Function at 0x41b027
Capabilities:
Delete file
Link many functions at runtime

Disassembly:
sub esp, 0x128
mov al, byte [0x482614]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x28], ecx
test al, 0x10
mov edi, 0x482bc0
mov esi, 0x482770
je 0x41b0b7
test al, 0x20
je 0x41b0b7
push 0x4c
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b0b7
push 0x4c
mov ecx, esi
call fcn.0041fac3
push eax
push 0x48
mov ecx, esi
call fcn.0041fac3
push eax
mov ecx, edi
call fcn.0041ff07
mov ebx, 0x482a2c
push eax
mov ecx, ebx
call fcn.0041fd49
test eax, eax
jge 0x41b08c
push 0xfffffffffffffff6
jmp 0x41bd47
mov ecx, ebx
call fcn.0041f4a6
test al, al
jne 0x41b0b7
xor ebx, ebx
mov ecx, 0x48308c
push ebx
call fcn.0041ff07
push eax
push ebx
mov ecx, 0x482408
call fcn.0041e1f3
push 0xfffffffffffffff5
jmp 0x41bd47
xor ebx, ebx
mov ecx, edi
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
call fcn.0041ff07
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp byte [0x48375c], bl
mov ebp, eax
jne 0x41b4a1
push 0x10
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b214
push ebx
push ebx
push 0x14
mov ecx, esi
call fcn.0041fac3
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0x10
mov ecx, esi
call fcn.0041fac3
cmp eax, ebx
jle 0x41b214
mov dword [esp + 0x14], eax
push 0x18
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
je 0x41b135
mov ecx, edi
call fcn.0041ef35
jmp 0x41b137
xor edi, edi
cmp edi, ebx
jne 0x41b14c
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
lea ecx, [esp + 0x18]
mov byte [edi + 0x11], bl
call fcn.0041ef35
push 4
push ebp
lea ecx, [esp + 0x20]
call fcn.0041fc8b
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
push eax
push ebp
mov ecx, edi
call fcn.0041fc8b
push 4
push ebp
lea ecx, [esp + 0x20]
call fcn.0041fc8b
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
push 4
push ebp
lea ecx, [esp + 0x20]
mov dword [edi + 0xc], eax
call fcn.0041fc8b
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
test eax, eax
setne al
push 4
push ebp
lea ecx, [esp + 0x20]
mov byte [edi + 0x10], al
call fcn.0041fc8b
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
push eax
push ebp
lea ecx, [esp + 0x20]
call fcn.0041fc8b
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
mov dword [esp + 0x14], ebx
call fcn.0041ff07
mov ecx, dword [esp + 0x2c]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [edi + 0x14]
push eax
call fcn.004191b4
push 0xffffffffffffffff
push edi
mov ecx, 0x4829bc
call fcn.00422019
lea ecx, [esp + 0x18]
call fcn.0041f06b
dec dword [esp + 0x14]
jne 0x41b11e
cmp byte [0x48375c], bl
jne 0x41b4a1
push 0x18
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b2aa
push ebx
push ebx
push 0x1c
mov ecx, esi
call fcn.0041fac3
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0x18
mov ecx, esi
call fcn.0041fac3
cmp eax, ebx
jle 0x41b2aa
mov edi, eax
lea ecx, [esp + 0x18]
call fcn.0041ef35
push 4
push ebp
lea ecx, [esp + 0x20]
call fcn.0041fc8b
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
mov ecx, eax
mov edx, eax
and ecx, 0xff0000
push 0xffffffffffffffff
shr edx, 0x10
or ecx, edx
mov edx, eax
shl edx, 0x10
and eax, 0xff00
or edx, eax
shr ecx, 8
shl edx, 8
or ecx, edx
push ecx
mov ecx, 0x4829e4
call fcn.00422019
lea ecx, [esp + 0x18]
call fcn.0041f06b
dec edi
jne 0x41b24f
cmp byte [0x48375c], bl
jne 0x41b4a1
push 0x20
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b447
push 0x24
mov ecx, esi
call fcn.0041fac3
push 0x20
mov ecx, esi
mov dword [esp + 0x30], eax
call fcn.0041fac3
cmp eax, ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], ebx
jle 0x41b447
push 0x10
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
je 0x41b309
lea ecx, [edi + 4]
call fcn.0041ef35
mov dword [esp + 0x10], edi
jmp 0x41b30d
mov dword [esp + 0x10], ebx
lea ecx, [esp + 0x18]
call fcn.0041ef35
push ebx
push ebx
push dword [esp + 0x34]
push ebp
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 4
push ebp
lea ecx, [esp + 0x20]
call fcn.0041fc8b
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
mov ecx, dword [esp + 0x10]
