Function at 0x409a10
Capabilities:
Check for time delay via gettickcount
Check if file exists
Contain obfuscated stackstrings
Get common file path
Get program files directory
Get startup folder
Parse pe header
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x580268
mov eax, dword fs:[0]
push eax
sub esp, 0x5dc
mov eax, dword [0x636f58]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x642128], 0
jne 0x40cccd
mov dword [0x642128], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push str.Preload_start
mov dword [ebp - 0x5e8], eax
call fcn.00404a10
add esp, 4
lea eax, [ebp - 0x428]
lea ecx, [ebp - 0x575]
push eax
call fcn.0040cd10
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x428]
mov esi, dword [eax - 0xc]
test esi, esi
je 0x40ccc2
jle 0x409ae3
lea edx, [esi - 1]
test edx, edx
js 0x40ccfd
cmp edx, esi
jg 0x40ccfd
cmp word [eax + edx*2], 0x5c
je 0x409ae3
test edx, edx
js 0x40ccfd
cmp edx, esi
jg 0x40ccfd
cmp word [eax + edx*2], 0x2f
je 0x409ae3
push 1
push 0x611a4c
lea ecx, [ebp - 0x428]
call fcn.0040ec20
mov eax, dword [ebp - 0x428]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40ccc2
lea ecx, [ebp - 0x43c]
call fcn.00414f73
push str.FoxitPDFEditor.exe
lea edx, [ebp - 0x428]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x444]
call fcn.0040e950
push str.FoxitPDFReader.exe
lea edx, [ebp - 0x428]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 8
push eax
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 3
call fcn.00410880
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
lea eax, [ebp - 0x444]
push eax
push dword [ebp - 0x434]
lea ecx, [ebp - 0x43c]
call fcn.00415361
lea eax, [ebp - 0x444]
push eax
push dword [ebp - 0x434]
lea ecx, [ebp - 0x43c]
call fcn.00415361
lea eax, [ebp - 0x444]
push eax
push dword [ebp - 0x434]
lea ecx, [ebp - 0x43c]
call fcn.00415361
push str.langen_US_strings_en_US.xml.fx
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.langen_USEmail_strings_en_US.xml.fx
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsPlgPltfm.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.vcruntime140.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.msvcp140.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.mfc140u.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsphc.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsFXCrypto32.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsPlgDynLoader.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsBrowser.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsFoxitAccountManagement.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.FPCSDK.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsLicenseManager.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsPageEditor.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x11
push dword [ebp - 0x434]
lea ecx, [ebp - 0x43c]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsSubscribe.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsUpdater.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsNamedPosition.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.plugins_touchup.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsPageOrganizer.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsOCRRecognition.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.agnosticuilib.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsEmail.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsAiAssistant.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsCalculator.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsTickMark.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsAIPLabel.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsPageFormat.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsPDFOptimizer.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsSecurity.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsLayerPanelToolPlugin.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsCrossReferenceLinks.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsFXExport.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsDocProcess.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsSignature.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsWIP.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsNdOffice.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsBookmark.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsPDFAccessibility.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.V8icudtl.dat
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.Sensor.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.opentracing.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x2c
push dword [ebp - 0x434]
