Function at 0x41b85e
Capabilities:
Allocate thread local storage
Clear file content
Delete directory
Delete file
Get common file path
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
lea eax, [ebp - 0xc]
test eax, eax
mov dword [ebp - 0xc], esi
mov dword [esi], 0x44b118
jne 0x41c511
push edi
xor edi, edi
push edi
push edi
call dword [esi + 0x1b0]
push edi
push edi
push edi
call dword [esi + 0x1ac]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41b8c0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41b8c0
cmp byte [ebp - 7], 0x3a
jne 0x41b8c0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41b8fe
call esi
test eax, eax
je 0x41b8ea
cmp byte [ebp - 3], 0x3a
jne 0x41b8ea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41b912
call esi
test eax, eax
je 0x41b912
cmp byte [ebp - 3], 0x3a
jne 0x41b912
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41b92c
cmp byte [ebp - 3], 0x3a
jne 0x41b92c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41b958
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41b958
cmp byte [ebp - 7], 0x3a
jne 0x41b958
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41b990
call esi
test eax, eax
je 0x41b97c
cmp byte [ebp - 3], 0x3a
jne 0x41b97c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41b9a4
call esi
test eax, eax
je 0x41b9a4
cmp byte [ebp - 3], 0x3a
jne 0x41b9a4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41b9be
cmp byte [ebp - 3], 0x3a
jne 0x41b9be
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41b9ea
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41b9ea
cmp byte [ebp - 7], 0x3a
jne 0x41b9ea
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41ba22
call esi
test eax, eax
je 0x41ba0e
cmp byte [ebp - 3], 0x3a
jne 0x41ba0e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41ba36
call esi
test eax, eax
je 0x41ba36
cmp byte [ebp - 3], 0x3a
jne 0x41ba36
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41ba50
cmp byte [ebp - 3], 0x3a
jne 0x41ba50
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41ba8a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41ba8a
cmp byte [ebp - 7], 0x3a
jne 0x41ba8a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bac2
call esi
test eax, eax
je 0x41baae
cmp byte [ebp - 3], 0x3a
jne 0x41baae
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41bad6
call esi
test eax, eax
je 0x41bad6
cmp byte [ebp - 3], 0x3a
jne 0x41bad6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41baf0
cmp byte [ebp - 3], 0x3a
jne 0x41baf0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
push 0
call dword [eax + 0x48]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41bb27
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41bb27
cmp byte [ebp - 7], 0x3a
jne 0x41bb27
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bb5f
call esi
test eax, eax
je 0x41bb4b
cmp byte [ebp - 3], 0x3a
jne 0x41bb4b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41bb73
call esi
test eax, eax
je 0x41bb73
cmp byte [ebp - 3], 0x3a
jne 0x41bb73
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41bb8d
cmp byte [ebp - 3], 0x3a
jne 0x41bb8d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41bbbb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41bbbb
cmp byte [ebp - 7], 0x3a
jne 0x41bbbb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bbf3
call esi
test eax, eax
je 0x41bbdf
cmp byte [ebp - 3], 0x3a
jne 0x41bbdf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41bc07
call esi
test eax, eax
je 0x41bc07
cmp byte [ebp - 3], 0x3a
jne 0x41bc07
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41bc21
cmp byte [ebp - 3], 0x3a
jne 0x41bc21
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
push 0
call dword [eax + 0x7c]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41bc55
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41bc55
cmp byte [ebp - 7], 0x3a
jne 0x41bc55
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bc8d
call esi
test eax, eax
je 0x41bc79
cmp byte [ebp - 3], 0x3a
jne 0x41bc79
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41bca1
call esi
test eax, eax
je 0x41bca1
cmp byte [ebp - 3], 0x3a
jne 0x41bca1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41bcbb
cmp byte [ebp - 3], 0x3a
jne 0x41bcbb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41bce9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41bce9
cmp byte [ebp - 7], 0x3a
jne 0x41bce9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bd21
call esi
test eax, eax
je 0x41bd0d
cmp byte [ebp - 3], 0x3a
jne 0x41bd0d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41bd35
call esi
test eax, eax
je 0x41bd35
cmp byte [ebp - 3], 0x3a
jne 0x41bd35
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41bd4f
cmp byte [ebp - 3], 0x3a
jne 0x41bd4f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41bd7b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41bd7b
cmp byte [ebp - 7], 0x3a
jne 0x41bd7b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bdb3
call esi
test eax, eax
je 0x41bd9f
cmp byte [ebp - 3], 0x3a
jne 0x41bd9f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41bdc7
call esi
test eax, eax
je 0x41bdc7
cmp byte [ebp - 3], 0x3a
jne 0x41bdc7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41bde1
cmp byte [ebp - 3], 0x3a
jne 0x41bde1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41be0f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41be0f
cmp byte [ebp - 7], 0x3a
jne 0x41be0f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41be47
call esi
test eax, eax
je 0x41be33
cmp byte [ebp - 3], 0x3a
jne 0x41be33
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41be5b
call esi
test eax, eax
je 0x41be5b
cmp byte [ebp - 3], 0x3a
jne 0x41be5b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41be75
cmp byte [ebp - 3], 0x3a
jne 0x41be75
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41be9f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41be9f
cmp byte [ebp - 7], 0x3a
jne 0x41be9f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bed7