push 4
push ebp
mov dword [ecx], eax
lea ecx, [esp + 0x20]
call fcn.0041fc8b
add dword [esp + 0x2c], 8
push 0x104
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
jne 0x41b372
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push str..bmp
push edi
call fcn.00420ef6
mov eax, dword [esp + 0x18]
pop ecx
pop ecx
lea ecx, [eax + 4]
push edi
call fcn.0041f0d8
push edi
call fcn.00428bce
pop ecx
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
push 1
mov edi, eax
pop eax
mov dword [esp + 0x30], edi
mov dword [0x4836fc], eax
mov dword [0x482710], eax
mov eax, dword [0x483770]
cmp eax, ebx
je 0x41b3c0
push eax
call fcn.00428bce
pop ecx
push 4
call fcn.00428bd9
cmp eax, ebx
pop ecx
mov dword [0x483770], eax
jne 0x41b3e7
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
mov eax, dword [0x483770]
pop ecx
mov ecx, dword [esp + 0x2c]
push dword [esp + 0x30]
add edi, ecx
mov dword [eax], edi
mov eax, dword [esp + 0x14]
push ecx
lea ecx, [eax + 4]
call fcn.0041ff07
push eax
mov ecx, 0x482bc0
call fcn.0041ff07
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
jne 0x41b481
push 0xffffffffffffffff
mov ecx, 0x4829d0
push dword [esp + 0x14]
mov dword [esp + 0x34], edi
call fcn.00422019
lea ecx, [esp + 0x18]
call fcn.0041f06b
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x24]
jl 0x41b2ed
cmp byte [0x48375c], bl
jne 0x41b4a1
push 0x28
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b4a1
mov ecx, dword [esp + 0x28]
push ebp
call fcn.0041c983
test al, al
jne 0x41b4a1
cmp ebp, ebx
je 0x41b47a
cmp ebp, 0xffffffff
je 0x41b47a
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffd3
jmp 0x41bd47
lea ecx, [esp + 0x18]
call fcn.0041f06b
cmp ebp, ebx
je 0x41b49a
cmp ebp, 0xffffffff
je 0x41b49a
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffd6
jmp 0x41bd47
push 0x5c
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b541
push 0x104
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
jne 0x41b4d4
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push 0x60
push edi
mov ecx, 0x482d70
call fcn.00413b5d
test al, al
push edi
jne 0x41b504
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41b4fc
cmp ebp, 0xffffffff
je 0x41b4fc
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or eax, 0xffffffff
jmp 0x41bd48
mov ecx, 0x4823d4
call fcn.0041f0d8
push edi
mov ecx, 0x482be0
call fcn.00421e48
test al, al
push edi
jne 0x41b53b
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41b534
cmp ebp, 0xffffffff
je 0x41b534
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffe
jmp 0x41bd47
call fcn.00428bce
pop ecx
push 0x50
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b5e0
push 0x104
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
jne 0x41b574
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push 0x54
push edi
mov ecx, 0x482d70
call fcn.00413b5d
test al, al
push edi
jne 0x41b5a3
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41b59c
cmp ebp, 0xffffffff
je 0x41b59c
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffd
jmp 0x41bd47
mov ecx, 0x4823c8
call fcn.0041f0d8
push edi
mov ecx, 0x482750
call fcn.0041eec5
test al, al
push edi
jne 0x41b5da
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41b5d3
cmp ebp, 0xffffffff
je 0x41b5d3
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffc
jmp 0x41bd47
call fcn.00428bce
pop ecx
cmp byte [0x48375c], bl
jne 0x41b887
push 0x80
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b7dd
push 0x88
mov ecx, esi
call fcn.0041fac3
push eax
mov ecx, 0x4836e8
call fcn.004116cb
cmp eax, 2
jne 0x41b701
push 0x104
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
jne 0x41b642
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push str..jpg
push edi
call fcn.00420ef6
pop ecx
pop ecx
push ebx
push 0x8c
mov ecx, esi
call fcn.0041fac3
push eax
push 0x88
mov ecx, esi
call fcn.0041fac3
push eax
push edi
mov ecx, 0x482d70
call fcn.00412273
test al, al
jne 0x41b697
push edi
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41b690
cmp ebp, 0xffffffff
je 0x41b690