lea ecx, [ebp - 0x43c]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsCloudDocuments.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsCollaboration.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsConnectedPDFPlugin.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsConnectedPDFDRM.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.pluginsCPDFOCLink.fpi
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
push str.LocalService.dll
lea edx, [ebp - 0x428]
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x43c]
push dword [ebp - 0x434]
call fcn.00415361
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x424]
lea ecx, [ecx - 0x10]
call fcn.00404640
lea edx, [ebp - 0x43c]
lea ecx, [ebp - 0x428]
call fcn.00405dc0
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.005557e0
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
add esp, 0xc
push 0
push 0x29
push eax
push 0
call esi
test eax, eax
je 0x40ca89
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x448]
call fcn.00404370
push str._shell32.dll
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x34
call fcn.004108f0
lea ecx, [ebp - 0x424]
call fcn.00404660
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x440]
call fcn.00404370
push str.combase.dll
mov edx, eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x36
call fcn.004108f0
lea ecx, [ebp - 0x424]
call fcn.00404660
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5d0]
call fcn.00404370
push str.wininet.dll
mov edx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x424]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x38
call fcn.004108f0
lea ecx, [ebp - 0x424]
call fcn.00404660
lea ecx, [ebp - 0x5d0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5d4]
call fcn.00404370
push str.msi.dll
mov edx, eax
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x5d0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x3a
call fcn.004108f0
lea ecx, [ebp - 0x5d0]
call fcn.00404660
lea ecx, [ebp - 0x5d4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5d8]
call fcn.00404370
push str.user32.dll
mov edx, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x5d4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x3c
call fcn.004108f0
lea ecx, [ebp - 0x5d4]
call fcn.00404660
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5dc]
call fcn.00404370
push str.windows.storage.dll
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x5d8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x3e
call fcn.004108f0
lea ecx, [ebp - 0x5d8]
call fcn.00404660
lea ecx, [ebp - 0x5dc]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5e0]
call fcn.00404370
push str.wtsapi32.dll
mov edx, eax
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x5dc]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x40
call fcn.004108f0
lea ecx, [ebp - 0x5dc]
call fcn.00404660
lea ecx, [ebp - 0x5e0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x458]
call fcn.00404370
push str.winsta.dll
mov edx, eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x5e0]
call fcn.0040e950
add esp, 4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x43c]
push eax
call fcn.004108f0
lea ecx, [ebp - 0x5e0]
call fcn.00404660
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x45c]
call fcn.00404370
push str.ucrtbase.dll
mov edx, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x458]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x44
call fcn.004108f0
lea ecx, [ebp - 0x458]
call fcn.00404660
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x460]
call fcn.00404370
push str.urlmon.dll
mov edx, eax
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x45c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x46
call fcn.004108f0
lea ecx, [ebp - 0x45c]
call fcn.00404660
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x464]
call fcn.00404370
push 0x6160d4
mov edx, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x460]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x48
call fcn.004108f0
lea ecx, [ebp - 0x460]
call fcn.00404660
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x468]
call fcn.00404370
push str.comdlg32.dll
mov edx, eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x464]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x4a
call fcn.004108f0
lea ecx, [ebp - 0x464]
call fcn.00404660
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00404370
push str.dbghelp.dll
mov edx, eax
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x468]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x4c
call fcn.004108f0
lea ecx, [ebp - 0x468]
call fcn.00404660
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x470]
call fcn.00404370
push str.gdi32full.dll
mov edx, eax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x46c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x4e
call fcn.004108f0
lea ecx, [ebp - 0x46c]
call fcn.00404660
