Function at 0x40a430
Capabilities:
Contain obfuscated stackstrings
Hash data with md5
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46d454
mov eax, dword fs:[0]
push eax
mov eax, 0x8d38
call fcn.00465d50
mov eax, dword [0x496d50]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
xor ecx, ecx
push 0x11
mov word [ebp - 0x89cc], cx
mov ebx, 7
xor esi, esi
push str._System_6to4.dll
lea ecx, [ebp - 0x89cc]
mov dword [ebp - 0x8d20], eax
mov dword [ebp - 0x8d24], edi
mov dword [ebp - 0x89b8], ebx
mov dword [ebp - 0x89bc], esi
call fcn.00401740
mov dword [ebp - 4], esi
push 0x15
xor edx, edx
push str._System__appmgmts.dll
lea ecx, [ebp - 0x89b0]
mov dword [ebp - 0x899c], ebx
mov dword [ebp - 0x89a0], esi
mov word [ebp - 0x89b0], dx
call fcn.00401740
mov byte [ebp - 4], 1
push 0x14
xor eax, eax
push str._System__browser.dll
lea ecx, [ebp - 0x8994]
mov dword [ebp - 0x8980], ebx
mov dword [ebp - 0x8984], esi
mov word [ebp - 0x8994], ax
call fcn.00401740
mov byte [ebp - 4], 2
xor ecx, ecx
push 0x14
mov word [ebp - 0x8978], cx
push str._System_clipsrv.exe
lea ecx, [ebp - 0x8978]
mov dword [ebp - 0x8964], ebx
mov dword [ebp - 0x8968], esi
call fcn.00401740
mov byte [ebp - 4], 3
push 0x15
xor edx, edx
push str._System_cngaudit.dll
lea ecx, [ebp - 0x895c]
mov dword [ebp - 0x8948], ebx
mov dword [ebp - 0x894c], esi
mov word [ebp - 0x895c], dx
call fcn.00401740
mov byte [ebp - 4], 4
push 0x15
xor eax, eax
push str._System_comctl32.dll
lea ecx, [ebp - 0x8940]
mov dword [ebp - 0x892c], ebx
mov dword [ebp - 0x8930], esi
mov word [ebp - 0x8940], ax
call fcn.00401740
mov byte [ebp - 4], 5
xor ecx, ecx
push 0x13
mov word [ebp - 0x8924], cx
push str._System_comres.dll
lea ecx, [ebp - 0x8924]
mov dword [ebp - 0x8910], ebx
mov dword [ebp - 0x8914], esi
call fcn.00401740
mov byte [ebp - 4], 6
xor edx, edx
mov dword [ebp - 0x88f4], ebx
mov dword [ebp - 0x88f8], esi
mov word [ebp - 0x8908], dx
push 0x14
push str._System_conhost.exe
lea ecx, [ebp - 0x8908]
call fcn.00401740
mov byte [ebp - 4], bl
push 0x15
xor eax, eax
push str._System_cryptsvc.dll
lea ecx, [ebp - 0x88ec]
mov dword [ebp - 0x88d8], ebx
mov dword [ebp - 0x88dc], esi
mov word [ebp - 0x88ec], ax
call fcn.00401740
mov byte [ebp - 4], 8
xor ecx, ecx
push 0x12
mov word [ebp - 0x88d0], cx
push str._System_csrss.exe
lea ecx, [ebp - 0x88d0]
mov dword [ebp - 0x88bc], ebx
mov dword [ebp - 0x88c0], esi
call fcn.00401740
mov byte [ebp - 4], 9
push 0x13
xor edx, edx
push str._System_ctfmon.exe
lea ecx, [ebp - 0x88b4]
mov dword [ebp - 0x88a0], ebx
mov dword [ebp - 0x88a4], esi
mov word [ebp - 0x88b4], dx
call fcn.00401740
mov byte [ebp - 4], 0xa
push 0x11
xor eax, eax
push str._System_d3d8.dll
lea ecx, [ebp - 0x8898]
mov dword [ebp - 0x8884], ebx
mov dword [ebp - 0x8888], esi
mov word [ebp - 0x8898], ax
call fcn.00401740
mov byte [ebp - 4], 0xb
xor ecx, ecx
push 0x14
mov word [ebp - 0x887c], cx
push str._System_d3d8thk.dll
lea ecx, [ebp - 0x887c]
mov dword [ebp - 0x8868], ebx
mov dword [ebp - 0x886c], esi
call fcn.00401740
mov byte [ebp - 4], 0xc
push 0x11
xor edx, edx
push str._System_d3d9.dll
lea ecx, [ebp - 0x8860]
mov dword [ebp - 0x884c], ebx
mov dword [ebp - 0x8850], esi
mov word [ebp - 0x8860], dx
call fcn.00401740
mov byte [ebp - 4], 0xd
push 0x13
xor eax, eax
push str._System_dbghlp.dll
lea ecx, [ebp - 0x8844]
mov dword [ebp - 0x8830], ebx
mov dword [ebp - 0x8834], esi
mov word [ebp - 0x8844], ax
call fcn.00401740
mov byte [ebp - 4], 0xe
xor ecx, ecx
push 0x12
mov dword [ebp - 0x8814], ebx
mov dword [ebp - 0x8818], esi
mov word [ebp - 0x8828], cx
push str._System_ddraw.dll
lea ecx, [ebp - 0x8828]
call fcn.00401740
mov byte [ebp - 4], 0xf
push 0x14
xor edx, edx
push str._System_dllhost.exe
lea ecx, [ebp - 0x880c]
mov dword [ebp - 0x87f8], ebx
mov dword [ebp - 0x87fc], esi
mov word [ebp - 0x880c], dx
call fcn.00401740
mov byte [ebp - 4], 0x10
push 0x13
xor eax, eax
push str._System_dnsapi.dll
lea ecx, [ebp - 0x87f0]
mov dword [ebp - 0x87dc], ebx
mov dword [ebp - 0x87e0], esi
mov word [ebp - 0x87f0], ax
call fcn.00401740
mov byte [ebp - 4], 0x11
xor ecx, ecx
push 0x13
mov word [ebp - 0x87d4], cx
push str._System_dsound.dll
lea ecx, [ebp - 0x87d4]
mov dword [ebp - 0x87c0], ebx
mov dword [ebp - 0x87c4], esi
call fcn.00401740
mov byte [ebp - 4], 0x12
push 0x13
xor edx, edx
push str._System_dssenh.dll
lea ecx, [ebp - 0x87b8]
mov dword [ebp - 0x87a4], ebx
mov dword [ebp - 0x87a8], esi
mov word [ebp - 0x87b8], dx
call fcn.00401740
mov byte [ebp - 4], 0x13
push 0x10
xor eax, eax
push str._System_dwm.exe
lea ecx, [ebp - 0x879c]
mov dword [ebp - 0x8788], ebx
mov dword [ebp - 0x878c], esi
mov word [ebp - 0x879c], ax
call fcn.00401740
mov byte [ebp - 4], 0x14
xor ecx, ecx
push 0xf
mov word [ebp - 0x8780], cx
push str._System_es.dll
lea ecx, [ebp - 0x8780]
mov dword [ebp - 0x876c], ebx
mov dword [ebp - 0x8770], esi
call fcn.00401740
mov byte [ebp - 4], 0x15
push 0x15
xor edx, edx
push str._System_eventlog.dll
lea ecx, [ebp - 0x8764]
mov dword [ebp - 0x8750], ebx
mov dword [ebp - 0x8754], esi
mov word [ebp - 0x8764], dx
call fcn.00401740
mov byte [ebp - 4], 0x16
xor eax, eax
push 0x10
mov dword [ebp - 0x8734], ebx
mov dword [ebp - 0x8738], esi
