Function at 0x40f86a
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x174
lea eax, [ebp - 0xc]
push ebx
push esi
push edi
test eax, eax
mov dword [ebp - 0xc], ecx
jne 0x410514
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40f8c7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40f8c7
cmp byte [ebp - 7], 0x3a
jne 0x40f8c7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40f905
call esi
test eax, eax
je 0x40f8f1
cmp byte [ebp - 3], 0x3a
jne 0x40f8f1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40f919
call esi
test eax, eax
je 0x40f919
cmp byte [ebp - 3], 0x3a
jne 0x40f919
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40f933
cmp byte [ebp - 3], 0x3a
jne 0x40f933
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40f95f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40f95f
cmp byte [ebp - 7], 0x3a
jne 0x40f95f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40f997
call esi
test eax, eax
je 0x40f983
cmp byte [ebp - 3], 0x3a
jne 0x40f983
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40f9ab
call esi
test eax, eax
je 0x40f9ab
cmp byte [ebp - 3], 0x3a
jne 0x40f9ab
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40f9c5
cmp byte [ebp - 3], 0x3a
jne 0x40f9c5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40f9f1
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40f9f1
cmp byte [ebp - 7], 0x3a
jne 0x40f9f1
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fa29
call esi
test eax, eax
je 0x40fa15
cmp byte [ebp - 3], 0x3a
jne 0x40fa15
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fa3d
call esi
test eax, eax
je 0x40fa3d
cmp byte [ebp - 3], 0x3a
jne 0x40fa3d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40fa57
cmp byte [ebp - 3], 0x3a
jne 0x40fa57
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fa91
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fa91
cmp byte [ebp - 7], 0x3a
jne 0x40fa91
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fac9
call esi
test eax, eax
je 0x40fab5
cmp byte [ebp - 3], 0x3a
jne 0x40fab5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fadd
call esi
test eax, eax
je 0x40fadd
cmp byte [ebp - 3], 0x3a
jne 0x40fadd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40faf7
cmp byte [ebp - 3], 0x3a
jne 0x40faf7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fb2e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fb2e
cmp byte [ebp - 7], 0x3a
jne 0x40fb2e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fb66
call esi
test eax, eax
je 0x40fb52
cmp byte [ebp - 3], 0x3a
jne 0x40fb52
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fb7a
call esi
test eax, eax
je 0x40fb7a
cmp byte [ebp - 3], 0x3a
jne 0x40fb7a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40fb94
cmp byte [ebp - 3], 0x3a
jne 0x40fb94
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fbc2
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fbc2
cmp byte [ebp - 7], 0x3a
jne 0x40fbc2
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fbfa
call esi
test eax, eax
je 0x40fbe6
cmp byte [ebp - 3], 0x3a
jne 0x40fbe6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fc0e
call esi
test eax, eax
je 0x40fc0e
cmp byte [ebp - 3], 0x3a
jne 0x40fc0e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40fc28
cmp byte [ebp - 3], 0x3a
jne 0x40fc28
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fc5c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fc5c
cmp byte [ebp - 7], 0x3a
jne 0x40fc5c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fc94
call esi
test eax, eax
je 0x40fc80
cmp byte [ebp - 3], 0x3a
jne 0x40fc80
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fca8
call esi
test eax, eax
je 0x40fca8
cmp byte [ebp - 3], 0x3a
jne 0x40fca8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40fcc2
cmp byte [ebp - 3], 0x3a
jne 0x40fcc2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fcf0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fcf0
cmp byte [ebp - 7], 0x3a
jne 0x40fcf0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fd28
call esi
test eax, eax
je 0x40fd14
cmp byte [ebp - 3], 0x3a
jne 0x40fd14
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fd3c
call esi
test eax, eax
je 0x40fd3c
cmp byte [ebp - 3], 0x3a
jne 0x40fd3c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40fd56
cmp byte [ebp - 3], 0x3a
jne 0x40fd56
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fd82
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fd82
cmp byte [ebp - 7], 0x3a
jne 0x40fd82
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fdba
call esi
test eax, eax
je 0x40fda6
cmp byte [ebp - 3], 0x3a
jne 0x40fda6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fdce
call esi
test eax, eax
je 0x40fdce
cmp byte [ebp - 3], 0x3a
jne 0x40fdce
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40fde8
cmp byte [ebp - 3], 0x3a
jne 0x40fde8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fe16
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fe16
cmp byte [ebp - 7], 0x3a
jne 0x40fe16
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fe4e
call esi
test eax, eax
je 0x40fe3a
cmp byte [ebp - 3], 0x3a
jne 0x40fe3a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fe62
call esi
test eax, eax
je 0x40fe62
cmp byte [ebp - 3], 0x3a
jne 0x40fe62
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40fe7c
cmp byte [ebp - 3], 0x3a
jne 0x40fe7c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40fea6
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40fea6
cmp byte [ebp - 7], 0x3a
jne 0x40fea6
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40fede
call esi
test eax, eax
je 0x40feca
cmp byte [ebp - 3], 0x3a
jne 0x40feca
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40fef2
call esi
test eax, eax
je 0x40fef2
cmp byte [ebp - 3], 0x3a
jne 0x40fef2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40ff0c
cmp byte [ebp - 3], 0x3a
jne 0x40ff0c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40ff3b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40ff3b
cmp byte [ebp - 7], 0x3a
jne 0x40ff3b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x40ff73