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x474]
call fcn.00404370
push str._netapi32.dll
mov edx, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x470]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x50
call fcn.004108f0
lea ecx, [ebp - 0x470]
call fcn.00404660
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x478]
call fcn.00404370
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x474]
push str.odbc32.dll
mov edx, eax
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x52
call fcn.004108f0
lea ecx, [ebp - 0x474]
call fcn.00404660
lea ecx, [ebp - 0x478]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x47c]
call fcn.00404370
push str.winhttp.dll
mov edx, eax
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x478]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x54
call fcn.004108f0
lea ecx, [ebp - 0x478]
call fcn.00404660
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x480]
call fcn.00404370
push str.oledlg.dll
mov edx, eax
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x47c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x56
call fcn.004108f0
lea ecx, [ebp - 0x47c]
call fcn.00404660
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x484]
call fcn.00404370
push str.crypt32.dll
mov edx, eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x480]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x58
call fcn.004108f0
lea ecx, [ebp - 0x480]
call fcn.00404660
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x488]
call fcn.00404370
mov byte [ebp - 4], 0x59
push str.kemel32.dll
mov edx, eax
lea ecx, [ebp - 0x484]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x5a
call fcn.004108f0
lea ecx, [ebp - 0x484]
call fcn.00404660
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x48c]
call fcn.00404370
push str.oleaut32.dll
mov edx, eax
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x488]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x5c
call fcn.004108f0
lea ecx, [ebp - 0x488]
call fcn.00404660
lea ecx, [ebp - 0x48c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x490]
call fcn.00404370
push str.ws2_32.dll
mov edx, eax
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x48c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x5e
call fcn.004108f0
lea ecx, [ebp - 0x48c]
call fcn.00404660
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x494]
call fcn.00404370
push str.webio.dll
mov edx, eax
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x490]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x60
call fcn.004108f0
lea ecx, [ebp - 0x490]
call fcn.00404660
lea ecx, [ebp - 0x494]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x498]
call fcn.00404370
push str.gdi32ull.dll
mov edx, eax
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x494]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x62
call fcn.004108f0
lea ecx, [ebp - 0x494]
call fcn.00404660
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x49c]
call fcn.00404370
push str.FWPUCLNT.dll
mov edx, eax
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x498]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x64
call fcn.004108f0
lea ecx, [ebp - 0x498]
call fcn.00404660
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00404370
push str.wintrust.dll
mov edx, eax
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x49c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x66
call fcn.004108f0
lea ecx, [ebp - 0x49c]
call fcn.00404660
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.00404370
push str._setupapi.dll
mov edx, eax
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x4a0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x68
call fcn.004108f0
lea ecx, [ebp - 0x4a0]
call fcn.00404660
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4a8]
call fcn.00404370
push str._rasadhlp.dll
mov edx, eax
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x4a4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x6a
call fcn.004108f0
lea ecx, [ebp - 0x4a4]
call fcn.00404660
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 2
call fcn.00404660
push str.C:WindowsWinSxSx86_microsoft.windows.common_controls_6595b64144ccf1df_6.0.19041.844_none_11adecdf30011423comctl32.dll
lea ecx, [ebp - 0x43c]
call fcn.00410860
push str.C:Program_Files__x86_Common_FilesMicrosoft_Sharedink_tiptsf.dll
lea ecx, [ebp - 0x43c]
call fcn.00410860
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.00404370
push str.iertutil.dll
mov edx, eax
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x4a8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x6c
call fcn.004108f0
lea ecx, [ebp - 0x4a8]
call fcn.00404660
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.00404370
push str.jscript9.dll
mov edx, eax