mov word [ebp - 0x8748], ax
push str._System_hid.dll
lea ecx, [ebp - 0x8748]
call fcn.00401740
mov byte [ebp - 4], 0x17
xor ecx, ecx
push 0x14
mov word [ebp - 0x872c], cx
push str._System_hnetcfg.dll
lea ecx, [ebp - 0x872c]
mov dword [ebp - 0x8718], ebx
mov dword [ebp - 0x871c], esi
call fcn.00401740
mov byte [ebp - 4], 0x18
push 0x10
xor edx, edx
push str._System_ias.dll
lea ecx, [ebp - 0x8710]
mov dword [ebp - 0x86fc], ebx
mov dword [ebp - 0x8700], esi
mov word [ebp - 0x8710], dx
call fcn.00401740
mov byte [ebp - 4], 0x19
push 0x12
xor eax, eax
push str._System_imm32.dll
lea ecx, [ebp - 0x86f4]
mov dword [ebp - 0x86e0], ebx
mov dword [ebp - 0x86e4], esi
mov word [ebp - 0x86f4], ax
call fcn.00401740
mov byte [ebp - 4], 0x1a
xor ecx, ecx
push 0x12
mov word [ebp - 0x86d8], cx
push str._System_iprip.dll
lea ecx, [ebp - 0x86d8]
mov dword [ebp - 0x86c4], ebx
mov dword [ebp - 0x86c8], esi
call fcn.00401740
mov byte [ebp - 4], 0x1b
push 0x15
xor edx, edx
push str._System_ipsecsvc.dll
lea ecx, [ebp - 0x86bc]
mov dword [ebp - 0x86a8], ebx
mov dword [ebp - 0x86ac], esi
mov word [ebp - 0x86bc], dx
call fcn.00401740
mov byte [ebp - 4], 0x1c
push 0x15
xor eax, eax
push str._System_kernel32.dll
lea ecx, [ebp - 0x86a0]
mov dword [ebp - 0x868c], ebx
mov dword [ebp - 0x8690], esi
mov word [ebp - 0x86a0], ax
call fcn.00401740
mov byte [ebp - 4], 0x1d
xor ecx, ecx
push 0x13
mov word [ebp - 0x8684], cx
push str._System_ksuser.dll
lea ecx, [ebp - 0x8684]
mov dword [ebp - 0x8670], ebx
mov dword [ebp - 0x8674], esi
call fcn.00401740
mov byte [ebp - 4], 0x1e
push 0x15
xor edx, edx
push str._System_linkinfo.dll
lea ecx, [ebp - 0x8668]
mov dword [ebp - 0x8654], ebx
mov dword [ebp - 0x8658], esi
mov word [ebp - 0x8668], dx
call fcn.00401740
mov byte [ebp - 4], 0x1f
push 0x10
xor eax, eax
push str._System_lpk.dll
lea ecx, [ebp - 0x864c]
mov dword [ebp - 0x8638], ebx
mov dword [ebp - 0x863c], esi
mov word [ebp - 0x864c], ax
call fcn.00401740
mov byte [ebp - 4], 0x20
xor ecx, ecx
push 0x12
mov word [ebp - 0x8630], cx
push str._System_lsass.exe
lea ecx, [ebp - 0x8630]
mov dword [ebp - 0x861c], ebx
mov dword [ebp - 0x8620], esi
call fcn.00401740
mov byte [ebp - 4], 0x21
push 0x10
xor edx, edx
push str._System_lsm.exe
lea ecx, [ebp - 0x8614]
mov dword [ebp - 0x8600], ebx
mov dword [ebp - 0x8604], esi
mov word [ebp - 0x8614], dx
call fcn.00401740
mov byte [ebp - 4], 0x22
push 0x13
xor eax, eax
push str._System_mfc40u.dll
lea ecx, [ebp - 0x85f8]
mov dword [ebp - 0x85e4], ebx
mov dword [ebp - 0x85e8], esi
mov word [ebp - 0x85f8], ax
call fcn.00401740
mov byte [ebp - 4], 0x23
xor ecx, ecx
push 0x14
mov word [ebp - 0x85dc], cx
push str._System_midimap.dll
lea ecx, [ebp - 0x85dc]
mov dword [ebp - 0x85c8], ebx
mov dword [ebp - 0x85cc], esi
call fcn.00401740
mov byte [ebp - 4], 0x24
push 0x13
xor edx, edx
push str._System_msgsvc.dll
lea ecx, [ebp - 0x85c0]
mov dword [ebp - 0x85ac], ebx
mov dword [ebp - 0x85b0], esi
mov word [ebp - 0x85c0], dx
call fcn.00401740
mov byte [ebp - 4], 0x25
push 0x13
xor eax, eax
push str._System_mshtml.dll
lea ecx, [ebp - 0x85a4]
mov dword [ebp - 0x8590], ebx
mov dword [ebp - 0x8594], esi
mov word [ebp - 0x85a4], ax
call fcn.00401740
mov byte [ebp - 4], 0x26
xor ecx, ecx
push 0x14
mov word [ebp - 0x8588], cx
push str._System_msimg32.dll
lea ecx, [ebp - 0x8588]
mov dword [ebp - 0x8574], ebx
mov dword [ebp - 0x8578], esi
call fcn.00401740
mov byte [ebp - 4], 0x27
push 0x15
xor edx, edx
push str._System_mspmsnsv.dll
lea ecx, [ebp - 0x856c]
mov dword [ebp - 0x8558], ebx
mov dword [ebp - 0x855c], esi
mov word [ebp - 0x856c], dx
call fcn.00401740
mov byte [ebp - 4], 0x28
push 0x14
xor eax, eax
push str._System_msprivs.dll
lea ecx, [ebp - 0x8550]
mov dword [ebp - 0x853c], ebx
mov dword [ebp - 0x8540], esi
mov word [ebp - 0x8550], ax
call fcn.00401740
mov byte [ebp - 4], 0x29
xor ecx, ecx
push 0x13
mov word [ebp - 0x8534], cx
push str._System_msvcrt.dll
lea ecx, [ebp - 0x8534]
mov dword [ebp - 0x8520], ebx
mov dword [ebp - 0x8524], esi
call fcn.00401740
mov byte [ebp - 4], 0x2a
push 0x14
xor edx, edx
push str._System_mswsock.dll
lea ecx, [ebp - 0x8518]
mov dword [ebp - 0x8504], ebx
mov dword [ebp - 0x8508], esi
mov word [ebp - 0x8518], dx
call fcn.00401740
mov byte [ebp - 4], 0x2b
push 0x15
xor eax, eax
push str._System__netlogon.dll
lea ecx, [ebp - 0x84fc]
mov dword [ebp - 0x84e8], ebx
mov dword [ebp - 0x84ec], esi
mov word [ebp - 0x84fc], ax
call fcn.00401740
mov byte [ebp - 4], 0x2c
xor ecx, ecx
push 0x13
mov word [ebp - 0x84e0], cx
push str._System__netman.dll
lea ecx, [ebp - 0x84e0]
mov dword [ebp - 0x84cc], ebx
mov dword [ebp - 0x84d0], esi
call fcn.00401740
mov byte [ebp - 4], 0x2d
push 0x15
xor edx, edx
push str._System__ntkrnlpa.exe
lea ecx, [ebp - 0x84c4]
mov dword [ebp - 0x84b0], ebx
mov dword [ebp - 0x84b4], esi
mov word [ebp - 0x84c4], dx
call fcn.00401740
mov byte [ebp - 4], 0x2e
push 0x14
xor eax, eax
push str._System__ntmssvc.dll
lea ecx, [ebp - 0x84a8]
mov dword [ebp - 0x8494], ebx
mov dword [ebp - 0x8498], esi
mov word [ebp - 0x84a8], ax
call fcn.00401740
mov byte [ebp - 4], 0x2f
xor ecx, ecx
push 0x15
mov word [ebp - 0x848c], cx
push str._System__ntoskrnl.exe
lea ecx, [ebp - 0x848c]
