], 0x6f
mov byte [ebp - 0x8f], 0
mov byte [ebp - 0x8e], 0x6f
mov byte [ebp - 0x8d], 0
mov byte [ebp - 0x8c], 0x6c
mov byte [ebp - 0x8b], 0
mov byte [ebp - 0x8a], 0x73
mov byte [ebp - 0x89], 0
mov byte [ebp - 0x88], 0x46
mov byte [ebp - 0x87], 0
mov byte [ebp - 0x86], 0x69
mov byte [ebp - 0x85], 0
mov byte [ebp - 0x84], 0x6c
mov byte [ebp - 0x83], 0
mov byte [ebp - 0x82], 0x65
mov byte [ebp - 0x81], 0
mov byte [ebp - 0x80], 0x73
mov byte [ebp - 0x7f], 0
mov byte [ebp - 0x7e], 0x5f
mov byte [ebp - 0x7d], 0
mov byte [ebp - 0x7c], 0x32
mov byte [ebp - 0x7b], 0
mov byte [ebp - 0x7a], 0x30
mov byte [ebp - 0x79], 0
mov byte [ebp - 0x78], 0x35
mov byte [ebp - 0x77], 0
mov byte [ebp - 0x76], 0x32
mov byte [ebp - 0x75], 0
mov byte [ebp - 0x74], 0
mov byte [ebp - 0x73], 0
mov byte [ebp - 0x72], 0
mov byte [ebp - 0x71], 0
push 0x4a40d8
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x4263c7
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x89
jge 0x4263e5
mov eax, dword [ebp - 0x14]
mov cl, byte [ebp + eax - 0xcc]
push ecx
lea ecx, [ebp - 0x10]
call fcn.004354fe
jmp 0x4263be
push 7
push ecx
mov ecx, esp
mov dword [ebp - 0x46c], esp
lea edx, [ebp - 0x10]
push edx
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0xcdc]
mov dword [ebp - 0xce0], eax
mov byte [ebp - 4], 0x9b
push ecx
mov ecx, esp
mov dword [ebp - 0x470], esp
push 0x48f7e8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xce4], eax
mov ecx, dword [ebp - 0xce4]
mov dword [ebp - 0xce8], ecx
mov byte [ebp - 4], 0x9c
push ecx
mov ecx, esp
mov dword [ebp - 0x474], esp
push 0x48f7f4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xcec], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xcf0], eax
cmp dword [ebp - 0xcf0], 0
jne 0x42649d
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures__v_OCR_2052__t_REG_SZ__d__mEMae_7q9DXdU_EPi.ProofingToolsFiles_2052__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48f948
push 0x48f950
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x478], esp
push str.IVO28_dtw8QxVeJ2QUcNlT_jIjf_1L__81__z7dCRHB_g_Jy.0_qiBaXptKIY9_z_Ya0g_vXRu__7GUI___WrLD_OP0rfh__t.__A3.0lTwZD0wv_wmN.f.37iv__jbMP_OHQ55AhJ__6_2._Q__hUlM._mNjECtw0pl_6_zSI_kbKH_q__1az_2__VMt_Qq_rxIEPX9x_L2kE_6c8guITDB_hO8hh__y9X_6P_31__D
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xcf4], eax
mov edx, dword [ebp - 0xcf4]
mov dword [ebp - 0xcf8], edx
mov byte [ebp - 4], 0x9d
push ecx
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 0x48fa60
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0xcfc]
mov dword [ebp - 0xd00], eax
mov byte [ebp - 4], 0x9e
push ecx
mov ecx, esp
mov dword [ebp - 0x480], esp
push 0x48fa70
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd04], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xd08], eax
cmp dword [ebp - 0xd08], 0
jne 0x426556
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures__v_ProductFiles__t_REG_SZ__d_IVO28_dtw8QxVeJ2QUcNlT_jIjf_1L__81__z7dCRHB_g_Jy.0_qiBaXptKIY9_z_Ya0g_vXRu__7GUI___WrLD_OP0rfh__t.__A3.0lTwZD0wv_wmN.f.37iv__jbMP_OHQ55AhJ__6_2._Q__hUlM._mNjECtw0pl_6_zSI_kbKH_q__1az_2__VMt_Qq_rxIEPX9x_L2kE_6c8guITDB_hO8hh__y9X_6P_31__D__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48fca0
push 0x48fca8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x484], esp
push str.pl_6_zSI_kbKH_q__1.SHAREDFiles
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd0c], eax
mov ecx, dword [ebp - 0xd0c]
mov dword [ebp - 0xd10], ecx
mov byte [ebp - 4], 0x9f
push ecx
mov ecx, esp
mov dword [ebp - 0x488], esp
push 0x48fcd4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd14], eax
mov edx, dword [ebp - 0xd14]
mov dword [ebp - 0xd18], edx
mov byte [ebp - 4], 0xa0
push ecx
mov ecx, esp
mov dword [ebp - 0x48c], esp
push 0x48fce4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd1c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xd20], eax
cmp dword [ebp - 0xd20], 0
jne 0x42660f
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures__v_ProofingParent__t_REG_SZ__d_pl_6_zSI_kbKH_q__1.SHAREDFiles__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48fe30
push 0x48fe38
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x490], esp
