Function at 0x40b770
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp - 0xc]
push ebx
test eax, eax
mov dword [ebp - 0xc], ecx
mov dword [ecx], 0x44b110
jne 0x40c41f
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40b7d0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40b7d0
cmp byte [ebp - 7], 0x3a
jne 0x40b7d0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40b80e
call esi
test eax, eax
je 0x40b7fa
cmp byte [ebp - 3], 0x3a
jne 0x40b7fa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40b822
call esi
test eax, eax
je 0x40b822
cmp byte [ebp - 3], 0x3a
jne 0x40b822
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40b83c
cmp byte [ebp - 3], 0x3a
jne 0x40b83c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40b868
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40b868
cmp byte [ebp - 7], 0x3a
jne 0x40b868
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40b8a0
call esi
test eax, eax
je 0x40b88c
cmp byte [ebp - 3], 0x3a
jne 0x40b88c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40b8b4
call esi
test eax, eax
je 0x40b8b4
cmp byte [ebp - 3], 0x3a
jne 0x40b8b4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40b8ce
cmp byte [ebp - 3], 0x3a
jne 0x40b8ce
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40b8fa
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40b8fa
cmp byte [ebp - 7], 0x3a
jne 0x40b8fa
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40b932
call esi
test eax, eax
je 0x40b91e
cmp byte [ebp - 3], 0x3a
jne 0x40b91e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40b946
call esi
test eax, eax
je 0x40b946
cmp byte [ebp - 3], 0x3a
jne 0x40b946
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40b960
cmp byte [ebp - 3], 0x3a
jne 0x40b960
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40b99a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40b99a
cmp byte [ebp - 7], 0x3a
jne 0x40b99a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40b9d2
call esi
test eax, eax
je 0x40b9be
cmp byte [ebp - 3], 0x3a
jne 0x40b9be
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40b9e6
call esi
test eax, eax
je 0x40b9e6
cmp byte [ebp - 3], 0x3a
jne 0x40b9e6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40ba00
cmp byte [ebp - 3], 0x3a
jne 0x40ba00
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40ba37
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40ba37
cmp byte [ebp - 7], 0x3a
jne 0x40ba37
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40ba6f
call esi
test eax, eax
je 0x40ba5b
cmp byte [ebp - 3], 0x3a
jne 0x40ba5b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40ba83
call esi
test eax, eax
je 0x40ba83
cmp byte [ebp - 3], 0x3a
jne 0x40ba83
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40ba9d
cmp byte [ebp - 3], 0x3a
jne 0x40ba9d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bacb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bacb
cmp byte [ebp - 7], 0x3a
jne 0x40bacb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bb03
call esi
test eax, eax
je 0x40baef
cmp byte [ebp - 3], 0x3a
jne 0x40baef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bb17
call esi
test eax, eax
je 0x40bb17
cmp byte [ebp - 3], 0x3a
jne 0x40bb17
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40bb31
cmp byte [ebp - 3], 0x3a
jne 0x40bb31
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bb65
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bb65
cmp byte [ebp - 7], 0x3a
jne 0x40bb65
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bb9d
call esi
test eax, eax
je 0x40bb89
cmp byte [ebp - 3], 0x3a
jne 0x40bb89
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bbb1
call esi
test eax, eax
je 0x40bbb1
cmp byte [ebp - 3], 0x3a
jne 0x40bbb1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40bbcb
cmp byte [ebp - 3], 0x3a
jne 0x40bbcb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bbf9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bbf9
cmp byte [ebp - 7], 0x3a
jne 0x40bbf9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bc31
call esi
test eax, eax
je 0x40bc1d
cmp byte [ebp - 3], 0x3a
jne 0x40bc1d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bc45
call esi
test eax, eax
je 0x40bc45
cmp byte [ebp - 3], 0x3a
jne 0x40bc45
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40bc5f
cmp byte [ebp - 3], 0x3a
jne 0x40bc5f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bc8b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bc8b
cmp byte [ebp - 7], 0x3a
jne 0x40bc8b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bcc3
call esi
test eax, eax
je 0x40bcaf
cmp byte [ebp - 3], 0x3a
jne 0x40bcaf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bcd7
call esi
test eax, eax
je 0x40bcd7
cmp byte [ebp - 3], 0x3a
jne 0x40bcd7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40bcf1
cmp byte [ebp - 3], 0x3a
jne 0x40bcf1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bd1f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bd1f
cmp byte [ebp - 7], 0x3a
jne 0x40bd1f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bd57
call esi
test eax, eax
je 0x40bd43
cmp byte [ebp - 3], 0x3a
jne 0x40bd43
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bd6b
call esi
test eax, eax
je 0x40bd6b
cmp byte [ebp - 3], 0x3a
jne 0x40bd6b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40bd85
cmp byte [ebp - 3], 0x3a
jne 0x40bd85
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bdaf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bdaf
cmp byte [ebp - 7], 0x3a
jne 0x40bdaf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bde7
call esi
test eax, eax
je 0x40bdd3
cmp byte [ebp - 3], 0x3a