mov dword [ebp - 0x8478], ebx
mov dword [ebp - 0x847c], esi
call fcn.00401740
mov byte [ebp - 4], 0x30
push 0x13
xor edx, edx
push str._System_oakley.dll
lea ecx, [ebp - 0x8470]
mov dword [ebp - 0x845c], ebx
mov dword [ebp - 0x8460], esi
mov word [ebp - 0x8470], dx
call fcn.00401740
mov byte [ebp - 4], 0x31
push 0x12
xor eax, eax
push str._System_ole32.dll
lea ecx, [ebp - 0x8454]
mov dword [ebp - 0x8440], ebx
mov dword [ebp - 0x8444], esi
mov word [ebp - 0x8454], ax
call fcn.00401740
mov byte [ebp - 4], 0x32
xor ecx, ecx
push 0x15
mov word [ebp - 0x8438], cx
push str._System_olepro32.dll
lea ecx, [ebp - 0x8438]
mov dword [ebp - 0x8424], ebx
mov dword [ebp - 0x8428], esi
call fcn.00401740
mov byte [ebp - 4], 0x33
push 0x15
xor edx, edx
push str._System_perfctrs.dll
lea ecx, [ebp - 0x841c]
mov dword [ebp - 0x8408], ebx
mov dword [ebp - 0x840c], esi
mov word [ebp - 0x841c], dx
call fcn.00401740
mov byte [ebp - 4], 0x34
push 0x15
xor eax, eax
push str._System_powrprof.dll
lea ecx, [ebp - 0x8400]
mov dword [ebp - 0x83ec], ebx
mov dword [ebp - 0x83f0], esi
mov word [ebp - 0x8400], ax
call fcn.00401740
mov byte [ebp - 4], 0x35
xor ecx, ecx
push 0x13
mov word [ebp - 0x83e4], cx
push str._System_psbase.dll
lea ecx, [ebp - 0x83e4]
mov dword [ebp - 0x83d0], ebx
mov dword [ebp - 0x83d4], esi
call fcn.00401740
mov byte [ebp - 4], 0x36
push 0x15
xor edx, edx
push str._System_pstorsvc.dll
lea ecx, [ebp - 0x83c8]
mov dword [ebp - 0x83b4], ebx
mov dword [ebp - 0x83b8], esi
mov word [ebp - 0x83c8], dx
call fcn.00401740
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x8398], ebx
push 0x11
xor eax, eax
push str._System_qmgr.dll
lea ecx, [ebp - 0x83ac]
mov dword [ebp - 0x839c], esi
mov word [ebp - 0x83ac], ax
call fcn.00401740
mov byte [ebp - 4], 0x38
xor ecx, ecx
push 0x15
mov word [ebp - 0x8390], cx
push str._System__rasadhlp.dll
lea ecx, [ebp - 0x8390]
mov dword [ebp - 0x837c], ebx
mov dword [ebp - 0x8380], esi
call fcn.00401740
mov byte [ebp - 4], 0x39
push 0x13
xor edx, edx
push str._System__regsvc.dll
lea ecx, [ebp - 0x8374]
mov dword [ebp - 0x8360], ebx
mov dword [ebp - 0x8364], esi
mov word [ebp - 0x8374], dx
call fcn.00401740
mov byte [ebp - 4], 0x3a
push 0x12
xor eax, eax
push str._System__rpcss.dll
lea ecx, [ebp - 0x8358]
mov dword [ebp - 0x8344], ebx
mov dword [ebp - 0x8348], esi
mov word [ebp - 0x8358], ax
call fcn.00401740
mov byte [ebp - 4], 0x3b
xor ecx, ecx
push 0x13
mov word [ebp - 0x833c], cx
push str._System__scecli.dll
lea ecx, [ebp - 0x833c]
mov dword [ebp - 0x8328], ebx
mov dword [ebp - 0x832c], esi
call fcn.00401740
mov byte [ebp - 4], 0x3c
push 0x15
xor edx, edx
push str._System__schannel.dll
lea ecx, [ebp - 0x8320]
mov dword [ebp - 0x830c], ebx
mov dword [ebp - 0x8310], esi
mov word [ebp - 0x8320], dx
call fcn.00401740
mov byte [ebp - 4], 0x3d
push 0x15
xor eax, eax
push str._System__schedsvc.dll
lea ecx, [ebp - 0x8304]
mov dword [ebp - 0x82f0], ebx
mov dword [ebp - 0x82f4], esi
mov word [ebp - 0x8304], ax
call fcn.00401740
mov byte [ebp - 4], 0x3e
xor ecx, ecx
push 0x15
mov word [ebp - 0x82e8], cx
push str._System__services.exe
lea ecx, [ebp - 0x82e8]
mov dword [ebp - 0x82d4], ebx
mov dword [ebp - 0x82d8], esi
call fcn.00401740
mov byte [ebp - 4], 0x3f
mov dword [ebp - 0x82b8], ebx
mov dword [ebp - 0x82bc], esi
push 0x15
xor edx, edx
push str._System__setupapi.dll
lea ecx, [ebp - 0x82cc]
mov word [ebp - 0x82cc], dx
call fcn.00401740
mov byte [ebp - 4], 0x40
push 0x10
xor eax, eax
push str._System__sfc.dll
lea ecx, [ebp - 0x82b0]
mov dword [ebp - 0x829c], ebx
mov dword [ebp - 0x82a0], esi
mov word [ebp - 0x82b0], ax
call fcn.00401740
mov byte [ebp - 4], 0x41
xor ecx, ecx
push 0x15
mov word [ebp - 0x8294], cx
push str._System__sfcfiles.dll
lea ecx, [ebp - 0x8294]
mov dword [ebp - 0x8280], ebx
mov dword [ebp - 0x8284], esi
call fcn.00401740
mov byte [ebp - 4], 0x42
push 0x13
xor edx, edx
push str._System__shsvcs.dll
lea ecx, [ebp - 0x8278]
mov dword [ebp - 0x8264], ebx
mov dword [ebp - 0x8268], esi
mov word [ebp - 0x8278], dx
call fcn.00401740
mov byte [ebp - 4], 0x43
push 0x11
xor eax, eax
push str._System__smss.exe
lea ecx, [ebp - 0x825c]
mov dword [ebp - 0x8248], ebx
mov dword [ebp - 0x824c], esi
mov word [ebp - 0x825c], ax
call fcn.00401740
mov byte [ebp - 4], 0x44
xor ecx, ecx
push 0x14
mov word [ebp - 0x8240], cx
push str._System__spoolsv.exe
lea ecx, [ebp - 0x8240]
mov dword [ebp - 0x822c], ebx
mov dword [ebp - 0x8230], esi
call fcn.00401740
mov byte [ebp - 4], 0x45
push 0x12
xor edx, edx
push str._System__srsvc.dll
lea ecx, [ebp - 0x8224]
mov dword [ebp - 0x8210], ebx
mov dword [ebp - 0x8214], esi
mov word [ebp - 0x8224], dx
call fcn.00401740
mov byte [ebp - 4], 0x46
push 0x14
xor eax, eax
push str._System__ssdpsrv.dll
lea ecx, [ebp - 0x8208]
mov dword [ebp - 0x81f4], ebx
mov dword [ebp - 0x81f8], esi
mov word [ebp - 0x8208], ax
call fcn.00401740
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x81d8], ebx
mov dword [ebp - 0x81dc], esi
xor ecx, ecx
push 0x14
mov word [ebp - 0x81ec], cx
push str._System__svchost.exe
lea ecx, [ebp - 0x81ec]
call fcn.00401740
mov byte [ebp - 4], 0x48
push 0x14
xor edx, edx
push str._System__tapisrv.dll
lea ecx, [ebp - 0x81d0]