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffb
jmp 0x41bd47
push 0x104
call fcn.00428bd9
cmp eax, ebx
pop ecx
mov dword [esp + 0x10], eax
jne 0x41b6bb
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push str..bmp
push dword [esp + 0x14]
call fcn.00420ef6
pop ecx
pop ecx
push dword [esp + 0x10]
push edi
call dword [0x482758]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push dword [esp + 0x10]
mov ecx, 0x4823ec
call fcn.0041f0d8
push edi
call fcn.00428bce
push dword [esp + 0x14]
call fcn.00428bce
pop ecx
pop ecx
jmp 0x41b7dd
push 0x84
mov ecx, esi
call fcn.0041fac3
push 1
pop edi
cmp eax, edi
jne 0x41b7dd
lea eax, [esp + 0x34]
push str..bmp
push eax
call fcn.00420ef6
pop ecx
pop ecx
push 0x88
mov ecx, esi
call fcn.0041fac3
push 0x8c
mov ecx, esi
mov dword [esp + 0x34], eax
call fcn.0041fac3
mov dword [esp + 0x24], eax
mov eax, dword [0x483770]
cmp eax, ebx
mov dword [0x4836fc], edi
mov dword [0x482710], edi
je 0x41b765
push eax
call fcn.00428bce
pop ecx
push 4
call fcn.00428bd9
cmp eax, ebx
pop ecx
mov dword [0x483770], eax
jne 0x41b78c
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
mov eax, dword [0x483770]
pop ecx
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
push edx
push ecx
lea edi, [edx + ecx]
mov ecx, 0x482bc0
mov dword [eax], edi
lea eax, [esp + 0x3c]
push eax
call fcn.0041ff07
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
je 0x41b7ce
cmp ebp, ebx
je 0x41b7c7
cmp ebp, 0xffffffff
je 0x41b7c7
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffd1
jmp 0x41bd47
lea eax, [esp + 0x34]
mov ecx, 0x4823ec
push eax
call fcn.0041f0d8
cmp byte [0x48375c], bl
jne 0x41b887
push 0x74
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41b887
push 0x104
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
jne 0x41b81c
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push str..mp3
push edi
call fcn.00420ef6
pop ecx
pop ecx
push ebx
push 0x7c
mov ecx, esi
call fcn.0041fac3
push eax
push 0x78
mov ecx, esi
call fcn.0041fac3
push eax
push edi
mov ecx, 0x482d70
call fcn.00412273
test al, al
push edi
jne 0x41b86b
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41b864
cmp ebp, 0xffffffff
je 0x41b864
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffa
jmp 0x41bd47
mov ecx, 0x482c28
call fcn.0041f0d8
push edi
mov ecx, 0x4823f8
call fcn.0041f0d8
push edi
call fcn.00428bce
pop ecx
push 0x68
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41ba93
push 0x104
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
jne 0x41b8ba
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push 0x6c
push edi
mov ecx, 0x482d70
call fcn.00413b5d
test al, al
push edi
jne 0x41b8e9
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41b8e2
cmp ebp, 0xffffffff
je 0x41b8e2
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffff9
jmp 0x41bd47
mov ecx, 0x4823e0
call fcn.0041f0d8
push edi
mov ecx, 0x483750
call fcn.0041f0d8
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edi
mov dword [0x48374c], eax
call fcn.00428bce
mov eax, dword [0x48374c]
pop ecx
cmp eax, ebx
jne 0x41b931
cmp ebp, ebx
je 0x41b92a
cmp ebp, 0xffffffff
je 0x41b92a
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffff8
jmp 0x41bd47
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.AdvancedEntry
push eax
call edi
push str.EntryPoint0
mov dword [0x483700], eax
push dword [0x48374c]
call edi
push str.EntryPoint1
mov dword [0x483704], eax
push dword [0x48374c]
call edi
push str.EntryPoint1_5
mov dword [0x48370c], eax
push dword [0x48374c]
call edi
push str.EntryPoint2
mov dword [0x483708], eax
push dword [0x48374c]
call edi
push str.EntryPoint3
mov dword [0x483710], eax
push dword [0x48374c]
call edi
push str.EntryPoint4
mov dword [0x483714], eax
push dword [0x48374c]
call edi
push str.EntryPoint5
mov dword [0x483718], eax
push dword [0x48374c]
call edi
push str.EntryPoint6
mov dword [0x48371c], eax
push dword [0x48374c]
call edi
push str.EntryPoint7
mov dword [0x483720], eax
push dword [0x48374c]
call edi
push str.EntryPoint8
mov dword [0x483724], eax
push dword [0x48374c]