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x4ac]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x6e
call fcn.004108f0
lea ecx, [ebp - 0x4ac]
call fcn.00404660
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.00404370
push str.mshtml.dll
mov edx, eax
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x4b0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x70
call fcn.004108f0
lea ecx, [ebp - 0x4b0]
call fcn.00404660
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.00404370
push str.ieframe.dll
mov edx, eax
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x4b4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x72
call fcn.004108f0
lea ecx, [ebp - 0x4b4]
call fcn.00404660
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.00404370
push str.d3d10warp.dll
mov edx, eax
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x4b8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x74
call fcn.004108f0
lea ecx, [ebp - 0x4b8]
call fcn.00404660
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4c0]
call fcn.00404370
push str.CoreUIComponents.dll
mov edx, eax
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x4bc]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x76
call fcn.004108f0
lea ecx, [ebp - 0x4bc]
call fcn.00404660
lea ecx, [ebp - 0x4c0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4c4]
call fcn.00404370
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x4c0]
push str.d2d1.dll
mov edx, eax
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x78
call fcn.004108f0
lea ecx, [ebp - 0x4c0]
call fcn.00404660
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00404370
push str.WindowsCodecs.dll
mov edx, eax
mov byte [ebp - 4], 0x79
lea ecx, [ebp - 0x4c4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x7a
call fcn.004108f0
lea ecx, [ebp - 0x4c4]
call fcn.00404660
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.00404370
push str.DWrite.dll
mov edx, eax
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x4c8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x7c
call fcn.004108f0
lea ecx, [ebp - 0x4c8]
call fcn.00404660
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4d0]
call fcn.00404370
push str.CoreMessaging.dll
mov edx, eax
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x4cc]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x7e
call fcn.004108f0
lea ecx, [ebp - 0x4cc]
call fcn.00404660
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00404370
mov byte [ebp - 4], 0x7f
push str.TextInputFramework.dll
mov edx, eax
lea ecx, [ebp - 0x4d0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x80
call fcn.004108f0
lea ecx, [ebp - 0x4d0]
call fcn.00404660
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4d8]
call fcn.00404370
push str.msctf.dll
mov edx, eax
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x4d4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x82
call fcn.004108f0
lea ecx, [ebp - 0x4d4]
call fcn.00404660
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4dc]
call fcn.00404370
push str._nsi.dll
mov edx, eax
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x4d8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x84
call fcn.004108f0
lea ecx, [ebp - 0x4d8]
call fcn.00404660
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.00404370
push str.winnsi.dll
mov edx, eax
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x4dc]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x86
call fcn.004108f0
lea ecx, [ebp - 0x4dc]
call fcn.00404660
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4e4]
call fcn.00404370
push str._twinapi.appcore.dll
mov edx, eax
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x4e0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x88
call fcn.004108f0
lea ecx, [ebp - 0x4e0]
call fcn.00404660
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4e8]
call fcn.00404370
push str.d3d11.dll
mov edx, eax
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x4e4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x8a
call fcn.004108f0
lea ecx, [ebp - 0x4e4]
call fcn.00404660
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4ec]
call fcn.00404370
push str.WinTypes.dll
mov edx, eax
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x4e8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x8c
call fcn.004108f0
lea ecx, [ebp - 0x4e8]
call fcn.00404660
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4f0]
call fcn.00404370
push str.dxgi.dll
mov edx, eax
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x4ec]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x8e
call fcn.004108f0
lea ecx, [ebp - 0x4ec]
call fcn.00404660
lea ecx, [ebp - 0x4f0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00404370
push str.clbcatq.dll
mov edx, eax
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x4f0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x90