push str.pl_6_zSI_kbKH_q__1IeFLd__KFJ_L2EQA.ProofingParent
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0xd24]
mov dword [ebp - 0xd28], eax
mov byte [ebp - 4], 0xa1
push ecx
mov ecx, esp
mov dword [ebp - 0x494], esp
push 0x48fe78
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd2c], eax
mov ecx, dword [ebp - 0xd2c]
mov dword [ebp - 0xd30], ecx
mov byte [ebp - 4], 0xa2
push ecx
mov ecx, esp
mov dword [ebp - 0x498], esp
push 0x48fe90
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd34], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xd38], eax
cmp dword [ebp - 0xd38], 0
jne 0x4266c8
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures__v_ProofingToolsFiles_1033__t_REG_SZ__d_pl_6_zSI_kbKH_q__1IeFLd__KFJ_L2EQA.ProofingParent__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x48fffc
push 0x490004
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x49c], esp
push str.SrT_jIjf_1L__81__pl_6_zSI_kbKH_q__1.ProofingParent
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd3c], eax
mov edx, dword [ebp - 0xd3c]
mov dword [ebp - 0xd40], edx
mov byte [ebp - 4], 0xa3
push ecx
mov ecx, esp
mov dword [ebp - 0x4a0], esp
push 0x490044
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0xd48], eax
mov byte [ebp - 4], 0xa4
push ecx
mov ecx, esp
mov dword [ebp - 0x4a4], esp
push 0x49005c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd4c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xd50], eax
cmp dword [ebp - 0xd50], 0
jne 0x426781
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures__v_ProofingToolsFiles_2052__t_REG_SZ__d_SrT_jIjf_1L__81__pl_6_zSI_kbKH_q__1.ProofingParent__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4901c8
push 0x4901d0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4a8], esp
push str.pl_6_zSI_kbKH_q__1.ProductFiles
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd54], eax
mov ecx, dword [ebp - 0xd54]
mov dword [ebp - 0xd58], ecx
mov byte [ebp - 4], 0xa5
push ecx
mov ecx, esp
mov dword [ebp - 0x4ac], esp
push 0x4901fc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd5c], eax
mov edx, dword [ebp - 0xd5c]
mov dword [ebp - 0xd60], edx
mov byte [ebp - 4], 0xa6
push ecx
mov ecx, esp
mov dword [ebp - 0x4b0], esp
push str.SOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd64], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0xd68], 0
jne 0x42683a
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CFeatures__v_SHAREDFiles__t_REG_SZ__d_pl_6_zSI_kbKH_q__1.ProductFiles__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490354
push 0x49035c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4b4], esp
push 0x490364
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0xd6c]
mov dword [ebp - 0xd70], eax
mov byte [ebp - 4], 0xa7
push ecx
mov ecx, esp
mov dword [ebp - 0x4b8], esp
push 0x490374
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd74], eax
mov ecx, dword [ebp - 0xd74]
mov dword [ebp - 0xd78], ecx
mov byte [ebp - 4], 0xa8
push ecx
mov ecx, esp
mov dword [ebp - 0x4bc], esp
push 0x490388
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd7c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xd80], eax
cmp dword [ebp - 0xd80], 0
jne 0x4268f3
push str._C_reg_add_HKCRSOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS_1_5_18Products4080110900063D11C8EF10054038389CInstallProperties__v_WindowsInstaller__t_REG_SZ__d_dword:00000001__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4904d8
push 0x4904e0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 7
push ecx
mov ecx, esp
mov dword [ebp - 0x4c0], esp
push str.igAVn_f_ZXfeAR6.jiOCR_1033_aEMae_7q9DXdU_EPi
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd84], eax
mov edx, dword [ebp - 0xd84]
mov dword [ebp - 0xd88], edx
mov byte [ebp - 4], 0xa9
push ecx
mov ecx, esp
mov dword [ebp - 0x4c4], esp
push str.1033
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0xd8c]
mov dword [ebp - 0xd90], eax
mov byte [ebp - 4], 0xaa
push ecx
mov ecx, esp
mov dword [ebp - 0x4c8], esp
push 0x490524
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd94], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xd98], eax
cmp dword [ebp - 0xd98], 0
