Function at 0x4174f8
Capabilities:
Allocate thread local storage
Clear file content
Create directory
Delete directory
Delete file
Get common file path
Link many functions at runtime
Rebuild import table
Resolve function by parsing pe exports
Resume thread
Set current directory
Set environment variable
Set file attributes
Suspend thread
Write file on windows

Disassembly:
sub esp, 0x134
lea eax, [esp + 4]
push ebx
push ebp
push esi
push edi
mov edi, ecx
xor ebx, ebx
test eax, eax
mov dword [edi], 0x44a158
jne 0x418302
call dword [edi + 0x8c]
mov esi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417542
cmp byte [esp + 0x11], 0x3a
jne 0x417542
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x41758b
call ebp
test eax, eax
je 0x417573
cmp byte [esp + 0x11], 0x3a
jne 0x417573
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4175a4
call ebp
test eax, eax
je 0x4175a4
cmp byte [esp + 0x11], 0x3a
jne 0x4175a4
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4175c2
cmp byte [esp + 0x11], 0x3a
jne 0x4175c2
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417605
call ebp
test eax, eax
je 0x4175ed
cmp byte [esp + 0x11], 0x3a
jne 0x4175ed
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x41761e
call ebp
test eax, eax
je 0x41761e
cmp byte [esp + 0x11], 0x3a
jne 0x41761e
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417654
cmp byte [esp + 0x11], 0x3a
jne 0x417654
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417697
call ebp
test eax, eax
je 0x41767f
cmp byte [esp + 0x11], 0x3a
jne 0x41767f
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4176b0
call ebp
test eax, eax
je 0x4176b0
cmp byte [esp + 0x11], 0x3a
jne 0x4176b0
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [edi + 0x3c]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4176d2
cmp byte [esp + 0x11], 0x3a
jne 0x4176d2
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417715
call ebp
test eax, eax
je 0x4176fd
cmp byte [esp + 0x11], 0x3a
jne 0x4176fd
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x41772e
call ebp
test eax, eax
je 0x41772e
cmp byte [esp + 0x11], 0x3a
jne 0x41772e
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417752
cmp byte [esp + 0x11], 0x3a
jne 0x417752
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417795
call ebp
test eax, eax
je 0x41777d
cmp byte [esp + 0x11], 0x3a
jne 0x41777d
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4177ae
call ebp
test eax, eax
je 0x4177ae
cmp byte [esp + 0x11], 0x3a
jne 0x4177ae
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [edi + 0x1ac]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4177ed
cmp byte [esp + 0x11], 0x3a
jne 0x4177ed
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417830
call ebp
test eax, eax
je 0x417818
cmp byte [esp + 0x11], 0x3a
jne 0x417818
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417849
call ebp
test eax, eax
je 0x417849
cmp byte [esp + 0x11], 0x3a
jne 0x417849
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [edi + 0x30]
push ebx
call dword [edi + 0x48]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417871
cmp byte [esp + 0x11], 0x3a
jne 0x417871
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x4178b4
call ebp
test eax, eax
je 0x41789c
cmp byte [esp + 0x11], 0x3a
jne 0x41789c
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4178cd
call ebp
test eax, eax
je 0x4178cd
cmp byte [esp + 0x11], 0x3a
jne 0x4178cd
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [edi + 0x1c0]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4178fa
cmp byte [esp + 0x11], 0x3a
jne 0x4178fa
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x41793d
call ebp
test eax, eax
je 0x417925
cmp byte [esp + 0x11], 0x3a
jne 0x417925
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417956
call ebp
test eax, eax
je 0x417956
cmp byte [esp + 0x11], 0x3a
jne 0x417956
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417986
cmp byte [esp + 0x11], 0x3a
jne 0x417986
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x4179c9
call ebp
test eax, eax
je 0x4179b1
cmp byte [esp + 0x11], 0x3a
jne 0x4179b1
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4179e2
call ebp
test eax, eax
je 0x4179e2
cmp byte [esp + 0x11], 0x3a
jne 0x4179e2
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [edi + 0x2c]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417a15
cmp byte [esp + 0x11], 0x3a
jne 0x417a15
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417a58
call ebp
test eax, eax
je 0x417a40
cmp byte [esp + 0x11], 0x3a
jne 0x417a40
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417a71
call ebp
test eax, eax
je 0x417a71
cmp byte [esp + 0x11], 0x3a
jne 0x417a71
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [edi + 0x4c]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417aa0
cmp byte [esp + 0x11], 0x3a
jne 0x417aa0
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417ae3
call ebp
test eax, eax
je 0x417acb
cmp byte [esp + 0x11], 0x3a
jne 0x417acb
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417afc
call ebp
test eax, eax
je 0x417afc
cmp byte [esp + 0x11], 0x3a
jne 0x417afc
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417b21
cmp byte [esp + 0x11], 0x3a
jne 0x417b21
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417b64
call ebp
test eax, eax
je 0x417b4c
cmp byte [esp + 0x11], 0x3a
jne 0x417b4c
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417b7d