mov dword [ebp - 0x81bc], ebx
mov dword [ebp - 0x81c0], esi
mov word [ebp - 0x81d0], dx
call fcn.00401740
mov byte [ebp - 4], 0x49
push 0x14
xor eax, eax
push str._System__taskeng.exe
lea ecx, [ebp - 0x81b4]
mov dword [ebp - 0x81a0], ebx
mov dword [ebp - 0x81a4], esi
mov word [ebp - 0x81b4], ax
call fcn.00401740
push str._System__taskhost.exe
lea ecx, [ebp - 0x8198]
mov byte [ebp - 4], 0x4a
call fcn.0040ead0
push str._System__termsrv.dll
lea ecx, [ebp - 0x817c]
mov byte [ebp - 4], 0x4b
call fcn.0040ead0
push str._System_upnphost.dll
lea ecx, [ebp - 0x8160]
mov byte [ebp - 4], 0x4c
call fcn.0040ead0
push str._System_user32.dll
lea ecx, [ebp - 0x8144]
mov byte [ebp - 4], 0x4d
call fcn.0040ead0
push str._System_userinit.exe
lea ecx, [ebp - 0x8128]
mov byte [ebp - 4], 0x4e
call fcn.0040ead0
push str._System_usp10.dll
lea ecx, [ebp - 0x810c]
mov byte [ebp - 4], 0x4f
call fcn.0040ead0
push str._System_UxTheme.dll
lea ecx, [ebp - 0x80f0]
mov byte [ebp - 4], 0x50
call fcn.0040ead0
push str._System__version.dll
lea ecx, [ebp - 0x80d4]
mov byte [ebp - 4], 0x51
call fcn.0040ead0
push str._System_w32time.dll
lea ecx, [ebp - 0x80b8]
mov byte [ebp - 4], 0x52
call fcn.0040ead0
push str._System_wbemwmiprvse.exe
lea ecx, [ebp - 0x809c]
mov byte [ebp - 4], 0x53
call fcn.0040ead0
push str._System_wdigest.dll
lea ecx, [ebp - 0x8080]
mov byte [ebp - 4], 0x54
call fcn.0040ead0
push str._System_wiaservc.dll
lea ecx, [ebp - 0x8064]
mov byte [ebp - 4], 0x55
call fcn.0040ead0
push str._System_wininet.dll
lea ecx, [ebp - 0x8048]
mov byte [ebp - 4], 0x56
call fcn.0040ead0
push str._System_wininit.exe
lea ecx, [ebp - 0x802c]
mov byte [ebp - 4], 0x57
call fcn.0040ead0
push str._System_winlogon.exe
lea ecx, [ebp - 0x8010]
mov byte [ebp - 4], 0x58
call fcn.0040ead0
push str._System_ws2_32.dll
lea ecx, [ebp - 0x7ff4]
mov byte [ebp - 4], 0x59
call fcn.0040ead0
push str._System_ws2help.dll
lea ecx, [ebp - 0x7fd8]
mov byte [ebp - 4], 0x5a
call fcn.0040ead0
push str._System_wscntfy.exe
lea ecx, [ebp - 0x7fbc]
mov byte [ebp - 4], 0x5b
call fcn.0040ead0
push str._System_wuauclt.exe
lea ecx, [ebp - 0x7fa0]
mov byte [ebp - 4], 0x5c
call fcn.0040ead0
push str._System_xmlprov.dll
lea ecx, [ebp - 0x7f84]
mov byte [ebp - 4], 0x5d
call fcn.0040ead0
push str._WinDir_explorer.exe
lea ecx, [ebp - 0x7f68]
mov byte [ebp - 4], 0x5e
call fcn.0040ead0
push str._System_drivers_acpiec.sys
lea ecx, [ebp - 0x7f4c]
mov byte [ebp - 4], 0x5f
call fcn.0040ead0
push str._System_drivers_acpi.sys
lea ecx, [ebp - 0x7f30]
mov byte [ebp - 4], 0x60
call fcn.0040ead0
push str._System_drivers_aec.sys
lea ecx, [ebp - 0x7f14]
mov byte [ebp - 4], 0x61
call fcn.0040ead0
push str._System_drivers_afd.sys
lea ecx, [ebp - 0x7ef8]
mov byte [ebp - 4], 0x62
call fcn.0040ead0
push str._System_drivers_agp440.sys
lea ecx, [ebp - 0x7edc]
mov byte [ebp - 4], 0x63
call fcn.0040ead0
push str._System_drivers_amdk6.sys
lea ecx, [ebp - 0x7ec0]
mov byte [ebp - 4], 0x64
call fcn.0040ead0
mov byte [ebp - 4], 0x65
push str._System_drivers_amdk7.sys
lea ecx, [ebp - 0x7ea4]
call fcn.0040ead0
push str._System_drivers_arp1394.sys
lea ecx, [ebp - 0x7e88]
mov byte [ebp - 4], 0x66
call fcn.0040ead0
push str._System_drivers_asyncmac.sys
lea ecx, [ebp - 0x7e6c]
mov byte [ebp - 4], 0x67
call fcn.0040ead0
push str._System_drivers_atapi.sys
lea ecx, [ebp - 0x7e50]
mov byte [ebp - 4], 0x68
call fcn.0040ead0
push str._System_drivers_audstub.sys
lea ecx, [ebp - 0x7e34]
mov byte [ebp - 4], 0x69
call fcn.0040ead0
push str._System_drivers_battc.sys
lea ecx, [ebp - 0x7e18]
mov byte [ebp - 4], 0x6a
call fcn.0040ead0
push str._System_drivers_beep.sys
lea ecx, [ebp - 0x7dfc]
mov byte [ebp - 4], 0x6b
call fcn.0040ead0
push str._System_drivers_bridge.sys
lea ecx, [ebp - 0x7de0]
mov byte [ebp - 4], 0x6c
call fcn.0040ead0
push str._System_drivers_bthport.sys
lea ecx, [ebp - 0x7dc4]
mov byte [ebp - 4], 0x6d
call fcn.0040ead0
push str._System_driverscbidf2k.sys
lea ecx, [ebp - 0x7da8]
mov byte [ebp - 4], 0x6e
call fcn.0040ead0
push str._System_driverscdaudio.sys
lea ecx, [ebp - 0x7d8c]
mov byte [ebp - 4], 0x6f
call fcn.0040ead0
push str._System_driverscdfs.sys
lea ecx, [ebp - 0x7d70]
mov byte [ebp - 4], 0x70
call fcn.0040ead0
push str._System_driverscdrom.sys
lea ecx, [ebp - 0x7d54]
mov byte [ebp - 4], 0x71
call fcn.0040ead0
push str._System_driversclasspnp.sys
lea ecx, [ebp - 0x7d38]
mov byte [ebp - 4], 0x72
call fcn.0040ead0
push str._System_driversCmBatt.sys
lea ecx, [ebp - 0x7d1c]
mov byte [ebp - 4], 0x73
call fcn.0040ead0
push str._System_driverscompbatt.sys
lea ecx, [ebp - 0x7d00]
mov byte [ebp - 4], 0x74
call fcn.0040ead0
mov byte [ebp - 4], 0x75
push str._System_driverscpqdap01.sys
lea ecx, [ebp - 0x7ce4]
call fcn.0040ead0
push str._System_driverscrusoe.sys
lea ecx, [ebp - 0x7cc8]
mov byte [ebp - 4], 0x76
call fcn.0040ead0
push str._System_driversdiskdump.sys
lea ecx, [ebp - 0x7cac]
mov byte [ebp - 4], 0x77
call fcn.0040ead0
push str._System_driversdisk.sys
lea ecx, [ebp - 0x7c90]
mov byte [ebp - 4], 0x78
call fcn.0040ead0
push str._System_driversdmboot.sys
lea ecx, [ebp - 0x7c74]
mov byte [ebp - 4], 0x79
call fcn.0040ead0
push str._System_driversdmio.sys
lea ecx, [ebp - 0x7c58]
