Function at 0x41c5f4
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp - 0xc]
push ebx
test eax, eax
mov dword [ebp - 0xc], ecx
mov dword [ecx], 0x44b120
jne 0x41d2a3
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c654
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c654
cmp byte [ebp - 7], 0x3a
jne 0x41c654
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c692
call esi
test eax, eax
je 0x41c67e
cmp byte [ebp - 3], 0x3a
jne 0x41c67e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c6a6
call esi
test eax, eax
je 0x41c6a6
cmp byte [ebp - 3], 0x3a
jne 0x41c6a6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c6c0
cmp byte [ebp - 3], 0x3a
jne 0x41c6c0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c6ec
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c6ec
cmp byte [ebp - 7], 0x3a
jne 0x41c6ec
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c724
call esi
test eax, eax
je 0x41c710
cmp byte [ebp - 3], 0x3a
jne 0x41c710
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c738
call esi
test eax, eax
je 0x41c738
cmp byte [ebp - 3], 0x3a
jne 0x41c738
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c752
cmp byte [ebp - 3], 0x3a
jne 0x41c752
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c77e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c77e
cmp byte [ebp - 7], 0x3a
jne 0x41c77e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c7b6
call esi
test eax, eax
je 0x41c7a2
cmp byte [ebp - 3], 0x3a
jne 0x41c7a2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c7ca
call esi
test eax, eax
je 0x41c7ca
cmp byte [ebp - 3], 0x3a
jne 0x41c7ca
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c7e4
cmp byte [ebp - 3], 0x3a
jne 0x41c7e4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c81e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c81e
cmp byte [ebp - 7], 0x3a
jne 0x41c81e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c856
call esi
test eax, eax
je 0x41c842
cmp byte [ebp - 3], 0x3a
jne 0x41c842
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c86a
call esi
test eax, eax
je 0x41c86a
cmp byte [ebp - 3], 0x3a
jne 0x41c86a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c884
cmp byte [ebp - 3], 0x3a
jne 0x41c884
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c8bb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c8bb
cmp byte [ebp - 7], 0x3a
jne 0x41c8bb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c8f3
call esi
test eax, eax
je 0x41c8df
cmp byte [ebp - 3], 0x3a
jne 0x41c8df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c907
call esi
test eax, eax
je 0x41c907
cmp byte [ebp - 3], 0x3a
jne 0x41c907
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c921
cmp byte [ebp - 3], 0x3a
jne 0x41c921
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c94f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c94f
cmp byte [ebp - 7], 0x3a
jne 0x41c94f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c987
call esi
test eax, eax
je 0x41c973
cmp byte [ebp - 3], 0x3a
jne 0x41c973
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c99b
call esi
test eax, eax
je 0x41c99b
cmp byte [ebp - 3], 0x3a
jne 0x41c99b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c9b5
cmp byte [ebp - 3], 0x3a
jne 0x41c9b5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c9e9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c9e9
cmp byte [ebp - 7], 0x3a
jne 0x41c9e9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41ca21
call esi
test eax, eax
je 0x41ca0d
cmp byte [ebp - 3], 0x3a
jne 0x41ca0d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41ca35
call esi
test eax, eax
je 0x41ca35
cmp byte [ebp - 3], 0x3a
jne 0x41ca35
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41ca4f
cmp byte [ebp - 3], 0x3a
jne 0x41ca4f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41ca7d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41ca7d
cmp byte [ebp - 7], 0x3a
jne 0x41ca7d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cab5
call esi
test eax, eax
je 0x41caa1
cmp byte [ebp - 3], 0x3a
jne 0x41caa1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cac9
call esi
test eax, eax
je 0x41cac9
cmp byte [ebp - 3], 0x3a
jne 0x41cac9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cae3
cmp byte [ebp - 3], 0x3a
jne 0x41cae3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41cb0f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41cb0f
cmp byte [ebp - 7], 0x3a
jne 0x41cb0f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cb47
call esi
test eax, eax
je 0x41cb33
cmp byte [ebp - 3], 0x3a
jne 0x41cb33
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cb5b
call esi
test eax, eax
je 0x41cb5b
cmp byte [ebp - 3], 0x3a
jne 0x41cb5b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cb75
cmp byte [ebp - 3], 0x3a
jne 0x41cb75
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41cba3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41cba3
cmp byte [ebp - 7], 0x3a
jne 0x41cba3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cbdb
call esi
test eax, eax
je 0x41cbc7
cmp byte [ebp - 3], 0x3a
jne 0x41cbc7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cbef
call esi
test eax, eax
je 0x41cbef
cmp byte [ebp - 3], 0x3a
jne 0x41cbef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cc09
cmp byte [ebp - 3], 0x3a
jne 0x41cc09
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41cc33
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41cc33
cmp byte [ebp - 7], 0x3a
jne 0x41cc33
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cc6b
call esi
test eax, eax