jne 0x4269ac
push str._C_reg_add_HKCRSOFTWAREClassesInstallerComponents61BA386016BD0C340BBEAC273D84FD5F__v_1033__t_REG_SZ__d_igAVn_f_ZXfeAR6.jiOCR_1033_aEMae_7q9DXdU_EPi__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490614
push 0x49061c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 7
push ecx
mov ecx, esp
mov dword [ebp - 0x4cc], esp
push str.igAVn_f_ZXfeAR6.jiOCR_2052___mEMae_7q9DXdU_EPi
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xd9c], eax
mov ecx, dword [ebp - 0xd9c]
mov dword [ebp - 0xda0], ecx
mov byte [ebp - 4], 0xab
push ecx
mov ecx, esp
mov dword [ebp - 0x4d0], esp
push 0x490658
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xda4], eax
mov edx, dword [ebp - 0xda4]
mov dword [ebp - 0xda8], edx
mov byte [ebp - 4], 0xac
push ecx
mov ecx, esp
mov dword [ebp - 0x4d4], esp
push str.SOFTWAREClassesInstallerComponents61BA386016BD0C340BBEAC273D84FD5F
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdac], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0xdb0], 0
jne 0x426a65
push str._C_reg_add_HKCRSOFTWAREClassesInstallerComponents61BA386016BD0C340BBEAC273D84FD5F__v_2052__t_REG_SZ__d_igAVn_f_ZXfeAR6.jiOCR_2052___mEMae_7q9DXdU_EPi__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490750
push 0x490758
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4d8], esp
push 0x490760
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdb4], eax
mov eax, dword [ebp - 0xdb4]
mov dword [ebp - 0xdb8], eax
mov byte [ebp - 4], 0xad
push ecx
mov ecx, esp
mov dword [ebp - 0x4dc], esp
push str.OCR_1033
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdbc], eax
mov ecx, dword [ebp - 0xdbc]
mov dword [ebp - 0xdc0], ecx
mov byte [ebp - 4], 0xae
push ecx
mov ecx, esp
mov dword [ebp - 0x4e0], esp
push 0x490784
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdc4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xdc8], eax
cmp dword [ebp - 0xdc8], 0
jne 0x426b1e
push str._C_reg_add_HKCRSOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C__v_OCR_1033__t_REG_SZ__d_ProofingToolsFiles_1033__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x49085c
push 0x490864
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4e4], esp
push 0x49086c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdcc], eax
mov edx, dword [ebp - 0xdcc]
mov dword [ebp - 0xdd0], edx
mov byte [ebp - 4], 0xaf
push ecx
mov ecx, esp
mov dword [ebp - 0x4e8], esp
push 0x490884
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdd4], eax
mov eax, dword [ebp - 0xdd4]
mov dword [ebp - 0xdd8], eax
mov byte [ebp - 4], 0xb0
push ecx
mov ecx, esp
mov dword [ebp - 0x4ec], esp
push 0x490890
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xddc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xde0], eax
cmp dword [ebp - 0xde0], 0
jne 0x426bd7
push str._C_reg_add_HKCRSOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C__v_OCR_2052__t_REG_SZ__d_ProofingToolsFiles_2052__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490968
push 0x490970
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4f0], esp
push 0x4a40dc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xde4], eax
mov ecx, dword [ebp - 0xde4]
mov dword [ebp - 0xde8], ecx
mov byte [ebp - 4], 0xb1
push ecx
mov ecx, esp
mov dword [ebp - 0x4f4], esp
push 0x490978
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdec], eax
mov edx, dword [ebp - 0xdec]
mov dword [ebp - 0xdf0], edx
mov byte [ebp - 4], 0xb2
push ecx
mov ecx, esp
mov dword [ebp - 0x4f8], esp
push 0x490988
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdf4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xdf8], eax
cmp dword [ebp - 0xdf8], 0
jne 0x426c90
push str._C_reg_add_HKCRSOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C__v_ProductFiles__t_REG_SZ__d___F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490a4c
push 0x490a54
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x4fc], esp
push 0x490a5c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xdfc], eax
mov eax, dword [ebp - 0xdfc]
mov dword [ebp - 0xe00], eax
mov byte [ebp - 4], 0xb3
push ecx
mov ecx, esp
mov dword [ebp - 0x500], esp
push 0x490a68