call ebp
test eax, eax
je 0x417b7d
cmp byte [esp + 0x11], 0x3a
jne 0x417b7d
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417ba2
cmp byte [esp + 0x11], 0x3a
jne 0x417ba2
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417be5
call ebp
test eax, eax
je 0x417bcd
cmp byte [esp + 0x11], 0x3a
jne 0x417bcd
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417bfe
call ebp
test eax, eax
je 0x417bfe
cmp byte [esp + 0x11], 0x3a
jne 0x417bfe
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [edi + 0xb8]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417c2b
cmp byte [esp + 0x11], 0x3a
jne 0x417c2b
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417c6e
call ebp
test eax, eax
je 0x417c56
cmp byte [esp + 0x11], 0x3a
jne 0x417c56
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417c87
call ebp
test eax, eax
je 0x417c87
cmp byte [esp + 0x11], 0x3a
jne 0x417c87
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [edi + 0x1c8]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417cb5
cmp byte [esp + 0x11], 0x3a
jne 0x417cb5
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417cf8
call ebp
test eax, eax
je 0x417ce0
cmp byte [esp + 0x11], 0x3a
jne 0x417ce0
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417d11
call ebp
test eax, eax
je 0x417d11
cmp byte [esp + 0x11], 0x3a
jne 0x417d11
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417d3f
cmp byte [esp + 0x11], 0x3a
jne 0x417d3f
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417d82
call ebp
test eax, eax
je 0x417d6a
cmp byte [esp + 0x11], 0x3a
jne 0x417d6a
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417d9b
call ebp
test eax, eax
je 0x417d9b
cmp byte [esp + 0x11], 0x3a
jne 0x417d9b
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417dc8
cmp byte [esp + 0x11], 0x3a
jne 0x417dc8
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417e0b
call ebp
test eax, eax
je 0x417df3
cmp byte [esp + 0x11], 0x3a
jne 0x417df3
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417e24
call ebp
test eax, eax
je 0x417e24
cmp byte [esp + 0x11], 0x3a
jne 0x417e24
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417e4b
cmp byte [esp + 0x11], 0x3a
jne 0x417e4b
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417e8e
call ebp
test eax, eax
je 0x417e76
cmp byte [esp + 0x11], 0x3a
jne 0x417e76
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417ea7
call ebp
test eax, eax
je 0x417ea7
cmp byte [esp + 0x11], 0x3a
jne 0x417ea7
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417ed3
cmp byte [esp + 0x11], 0x3a
jne 0x417ed3
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417f16
call ebp
test eax, eax
je 0x417efe
cmp byte [esp + 0x11], 0x3a
jne 0x417efe
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417f2f
call ebp
test eax, eax
je 0x417f2f
cmp byte [esp + 0x11], 0x3a
jne 0x417f2f
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417f5b
cmp byte [esp + 0x11], 0x3a
jne 0x417f5b
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x417f9e
call ebp
test eax, eax
je 0x417f86
cmp byte [esp + 0x11], 0x3a
jne 0x417f86
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x417fb7
call ebp
test eax, eax
je 0x417fb7
cmp byte [esp + 0x11], 0x3a
jne 0x417fb7
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x417fe8
cmp byte [esp + 0x11], 0x3a
jne 0x417fe8
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x41802b
call ebp
test eax, eax
je 0x418013
cmp byte [esp + 0x11], 0x3a
jne 0x418013
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x418044
call ebp
test eax, eax
je 0x418044
cmp byte [esp + 0x11], 0x3a
jne 0x418044
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [edi + 0x60]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x41806d
cmp byte [esp + 0x11], 0x3a
jne 0x41806d
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x4180b0
call ebp
test eax, eax
je 0x418098
cmp byte [esp + 0x11], 0x3a
jne 0x418098
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4180c9
call ebp
test eax, eax
je 0x4180c9
cmp byte [esp + 0x11], 0x3a
jne 0x4180c9
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4180ee
cmp byte [esp + 0x11], 0x3a
jne 0x4180ee
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x418131
call ebp
test eax, eax
je 0x418119
cmp byte [esp + 0x11], 0x3a
jne 0x418119
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x41814a
call ebp
test eax, eax
je 0x41814a
cmp byte [esp + 0x11], 0x3a
jne 0x41814a
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x418176
cmp byte [esp + 0x11], 0x3a
jne 0x418176
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x4181b9
call ebp
test eax, eax
je 0x4181a1
cmp byte [esp + 0x11], 0x3a
jne 0x4181a1
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4181d2
call ebp
test eax, eax
je 0x4181d2
cmp byte [esp + 0x11], 0x3a
jne 0x4181d2
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x4181ff
cmp byte [esp + 0x11], 0x3a
jne 0x4181ff
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x418242
call ebp
test eax, eax
je 0x41822a
cmp byte [esp + 0x11], 0x3a
jne 0x41822a
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x41825b
call ebp
test eax, eax
je 0x41825b
cmp byte [esp + 0x11], 0x3a
jne 0x41825b
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [edi + 0x7c]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x418286
cmp byte [esp + 0x11], 0x3a
jne 0x418286
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [esp + 0x14]