call fcn.004108f0
lea ecx, [ebp - 0x4f0]
call fcn.00404660
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00404370
push str._secur32.dll
mov edx, eax
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x4f4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x92
call fcn.004108f0
lea ecx, [ebp - 0x4f4]
call fcn.00404660
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.00404370
push str.dcomp.dll
mov edx, eax
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x4f8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x94
call fcn.004108f0
lea ecx, [ebp - 0x4f8]
call fcn.00404660
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x500]
call fcn.00404370
push str.OnDemandConnRouteHelper.dll
mov edx, eax
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x4fc]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x96
call fcn.004108f0
lea ecx, [ebp - 0x4fc]
call fcn.00404660
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x504]
call fcn.00404370
push str._riched20.dll
mov edx, eax
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x500]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x98
call fcn.004108f0
lea ecx, [ebp - 0x500]
call fcn.00404660
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x508]
call fcn.00404370
push str.TextShaping.dll
mov edx, eax
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x504]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x9a
call fcn.004108f0
lea ecx, [ebp - 0x504]
call fcn.00404660
lea ecx, [ebp - 0x508]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x50c]
call fcn.00404370
push str.wldp.dll
mov edx, eax
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x508]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x9c
call fcn.004108f0
lea ecx, [ebp - 0x508]
call fcn.00404660
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x510]
call fcn.00404370
push str.propsys.dll
mov edx, eax
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0x50c]
call fcn.0040e950
add esp, 4
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x43c]
push eax
call fcn.004108f0
lea ecx, [ebp - 0x50c]
call fcn.00404660
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x514]
call fcn.00404370
push str.msls31.dll
mov edx, eax
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x510]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xa0
call fcn.004108f0
lea ecx, [ebp - 0x510]
call fcn.00404660
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x518]
call fcn.00404370
push str._bcryptprimitives.dll
mov edx, eax
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0x514]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xa2
call fcn.004108f0
lea ecx, [ebp - 0x514]
call fcn.00404660
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x51c]
call fcn.00404370
push str._sspicli.dll
mov edx, eax
mov byte [ebp - 4], 0xa3
lea ecx, [ebp - 0x518]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xa4
call fcn.004108f0
lea ecx, [ebp - 0x518]
call fcn.00404660
lea ecx, [ebp - 0x51c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x520]
call fcn.00404370
push str.coml2.dll
mov edx, eax
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x51c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xa6
call fcn.004108f0
lea ecx, [ebp - 0x51c]
call fcn.00404660
lea ecx, [ebp - 0x520]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x524]
call fcn.00404370
push str.Wldap32.dll
mov edx, eax
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x520]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xa8
call fcn.004108f0
lea ecx, [ebp - 0x520]
call fcn.00404660
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x528]
call fcn.00404370
push str.BCP47Langs.dll
mov edx, eax
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x524]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xaa
call fcn.004108f0
lea ecx, [ebp - 0x524]
call fcn.00404660
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x52c]
call fcn.00404370
push str._sppc.dll
mov edx, eax
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x528]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xac
call fcn.004108f0
lea ecx, [ebp - 0x528]
call fcn.00404660
lea ecx, [ebp - 0x52c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x530]
call fcn.00404370
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x52c]
push str.wbem_fastprox.dll
mov edx, eax
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xae
call fcn.004108f0
lea ecx, [ebp - 0x52c]
call fcn.00404660
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x534]
call fcn.00404370
push str.wbemwbemsvc.dll
mov edx, eax
mov byte [ebp - 4], 0xaf
lea ecx, [ebp - 0x530]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xb0
call fcn.004108f0
lea ecx, [ebp - 0x530]
call fcn.00404660