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe04], eax
mov ecx, dword [ebp - 0xe04]
mov dword [ebp - 0xe08], ecx
mov byte [ebp - 4], 0xb4
push ecx
mov ecx, esp
mov dword [ebp - 0x504], esp
push 0x490a78
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe0c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xe10], eax
cmp dword [ebp - 0xe10], 0
jne 0x426d49
push str._C_reg_add_HKCRSOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C__v_ProofingParent__t_REG_SZ__d_SHAREDFiles__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490b48
push 0x490b50
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x508], esp
push 0x490b58
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe14], eax
mov edx, dword [ebp - 0xe14]
mov dword [ebp - 0xe18], edx
mov byte [ebp - 4], 0xb5
push ecx
mov ecx, esp
mov dword [ebp - 0x50c], esp
push str.ProofingToolsFiles_1033
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe1c], eax
mov eax, dword [ebp - 0xe1c]
mov dword [ebp - 0xe20], eax
mov byte [ebp - 4], 0xb6
push ecx
mov ecx, esp
mov dword [ebp - 0x510], esp
push 0x490b80
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe24], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xe28], eax
cmp dword [ebp - 0xe28], 0
jne 0x426e02
push str._C_reg_add_HKCRSOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C__v_ProofingToolsFiles_1033__t_REG_SZ__d_ProofingParent__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490c5c
push 0x490c64
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x514], esp
push str.ProofingParent
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe2c], eax
mov ecx, dword [ebp - 0xe2c]
mov dword [ebp - 0xe30], ecx
mov byte [ebp - 4], 0xb7
push ecx
mov ecx, esp
mov dword [ebp - 0x518], esp
push str.ProofingToolsFiles_2052
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe34], eax
mov edx, dword [ebp - 0xe34]
mov dword [ebp - 0xe38], edx
mov byte [ebp - 4], 0xb8
push ecx
mov ecx, esp
mov dword [ebp - 0x51c], esp
push 0x490c94
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe3c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xe40], eax
cmp dword [ebp - 0xe40], 0
jne 0x426ebb
push str._C_reg_add_HKCRSOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C__v_ProofingToolsFiles_2052__t_REG_SZ__d_ProofingParent__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490d70
push 0x490d78
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x520], esp
push str.ProductFiles
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0xe44]
mov dword [ebp - 0xe48], eax
mov byte [ebp - 4], 0xb9
push ecx
mov ecx, esp
mov dword [ebp - 0x524], esp
push str.SHAREDFiles
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe4c], eax
mov ecx, dword [ebp - 0xe4c]
mov dword [ebp - 0xe50], ecx
mov byte [ebp - 4], 0xba
push ecx
mov ecx, esp
mov dword [ebp - 0x528], esp
push str.SOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe54], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xe58], eax
cmp dword [ebp - 0xe58], 0
jne 0x426f74
push str._C_reg_add_HKCRSOFTWAREClassesInstallerFeatures4080110900063D11C8EF10054038389C__v_SHAREDFiles__t_REG_SZ__d_ProductFiles__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490e6c
push 0x490e74
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0x4a40e0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe5c], eax
mov edx, dword [ebp - 0xe5c]
mov dword [ebp - 0xe60], edx
mov byte [ebp - 4], 0xbb
push ecx
mov ecx, esp
mov dword [ebp - 0x530], esp
push 0x4a40e4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0xe68], eax
mov byte [ebp - 4], 0xbc
push ecx
mov ecx, esp
mov dword [ebp - 0x534], esp
push 0x490e7c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe6c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xe70], eax
cmp dword [ebp - 0xe70], 0
jne 0x42702d
push str._C_reg_add_HKCRSOFTWAREClassesInstallerProducts4080110900063D11C8EF10054038389C__v___t_REG_SZ__d___F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x490f34
push 0x490f3c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x538], esp
push str.40942A6C_1520_4132_BDF8_BDC1F71F547B
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe74], eax
mov ecx, dword [ebp - 0xe74]