cmp eax, 0x4db
lea eax, [esp + 0x10]
push eax
push 3
jne 0x4182c9
call ebp
test eax, eax
je 0x4182b1
cmp byte [esp + 0x11], 0x3a
jne 0x4182b1
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
and byte [esp + 0x16], 0
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0x3a
call esi
jmp 0x4182e2
call ebp
test eax, eax
je 0x4182e2
cmp byte [esp + 0x11], 0x3a
jne 0x4182e2
movzx eax, byte [esp + 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x4c
push 0x45
push 0x4e
push 0x52
push 0x45
lea eax, [esp + 0x110]
push 0x4b
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x74
pop ebx
mov dword [esp + 0x18], eax
push ebx
push 0x78
push 0x65
lea eax, [esp + 0x28]
pop ebp
push ebp
push 0x4e
push 0x32
push 0x33
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push eax
call fcn.0041591e
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x73
push 0x72
push 0x69
push 0x46
push 0x32
push 0x33
push 0x73
push 0x73
push ebp
push 0x63
mov dword [edi + 4], eax
push 0x6f
push 0x72
lea eax, [esp + 0x50]
push 0x50
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x6f
push 0x68
push 0x73
push 0x70
push 0x61
mov dword [edi + 8], eax
push 0x6e
push 0x53
push 0x32
push 0x33
push 0x70
push 0x6c
push ebp
push 0x68
push 0x6c
push 0x6f
push 0x6f
push 0x54
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x78]
push 0x43
push eax
call fcn.0041591e
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebp
push ebx
push 0x61
push 0x6e
push 0x69
push 0x6d
mov dword [edi + 0xc], eax
push 0x72
push ebp
lea eax, [esp + 0x58]
push 0x54
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebp
push ebx
push 0x61
mov dword [edi + 0x10], eax
push ebp
push 0x72
lea eax, [esp + 0x50]
push 0x43
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x73
push ebp
mov dword [edi + 0x14], eax
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x6e
push ebp
push 0x70
lea eax, [esp + 0x44]
push 0x4f
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebp
push 0x64
push 0x6f
push 0x43
push ebx
push 0x69
push 0x78
push 0x45
mov dword [edi + 0x18], eax
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x47
push eax
call fcn.0041591e
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push ebx
push 0x6e
push ebp
push 0x72
push 0x72
push 0x75
push 0x43
mov dword [edi + 0x1c], eax
push ebx
push ebp
lea eax, [esp + 0x5c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x4c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
push 0x49
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
mov dword [edi + 0x20], eax
push 0x50
push ebx
push 0x6e
push ebp
push 0x72
push 0x72
push 0x75
push 0x43
push ebx
push ebp
lea eax, [esp + 0x64]
push 0x47
push eax
call fcn.0041591e
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x70
push 0x69
push 0x50
push ebp
push ebx
push 0x61
mov dword [edi + 0x24], eax
push ebp
push 0x72
lea eax, [esp + 0x40]
push 0x43
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6c
push 0x64
push 0x6e
push 0x61
push 0x48
push ebp
push ebx
push 0x61
push 0x63
push 0x69
push 0x6c
mov dword [edi + 0x28], eax
push 0x70
push 0x75
lea eax, [esp + 0x54]
push 0x44
push eax
call fcn.0041591e
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push 0x6e
mov dword [edi + 0x2c], eax
push ebp
push 0x70
lea eax, [esp + 0x40]
push 0x4f
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebp
push ebx
push 0x61
mov dword [edi + 0x30], eax
push ebp
push 0x72
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x7a
push 0x69
push 0x53
push ebp
push 0x6c
push 0x69
push 0x46
mov dword [edi + 0x34], eax
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x47
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x70
push ebp
mov dword [edi + 0x38], eax
push ebp
push 0x6c
lea eax, [esp + 0x2c]
push 0x53
push eax
call fcn.0041591e
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push ebx
push ebp
mov dword [edi + 0x3c], eax
push 0x6c
push ebp
lea eax, [esp + 0x44]
push 0x44
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6c
push 0x64
push 0x6e
push 0x61
push 0x48
push ebp
push 0x73
mov dword [edi + 0x40], eax
push 0x6f
push 0x6c
lea eax, [esp + 0x44]
push 0x43
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
mov dword [edi + 0x44], eax
push ebx
push ebp
lea eax, [esp + 0x38]
push 0x53
push eax
call fcn.0041591e
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push 0x64
mov dword [edi + 0x48], eax
push 0x61
push ebp
lea eax, [esp + 0x38]
push 0x52
push eax
call fcn.0041591e
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push ebx
push 0x61
mov dword [edi + 0x4c], eax
push ebp
push 0x72
lea eax, [esp + 0x44]
push 0x43
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
mov dword [edi + 0x50], eax
push 0x41
push 0x68
push ebx
push 0x61
push 0x50
push 0x70
push 0x6d
push ebp
push 0x54
push ebx
push ebp
lea eax, [esp + 0x48]
push 0x47
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x79
push 0x72
push 0x6f
push ebx
push 0x63
push ebp
push 0x72
push 0x69
push 0x44
push 0x6d
push ebp
push ebx
push 0x73
push 0x79
push 0x53
mov dword [edi + 0x54], eax
push ebx
push ebp
lea eax, [esp + 0x64]
push 0x47
push eax
call fcn.0041591e
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x79
push 0x72
push 0x6f
push ebx
push 0x63
push ebp
push 0x72
push 0x69
push 0x44
push 0x73
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x58], eax
push ebx
push ebp
lea eax, [esp + 0x68]
push 0x47
push eax