je 0x41cc57
cmp byte [ebp - 3], 0x3a
jne 0x41cc57
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cc7f
call esi
test eax, eax
je 0x41cc7f
cmp byte [ebp - 3], 0x3a
jne 0x41cc7f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cc99
cmp byte [ebp - 3], 0x3a
jne 0x41cc99
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41ccc8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41ccc8
cmp byte [ebp - 7], 0x3a
jne 0x41ccc8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cd00
call esi
test eax, eax
je 0x41ccec
cmp byte [ebp - 3], 0x3a
jne 0x41ccec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cd14
call esi
test eax, eax
je 0x41cd14
cmp byte [ebp - 3], 0x3a
jne 0x41cd14
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cd2e
cmp byte [ebp - 3], 0x3a
jne 0x41cd2e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41cd5c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41cd5c
cmp byte [ebp - 7], 0x3a
jne 0x41cd5c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cd94
call esi
test eax, eax
je 0x41cd80
cmp byte [ebp - 3], 0x3a
jne 0x41cd80
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cda8
call esi
test eax, eax
je 0x41cda8
cmp byte [ebp - 3], 0x3a
jne 0x41cda8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cdc2
cmp byte [ebp - 3], 0x3a
jne 0x41cdc2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41cdf0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41cdf0
cmp byte [ebp - 7], 0x3a
jne 0x41cdf0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41ce28
call esi
test eax, eax
je 0x41ce14
cmp byte [ebp - 3], 0x3a
jne 0x41ce14
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41ce3c
call esi
test eax, eax
je 0x41ce3c
cmp byte [ebp - 3], 0x3a
jne 0x41ce3c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41ce56
cmp byte [ebp - 3], 0x3a
jne 0x41ce56
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41ce82
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41ce82
cmp byte [ebp - 7], 0x3a
jne 0x41ce82
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41ceba
call esi
test eax, eax
je 0x41cea6
cmp byte [ebp - 3], 0x3a
jne 0x41cea6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cece
call esi
test eax, eax
je 0x41cece
cmp byte [ebp - 3], 0x3a
jne 0x41cece
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cee8
cmp byte [ebp - 3], 0x3a
jne 0x41cee8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41cf18
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41cf18
cmp byte [ebp - 7], 0x3a
jne 0x41cf18
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cf50
call esi
test eax, eax
je 0x41cf3c
cmp byte [ebp - 3], 0x3a
jne 0x41cf3c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41cf64
call esi
test eax, eax
je 0x41cf64
cmp byte [ebp - 3], 0x3a
jne 0x41cf64
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41cf7e
cmp byte [ebp - 3], 0x3a
jne 0x41cf7e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41cfb7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41cfb7
cmp byte [ebp - 7], 0x3a
jne 0x41cfb7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41cfef
call esi
test eax, eax
je 0x41cfdb
cmp byte [ebp - 3], 0x3a
jne 0x41cfdb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41d003
call esi
test eax, eax
je 0x41d003
cmp byte [ebp - 3], 0x3a
jne 0x41d003
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41d01d
cmp byte [ebp - 3], 0x3a
jne 0x41d01d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41d04c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41d04c
cmp byte [ebp - 7], 0x3a
jne 0x41d04c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41d084
call esi
test eax, eax
je 0x41d070
cmp byte [ebp - 3], 0x3a
jne 0x41d070
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41d098
call esi
test eax, eax
je 0x41d098
cmp byte [ebp - 3], 0x3a
jne 0x41d098
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41d0b2
cmp byte [ebp - 3], 0x3a
jne 0x41d0b2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41d0de
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41d0de
cmp byte [ebp - 7], 0x3a
jne 0x41d0de
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41d116
call esi
test eax, eax
je 0x41d102
cmp byte [ebp - 3], 0x3a
jne 0x41d102
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41d12a
call esi
test eax, eax
je 0x41d12a
cmp byte [ebp - 3], 0x3a
jne 0x41d12a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41d144
cmp byte [ebp - 3], 0x3a
jne 0x41d144
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41d174
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41d174
cmp byte [ebp - 7], 0x3a
jne 0x41d174
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41d1ac
call esi
test eax, eax
je 0x41d198
cmp byte [ebp - 3], 0x3a
jne 0x41d198
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41d1c0
call esi
test eax, eax
je 0x41d1c0
cmp byte [ebp - 3], 0x3a
jne 0x41d1c0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41d1da
cmp byte [ebp - 3], 0x3a
jne 0x41d1da
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41d23b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41d23b
cmp byte [ebp - 7], 0x3a
jne 0x41d23b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41d273
call esi
test eax, eax
je 0x41d25f
cmp byte [ebp - 3], 0x3a
jne 0x41d25f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41d287
call esi
test eax, eax
je 0x41d287
cmp byte [ebp - 3], 0x3a
jne 0x41d287
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x41d2a3
cmp byte [ebp - 3], 0x3a
jne 0x41d2a3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
pop ebx
leave
ret