lea ecx, [ebp - 0x534]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x538]
call fcn.00404370
push str.wbemcomn.dll
mov edx, eax
mov byte [ebp - 4], 0xb1
lea ecx, [ebp - 0x534]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xb2
call fcn.004108f0
lea ecx, [ebp - 0x534]
call fcn.00404660
lea ecx, [ebp - 0x538]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x53c]
call fcn.00404370
push str.UIAutomationCore.dll
mov edx, eax
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x538]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xb4
call fcn.004108f0
lea ecx, [ebp - 0x538]
call fcn.00404660
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x540]
call fcn.00404370
mov byte [ebp - 4], 0xb5
push str._appresolver.dll
mov edx, eax
lea ecx, [ebp - 0x53c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xb6
call fcn.004108f0
lea ecx, [ebp - 0x53c]
call fcn.00404660
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x544]
call fcn.00404370
push str.msi.dll
mov edx, eax
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x540]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xb8
call fcn.004108f0
lea ecx, [ebp - 0x540]
call fcn.00404660
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x548]
call fcn.00404370
push str.msi.dll
mov edx, eax
mov byte [ebp - 4], 0xb9
lea ecx, [ebp - 0x544]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xba
call fcn.004108f0
lea ecx, [ebp - 0x544]
call fcn.00404660
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x54c]
call fcn.00404370
push str.dbghelp.dll
mov edx, eax
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x548]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xbc
call fcn.004108f0
lea ecx, [ebp - 0x548]
call fcn.00404660
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x550]
call fcn.00404370
push str.dbghelp.dll
mov edx, eax
mov byte [ebp - 4], 0xbd
lea ecx, [ebp - 0x54c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xbe
call fcn.004108f0
lea ecx, [ebp - 0x54c]
call fcn.00404660
lea ecx, [ebp - 0x550]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x554]
call fcn.00404370
push str.iscript9.dll
mov edx, eax
mov byte [ebp - 4], 0xbf
lea ecx, [ebp - 0x550]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xc0
call fcn.004108f0
lea ecx, [ebp - 0x550]
call fcn.00404660
lea ecx, [ebp - 0x554]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x558]
call fcn.00404370
push str.iscript9.dll
mov edx, eax
mov byte [ebp - 4], 0xc1
lea ecx, [ebp - 0x554]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xc2
call fcn.004108f0
lea ecx, [ebp - 0x554]
call fcn.00404660
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x55c]
call fcn.00404370
push str.odbc32.dll
mov edx, eax
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0x558]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xc4
call fcn.004108f0
lea ecx, [ebp - 0x558]
call fcn.00404660
lea ecx, [ebp - 0x55c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x560]
call fcn.00404370
push str.odbc32.dll
mov edx, eax
mov byte [ebp - 4], 0xc5
lea ecx, [ebp - 0x55c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xc6
call fcn.004108f0
lea ecx, [ebp - 0x55c]
call fcn.00404660
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x564]
call fcn.00404370
push str.mshtml.dll
mov edx, eax
mov byte [ebp - 4], 0xc7
lea ecx, [ebp - 0x560]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xc8
call fcn.004108f0
lea ecx, [ebp - 0x560]
call fcn.00404660
lea ecx, [ebp - 0x564]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x568]
call fcn.00404370
push str.mshtml.dll
mov edx, eax
mov byte [ebp - 4], 0xc9
lea ecx, [ebp - 0x564]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xca
call fcn.004108f0
lea ecx, [ebp - 0x564]
call fcn.00404660
lea ecx, [ebp - 0x568]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x56c]
call fcn.00404370
push str.msctf.dll
mov edx, eax
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x568]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xcc
call fcn.004108f0
lea ecx, [ebp - 0x568]
call fcn.00404660
lea ecx, [ebp - 0x56c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x570]
call fcn.00404370
push str.msctf.dll
mov edx, eax
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x56c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xce
call fcn.004108f0
lea ecx, [ebp - 0x56c]
call fcn.00404660
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x574]
call fcn.00404370
push str.wininet.dll
mov edx, eax
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x570]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xd0
call fcn.004108f0
lea ecx, [ebp - 0x570]
call fcn.00404660
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.00404370
push str.wininet.dll
mov edx, eax
mov byte [ebp - 4], 0xd1