call fcn.0041591e
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
mov dword [edi + 0x5c], eax
push ebp
push 0x73
push 0x6f
push 0x6c
push 0x43
push 0x64
push 0x6e
push 0x69
lea eax, [esp + 0x3c]
push 0x46
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebx
push 0x73
push 0x72
push 0x69
push 0x46
push 0x64
mov dword [edi + 0x60], eax
push 0x6e
push 0x69
lea eax, [esp + 0x50]
push 0x46
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push ebp
push ebx
push 0x61
mov dword [edi + 0x64], eax
push ebp
push 0x72
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebp
push ebx
push 0x61
push 0x6e
push 0x69
push 0x6d
mov dword [edi + 0x68], eax
push 0x72
push ebp
lea eax, [esp + 0x54]
push 0x54
push eax
call fcn.0041591e
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebp
push 0x6c
push 0x67
push 0x6e
push 0x69
push 0x53
push 0x72
push 0x6f
push 0x46
push ebx
mov dword [edi + 0x6c], eax
push 0x69
push 0x61
lea eax, [esp + 0x64]
push 0x57
push eax
call fcn.0041591e
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x6d
push 0x61
push 0x4e
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push 0x6c
push 0x75
push 0x64
push 0x6f
push 0x4d
mov dword [edi + 0x70], eax
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x47
push eax
call fcn.0041591e
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push ebx
mov dword [edi + 0x74], eax
push 0x69
push 0x72
lea eax, [esp + 0x3c]
push 0x57
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push ebx
push ebp
mov dword [edi + 0x78], eax
push 0x73
push ebp
lea eax, [esp + 0x40]
push 0x52
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebp
push 0x6c
push 0x70
push 0x69
push ebx
push 0x6c
push 0x75
push 0x4d
push 0x72
push 0x6f
push 0x46
push ebx
mov dword [edi + 0x7c], eax
push 0x69
push 0x61
lea eax, [esp + 0x70]
push 0x57
push eax
call fcn.0041591e
add esp, 0x60
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x6d
push 0x61
push 0x4e
push 0x68
push ebx
push 0x61
push 0x50
push ebx
push 0x72
push 0x6f
push 0x68
push 0x53
mov dword [edi + 0x80], eax
push ebx
push ebp
lea eax, [esp + 0x5c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x4c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
mov dword [edi + 0x84], eax
push 0
push 0x41
push 0x79
push 0x72
push 0x6f
push ebx
push 0x63
push ebp
push 0x72
push 0x69
push 0x44
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x58]
push 0x43
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x6e
push 0x75
push 0x6f
push 0x43
push 0x6b
push 0x63
push 0x69
push 0x54
mov dword [edi + 0x88], eax
push ebx
push ebp
lea eax, [esp + 0x48]
push 0x47
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x73
push ebp
push ebx
push 0x75
push 0x62
push 0x69
push 0x72
push ebx
push ebx
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
mov dword [edi + 0x8c], eax
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x53
push eax
call fcn.0041591e
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x73
push ebp
mov dword [edi + 0x90], eax
push ebx
push 0x75
push 0x62
push 0x69
push 0x72
push ebx
push ebx
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebx
push ebp
lea eax, [esp + 0x60]
push 0x47
push eax
call fcn.0041591e
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push 0x61
push 0x68
push 0x43
push ebp
push 0x64
push 0x69
push 0x57
push 0x6f
push 0x54
push ebp
push ebx
push 0x79
push 0x42
push 0x69
push ebx
mov dword [edi + 0x94], eax
push 0x6c
push 0x75
lea eax, [esp + 0x64]
push 0x4d
push eax
call fcn.0041591e
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x75
push ebx
push 0x61
push ebx
push 0x53
push 0x6e
push 0x6f
push 0x69
push ebx
push ebp
push 0x6c
push 0x70
push 0x6d
push 0x6f
push 0x43
push 0x64
push ebp
push 0x75
push ebp
push 0x75
push 0x51
mov dword [edi + 0x98], eax
push ebx
push ebp
lea eax, [esp + 0x7c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x6c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x75
push ebx
push 0x61
push ebx
push 0x53
push 0x6e
push 0x6f
push 0x69
push ebx
push ebp
push 0x6c
push 0x70
push 0x6d
push 0x6f
push 0x43
push 0x64
push ebp
push 0x75
push ebp
push 0x75
push 0x51
push ebx
mov dword [edi + 0x9c], eax
push 0x73
push 0x6f
lea eax, [esp + 0x80]
push 0x50
push eax
call fcn.0041591e
add esp, 0x70
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x72
push 0x6f
mov dword [edi + 0xa0], eax
pop eax
push eax
push 0x50
push 0x6e
push eax
push 0x69
push ebx
push ebp
push 0x6c
push 0x70
push 0x6d
push eax
push 0x43
push eax
push 0x49
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x70]
push 0x43
push eax
call fcn.0041591e
add esp, 0x60
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x70
mov dword [edi + 0xa4], eax
push 0x79
push 0x54
push ebp
push 0x76
push 0x69
push 0x72
push 0x44
push ebx
push ebp
lea eax, [esp + 0x4c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x61
push 0x6d
push 0x72
push 0x6f
push 0x66
push 0x6e
push 0x49
push ebp
push 0x6d
push 0x75
push 0x6c
push 0x6f
push 0x56
mov dword [edi + 0xa8], eax
push ebx
push ebp
lea eax, [esp + 0x6c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push ebp
push ebx
push 0x6e
push 0x69
push 0x6f
push 0x50
push ebp
push 0x6c
push 0x69
push 0x46
mov dword [edi + 0xac], eax
push ebx
push ebp
lea eax, [esp + 0x50]
push 0x53
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x6d
push 0x61
push 0x4e
push 0x68
mov dword [edi + 0xb0], eax