call esi
test eax, eax
je 0x40ff5f
cmp byte [ebp - 3], 0x3a
jne 0x40ff5f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x40ff87
call esi
test eax, eax
je 0x40ff87
cmp byte [ebp - 3], 0x3a
jne 0x40ff87
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x40ffa1
cmp byte [ebp - 3], 0x3a
jne 0x40ffa1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x40ffcf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x40ffcf
cmp byte [ebp - 7], 0x3a
jne 0x40ffcf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x410007
call esi
test eax, eax
je 0x40fff3
cmp byte [ebp - 3], 0x3a
jne 0x40fff3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41001b
call esi
test eax, eax
je 0x41001b
cmp byte [ebp - 3], 0x3a
jne 0x41001b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x410035
cmp byte [ebp - 3], 0x3a
jne 0x410035
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x410063
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x410063
cmp byte [ebp - 7], 0x3a
jne 0x410063
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41009b
call esi
test eax, eax
je 0x410087
cmp byte [ebp - 3], 0x3a
jne 0x410087
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4100af
call esi
test eax, eax
je 0x4100af
cmp byte [ebp - 3], 0x3a
jne 0x4100af
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4100c9
cmp byte [ebp - 3], 0x3a
jne 0x4100c9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4100f5
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4100f5
cmp byte [ebp - 7], 0x3a
jne 0x4100f5
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41012d
call esi
test eax, eax
je 0x410119
cmp byte [ebp - 3], 0x3a
jne 0x410119
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x410141
call esi
test eax, eax
je 0x410141
cmp byte [ebp - 3], 0x3a
jne 0x410141
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41015b
cmp byte [ebp - 3], 0x3a
jne 0x41015b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41018b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41018b
cmp byte [ebp - 7], 0x3a
jne 0x41018b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4101c3
call esi
test eax, eax
je 0x4101af
cmp byte [ebp - 3], 0x3a
jne 0x4101af
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4101d7
call esi
test eax, eax
je 0x4101d7
cmp byte [ebp - 3], 0x3a
jne 0x4101d7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4101f1
cmp byte [ebp - 3], 0x3a
jne 0x4101f1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41022a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41022a
cmp byte [ebp - 7], 0x3a
jne 0x41022a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x410262
call esi
test eax, eax
je 0x41024e
cmp byte [ebp - 3], 0x3a
jne 0x41024e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x410276
call esi
test eax, eax
je 0x410276
cmp byte [ebp - 3], 0x3a
jne 0x410276
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x410290
cmp byte [ebp - 3], 0x3a
jne 0x410290
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4102bf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4102bf
cmp byte [ebp - 7], 0x3a
jne 0x4102bf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4102f7
call esi
test eax, eax
je 0x4102e3
cmp byte [ebp - 3], 0x3a
jne 0x4102e3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41030b
call esi
test eax, eax
je 0x41030b
cmp byte [ebp - 3], 0x3a
jne 0x41030b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x410325
cmp byte [ebp - 3], 0x3a
jne 0x410325
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x410351
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x410351
cmp byte [ebp - 7], 0x3a
jne 0x410351
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x410389
call esi
test eax, eax
je 0x410375
cmp byte [ebp - 3], 0x3a
jne 0x410375
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41039d
call esi
test eax, eax
je 0x41039d
cmp byte [ebp - 3], 0x3a
jne 0x41039d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4103b7
cmp byte [ebp - 3], 0x3a
jne 0x4103b7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4103e7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4103e7
cmp byte [ebp - 7], 0x3a
jne 0x4103e7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41041f
call esi
test eax, eax
je 0x41040b
cmp byte [ebp - 3], 0x3a
jne 0x41040b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x410433
call esi
test eax, eax
je 0x410433
cmp byte [ebp - 3], 0x3a
jne 0x410433
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41044d
cmp byte [ebp - 3], 0x3a
jne 0x41044d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4104ae
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4104ae
cmp byte [ebp - 7], 0x3a
jne 0x4104ae
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4104e6
call esi
test eax, eax
je 0x4104d2
cmp byte [ebp - 3], 0x3a
jne 0x4104d2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4104fa
call esi
test eax, eax
je 0x4104fa
cmp byte [ebp - 3], 0x3a
jne 0x4104fa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x410514
cmp byte [ebp - 3], 0x3a
jne 0x410514
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov edi, dword [ebp - 0xc]
lea eax, [ebp - 0x110]
lea esi, [edi + 4]
push esi
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1e8]
pop ecx
lea eax, [ebp - 0x110]
pop ecx
push 1
push 0
push 0x2e
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1ec]
pop ecx
pop ecx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x174]
push 0
push 0x65
push 0x78
push 0x65
push 0x2e
push 0x20
push eax
call fcn.004105df
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x218]
add esp, 0x24
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
call fcn.00412f00
test eax, eax
jne 0x4105b9
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
push esi
call fcn.004121c0
test eax, eax
je 0x4105da
lea eax, [ebp - 0x110]
mov ecx, edi
push eax
call fcn.00413bd5
push dword [edi + 0x19118]
lea eax, [edi + 0x118]
mov ecx, edi
push eax
push dword [edi + 0x10c]
push dword [edi + 0x108]
push esi
call fcn.0041140e
pop edi
pop esi
pop ebx
leave
ret