call esi
test eax, eax
je 0x41bec3
cmp byte [ebp - 3], 0x3a
jne 0x41bec3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41beeb
call esi
test eax, eax
je 0x41beeb
cmp byte [ebp - 3], 0x3a
jne 0x41beeb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41bf05
cmp byte [ebp - 3], 0x3a
jne 0x41bf05
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41bf34
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41bf34
cmp byte [ebp - 7], 0x3a
jne 0x41bf34
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41bf6c
call esi
test eax, eax
je 0x41bf58
cmp byte [ebp - 3], 0x3a
jne 0x41bf58
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41bf80
call esi
test eax, eax
je 0x41bf80
cmp byte [ebp - 3], 0x3a
jne 0x41bf80
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41bf9a
cmp byte [ebp - 3], 0x3a
jne 0x41bf9a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41bfc8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41bfc8
cmp byte [ebp - 7], 0x3a
jne 0x41bfc8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c000
call esi
test eax, eax
je 0x41bfec
cmp byte [ebp - 3], 0x3a
jne 0x41bfec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c014
call esi
test eax, eax
je 0x41c014
cmp byte [ebp - 3], 0x3a
jne 0x41c014
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c02e
cmp byte [ebp - 3], 0x3a
jne 0x41c02e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c05c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c05c
cmp byte [ebp - 7], 0x3a
jne 0x41c05c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c094
call esi
test eax, eax
je 0x41c080
cmp byte [ebp - 3], 0x3a
jne 0x41c080
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c0a8
call esi
test eax, eax
je 0x41c0a8
cmp byte [ebp - 3], 0x3a
jne 0x41c0a8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c0c2
cmp byte [ebp - 3], 0x3a
jne 0x41c0c2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c0ee
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c0ee
cmp byte [ebp - 7], 0x3a
jne 0x41c0ee
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c126
call esi
test eax, eax
je 0x41c112
cmp byte [ebp - 3], 0x3a
jne 0x41c112
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c13a
call esi
test eax, eax
je 0x41c13a
cmp byte [ebp - 3], 0x3a
jne 0x41c13a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c154
cmp byte [ebp - 3], 0x3a
jne 0x41c154
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c184
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c184
cmp byte [ebp - 7], 0x3a
jne 0x41c184
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c1bc
call esi
test eax, eax
je 0x41c1a8
cmp byte [ebp - 3], 0x3a
jne 0x41c1a8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c1d0
call esi
test eax, eax
je 0x41c1d0
cmp byte [ebp - 3], 0x3a
jne 0x41c1d0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c1ea
cmp byte [ebp - 3], 0x3a
jne 0x41c1ea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
mov eax, dword [ebp - 0xc]
call dword [eax + 0x30]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c223
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c223
cmp byte [ebp - 7], 0x3a
jne 0x41c223
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c25b
call esi
test eax, eax
je 0x41c247
cmp byte [ebp - 3], 0x3a
jne 0x41c247
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c26f
call esi
test eax, eax
je 0x41c26f
cmp byte [ebp - 3], 0x3a
jne 0x41c26f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c289
cmp byte [ebp - 3], 0x3a
jne 0x41c289
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c2b8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c2b8
cmp byte [ebp - 7], 0x3a
jne 0x41c2b8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c2f0
call esi
test eax, eax
je 0x41c2dc
cmp byte [ebp - 3], 0x3a
jne 0x41c2dc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c304
call esi
test eax, eax
je 0x41c304
cmp byte [ebp - 3], 0x3a
jne 0x41c304
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c31e
cmp byte [ebp - 3], 0x3a
jne 0x41c31e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
push 0
call dword [eax + 0x3c]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c34a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c34a
cmp byte [ebp - 7], 0x3a
jne 0x41c34a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c382
call esi
test eax, eax
je 0x41c36e
cmp byte [ebp - 3], 0x3a
jne 0x41c36e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c396
call esi
test eax, eax
je 0x41c396
cmp byte [ebp - 3], 0x3a
jne 0x41c396
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c3b0
cmp byte [ebp - 3], 0x3a
jne 0x41c3b0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
mov eax, dword [ebp - 0xc]
call dword [eax + 0xb0]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c3e3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c3e3
cmp byte [ebp - 7], 0x3a
jne 0x41c3e3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c41b
call esi
test eax, eax
je 0x41c407
cmp byte [ebp - 3], 0x3a
jne 0x41c407
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c42f
call esi
test eax, eax
je 0x41c42f
cmp byte [ebp - 3], 0x3a
jne 0x41c42f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41c449
cmp byte [ebp - 3], 0x3a
jne 0x41c449
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
mov eax, dword [ebp - 0xc]
call dword [eax + 0x4c]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41c4aa
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41c4aa
cmp byte [ebp - 7], 0x3a
jne 0x41c4aa
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41c4e2
call esi
test eax, eax
je 0x41c4ce
cmp byte [ebp - 3], 0x3a
jne 0x41c4ce
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41c4f6
call esi
test eax, eax
je 0x41c4f6
cmp byte [ebp - 3], 0x3a
jne 0x41c4f6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
pop edi
je 0x41c511
cmp byte [ebp - 3], 0x3a
jne 0x41c511
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
pop esi
pop ebx
leave
ret