push ebx
push 0x61
push 0x50
push 0x67
push 0x6e
push 0x6f
push 0x4c
push ebx
push ebp
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x6c
push 0x69
push 0x46
push ebx
push 0x78
push ebp
push 0x4e
push 0x64
mov dword [edi + 0xb4], eax
push 0x6e
push 0x69
lea eax, [esp + 0x4c]
push 0x46
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
push 0x61
push 0x63
push 0x69
push ebx
push 0x69
push 0x72
push 0x43
push 0x72
push ebp
mov dword [edi + 0xb8], eax
push ebx
push 0x6e
lea eax, [esp + 0x68]
push 0x45
push eax
call fcn.0041591e
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
mov dword [edi + 0xbc], eax
push 0x61
push 0x63
push 0x69
push ebx
push 0x69
push 0x72
push 0x43
push ebp
push 0x76
push 0x61
push ebp
lea eax, [esp + 0x68]
push 0x4c
push eax
call fcn.0041591e
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
push 0x61
push 0x63
push 0x69
push ebx
push 0x69
push 0x72
push 0x43
push ebp
push ebx
push ebp
mov dword [edi + 0xc0], eax
push 0x6c
push ebp
lea eax, [esp + 0x6c]
push 0x44
push eax
call fcn.0041591e
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push 0x6f
push 0x69
mov dword [edi + 0xc4], eax
pop eax
push eax
push ebx
push 0x63
push ebp
push 0x53
push 0x6c
push 0x61
push 0x63
push eax
push ebx
push eax
push 0x72
push 0x43
push ebp
push 0x7a
push eax
push 0x6c
push 0x61
push eax
push ebx
push eax
push 0x6e
lea eax, [esp + 0x7c]
push 0x49
push eax
call fcn.0041591e
add esp, 0x6c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebp
push 0x64
push 0x6f
push 0x43
push ebx
push 0x69
push 0x78
push 0x45
mov dword [edi + 0xc8], eax
push ebx
push ebp
lea eax, [esp + 0x5c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x4c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push 0x6f
push 0x72
push 0x72
push 0x45
push ebx
push 0x73
push 0x61
push 0x4c
mov dword [edi + 0xcc], eax
push ebx
push ebp
lea eax, [esp + 0x48]
push 0x47
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x49
push 0x50
mov dword [edi + 0xd0], eax
push 0x41
push 0x53
lea eax, [esp + 0x104]
push 0x50
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x41
push 0x78
push 0x45
push ebp
push 0x6d
mov dword [esp + 0x2c], eax
push 0x61
push 0x4e
push ebp
push 0x6c
push 0x69
push 0x46
push ebp
push 0x6c
push 0x75
push 0x64
push 0x6f
push 0x4d
push ebx
push ebp
lea eax, [esp + 0x68]
push 0x47
push eax
call fcn.0041591e
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push ebp
push 0x6c
push 0x75
push 0x64
push 0x6f
push 0x4d
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x6d
mov dword [edi + 0xd4], eax
push 0x75
push 0x6e
lea eax, [esp + 0x60]
push 0x45
push eax
call fcn.0041591e
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x50
push 0x41
push 0x43
mov dword [edi + 0xd8], eax
push 0x49
push 0x56
lea eax, [esp + 0x110]
push 0x41
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x41
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [esp + 0x34], eax
push ebp
push 0x72
push 0x75
push ebx
push 0x70
push 0x61
push 0x43
push ebp
push ebx
push 0x61
push ebp
push 0x72
push 0x43
push 0x70
push 0x61
lea eax, [esp + 0x74]
push 0x63
push eax
call fcn.0041591e
add esp, 0x64
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x70
push 0x69
push 0x72
push 0x63
push 0x73
push ebp
push 0x44
push 0x72
push ebp
push 0x76
push 0x69
push 0x72
push 0x44
push ebx
push ebp
push 0x47
mov dword [edi + 0xdc], eax
push 0x70
push 0x61
lea eax, [esp + 0x78]
push 0x63
push eax
call fcn.0041591e
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x49
push 0x50
push 0x41
mov dword [edi + 0xe0], eax
push 0x56
push 0x44
lea eax, [esp + 0x110]
push 0x41
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
mov dword [esp + 0x18], eax
push 0x79
push ebp
push 0x4b
push ebp
push 0x73
push 0x6f
push 0x6c
push 0x43
push 0x67
push ebp
lea eax, [esp + 0x44]
push 0x52
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x75
push 0x6c
push 0x61
push 0x56
push 0x6d
push 0x75
push 0x6e
push 0x45
mov dword [edi + 0xe4], eax
push 0x67
push ebp
lea eax, [esp + 0x4c]
push 0x52
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x79
push ebp
push 0x4b
push 0x6f
push 0x66
push 0x6e
push 0x49
push 0x79
push 0x72
push ebp
push 0x75
push 0x51
mov dword [edi + 0xe8], eax
push 0x67
push ebp
lea eax, [esp + 0x58]
push 0x52
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x78
push 0x45
push 0x79
push ebp
push 0x4b
push 0x6e
push ebp
push 0x70
push 0x4f
push 0x67
mov dword [edi + 0xec], eax
push ebp
lea eax, [esp + 0x4c]
push 0x52
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push ebp
push 0x6b
push 0x6f
push 0x54
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x6e
mov dword [edi + 0xf0], eax
push ebp
push 0x70
lea eax, [esp + 0x58]
push 0x4f
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push ebp
push 0x67
push ebp
push 0x6c
push 0x69
push 0x76
push 0x69
push 0x72
push 0x50
push 0x6e
push ebp
push 0x6b
push 0x6f
push 0x54
push ebx
push 0x73
push 0x75
mov dword [edi + 0xf4], eax
push 0x6a
push 0x64
lea eax, [esp + 0x6c]
push 0x41
push eax
call fcn.0041591e
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x75
push 0x6c
push 0x61
push 0x56
push ebp
push 0x67
push ebp
push 0x6c
push 0x69
push 0x76
mov dword [edi + 0xf8], eax
push 0x69
push 0x72
push 0x50
push 0x70
push 0x75
push 0x6b
push 0x6f
push 0x6f
lea eax, [esp + 0x6c]
push 0x4c
push eax
call fcn.0041591e
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x4d