jne 0x40bdd3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bdfb
call esi
test eax, eax
je 0x40bdfb
cmp byte [ebp - 3], 0x3a
jne 0x40bdfb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40be15
cmp byte [ebp - 3], 0x3a
jne 0x40be15
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40be44
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40be44
cmp byte [ebp - 7], 0x3a
jne 0x40be44
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40be7c
call esi
test eax, eax
je 0x40be68
cmp byte [ebp - 3], 0x3a
jne 0x40be68
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40be90
call esi
test eax, eax
je 0x40be90
cmp byte [ebp - 3], 0x3a
jne 0x40be90
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40beaa
cmp byte [ebp - 3], 0x3a
jne 0x40beaa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bed8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bed8
cmp byte [ebp - 7], 0x3a
jne 0x40bed8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bf10
call esi
test eax, eax
je 0x40befc
cmp byte [ebp - 3], 0x3a
jne 0x40befc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bf24
call esi
test eax, eax
je 0x40bf24
cmp byte [ebp - 3], 0x3a
jne 0x40bf24
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40bf3e
cmp byte [ebp - 3], 0x3a
jne 0x40bf3e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bf6c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bf6c
cmp byte [ebp - 7], 0x3a
jne 0x40bf6c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40bfa4
call esi
test eax, eax
je 0x40bf90
cmp byte [ebp - 3], 0x3a
jne 0x40bf90
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40bfb8
call esi
test eax, eax
je 0x40bfb8
cmp byte [ebp - 3], 0x3a
jne 0x40bfb8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40bfd2
cmp byte [ebp - 3], 0x3a
jne 0x40bfd2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40bffe
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40bffe
cmp byte [ebp - 7], 0x3a
jne 0x40bffe
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40c036
call esi
test eax, eax
je 0x40c022
cmp byte [ebp - 3], 0x3a
jne 0x40c022
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40c04a
call esi
test eax, eax
je 0x40c04a
cmp byte [ebp - 3], 0x3a
jne 0x40c04a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40c064
cmp byte [ebp - 3], 0x3a
jne 0x40c064
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40c094
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40c094
cmp byte [ebp - 7], 0x3a
jne 0x40c094
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40c0cc
call esi
test eax, eax
je 0x40c0b8
cmp byte [ebp - 3], 0x3a
jne 0x40c0b8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40c0e0
call esi
test eax, eax
je 0x40c0e0
cmp byte [ebp - 3], 0x3a
jne 0x40c0e0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40c0fa
cmp byte [ebp - 3], 0x3a
jne 0x40c0fa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40c133
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40c133
cmp byte [ebp - 7], 0x3a
jne 0x40c133
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40c16b
call esi
test eax, eax
je 0x40c157
cmp byte [ebp - 3], 0x3a
jne 0x40c157
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40c17f
call esi
test eax, eax
je 0x40c17f
cmp byte [ebp - 3], 0x3a
jne 0x40c17f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40c199
cmp byte [ebp - 3], 0x3a
jne 0x40c199
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40c1c8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40c1c8
cmp byte [ebp - 7], 0x3a
jne 0x40c1c8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40c200
call esi
test eax, eax
je 0x40c1ec
cmp byte [ebp - 3], 0x3a
jne 0x40c1ec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40c214
call esi
test eax, eax
je 0x40c214
cmp byte [ebp - 3], 0x3a
jne 0x40c214
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40c22e
cmp byte [ebp - 3], 0x3a
jne 0x40c22e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40c25a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40c25a
cmp byte [ebp - 7], 0x3a
jne 0x40c25a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40c292
call esi
test eax, eax
je 0x40c27e
cmp byte [ebp - 3], 0x3a
jne 0x40c27e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40c2a6
call esi
test eax, eax
je 0x40c2a6
cmp byte [ebp - 3], 0x3a
jne 0x40c2a6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40c2c0
cmp byte [ebp - 3], 0x3a
jne 0x40c2c0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40c2f0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40c2f0
cmp byte [ebp - 7], 0x3a
jne 0x40c2f0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40c328
call esi
test eax, eax
je 0x40c314
cmp byte [ebp - 3], 0x3a
jne 0x40c314
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40c33c
call esi
test eax, eax
je 0x40c33c
cmp byte [ebp - 3], 0x3a
jne 0x40c33c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40c356
cmp byte [ebp - 3], 0x3a
jne 0x40c356
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40c3b7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40c3b7
cmp byte [ebp - 7], 0x3a
jne 0x40c3b7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40c3ef
call esi
test eax, eax
je 0x40c3db
cmp byte [ebp - 3], 0x3a
jne 0x40c3db
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40c403
call esi
test eax, eax
je 0x40c403
cmp byte [ebp - 3], 0x3a
jne 0x40c403
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x40c41f
cmp byte [ebp - 3], 0x3a
jne 0x40c41f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
pop ebx
mov eax, dword [eax + 0x110]
test eax, eax
je 0x40c434
push eax
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
leave
ret