lea ecx, [ebp - 0x574]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xd2
call fcn.004108f0
lea ecx, [ebp - 0x574]
call fcn.00404660
lea ecx, [ebp - 0x5b0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x57c]
call fcn.00404370
push str.windows.storage.dll
mov edx, eax
mov byte [ebp - 4], 0xd3
lea ecx, [ebp - 0x5b0]
call fcn.0040e950
add esp, 4
mov byte [ebp - 4], 0xd4
lea ecx, [ebp - 0x43c]
push eax
call fcn.004108f0
lea ecx, [ebp - 0x5b0]
call fcn.00404660
lea ecx, [ebp - 0x57c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x580]
call fcn.00404370
push str.windows.storage.dll
mov edx, eax
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x57c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xd6
call fcn.004108f0
lea ecx, [ebp - 0x57c]
call fcn.00404660
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x584]
call fcn.00404370
push str.dwrite.dll
mov edx, eax
mov byte [ebp - 4], 0xd7
lea ecx, [ebp - 0x580]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xd8
call fcn.004108f0
lea ecx, [ebp - 0x580]
call fcn.00404660
lea ecx, [ebp - 0x584]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x588]
call fcn.00404370
push str.dwrite.dll
mov edx, eax
mov byte [ebp - 4], 0xd9
lea ecx, [ebp - 0x584]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xda
call fcn.004108f0
lea ecx, [ebp - 0x584]
call fcn.00404660
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x58c]
call fcn.00404370
push str.ieframe.dll
mov edx, eax
mov byte [ebp - 4], 0xdb
lea ecx, [ebp - 0x588]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xdc
call fcn.004108f0
lea ecx, [ebp - 0x588]
call fcn.00404660
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x590]
call fcn.00404370
push str.ieframe.dll
mov edx, eax
mov byte [ebp - 4], 0xdd
lea ecx, [ebp - 0x58c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xde
call fcn.004108f0
lea ecx, [ebp - 0x58c]
call fcn.00404660
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x594]
call fcn.00404370
push str._shell32.dll
mov edx, eax
mov byte [ebp - 4], 0xdf
lea ecx, [ebp - 0x590]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xe0
call fcn.004108f0
lea ecx, [ebp - 0x590]
call fcn.00404660
lea ecx, [ebp - 0x594]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x598]
call fcn.00404370
push str._shell32.dll
mov edx, eax
mov byte [ebp - 4], 0xe1
lea ecx, [ebp - 0x594]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xe2
call fcn.004108f0
lea ecx, [ebp - 0x594]
call fcn.00404660
lea ecx, [ebp - 0x598]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x59c]
call fcn.00404370
mov byte [ebp - 4], 0xe3
lea ecx, [ebp - 0x598]
push str.ws2_32.dll
mov edx, eax
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xe4
call fcn.004108f0
lea ecx, [ebp - 0x598]
call fcn.00404660
lea ecx, [ebp - 0x59c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5a0]
call fcn.00404370
push str.ws2_32.dll
mov edx, eax
mov byte [ebp - 4], 0xe5
lea ecx, [ebp - 0x59c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xe6
call fcn.004108f0
lea ecx, [ebp - 0x59c]
call fcn.00404660
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.00404370
push str.gpapi.dll
mov edx, eax
mov byte [ebp - 4], 0xe7
lea ecx, [ebp - 0x5a0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xe8
call fcn.004108f0
lea ecx, [ebp - 0x5a0]
call fcn.00404660
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5a8]
call fcn.00404370
push str._rpcrt4.dll
mov edx, eax
mov byte [ebp - 4], 0xe9
lea ecx, [ebp - 0x5a4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xea
call fcn.004108f0
lea ecx, [ebp - 0x5a4]
call fcn.00404660
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5ac]
call fcn.00404370
mov byte [ebp - 4], 0xeb
push str.SHCore.dll
mov edx, eax
lea ecx, [ebp - 0x5a8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xec
call fcn.004108f0
lea ecx, [ebp - 0x5a8]
call fcn.00404660
lea ecx, [ebp - 0x5ac]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5e4]
call fcn.00404370
push 0x616954
mov edx, eax
mov byte [ebp - 4], 0xed
lea ecx, [ebp - 0x5ac]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xee
call fcn.004108f0
lea ecx, [ebp - 0x5ac]
call fcn.00404660
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5b4]
call fcn.00404370
push str._shlwapi.dll
mov edx, eax
mov byte [ebp - 4], 0xef
lea ecx, [ebp - 0x5e4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xf0
call fcn.004108f0
lea ecx, [ebp - 0x5e4]
call fcn.00404660
lea ecx, [ebp - 0x5b4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5b8]
call fcn.00404370
push str.imm32.dll
mov edx, eax
mov byte [ebp - 4], 0xf1
lea ecx, [ebp - 0x5b4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xf2
call fcn.004108f0
lea ecx, [ebp - 0x5b4]
call fcn.00404660
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5bc]
call fcn.00404370
push str.msimg32.dll
mov edx, eax