mov dword [ebp - 0xe78], ecx
mov byte [ebp - 4], 0xbd
push ecx
mov ecx, esp
mov dword [ebp - 0x53c], esp
push 0x4a40e8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe7c], eax
mov edx, dword [ebp - 0xe7c]
mov dword [ebp - 0xe80], edx
mov byte [ebp - 4], 0xbe
push ecx
mov ecx, esp
mov dword [ebp - 0x540], esp
push str.SOFTWAREClassesMODI.DocumentCLSID
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe84], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xe88], eax
cmp dword [ebp - 0xe88], 0
jne 0x4270e6
push str._C_reg_add_HKCRSOFTWAREClassesMODI.DocumentCLSID__v___t_REG_SZ__d_40942A6C_1520_4132_BDF8_BDC1F71F547B__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x491008
push 0x491010
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x544], esp
push str.MODI.Document.1
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe8c], eax
mov eax, dword [ebp - 0xe8c]
mov dword [ebp - 0xe90], eax
mov byte [ebp - 4], 0xbf
push ecx
mov ecx, esp
mov dword [ebp - 0x548], esp
push 0x4a40ec
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe94], eax
mov ecx, dword [ebp - 0xe94]
mov dword [ebp - 0xe98], ecx
mov byte [ebp - 4], 0xc0
push ecx
mov ecx, esp
mov dword [ebp - 0x54c], esp
push str.SOFTWAREClassesMODI.DocumentCurVer
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xe9c], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xea0], eax
cmp dword [ebp - 0xea0], 0
jne 0x42719f
push str._C_reg_add_HKCRSOFTWAREClassesMODI.DocumentCurVer__v___t_REG_SZ__d_MODI.Document.1__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4910b0
push 0x4910b8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x550], esp
push str.Microsoft_Office_Document_Imaging_11.0_Type_Library
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xea4], eax
mov edx, dword [ebp - 0xea4]
mov dword [ebp - 0xea8], edx
mov byte [ebp - 4], 0xc1
push ecx
mov ecx, esp
mov dword [ebp - 0x554], esp
push 0x4a40f0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xeac], eax
mov eax, dword [ebp - 0xeac]
mov dword [ebp - 0xeb0], eax
mov byte [ebp - 4], 0xc2
push ecx
mov ecx, esp
mov dword [ebp - 0x558], esp
push str.SOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.0
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xeb4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xeb8], eax
cmp dword [ebp - 0xeb8], 0
jne 0x427258
push str._C_reg_add_HKCRSOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.0__v___t_REG_SZ__d_Microsoft_Office_Document_Imaging_11.0_Type_Library__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4911d8
push 0x4911e0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x55c], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MDIVWCTL.DLL
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xebc], eax
mov ecx, dword [ebp - 0xebc]
mov dword [ebp - 0xec0], ecx
mov byte [ebp - 4], 0xc3
push ecx
mov ecx, esp
mov dword [ebp - 0x560], esp
push 0x4a40f4
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xec4], eax
mov edx, dword [ebp - 0xec4]
mov dword [ebp - 0xec8], edx
mov byte [ebp - 4], 0xc4
push ecx
mov ecx, esp
mov dword [ebp - 0x564], esp
push str.SOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.00win32
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xecc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xed0], eax
cmp dword [ebp - 0xed0], 0
jne 0x427311
push str._C_reg_add_HKCRSOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.00win32__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0MDIVWCTL.DLL__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x491340
push 0x491348
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x568], esp
push 0x491350
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0xed4]
mov dword [ebp - 0xed8], eax
mov byte [ebp - 4], 0xc5
push ecx
mov ecx, esp
mov dword [ebp - 0x56c], esp
push 0x4a40f8
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xedc], eax
mov ecx, dword [ebp - 0xedc]
mov dword [ebp - 0xee0], ecx
mov byte [ebp - 4], 0xc6
push ecx
mov ecx, esp
mov dword [ebp - 0x570], esp
push str.SOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.0FLAGS