call edi
push str.EntryPoint9
mov dword [0x483728], eax
push dword [0x48374c]
call edi
push str.EntryPoint10
mov dword [0x48372c], eax
push dword [0x48374c]
call edi
push str.EntryPoint11
mov dword [0x483730], eax
push dword [0x48374c]
call edi
push str.EntryPoint12
mov dword [0x483734], eax
push dword [0x48374c]
call edi
push str.EntryPoint13
mov dword [0x483738], eax
push dword [0x48374c]
call edi
push str.EntryPointCustom
mov dword [0x48373c], eax
push dword [0x48374c]
call edi
push str.SystemInformation
mov dword [0x483740], eax
push dword [0x48374c]
call edi
push str.OnMessage
mov dword [0x483744], eax
push dword [0x48374c]
call edi
cmp eax, ebx
mov dword [0x483748], eax
je 0x41ba93
or byte [0x48260f], 0x80
push 0x90
mov ecx, esi
call fcn.0041fac3
cmp byte [0x48375c], bl
mov edi, eax
jne 0x41bc16
cmp edi, ebx
jle 0x41bb99
lea eax, [edi + edi*2]
lea eax, [eax*4 + 4]
push eax
call fcn.00428bd9
cmp eax, ebx
pop ecx
je 0x41bafd
mov dword [eax], edi
lea ecx, [edi - 1]
add eax, 4
cmp ecx, ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], eax
jl 0x41baff
inc ecx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x14]
call fcn.0041ef35
add dword [esp + 0x14], 0xc
dec dword [esp + 0x28]
jne 0x41bae3
mov eax, dword [esp + 0x24]
jmp 0x41baff
xor eax, eax
cmp eax, ebx
mov dword [0x482c50], eax
jne 0x41bb19
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push ebx
push ebx
push 0x94
mov ecx, esi
mov dword [0x482c54], edi
call fcn.0041fac3
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp edi, ebx
jle 0x41bb91
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], ebx
mov edi, ebx
lea ecx, [esp + 0x18]
call fcn.0041ef35
push 4
push ebp
lea ecx, [esp + 0x20]
call fcn.0041fc8b
push ebx
lea ecx, [esp + 0x1c]
call fcn.0041fac3
push eax
push ebp
lea ecx, [esp + 0x20]
call fcn.0041fc8b
lea eax, [esp + 0x18]
push eax
mov eax, dword [0x482c50]
lea ecx, [eax + edi]
call fcn.0041f146
lea ecx, [esp + 0x18]
call fcn.0041f06b
add edi, 0xc
dec dword [esp + 0x28]
jne 0x41bb43
cmp byte [0x48375c], bl
jne 0x41bc16
push 0xa0
mov ecx, esi
call fcn.0041fac3
push eax
mov ecx, 0x482408
mov dword [0x482ac0], eax
call fcn.00417c4f
test al, al
jne 0x41bbd0
cmp ebp, ebx
je 0x41bbc9
cmp ebp, 0xffffffff
je 0x41bbc9
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffff0
jmp 0x41bd47
mov edi, 0x482bd0
push 0x432518
mov ecx, edi
call fcn.0041f0d8
test byte [0x48260c], 0x40
mov ecx, 0x4827dc
je 0x41bbfc
call fcn.0041ff07
push eax
mov ecx, 0x482dec
jmp 0x41bc07
call fcn.0041ff07
push eax
mov ecx, 0x482de0
call fcn.0041ff07
push eax
push edi
call fcn.0041f62d
add esp, 0xc
push 0xa8
mov ecx, esi
call fcn.0041fac3
test eax, eax
je 0x41bd35
test byte [0x482612], 2
jne 0x41bd35
push 0x104
call fcn.00428bd9
mov edi, eax
pop ecx
cmp edi, ebx
mov dword [esp + 0x24], edi
jne 0x41bc5d
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push str..EXE
push edi
call fcn.00420ef6
pop ecx
pop ecx
push edi
mov ecx, 0x482c78
call fcn.0041f0d8
push 1
pop eax
mov dword [0x4836fc], eax
mov dword [0x482710], eax
mov eax, dword [0x483770]
cmp eax, ebx
je 0x41bc92
push eax
call fcn.00428bce
pop ecx
push 4
call fcn.00428bd9
cmp eax, ebx
pop ecx
mov dword [0x483770], eax
jne 0x41bcb4
mov ecx, 0x482e04
call fcn.0041ff07
push eax
call fcn.00420bbf
pop ecx
push 0xac
mov ecx, esi
call fcn.0041fac3
push 0xa8
mov ecx, esi
mov edi, eax
call fcn.0041fac3
add edi, eax
mov eax, dword [0x483770]
push 0xa8
mov ecx, esi
mov dword [eax], edi
call fcn.0041fac3
push eax
push 0xac
mov ecx, esi
call fcn.0041fac3
mov esi, dword [esp + 0x28]
push eax
push esi
mov ecx, 0x482bc0
call fcn.0041ff07
push eax
call fcn.00401ac0
add esp, 0x10
test eax, eax
push esi
je 0x41bd2f
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
call fcn.00428bce
cmp ebp, ebx
pop ecx
je 0x41bd2b
cmp ebp, 0xffffffff
je 0x41bd2b
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffff1
jmp 0x41bd47
call fcn.00428bce
pop ecx
cmp ebp, ebx
je 0x41bd45
cmp ebp, 0xffffffff
je 0x41bd45
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x128
ret