mov byte [ebp - 4], 0x7a
call fcn.0040ead0
push str._System_driversdmload.sys
lea ecx, [ebp - 0x7c3c]
mov byte [ebp - 4], 0x7b
call fcn.0040ead0
push str._System_driversDMusic.sys
lea ecx, [ebp - 0x7c20]
mov byte [ebp - 4], 0x7c
call fcn.0040ead0
push str._System_driversdrmkaud.sys
lea ecx, [ebp - 0x7c04]
mov byte [ebp - 4], 0x7d
call fcn.0040ead0
push str._System_driversdrmk.sys
lea ecx, [ebp - 0x7be8]
mov byte [ebp - 4], 0x7e
call fcn.0040ead0
push str._System_driversdxapi.sys
lea ecx, [ebp - 0x7bcc]
mov byte [ebp - 4], 0x7f
call fcn.0040ead0
push str._System_driversdxg.sys
lea ecx, [ebp - 0x7bb0]
mov byte [ebp - 4], 0x80
call fcn.0040ead0
push str._System_driversdxgthk.sys
lea ecx, [ebp - 0x7b94]
mov byte [ebp - 4], 0x81
call fcn.0040ead0
push str._System_drivers_fastfat.sys
lea ecx, [ebp - 0x7b78]
mov byte [ebp - 4], 0x82
call fcn.0040ead0
push str._System_drivers_fdc.sys
lea ecx, [ebp - 0x7b5c]
mov byte [ebp - 4], 0x83
call fcn.0040ead0
push str._System_drivers_fips.sys
lea ecx, [ebp - 0x7b40]
mov byte [ebp - 4], 0x84
call fcn.0040ead0
mov byte [ebp - 4], 0x85
push str._System_drivers_flpydisk.sys
lea ecx, [ebp - 0x7b24]
call fcn.0040ead0
push str._System_drivers_fltMgr.sys
lea ecx, [ebp - 0x7b08]
mov byte [ebp - 4], 0x86
call fcn.0040ead0
push str._System_drivers_fs_rec.sys
lea ecx, [ebp - 0x7aec]
mov byte [ebp - 4], 0x87
call fcn.0040ead0
push str._System_drivers_fsvga.sys
lea ecx, [ebp - 0x7ad0]
mov byte [ebp - 4], 0x88
call fcn.0040ead0
push str._System_drivers_ftdisk.sys
lea ecx, [ebp - 0x7ab4]
mov byte [ebp - 4], 0x89
call fcn.0040ead0
push str._System_driversgameenum.sys
lea ecx, [ebp - 0x7a98]
mov byte [ebp - 4], 0x8a
call fcn.0040ead0
push str._System_drivershidclass.sys
lea ecx, [ebp - 0x7a7c]
mov byte [ebp - 4], 0x8b
call fcn.0040ead0
push str._System_drivershidparse.sys
lea ecx, [ebp - 0x7a60]
mov byte [ebp - 4], 0x8c
call fcn.0040ead0
push str._System_drivershidusb.sys
lea ecx, [ebp - 0x7a44]
mov byte [ebp - 4], 0x8d
call fcn.0040ead0
push str._System_drivershttp.sys
lea ecx, [ebp - 0x7a28]
mov byte [ebp - 4], 0x8e
call fcn.0040ead0
push str._System_driversi8042prt.sys
lea ecx, [ebp - 0x7a0c]
mov byte [ebp - 4], 0x8f
call fcn.0040ead0
push str._System_driversimapi.sys
lea ecx, [ebp - 0x79f0]
mov byte [ebp - 4], 0x90
call fcn.0040ead0
push str._System_driversintelide.sys
lea ecx, [ebp - 0x79d4]
mov byte [ebp - 4], 0x91
call fcn.0040ead0
push str._System_driversintelppm.sys
lea ecx, [ebp - 0x79b8]
mov byte [ebp - 4], 0x92
call fcn.0040ead0
push str._System_driversip6fw.sys
lea ecx, [ebp - 0x799c]
mov byte [ebp - 4], 0x93
call fcn.0040ead0
push str._System_driversipfltdrv.sys
lea ecx, [ebp - 0x7980]
mov byte [ebp - 4], 0x94
call fcn.0040ead0
push str._System_driversipinip.sys
lea ecx, [ebp - 0x7964]
mov byte [ebp - 4], 0x95
call fcn.0040ead0
push str._System_driversipnat.sys
lea ecx, [ebp - 0x7948]
mov byte [ebp - 4], 0x96
call fcn.0040ead0
push str._System_driversipsec.sys
lea ecx, [ebp - 0x792c]
mov byte [ebp - 4], 0x97
call fcn.0040ead0
push str._System_driversirenum.sys
lea ecx, [ebp - 0x7910]
mov byte [ebp - 4], 0x98
call fcn.0040ead0
push str._System_driversisapnp.sys
lea ecx, [ebp - 0x78f4]
mov byte [ebp - 4], 0x99
call fcn.0040ead0
push str._System_driverskbdclass.sys
lea ecx, [ebp - 0x78d8]
mov byte [ebp - 4], 0x9a
call fcn.0040ead0
push str._System_driverskmixer.sys
lea ecx, [ebp - 0x78bc]
mov byte [ebp - 4], 0x9b
call fcn.0040ead0
push str._System_driversksecdd.sys
lea ecx, [ebp - 0x78a0]
mov byte [ebp - 4], 0x9c
call fcn.0040ead0
push str._System_driversks.sys
lea ecx, [ebp - 0x7884]
mov byte [ebp - 4], 0x9d
call fcn.0040ead0
push str._System_driversmcd.sys
lea ecx, [ebp - 0x7868]
mov byte [ebp - 4], 0x9e
call fcn.0040ead0
push str._System_driversmf.sys
lea ecx, [ebp - 0x784c]
mov byte [ebp - 4], 0x9f
call fcn.0040ead0
push str._System_driversmnmdd.sys
lea ecx, [ebp - 0x7830]
mov byte [ebp - 4], 0xa0
call fcn.0040ead0
push str._System_driversmodem.sys
lea ecx, [ebp - 0x7814]
mov byte [ebp - 4], 0xa1
call fcn.0040ead0
push str._System_driversmouclass.sys
lea ecx, [ebp - 0x77f8]
mov byte [ebp - 4], 0xa2
call fcn.0040ead0
push str._System_driversmouhid.sys
lea ecx, [ebp - 0x77dc]
mov byte [ebp - 4], 0xa3
call fcn.0040ead0
push str._System_driversmountmgr.sys
lea ecx, [ebp - 0x77c0]
mov byte [ebp - 4], 0xa4
call fcn.0040ead0
push str._System_driversmqac.sys
lea ecx, [ebp - 0x77a4]
mov byte [ebp - 4], 0xa5
call fcn.0040ead0
push str._System_driversmrxdav.sys
lea ecx, [ebp - 0x7788]
mov byte [ebp - 4], 0xa6
call fcn.0040ead0
push str._System_driversmrxsmb.sys
lea ecx, [ebp - 0x776c]
mov byte [ebp - 4], 0xa7
call fcn.0040ead0
push str._System_driversmsfs.sys
lea ecx, [ebp - 0x7750]
mov byte [ebp - 4], 0xa8
call fcn.0040ead0
push str._System_driversmsgpc.sys
lea ecx, [ebp - 0x7734]
mov byte [ebp - 4], 0xa9
call fcn.0040ead0
push str._System_driversMSKSSRV.sys
lea ecx, [ebp - 0x7718]
mov byte [ebp - 4], 0xaa
call fcn.0040ead0
push str._System_driversMSPCLOCK.sys
lea ecx, [ebp - 0x76fc]
mov byte [ebp - 4], 0xab
call fcn.0040ead0
push str._System_driversMSPQM.sys
lea ecx, [ebp - 0x76e0]
mov byte [ebp - 4], 0xac
call fcn.0040ead0
push str._System_driversmssmbios.sys