push 0x4d
mov dword [edi + 0xfc], eax
push 0x4e
push 0x49
lea eax, [esp + 0x104]
push 0x57
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push ebx
push ebp
push 0x53
push ebp
mov dword [esp + 0x3c], eax
push 0x6d
push 0x69
lea eax, [esp + 0x48]
push ebx
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x6e
push ebp
push 0x76
push 0x45
push 0x6c
push 0x6c
push 0x69
push 0x4b
push ebp
mov dword [edi + 0x100], eax
push 0x6d
push 0x69
lea eax, [esp + 0x4c]
push ebx
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
mov dword [edi + 0x104], eax
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x45
push 0x4c
lea eax, [esp + 0x104]
push 0x4f
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push ebp
push 0x7a
push 0x69
mov dword [esp + 0x24], eax
pop eax
push eax
push 0x6c
push 0x61
push eax
push ebx
push eax
push 0x6e
push eax
push 0x6e
push 0x55
push 0x6f
lea eax, [esp + 0x50]
push 0x43
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
push 0x69
push 0x75
push 0x47
push ebp
push ebx
push 0x61
push ebp
push 0x72
mov dword [edi + 0x108], eax
push 0x43
push 0x6f
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x7a
push 0x69
push 0x6c
push 0x61
push 0x69
push ebx
push 0x69
push 0x6e
mov dword [edi + 0x10c], eax
push 0x49
push 0x6f
lea eax, [esp + 0x48]
push 0x43
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
mov dword [edi + 0x110], eax
pop eax
push eax
push eax
push 0x44
push 0x2e
push 0x32
push 0x33
push eax
push eax
push 0x45
push 0x48
lea eax, [esp + 0x10c]
push 0x53
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x41
push 0x6e
push 0x6f
push 0x69
push ebx
push 0x61
push 0x72
push ebp
push 0x70
push 0x4f
push ebp
push 0x6c
push 0x69
mov dword [esp + 0x4c], eax
push 0x46
push 0x48
lea eax, [esp + 0x58]
push 0x53
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push ebx
push 0x75
push 0x63
push ebp
push 0x78
push 0x45
push 0x6c
push 0x6c
mov dword [edi + 0x114], eax
push ebp
push 0x68
lea eax, [esp + 0x4c]
push 0x53
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
mov dword [edi + 0x118], eax
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x5f
push 0x32
push 0x53
lea eax, [esp + 0x108]
push 0x57
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x6c
push ebx
push 0x63
push 0x6f
push 0x49
mov dword [esp + 0x2c], eax
push 0x41
push 0x53
lea eax, [esp + 0x38]
push 0x57
push eax
call fcn.0041591e
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push ebp
push 0x6b
mov dword [edi + 0x11c], eax
push 0x63
push 0x6f
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push ebp
push 0x6b
push 0x63
push 0x6f
push 0x73
push ebp
push 0x73
mov dword [edi + 0x120], eax
push 0x6f
push 0x6c
lea eax, [esp + 0x44]
push 0x63
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
mov dword [edi + 0x124], eax
push 0x6e
push 0x69
lea eax, [esp + 0x28]
push 0x62
push eax
call fcn.0041591e
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6d
push 0x61
push 0x6e
push 0x79
push 0x62
push ebx
push 0x73
push 0x6f
push 0x68
mov dword [edi + 0x128], eax
push ebx
push ebp
lea eax, [esp + 0x4c]
push 0x67
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x70
push 0x75
push ebx
push 0x72
push 0x61
push ebx
push 0x53
mov dword [edi + 0x12c], eax
push 0x41
push 0x53
lea eax, [esp + 0x40]
push 0x57
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x70
push 0x75
push 0x6e
push 0x61
push ebp
push 0x6c
push 0x43
mov dword [edi + 0x130], eax
push 0x41
push 0x53
lea eax, [esp + 0x40]
push 0x57
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x6e
mov dword [edi + 0x134], eax
push 0x6f
push ebx
lea eax, [esp + 0x2c]
push 0x68
push eax
call fcn.0041591e
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
mov dword [edi + 0x138], eax
push 0
push 0x6f
push ebx
push 0x64
push 0x6e
push ebp
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x68
mov dword [edi + 0x13c], eax
push 0x6f
push ebx
lea eax, [esp + 0x2c]
push 0x6e
push eax
call fcn.0041591e
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push 0x6f
push 0x72
push 0x72
push 0x45
push ebx
push 0x73
push 0x61
push 0x4c
push ebx
push ebp
push 0x47
mov dword [edi + 0x140], eax
push 0x41
push 0x53
lea eax, [esp + 0x54]
push 0x57
push eax
call fcn.0041591e
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6d
push 0x6f
push 0x72
push 0x66
push 0x76
mov dword [edi + 0x144], eax
push 0x63
push ebp
lea eax, [esp + 0x38]
push 0x72
push eax
call fcn.0041591e
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6d
push 0x61
push 0x6e
push 0x6b
mov dword [edi + 0x148], eax
push 0x63
push 0x6f
push 0x73
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x67
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push 0x77
push 0x6f
push 0x64
push ebx
mov dword [edi + 0x14c], eax
push 0x75
push 0x68
lea eax, [esp + 0x38]
push 0x73
push eax
call fcn.0041591e
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x63
push ebp
push 0x6e
mov dword [edi + 0x150], eax
push 0x6e
push 0x6f
lea eax, [esp + 0x34]
push 0x63
push eax
call fcn.0041591e
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
mov dword [edi + 0x154], eax
push 0x6e
push ebp
lea eax, [esp + 0x28]
push 0x73
push eax
call fcn.0041591e
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x76
mov dword [edi + 0x158], eax
push 0x63
push ebp
lea eax, [esp + 0x28]
push 0x72
push eax
call fcn.0041591e
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6d