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xee4], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xee8], eax
cmp dword [ebp - 0xee8], 0
jne 0x4273ca
push str._C_reg_add_HKCRSOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.0FLAGS__v___t_REG_SZ__d_0__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x491414
push 0x49141c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x574], esp
push str.C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0_
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xeec], eax
mov edx, dword [ebp - 0xeec]
mov dword [ebp - 0xef0], edx
mov byte [ebp - 4], 0xc7
push ecx
mov ecx, esp
mov dword [ebp - 0x578], esp
push 0x4a40fc
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xef4], eax
mov eax, dword [ebp - 0xef4]
mov dword [ebp - 0xef8], eax
mov byte [ebp - 4], 0xc8
push ecx
mov ecx, esp
mov dword [ebp - 0x57c], esp
push str.SOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.0HELPDIR
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xefc], eax
push 0x80000002
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xf00], eax
cmp dword [ebp - 0xf00], 0
jne 0x427483
push str._C_reg_add_HKCRSOFTWAREClassesTypeLibA5EDEDF4_2BBC_45F3_822B_E60C278A1A79_b.0HELPDIR__v___t_REG_SZ__d_C:Program_Files__x86_Common_FilesMicrosoft_SharedMODI11.0__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x491564
push 0x49156c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x580], esp
push 0x491574
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf04], eax
mov ecx, dword [ebp - 0xf04]
mov dword [ebp - 0xf08], ecx
mov byte [ebp - 4], 0xc9
push ecx
mov ecx, esp
mov dword [ebp - 0x584], esp
push str.QmUD
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf0c], eax
mov edx, dword [ebp - 0xf0c]
mov dword [ebp - 0xf10], edx
mov byte [ebp - 4], 0xca
push ecx
mov ecx, esp
mov dword [ebp - 0x588], esp
push 0x49158c
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf14], eax
push 0x80000003
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xf18], eax
cmp dword [ebp - 0xf18], 0
jne 0x42753c
push str._C_reg_add_HKUS.defaultSoftwareMicrosoftOffice11.0Common__v_QmUD__t_REG_SZ__d_dword:00000001__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x491628
push 0x491630
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x58c], esp
push 0x491638
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf1c], eax
mov eax, dword [ebp - 0xf1c]
mov dword [ebp - 0xf20], eax
mov byte [ebp - 4], 0xcb
push ecx
mov ecx, esp
mov dword [ebp - 0x590], esp
push str.UserData
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf24], eax
mov ecx, dword [ebp - 0xf24]
mov dword [ebp - 0xf28], ecx
mov byte [ebp - 4], 0xcc
push ecx
mov ecx, esp
mov dword [ebp - 0x594], esp
push 0x491654
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf2c], eax
push 0x80000003
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xf30], eax
cmp dword [ebp - 0xf30], 0
jne 0x4275f5
push str._C_reg_add_HKUS.defaultSoftwareMicrosoftOffice11.0Common__v_UserData__t_REG_SZ__d_dword:00000001__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4916f4
push 0x4916fc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x598], esp
push 0x491704
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf34], eax
mov edx, dword [ebp - 0xf34]
mov dword [ebp - 0xf38], edx
mov byte [ebp - 4], 0xcd
push ecx
mov ecx, esp
mov dword [ebp - 0x59c], esp
push str.WebDriveUserData
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf3c], eax
mov eax, dword [ebp - 0xf3c]
mov dword [ebp - 0xf40], eax
mov byte [ebp - 4], 0xce
push ecx
mov ecx, esp
mov dword [ebp - 0x5a0], esp
push str..defaultSoftwareMicrosoftOffice11.0Common
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 0xf44], eax
push 0x80000003
mov byte [ebp - 4], 0
call fcn.00405236
add esp, 0x14
mov dword [ebp - 0xf48], eax
cmp dword [ebp - 0xf48], 0
jne 0x4276ae
push str._C_reg_add_HKUS.defaultSoftwareMicrosoftOffice11.0Common__v_WebDriveUserData__t_REG_SZ__d_dword:00000001__F_NUL
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator_2
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.004190e0
push eax
push 0x4917d0
push 0x4917d8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret