Function at 0x4148a7
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp - 0xc]
push ebx
test eax, eax
mov dword [ebp - 0xc], ecx
mov dword [ecx], 0x44b114
jne 0x415556
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414907
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414907
cmp byte [ebp - 7], 0x3a
jne 0x414907
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414945
call esi
test eax, eax
je 0x414931
cmp byte [ebp - 3], 0x3a
jne 0x414931
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414959
call esi
test eax, eax
je 0x414959
cmp byte [ebp - 3], 0x3a
jne 0x414959
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414973
cmp byte [ebp - 3], 0x3a
jne 0x414973
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41499f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41499f
cmp byte [ebp - 7], 0x3a
jne 0x41499f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4149d7
call esi
test eax, eax
je 0x4149c3
cmp byte [ebp - 3], 0x3a
jne 0x4149c3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4149eb
call esi
test eax, eax
je 0x4149eb
cmp byte [ebp - 3], 0x3a
jne 0x4149eb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414a05
cmp byte [ebp - 3], 0x3a
jne 0x414a05
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414a31
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414a31
cmp byte [ebp - 7], 0x3a
jne 0x414a31
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414a69
call esi
test eax, eax
je 0x414a55
cmp byte [ebp - 3], 0x3a
jne 0x414a55
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414a7d
call esi
test eax, eax
je 0x414a7d
cmp byte [ebp - 3], 0x3a
jne 0x414a7d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414a97
cmp byte [ebp - 3], 0x3a
jne 0x414a97
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414ad1
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414ad1
cmp byte [ebp - 7], 0x3a
jne 0x414ad1
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414b09
call esi
test eax, eax
je 0x414af5
cmp byte [ebp - 3], 0x3a
jne 0x414af5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414b1d
call esi
test eax, eax
je 0x414b1d
cmp byte [ebp - 3], 0x3a
jne 0x414b1d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414b37
cmp byte [ebp - 3], 0x3a
jne 0x414b37
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414b6e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414b6e
cmp byte [ebp - 7], 0x3a
jne 0x414b6e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414ba6
call esi
test eax, eax
je 0x414b92
cmp byte [ebp - 3], 0x3a
jne 0x414b92
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414bba
call esi
test eax, eax
je 0x414bba
cmp byte [ebp - 3], 0x3a
jne 0x414bba
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414bd4
cmp byte [ebp - 3], 0x3a
jne 0x414bd4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414c02
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414c02
cmp byte [ebp - 7], 0x3a
jne 0x414c02
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414c3a
call esi
test eax, eax
je 0x414c26
cmp byte [ebp - 3], 0x3a
jne 0x414c26
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414c4e
call esi
test eax, eax
je 0x414c4e
cmp byte [ebp - 3], 0x3a
jne 0x414c4e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414c68
cmp byte [ebp - 3], 0x3a
jne 0x414c68
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414c9c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414c9c
cmp byte [ebp - 7], 0x3a
jne 0x414c9c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414cd4
call esi
test eax, eax
je 0x414cc0
cmp byte [ebp - 3], 0x3a
jne 0x414cc0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414ce8
call esi
test eax, eax
je 0x414ce8
cmp byte [ebp - 3], 0x3a
jne 0x414ce8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414d02
cmp byte [ebp - 3], 0x3a
jne 0x414d02
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414d30
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414d30
cmp byte [ebp - 7], 0x3a
jne 0x414d30
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414d68
call esi
test eax, eax
je 0x414d54
cmp byte [ebp - 3], 0x3a
jne 0x414d54
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414d7c
call esi
test eax, eax
je 0x414d7c
cmp byte [ebp - 3], 0x3a
jne 0x414d7c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414d96
cmp byte [ebp - 3], 0x3a
jne 0x414d96
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414dc2
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414dc2
cmp byte [ebp - 7], 0x3a
jne 0x414dc2
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414dfa
call esi
test eax, eax
je 0x414de6
cmp byte [ebp - 3], 0x3a
jne 0x414de6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414e0e
call esi
test eax, eax
je 0x414e0e
cmp byte [ebp - 3], 0x3a
jne 0x414e0e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414e28
cmp byte [ebp - 3], 0x3a
jne 0x414e28
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414e56
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414e56
cmp byte [ebp - 7], 0x3a
jne 0x414e56
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414e8e
call esi
test eax, eax
je 0x414e7a
cmp byte [ebp - 3], 0x3a
jne 0x414e7a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414ea2
call esi
test eax, eax
je 0x414ea2
cmp byte [ebp - 3], 0x3a
jne 0x414ea2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414ebc
cmp byte [ebp - 3], 0x3a
jne 0x414ebc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414ee6
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414ee6
cmp byte [ebp - 7], 0x3a
jne 0x414ee6
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414f1e
call esi
test eax, eax
je 0x414f0a
cmp byte [ebp - 3], 0x3a
jne 0x414f0a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414f32
call esi
test eax, eax
je 0x414f32
cmp byte [ebp - 3], 0x3a
jne 0x414f32
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414f4c
cmp byte [ebp - 3], 0x3a
jne 0x414f4c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x414f7b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x414f7b
cmp byte [ebp - 7], 0x3a
jne 0x414f7b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x414fb3
call esi
test eax, eax
je 0x414f9f
cmp byte [ebp - 3], 0x3a
jne 0x414f9f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x414fc7
call esi
test eax, eax
je 0x414fc7
cmp byte [ebp - 3], 0x3a
jne 0x414fc7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x414fe1
cmp byte [ebp - 3], 0x3a
jne 0x414fe1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41500f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41500f
cmp byte [ebp - 7], 0x3a
jne 0x41500f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x415047
call esi
test eax, eax
je 0x415033
cmp byte [ebp - 3], 0x3a
jne 0x415033
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41505b
call esi
test eax, eax
je 0x41505b
cmp byte [ebp - 3], 0x3a
jne 0x41505b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x415075
cmp byte [ebp - 3], 0x3a
jne 0x415075
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4150a3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4150a3
cmp byte [ebp - 7], 0x3a
jne 0x4150a3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4150db
call esi
test eax, eax
je 0x4150c7
cmp byte [ebp - 3], 0x3a
jne 0x4150c7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4150ef
call esi
test eax, eax
je 0x4150ef
cmp byte [ebp - 3], 0x3a
jne 0x4150ef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x415109
cmp byte [ebp - 3], 0x3a
jne 0x415109
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x415135
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x415135
cmp byte [ebp - 7], 0x3a
jne 0x415135
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41516d
call esi
test eax, eax
je 0x415159
cmp byte [ebp - 3], 0x3a
jne 0x415159
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x415181
call esi
test eax, eax
je 0x415181
cmp byte [ebp - 3], 0x3a
jne 0x415181
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41519b
cmp byte [ebp - 3], 0x3a
jne 0x41519b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4151cb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4151cb
cmp byte [ebp - 7], 0x3a
jne 0x4151cb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x415203
call esi
test eax, eax
je 0x4151ef
cmp byte [ebp - 3], 0x3a
jne 0x4151ef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x415217
call esi
test eax, eax
je 0x415217
cmp byte [ebp - 3], 0x3a
jne 0x415217
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x415231
cmp byte [ebp - 3], 0x3a
jne 0x415231
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41526a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41526a
cmp byte [ebp - 7], 0x3a
jne 0x41526a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4152a2
call esi
test eax, eax
je 0x41528e
cmp byte [ebp - 3], 0x3a
jne 0x41528e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4152b6
call esi
test eax, eax
je 0x4152b6
cmp byte [ebp - 3], 0x3a
jne 0x4152b6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4152d0
cmp byte [ebp - 3], 0x3a
jne 0x4152d0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4152ff
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4152ff
cmp byte [ebp - 7], 0x3a
jne 0x4152ff
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x415337
call esi
test eax, eax
je 0x415323
cmp byte [ebp - 3], 0x3a
jne 0x415323
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41534b
call esi
test eax, eax
je 0x41534b
cmp byte [ebp - 3], 0x3a
jne 0x41534b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x415365
cmp byte [ebp - 3], 0x3a
jne 0x415365
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x415391
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x415391
cmp byte [ebp - 7], 0x3a
jne 0x415391
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4153c9
call esi
test eax, eax
je 0x4153b5
cmp byte [ebp - 3], 0x3a
jne 0x4153b5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4153dd
call esi
test eax, eax
je 0x4153dd
cmp byte [ebp - 3], 0x3a
jne 0x4153dd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4153f7
cmp byte [ebp - 3], 0x3a
jne 0x4153f7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x415427
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x415427
cmp byte [ebp - 7], 0x3a
jne 0x415427
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41545f
call esi
test eax, eax
je 0x41544b
cmp byte [ebp - 3], 0x3a
jne 0x41544b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x415473
call esi
test eax, eax
je 0x415473
cmp byte [ebp - 3], 0x3a
jne 0x415473
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41548d
cmp byte [ebp - 3], 0x3a
jne 0x41548d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4154ee
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4154ee
cmp byte [ebp - 7], 0x3a
jne 0x4154ee
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x415526
call esi
test eax, eax
je 0x415512
cmp byte [ebp - 3], 0x3a
jne 0x415512
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41553a
call esi
test eax, eax
je 0x41553a
cmp byte [ebp - 3], 0x3a
jne 0x41553a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x415556
cmp byte [ebp - 3], 0x3a
jne 0x415556
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
pop ebx
leave
ret