mov dword [edi + 0x15c], eax
push 0x61
push 0x6e
push ebx
push 0x73
push 0x6f
push 0x68
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x67
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
mov dword [edi + 0x160], eax
push 0x49
push 0x44
lea eax, [esp + 0x104]
push 0x47
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebp
push ebx
push ebp
mov dword [esp + 0x3c], eax
push 0x6c
push ebp
lea eax, [esp + 0x48]
push 0x44
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push ebx
push 0x69
push 0x42
push 0x49
push 0x44
mov dword [edi + 0x164], eax
push ebx
push ebp
lea eax, [esp + 0x3c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebx
push 0x63
mov dword [edi + 0x168], eax
push ebp
push 0x6a
push 0x62
push 0x4f
push ebx
push ebp
lea eax, [esp + 0x40]
push 0x47
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x6c
push 0x42
mov dword [edi + 0x16c], eax
push ebx
push 0x69
lea eax, [esp + 0x30]
push 0x42
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x63
push ebp
push 0x6a
push 0x62
push 0x4f
push ebx
push 0x63
push ebp
mov dword [edi + 0x170], eax
push 0x6c
push ebp
lea eax, [esp + 0x48]
push 0x53
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x43
push 0x44
push ebp
push 0x6c
push 0x62
push 0x69
push ebx
push 0x61
push 0x70
push 0x6d
push 0x6f
push 0x43
push ebp
push ebx
push 0x61
mov dword [edi + 0x174], eax
push ebp
push 0x72
lea eax, [esp + 0x60]
push 0x43
push eax
call fcn.0041591e
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
mov dword [edi + 0x178], eax
push 0
push 0x70
push 0x61
push 0x6d
push ebx
push 0x69
push 0x42
push ebp
push 0x6c
push 0x62
push 0x69
push ebx
push 0x61
push 0x70
push 0x6d
push 0x6f
push 0x43
push ebp
push ebx
push 0x61
push ebp
push 0x72
lea eax, [esp + 0x70]
push 0x43
push eax
call fcn.0041591e
add esp, 0x60
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x43
push 0x44
push ebp
push ebx
push 0x61
mov dword [edi + 0x17c], eax
push ebp
push 0x72
lea eax, [esp + 0x3c]
push 0x43
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x43
push 0x44
push ebp
push ebx
push ebp
mov dword [edi + 0x180], eax
push 0x6c
push ebp
lea eax, [esp + 0x38]
push 0x44
push eax
call fcn.0041591e
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x53
push 0x55
push 0x4c
push 0x50
push 0x49
push 0x44
mov dword [edi + 0x184], eax
push 0x47
lea eax, [esp + 0x110]
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x73
push 0x72
push ebp
push 0x64
push 0x6f
push 0x63
push 0x6e
push 0x45
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebx
push ebp
push 0x47
push 0x70
mov dword [esp + 0x5c], eax
push 0x69
push 0x64
lea eax, [esp + 0x68]
push 0x47
push eax
call fcn.0041591e
add esp, 0x58
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x7a
push 0x69
push 0x53
push 0x73
push 0x72
push ebp
push 0x64
push 0x6f
push 0x63
push 0x6e
push 0x45
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebx
push ebp
push 0x47
push 0x70
mov dword [edi + 0x188], eax
push 0x69
push 0x64
lea eax, [esp + 0x78]
push 0x47
push eax
call fcn.0041591e
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebp
push 0x73
mov dword [edi + 0x18c], eax
push 0x6f
push 0x70
push 0x73
push 0x69
push 0x44
push 0x70
push 0x69
push 0x64
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push 0x6f
push 0x54
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push ebp
push 0x76
push 0x61
push 0x53
push 0x70
mov dword [edi + 0x190], eax
push 0x69
push 0x64
lea eax, [esp + 0x64]
push 0x47
push eax
call fcn.0041591e
add esp, 0x54
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebp
push 0x6c
push 0x69
push 0x46
push 0x6d
push 0x6f
push 0x72
push 0x46
push ebp
push 0x67
push 0x61
push 0x6d
push 0x49
push 0x64
push 0x61
push 0x6f
push 0x4c
push 0x70
mov dword [edi + 0x194], eax
push 0x69
push 0x64
lea eax, [esp + 0x6c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x5c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x70
push 0x75
mov dword [edi + 0x198], eax
push ebx
push 0x72
push 0x61
push ebx
push 0x53
push 0x73
push 0x75
push 0x6c
push 0x70
push 0x69
push 0x64
lea eax, [esp + 0x50]
push 0x47
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push 0x77
push 0x6f
push 0x64
push ebx
push 0x75
push 0x68
push 0x53
push 0x73
push 0x75
push 0x6c
push 0x70
mov dword [edi + 0x19c], eax
push 0x69
push 0x64
lea eax, [esp + 0x54]
push 0x47
push eax
call fcn.0041591e
add esp, 0x44
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x32
push 0x33
push 0x52
mov dword [edi + 0x1a0], eax
push 0x45
push 0x53
lea eax, [esp + 0x108]
push 0x55
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x64
push 0x49
push 0x73
push 0x73
push ebp
push 0x63
push 0x6f
push 0x72
push 0x50
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
mov dword [esp + 0x54], eax
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push ebx
push ebp
lea eax, [esp + 0x78]
push 0x47
push eax
call fcn.0041591e
add esp, 0x68
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x78
push 0x45
push 0x73
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push ebx
mov dword [edi + 0x1a4], eax
push 0x69
push 0x78
lea eax, [esp + 0x4c]
push 0x45
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebx
push 0x78
push ebp
push 0x54
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x1a8], eax
push ebx
push ebp
lea eax, [esp + 0x50]
push 0x47
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x67