lea ecx, [ebp - 0x76c4]
mov byte [ebp - 4], 0xad
call fcn.0040ead0
push str._System_driversmup.sys
lea ecx, [ebp - 0x76a8]
mov byte [ebp - 4], 0xae
call fcn.0040ead0
push str._System_drivers_ndis.sys
lea ecx, [ebp - 0x768c]
mov byte [ebp - 4], 0xaf
call fcn.0040ead0
push str._System_drivers_ndistapi.sys
lea ecx, [ebp - 0x7670]
mov byte [ebp - 4], 0xb0
call fcn.0040ead0
push str._System_drivers_ndisuio.sys
lea ecx, [ebp - 0x7654]
mov byte [ebp - 4], 0xb1
call fcn.0040ead0
push str._System_drivers_ndiswan.sys
lea ecx, [ebp - 0x7638]
mov byte [ebp - 4], 0xb2
call fcn.0040ead0
push str._System_drivers_ndproxy.sys
lea ecx, [ebp - 0x761c]
mov byte [ebp - 4], 0xb3
call fcn.0040ead0
push str._System_drivers_netbios.sys
lea ecx, [ebp - 0x7600]
mov byte [ebp - 4], 0xb4
call fcn.0040ead0
push str._System_drivers_netbt.sys
lea ecx, [ebp - 0x75e4]
mov byte [ebp - 4], 0xb5
call fcn.0040ead0
mov byte [ebp - 4], 0xb6
push str._System_drivers_nic1394.sys
lea ecx, [ebp - 0x75c8]
call fcn.0040ead0
push str._System_drivers_nikedrv.sys
lea ecx, [ebp - 0x75ac]
mov byte [ebp - 4], 0xb7
call fcn.0040ead0
push str._System_drivers_nmnt.sys
lea ecx, [ebp - 0x7590]
mov byte [ebp - 4], 0xb8
call fcn.0040ead0
push str._System_drivers_npfs.sys
lea ecx, [ebp - 0x7574]
mov byte [ebp - 4], 0xb9
call fcn.0040ead0
push str._System_drivers_ntfs.sys
lea ecx, [ebp - 0x7558]
mov byte [ebp - 4], 0xba
call fcn.0040ead0
push str._System_drivers_null.sys
lea ecx, [ebp - 0x753c]
mov byte [ebp - 4], 0xbb
call fcn.0040ead0
push str._System_drivers_nwlnkflt.sys
lea ecx, [ebp - 0x7520]
mov byte [ebp - 4], 0xbc
call fcn.0040ead0
push str._System_drivers_nwlnkfwd.sys
lea ecx, [ebp - 0x7504]
mov byte [ebp - 4], 0xbd
call fcn.0040ead0
push str._System_drivers_nwlnkipx.sys
lea ecx, [ebp - 0x74e8]
mov byte [ebp - 4], 0xbe
call fcn.0040ead0
push str._System_drivers_nwlnknb.sys
lea ecx, [ebp - 0x74cc]
mov byte [ebp - 4], 0xbf
call fcn.0040ead0
push str._System_drivers_nwlnkspx.sys
lea ecx, [ebp - 0x74b0]
mov byte [ebp - 4], 0xc0
call fcn.0040ead0
push str._System_drivers_nwrdr.sys
lea ecx, [ebp - 0x7494]
mov byte [ebp - 4], 0xc1
call fcn.0040ead0
push str._System_driversoprghdlr.sys
lea ecx, [ebp - 0x7478]
mov byte [ebp - 4], 0xc2
call fcn.0040ead0
push str._System_driversp3.sys
lea ecx, [ebp - 0x745c]
mov byte [ebp - 4], 0xc3
call fcn.0040ead0
push str._System_driversparport.sys
lea ecx, [ebp - 0x7440]
mov byte [ebp - 4], 0xc4
call fcn.0040ead0
push str._System_driverspartmgr.sys
lea ecx, [ebp - 0x7424]
mov byte [ebp - 4], 0xc5
call fcn.0040ead0
mov byte [ebp - 4], 0xc6
push str._System_driversparvdm.sys
lea ecx, [ebp - 0x7408]
call fcn.0040ead0
push str._System_driverspciidex.sys
lea ecx, [ebp - 0x73ec]
mov byte [ebp - 4], 0xc7
call fcn.0040ead0
push str._System_driverspci.sys
lea ecx, [ebp - 0x73d0]
mov byte [ebp - 4], 0xc8
call fcn.0040ead0
push str._System_driverspcmcia.sys
lea ecx, [ebp - 0x73b4]
mov byte [ebp - 4], 0xc9
call fcn.0040ead0
push str._System_driversportcls.sys
lea ecx, [ebp - 0x7398]
mov byte [ebp - 4], 0xca
call fcn.0040ead0
push str._System_driversprocessr.sys
lea ecx, [ebp - 0x737c]
mov byte [ebp - 4], 0xcb
call fcn.0040ead0
push str._System_driverspsched.sys
lea ecx, [ebp - 0x7360]
mov byte [ebp - 4], 0xcc
call fcn.0040ead0
push str._System_driversptilink.sys
lea ecx, [ebp - 0x7344]
mov byte [ebp - 4], 0xcd
call fcn.0040ead0
push str._System_drivers_rasacd.sys
lea ecx, [ebp - 0x7328]
mov byte [ebp - 4], 0xce
call fcn.0040ead0
push str._System_drivers_rasadhlp.dll
lea ecx, [ebp - 0x730c]
mov byte [ebp - 4], 0xcf
call fcn.0040ead0
push str._System_drivers_rasl2tp.sys
lea ecx, [ebp - 0x72f0]
mov byte [ebp - 4], 0xd0
call fcn.0040ead0
push str._System_drivers_raspppoe.sys
lea ecx, [ebp - 0x72d4]
mov byte [ebp - 4], 0xd1
call fcn.0040ead0
push str._System_drivers_raspptp.sys
lea ecx, [ebp - 0x72b8]
mov byte [ebp - 4], 0xd2
call fcn.0040ead0
push str._System_drivers_raspti.sys
lea ecx, [ebp - 0x729c]
mov byte [ebp - 4], 0xd3
call fcn.0040ead0
push str._System_drivers_rawwan.sys
lea ecx, [ebp - 0x7280]
mov byte [ebp - 4], 0xd4
call fcn.0040ead0
push str._System_drivers_rdbss.sys
lea ecx, [ebp - 0x7264]
mov byte [ebp - 4], 0xd5
call fcn.0040ead0
mov byte [ebp - 4], 0xd6
push str._System_drivers_rdpcdd.sys
lea ecx, [ebp - 0x7248]
call fcn.0040ead0
push str._System_drivers_rdpdr.sys
lea ecx, [ebp - 0x722c]
mov byte [ebp - 4], 0xd7
call fcn.0040ead0
push str._System_drivers_rdpwd.sys
lea ecx, [ebp - 0x7210]
mov byte [ebp - 4], 0xd8
call fcn.0040ead0
push str._System_drivers_redbook.sys
lea ecx, [ebp - 0x71f4]
mov byte [ebp - 4], 0xd9
call fcn.0040ead0
push str._System_drivers_rmcast.sys
lea ecx, [ebp - 0x71d8]
mov byte [ebp - 4], 0xda
call fcn.0040ead0
push str._System_drivers_rndismp.sys
lea ecx, [ebp - 0x71bc]
mov byte [ebp - 4], 0xdb
call fcn.0040ead0
push str._System_drivers_rootmdm.sys
lea ecx, [ebp - 0x71a0]
mov byte [ebp - 4], 0xdc
call fcn.0040ead0
push str._System_drivers_scsiport.sys
lea ecx, [ebp - 0x7184]
mov byte [ebp - 4], 0xdd
call fcn.0040ead0
push str._System_drivers_sdbus.sys
lea ecx, [ebp - 0x7168]
mov byte [ebp - 4], 0xde
call fcn.0040ead0
push str._System_drivers_serenum.sys
lea ecx, [ebp - 0x714c]