mov byte [ebp - 4], 0xf3
lea ecx, [ebp - 0x5b8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xf4
call fcn.004108f0
lea ecx, [ebp - 0x5b8]
call fcn.00404660
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5c0]
call fcn.00404370
push str._sxs.dll
mov edx, eax
mov byte [ebp - 4], 0xf5
lea ecx, [ebp - 0x5bc]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xf6
call fcn.004108f0
lea ecx, [ebp - 0x5bc]
call fcn.00404660
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5c4]
call fcn.00404370
push str._rsaenh.dll
mov edx, eax
mov byte [ebp - 4], 0xf7
lea ecx, [ebp - 0x5c0]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xf8
call fcn.004108f0
lea ecx, [ebp - 0x5c0]
call fcn.00404660
lea ecx, [ebp - 0x5c4]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5c8]
call fcn.00404370
push str.msvcp_win.dll
mov edx, eax
mov byte [ebp - 4], 0xf9
lea ecx, [ebp - 0x5c4]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xfa
call fcn.004108f0
lea ecx, [ebp - 0x5c4]
call fcn.00404660
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x5cc]
call fcn.00404370
push str.imagehlp.dll
mov edx, eax
mov byte [ebp - 4], 0xfb
lea ecx, [ebp - 0x5c8]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xfc
call fcn.004108f0
lea ecx, [ebp - 0x5c8]
call fcn.00404660
lea ecx, [ebp - 0x5cc]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x44c]
call fcn.00404370
push str.uxtheme.dll
mov edx, eax
mov byte [ebp - 4], 0xfd
lea ecx, [ebp - 0x5cc]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0xfe
call fcn.004108f0
lea ecx, [ebp - 0x5cc]
call fcn.00404660
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x450]
call fcn.00404370
push str.edputil.dll
mov edx, eax
mov byte [ebp - 4], 0xff
lea ecx, [ebp - 0x44c]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov dword [ebp - 4], 0x100
call fcn.004108f0
lea ecx, [ebp - 0x44c]
mov dword [ebp - 4], 0xff
call fcn.00404660
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x454]
call fcn.00404370
push str.oleacc.dll
mov edx, eax
mov dword [ebp - 4], 0x101
lea ecx, [ebp - 0x450]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 2
call fcn.004108f0
lea ecx, [ebp - 0x450]
call fcn.00404660
lea ecx, [ebp - 0x454]
mov dword [ebp - 4], 2
call fcn.00404660
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.005557e0
add esp, 0xc
lea eax, [ebp - 0x420]
push 0
push 0x25
push eax
push 0
call esi
test eax, eax
je 0x40cb6c
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x450]
call fcn.00404370
push str.wow64win.dll
mov edx, eax
mov dword [ebp - 4], 0x103
lea ecx, [ebp - 0x454]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 4
call fcn.004108f0
lea ecx, [ebp - 0x454]
call fcn.00404660
lea ecx, [ebp - 0x450]
mov dword [ebp - 4], 2
call fcn.00404660
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x44c]
call fcn.00404370
push str.wow64.dll
mov edx, eax
mov dword [ebp - 4], 0x105
lea ecx, [ebp - 0x454]
call fcn.0040e950
add esp, 4
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 6
call fcn.004108f0
lea ecx, [ebp - 0x454]
call fcn.00404660
lea ecx, [ebp - 0x44c]
mov dword [ebp - 4], 2
call fcn.00404660
xor eax, eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x434], eax
jle 0x40cc92
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
nop word [eax + eax]
push eax
lea ecx, [ebp - 0x43c]
call fcn.00410840
lea ecx, [ebp - 0x440]
push dword [eax]
call fcn.00404370
lea ecx, [ebp - 0x440]
mov dword [ebp - 4], 0x107
call fcn.0040ec00
push eax
call fcn.00404a10
add esp, 4
lea ecx, [ebp - 0x440]
push 0xffffffffffffffff
call fcn.00404410
push 0
push 0x8000000
push 3
push 0
push 7
push SysReAllocStringLen
push dword [ebp - 0x440]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
test esi, esi
je 0x40cc67
push 4
push 0x1000
push 0x100000
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edi, eax
test edi, edi
je 0x40cce9
push 0
lea eax, [ebp - 0x448]
mov dword [ebp - 0x448], 0
push eax
push 0x100000
push edi
push esi
call ebx
test eax, eax
je 0x40cc52
cmp dword [ebp - 0x448], 0
jbe 0x40cc52
push 0
lea eax, [ebp - 0x448]
push eax
push 0x100000
push edi
push esi
call ebx
test eax, eax
jne 0x40cc33
push 0x8000
push 0
push edi
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x440]
mov dword [ebp - 4], 2
call fcn.00404660
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp eax, dword [ebp - 0x434]
jl 0x40cb90
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x5e8]
push eax
push str.Preload_end__d_ms
call fcn.00404a10
add esp, 8
lea ecx, [ebp - 0x444]
call fcn.00404660
lea ecx, [ebp - 0x43c]
call fcn.00414f8a
lea ecx, [ebp - 0x428]
call fcn.00404660
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0054d4f5
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x440]
call fcn.00404660
jmp 0x40ccac
push 0x80070057
call fcn.00404570
int3