push 0x6e
push 0x6f
push 0x4c
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x1ac], eax
push ebx
push ebp
lea eax, [esp + 0x50]
push 0x47
push eax
call fcn.0041591e
add esp, 0x40
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
mov dword [edi + 0x1b0], eax
push ebx
push ebp
lea eax, [esp + 0x3c]
push 0x47
push eax
call fcn.0041591e
add esp, 0x2c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push 0x70
push 0x6f
push ebx
push 0x6b
push 0x73
push ebp
push 0x44
mov dword [edi + 0x1b4], eax
push ebx
push ebp
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
push ebx
mov dword [edi + 0x1b8], eax
push 0x73
push 0x6f
lea eax, [esp + 0x48]
push 0x50
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push 0x77
push 0x6f
push 0x64
push 0x6e
mov dword [edi + 0x1bc], eax
push 0x69
push 0x57
push 0x64
push 0x6e
push 0x69
lea eax, [esp + 0x44]
push 0x46
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x73
push 0x63
push 0x69
push 0x72
push ebx
push ebp
push 0x4d
push 0x6d
push ebp
push ebx
push 0x73
push 0x79
push 0x53
mov dword [edi + 0x1c0], eax
push ebx
push ebp
lea eax, [esp + 0x58]
push 0x47
push eax
call fcn.0041591e
add esp, 0x48
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x57
push 0x79
push 0x6f
push 0x72
push ebx
mov dword [edi + 0x1c4], eax
push 0x73
push ebp
lea eax, [esp + 0x4c]
push 0x44
push eax
call fcn.0041591e
add esp, 0x3c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
push 0x64
mov dword [edi + 0x1c8], eax
push 0x6e
push ebp
lea eax, [esp + 0x48]
push 0x53
push eax
call fcn.0041591e
add esp, 0x38
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
mov dword [edi + 0x1cc], eax
push 0x57
push 0x73
lea eax, [esp + 0x38]
push 0x49
push eax
call fcn.0041591e
add esp, 0x28
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
push 0x64
push 0x61
push ebp
push 0x72
push 0x68
push 0x54
push ebx
mov dword [edi + 0x1d0], eax
push 0x73
push 0x6f
lea eax, [esp + 0x60]
push 0x50
push eax
call fcn.0041591e
add esp, 0x50
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x41
push ebp
push 0x67
push 0x61
push 0x73
push 0x73
push ebp
push 0x4d
mov dword [edi + 0x1d4], eax
push ebx
push ebp
lea eax, [esp + 0x44]
push 0x47
push eax
call fcn.0041591e
add esp, 0x34
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x4c
push 0x4c
push 0x44
push 0x2e
push 0x54
push 0x52
push 0x43
push 0x56
mov dword [edi + 0x1d8], eax
push 0x53
lea eax, [esp + 0x108]
push 0x4d
push eax
call fcn.0041591e
add esp, 0x30
lea eax, [esp + 0xe0]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0
push 0x66
push ebx
push 0x6e
push 0x69
mov dword [esp + 0x28], eax
push 0x72
push 0x70
lea eax, [esp + 0x34]
push 0x73
push eax
call fcn.0041591e
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x70
push 0x6d
push 0x63
mov dword [edi + 0x1dc], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push ebx
push 0x73
mov dword [edi + 0x1e0], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x79
push 0x70
push 0x63
mov dword [edi + 0x1e4], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push 0x68
push 0x63
push 0x72
push 0x72
mov dword [edi + 0x1e8], eax
push ebx
lea eax, [esp + 0x34]
push 0x73
push eax
call fcn.0041591e
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x6e
push ebp
push 0x6c
mov dword [edi + 0x1ec], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push 0x68
push 0x63
mov dword [edi + 0x1f0], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x70
push 0x6d
push 0x63
mov dword [edi + 0x1f4], eax
push 0x6d
push ebp
lea eax, [esp + 0x30]
push 0x6d
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
push 0x6e
mov dword [edi + 0x1f8], eax
push 0x61
push 0x72
lea eax, [esp + 0x2c]
push 0x73
push eax
call fcn.0041591e
add esp, 0x1c
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x64
mov dword [edi + 0x1fc], eax
push 0x6e
push 0x61
lea eax, [esp + 0x28]
push 0x72
push eax
call fcn.0041591e
add esp, 0x18
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x70
push 0x6d
push 0x63
mov dword [edi + 0x200], eax
push 0x73
push 0x63
lea eax, [esp + 0x30]
push 0x77
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
mov dword [edi + 0x204], eax
push 0x77
push 0x6f
lea eax, [esp + 0x24]
push 0x70
push eax
call fcn.0041591e
add esp, 0x14
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push 0x70
push 0x75
push 0x72
mov dword [edi + 0x208], eax
push ebx
push 0x73
lea eax, [esp + 0x34]
push 0x5f
push eax
call fcn.0041591e
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push 0x72
push 0x77
push 0x6c
push 0x72
mov dword [edi + 0x20c], eax
push ebx
push 0x73
lea eax, [esp + 0x34]
push 0x5f
push eax
call fcn.0041591e
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push ebp
push 0x73
push 0x72
mov dword [edi + 0x210], eax
push ebx
push 0x73
lea eax, [esp + 0x34]
push 0x5f
push eax
call fcn.0041591e
add esp, 0x24
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push 0x61
push 0x63
mov dword [edi + 0x214], eax
push 0x72
push ebx
lea eax, [esp + 0x30]
push 0x73
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
push 0
push ebx
push ebp
push 0x73
mov dword [edi + 0x218], eax
push 0x6d
push ebp
lea eax, [esp + 0x30]
push 0x6d
push eax
call fcn.0041591e
add esp, 0x20
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x18]
call esi
mov dword [edi + 0x21c], eax
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x134
ret