mov byte [ebp - 4], 0xdf
call fcn.0040ead0
push str._System_drivers_serial.sys
lea ecx, [ebp - 0x7130]
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.0040ead0
push str._System_drivers_sffdisk.sys
lea ecx, [ebp - 0x7114]
mov byte [ebp - 4], 0xe1
call fcn.0040ead0
push str._System_drivers_sffp_sd.sys
lea ecx, [ebp - 0x70f8]
mov byte [ebp - 4], 0xe2
call fcn.0040ead0
push str._System_drivers_sfloppy.sys
lea ecx, [ebp - 0x70dc]
mov byte [ebp - 4], 0xe3
call fcn.0040ead0
push str._System_drivers_smclib.sys
lea ecx, [ebp - 0x70c0]
mov byte [ebp - 4], 0xe4
call fcn.0040ead0
push str._System_drivers_sonydcam.sys
lea ecx, [ebp - 0x70a4]
mov byte [ebp - 4], 0xe5
call fcn.0040ead0
push str._System_drivers_splitter.sys
lea ecx, [ebp - 0x7088]
mov byte [ebp - 4], 0xe6
call fcn.0040ead0
push str._System_drivers_sr.sys
lea ecx, [ebp - 0x706c]
mov byte [ebp - 4], 0xe7
call fcn.0040ead0
push str._System_drivers_srv.sys
lea ecx, [ebp - 0x7050]
mov byte [ebp - 4], 0xe8
call fcn.0040ead0
push str._System_drivers_stream.sys
lea ecx, [ebp - 0x7034]
mov byte [ebp - 4], 0xe9
call fcn.0040ead0
push str._System_drivers_swenum.sys
lea ecx, [ebp - 0x7018]
mov byte [ebp - 4], 0xea
call fcn.0040ead0
push str._System_drivers_swmidi.sys
lea ecx, [ebp - 0x6ffc]
mov byte [ebp - 4], 0xeb
call fcn.0040ead0
push str._System_drivers_sysaudio.sys
lea ecx, [ebp - 0x6fe0]
mov byte [ebp - 4], 0xec
call fcn.0040ead0
push str._System_drivers_tape.sys
lea ecx, [ebp - 0x6fc4]
mov byte [ebp - 4], 0xed
call fcn.0040ead0
push str._System_drivers_tcpip6.sys
lea ecx, [ebp - 0x6fa8]
mov byte [ebp - 4], 0xee
call fcn.0040ead0
push str._System_Drivers_tcpip.sys
lea ecx, [ebp - 0x6f8c]
mov byte [ebp - 4], 0xef
call fcn.0040ead0
push str._System_drivers_tdi.sys
lea ecx, [ebp - 0x6f70]
mov byte [ebp - 4], 0xf0
call fcn.0040ead0
push str._System_drivers_tdpipe.sys
lea ecx, [ebp - 0x6f54]
mov byte [ebp - 4], 0xf1
call fcn.0040ead0
push str._System_drivers_tdtcp.sys
lea ecx, [ebp - 0x6f38]
mov byte [ebp - 4], 0xf2
call fcn.0040ead0
push str._System_drivers_tdx.sys
lea ecx, [ebp - 0x6f1c]
mov byte [ebp - 4], 0xf3
call fcn.0040ead0
push str._System_drivers_termdd.sys
lea ecx, [ebp - 0x6f00]
mov byte [ebp - 4], 0xf4
call fcn.0040ead0
push str._System_drivers_tosdvd.sys
lea ecx, [ebp - 0x6ee4]
mov byte [ebp - 4], 0xf5
call fcn.0040ead0
push str._System_drivers_tunmp.sys
lea ecx, [ebp - 0x6ec8]
mov byte [ebp - 4], 0xf6
call fcn.0040ead0
push str._System_driversudfs.sys
lea ecx, [ebp - 0x6eac]
mov byte [ebp - 4], 0xf7
call fcn.0040ead0
push str._System_driversupdate.sys
lea ecx, [ebp - 0x6e90]
mov byte [ebp - 4], 0xf8
call fcn.0040ead0
push str._System_driversusb8023.sys
lea ecx, [ebp - 0x6e74]
mov byte [ebp - 4], 0xf9
call fcn.0040ead0
push str._System_driversusbcamd2.sys
lea ecx, [ebp - 0x6e58]
mov byte [ebp - 4], 0xfa
call fcn.0040ead0
push str._System_driversusbcamd.sys
lea ecx, [ebp - 0x6e3c]
mov byte [ebp - 4], 0xfb
call fcn.0040ead0
push str._System_driversusbccgp.sys
lea ecx, [ebp - 0x6e20]
mov byte [ebp - 4], 0xfc
call fcn.0040ead0
push str._System_driversusbd.sys
lea ecx, [ebp - 0x6e04]
mov byte [ebp - 4], 0xfd
call fcn.0040ead0
push str._System_driversusbehci.sys
lea ecx, [ebp - 0x6de8]
mov byte [ebp - 4], 0xfe
call fcn.0040ead0
push str._System_driversusbhub.sys
lea ecx, [ebp - 0x6dcc]
mov byte [ebp - 4], 0xff
call fcn.0040ead0
push str._System_driversusbintel.sys
lea ecx, [ebp - 0x6db0]
mov dword [ebp - 4], 0x100
call fcn.0040ead0
push str._System_driversusbport.sys
lea ecx, [ebp - 0x6d94]
mov byte [ebp - 4], 1
call fcn.0040ead0
push str._System_driversUSBSTOR.sys
lea ecx, [ebp - 0x6d78]
mov byte [ebp - 4], 2
call fcn.0040ead0
push str._System_driversusbuhci.sys
lea ecx, [ebp - 0x6d5c]
mov byte [ebp - 4], 3
call fcn.0040ead0
push str._System_drivers_vga.sys
lea ecx, [ebp - 0x6d40]
mov byte [ebp - 4], 4
call fcn.0040ead0
push str._System_drivers_videoprt.sys
lea ecx, [ebp - 0x6d24]
mov byte [ebp - 4], 5
call fcn.0040ead0
push str._System_drivers_volsnap.sys
lea ecx, [ebp - 0x6d08]
mov byte [ebp - 4], 6
call fcn.0040ead0
mov byte [ebp - 4], bl
push str._System_driverswanarp.sys
lea ecx, [ebp - 0x6cec]
call fcn.0040ead0
push str._System_driverswdmaud.sys
lea ecx, [ebp - 0x6cd0]
mov byte [ebp - 4], 8
call fcn.0040ead0
push str._System_driverswmilib.sys
lea ecx, [ebp - 0x6cb4]
mov byte [ebp - 4], 9
call fcn.0040ead0
push str._System_driversws2ifsl.sys
lea ecx, [ebp - 0x6c98]
mov byte [ebp - 4], 0xa
call fcn.0040ead0
mov dword [ebp - 4], 0x10b
xor ecx, ecx
mov dword [ebp - 0x8d28], esi
mov dword [ebp - 0x8a1c], ebx
mov dword [ebp - 0x8a20], esi
mov word [ebp - 0x8a30], cx
push str._r_nSearching_for_Missing_Digital_Signatures:__r_n
push edi
mov byte [ebp - 4], 0xc
call fcn.00414730
push eax
call fcn.00403070
add esp, 0xc
lea edi, [ebp - 0x89cc]
mov dword [ebp - 0x8d2c], 0x10c
lea ecx, [ecx]
xor edx, edx
mov dword [ebp - 0x89d4], ebx
mov dword [ebp - 0x89d8], esi
mov word [ebp - 0x89e8], dx
push 0x24c
lea eax, [ebp - 0x8d10]
push esi
mov byte [ebp - 4], 0xd
push eax
mov dword [ebp - 0x8d14], esi
call fcn.00454850
xor ecx, ecx
add esp, 0xc
mov word [ebp - 0x21c], cx
call fcn.0043a1b1
mov dword [ebp - 0x8d1c], eax
call fcn.0043a06b
push esi
lea ecx, [ebp - 0x8d34]
mov dword [ebp - 0x8d18], eax
call fcn.00439fa0
mov ecx, dword [ebp - 0x8d18]
mov eax, dword [ecx + 4]
cmp eax, 0xffffffff
jae 0x40c0e1
inc eax
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x8d34]
call fcn.00439fc8
mov eax, dword [ebp - 0x8d20]
lea edx, [ebp - 0x8d1c]
push edx
push str._WinDir_
push edi
add eax, 0x1dc
mov byte [ebp - 4], 0xe
call fcn.00414fc0
add esp, 0xc
lea ecx, [ebp - 0x8d1c]
mov byte [ebp - 4], 0xd
call fcn.00401f70
call fcn.0043a1b1
mov dword [ebp - 0x8d1c], eax
call fcn.0043a06b
push esi
lea ecx, [ebp - 0x8d30]
mov dword [ebp - 0x8d18], eax
call fcn.00439fa0
mov ecx, dword [ebp - 0x8d18]
mov eax, dword [ecx + 4]
cmp eax, 0xffffffff
jae 0x40c153
inc eax
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x8d30]
call fcn.00439fc8
lea eax, [ebp - 0x8d1c]
push eax
mov eax, dword [ebp - 0x8d20]
push str._System_
push edi
add eax, 0x1c0
mov byte [ebp - 4], 0xf
call fcn.00414fc0
add esp, 0xc
lea ecx, [ebp - 0x8d1c]
mov byte [ebp - 4], 0xd
call fcn.00401f70
cmp dword [edi + 0x14], 8
jb 0x40c19b
mov eax, dword [edi]
jmp 0x40c19d
mov eax, edi
push eax
lea ecx, [ebp - 0x21c]
push 0x104
push ecx
call fcn.0045063b
add esp, 0xc
cmp dword [edi + 0x14], 8
jb 0x40c1bc
mov eax, dword [edi]
jmp 0x40c1be
mov eax, edi
lea edx, [ebp - 0x8d14]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x40c45a
lea ecx, [ebp - 0x21c]
call fcn.0042cde0
test al, al
jne 0x40c45a
lea eax, [ebp - 0x8d44]
push eax
lea ecx, [ebp - 0x8d00]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea edx, [ebp - 0x89f8]
push edx
lea eax, [ebp - 0x8d44]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov eax, dword [ebp - 0x89f0]
push 2
lea ecx, [ebp - 0x89e8]
cmp ax, 0xc
jbe 0x40c22e
add eax, 0xfffffff4
push 0x478394
jmp 0x40c233
push 0x47839c
movzx ebx, ax
call fcn.00401740
cmp dword [ebp - 0x89d4], 8
mov eax, dword [ebp - 0x89e8]
jae 0x40c250
lea eax, [ebp - 0x89e8]
movzx ecx, word [ebp - 0x89ee]
push eax
movzx eax, word [ebp - 0x89f8]
push ecx
movzx ecx, word [ebp - 0x89f2]
movzx edx, bx
push edx
movzx edx, word [ebp - 0x89f6]
push eax
push ecx
push edx
push str._02d__02d__d__02d:_02d__s
mov ecx, 0x32
lea ebx, [ebp - 0x6c7c]
call fcn.004030d0
mov eax, dword [ebp - 0x8cf8]
add esp, 0x1c
xor ebx, ebx
xor edx, edx
add ebx, dword [ebp - 0x8cf4]
mov dword [ebp - 0x8ab0], esi
adc eax, edx
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x8d38], eax
mov dword [ebp - 0x8ab4], esi
mov dword [ebp - 0x8ac4], 0x67452301
mov dword [ebp - 0x8ac0], 0xefcdab89
mov dword [ebp - 0x8abc], 0x98badcfe
mov dword [ebp - 0x8ab8], 0x10325476
push str.__NoSig__r_n
jb 0x40c2e8
mov eax, dword [edi]
jmp 0x40c2ea
mov eax, edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8d18], esp
push eax
call fcn.0040ead0
lea ecx, [ebp - 0x8ac4]
call fcn.00403a50
mov dword [ebp - 0x8d18], eax
mov eax, dword [ebp - 0x8d38]
push eax
lea ecx, [ebp - 0x8a14]
push ebx
push ecx
call fcn.0040cba0
add esp, 0xc
mov ebx, eax
mov edx, dword [ebp - 0x8d24]
push 0x4783f0
push ecx
push edi
push ecx
push str._r_n_
push edx
mov byte [ebp - 4], 0x10
call fcn.00414730
add esp, 0xc
push eax
call fcn.004149f0
add esp, 0xc
push eax
call fcn.00414730
add esp, 8
cmp eax, esi
jne 0x40c35f
xor ecx, ecx
jmp 0x40c366
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
mov edx, dword [ecx + 0x14]
push ecx
and edx, 0xffffefff
or edx, 0x2000
mov dword [ecx + 0x14], edx
mov ecx, dword [ebp - 0x8d18]
push ecx
push ecx
push 0x4783f0
push ecx
lea edx, [ebp - 0x6c7c]
push edx
push ecx
push 0x4783f0
push ecx
push ebx
push eax
call fcn.004149f0
add esp, 0xc
push eax
call fcn.00414730
add esp, 0xc
push eax
call fcn.00414730
add esp, 0xc
push eax
call fcn.00414730
add esp, 0xc
push eax
call fcn.00415080
add esp, 0xc
push eax
call fcn.00414730
push eax
call fcn.00403070
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x8a00], 8
jb 0x40c3ee
mov eax, dword [ebp - 0x8a14]
push eax
call fcn.0044e60d
add esp, 4
mov ebx, dword [ebp - 0x8d20]
mov ecx, dword [ebp - 0x8d24]
push ebx
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x8d18], esp
push 0xffffffffffffffff
push esi
xor edx, edx
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], esi
push edi
mov word [ecx], dx
call fcn.004015e0
sub esp, 0x1c
mov ecx, esp
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x8d1c], esp
push 0x4743e0
lea eax, [ebx + 0x1dc]
push eax
push ecx
call fcn.00414c90
add esp, 0xc
mov byte [ebp - 4], 0xd
call fcn.0040c500
add esp, 0x40
inc dword [ebp - 0x8d28]
mov ebx, 7
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x89d4], 8
jb 0x40c476
mov edx, dword [ebp - 0x89e8]
push edx
call fcn.0044e60d
add esp, 4
xor eax, eax
add edi, 0x1c
dec dword [ebp - 0x8d2c]
mov dword [ebp - 0x89d4], ebx
mov dword [ebp - 0x89d8], esi
mov word [ebp - 0x89e8], ax
jne 0x40c070
cmp dword [ebp - 0x8d28], esi
jne 0x40c4bc
mov ecx, dword [ebp - 0x8d24]
push str._r_n__No_issues_found._r_n
push ecx
call fcn.00414730
push eax
call fcn.00403070
add esp, 0xc
push fcn.00401500
push 0x10c
push 0x1c
lea edx, [ebp - 0x89cc]
push edx
mov dword [ebp - 4], 0xffffffff
call fcn.004505d8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044e488
mov esp, ebp
pop ebp
ret