Function at 0x42fe7c
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
mov eax, 0x44958c
call fcn.00448b30
sub esp, 0x68
lea eax, [ebp + 8]
push ebx
test eax, eax
push esi
mov dword [ebp - 0x18], ecx
jne 0x430b2b
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42fedc
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42fedc
cmp byte [ebp - 0x13], 0x3a
jne 0x42fedc
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42ff1b
call esi
test eax, eax
je 0x42ff07
cmp byte [ebp - 0xf], 0x3a
jne 0x42ff07
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x42ff2f
call esi
test eax, eax
je 0x42ff2f
cmp byte [ebp - 0xf], 0x3a
jne 0x42ff2f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42ff49
cmp byte [ebp - 0xf], 0x3a
jne 0x42ff49
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42ff75
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42ff75
cmp byte [ebp - 0x13], 0x3a
jne 0x42ff75
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42ffad
call esi
test eax, eax
je 0x42ff99
cmp byte [ebp - 0xf], 0x3a
jne 0x42ff99
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x42ffc1
call esi
test eax, eax
je 0x42ffc1
cmp byte [ebp - 0xf], 0x3a
jne 0x42ffc1
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42ffdb
cmp byte [ebp - 0xf], 0x3a
jne 0x42ffdb
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430007
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430007
cmp byte [ebp - 0x13], 0x3a
jne 0x430007
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43003f
call esi
test eax, eax
je 0x43002b
cmp byte [ebp - 0xf], 0x3a
jne 0x43002b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430053
call esi
test eax, eax
je 0x430053
cmp byte [ebp - 0xf], 0x3a
jne 0x430053
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43006d
cmp byte [ebp - 0xf], 0x3a
jne 0x43006d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4300a7
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4300a7
cmp byte [ebp - 0x13], 0x3a
jne 0x4300a7
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4300df
call esi
test eax, eax
je 0x4300cb
cmp byte [ebp - 0xf], 0x3a
jne 0x4300cb
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4300f3
call esi
test eax, eax
je 0x4300f3
cmp byte [ebp - 0xf], 0x3a
jne 0x4300f3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43010d
cmp byte [ebp - 0xf], 0x3a
jne 0x43010d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430144
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430144
cmp byte [ebp - 0x13], 0x3a
jne 0x430144
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43017c
call esi
test eax, eax
je 0x430168
cmp byte [ebp - 0xf], 0x3a
jne 0x430168
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430190
call esi
test eax, eax
je 0x430190
cmp byte [ebp - 0xf], 0x3a
jne 0x430190
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4301aa
cmp byte [ebp - 0xf], 0x3a
jne 0x4301aa
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4301d8
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4301d8
cmp byte [ebp - 0x13], 0x3a
jne 0x4301d8
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x430210
call esi
test eax, eax
je 0x4301fc
cmp byte [ebp - 0xf], 0x3a
jne 0x4301fc
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430224
call esi
test eax, eax
je 0x430224
cmp byte [ebp - 0xf], 0x3a
jne 0x430224
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43023e
cmp byte [ebp - 0xf], 0x3a
jne 0x43023e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430272
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430272
cmp byte [ebp - 0x13], 0x3a
jne 0x430272
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4302aa
call esi
test eax, eax
je 0x430296
cmp byte [ebp - 0xf], 0x3a
jne 0x430296
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4302be
call esi
test eax, eax
je 0x4302be
cmp byte [ebp - 0xf], 0x3a
jne 0x4302be
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4302d8
cmp byte [ebp - 0xf], 0x3a
jne 0x4302d8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430306
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430306
cmp byte [ebp - 0x13], 0x3a
jne 0x430306
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43033e
call esi
test eax, eax
je 0x43032a
cmp byte [ebp - 0xf], 0x3a
jne 0x43032a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430352
call esi
test eax, eax
je 0x430352
cmp byte [ebp - 0xf], 0x3a
jne 0x430352
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43036c
cmp byte [ebp - 0xf], 0x3a
jne 0x43036c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430398
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430398
cmp byte [ebp - 0x13], 0x3a
jne 0x430398
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4303d0
call esi
test eax, eax
je 0x4303bc
cmp byte [ebp - 0xf], 0x3a
jne 0x4303bc
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4303e4
call esi
test eax, eax
je 0x4303e4
cmp byte [ebp - 0xf], 0x3a
jne 0x4303e4
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4303fe
cmp byte [ebp - 0xf], 0x3a
jne 0x4303fe
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43042c
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43042c
cmp byte [ebp - 0x13], 0x3a
jne 0x43042c
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x430464
call esi
test eax, eax
je 0x430450
cmp byte [ebp - 0xf], 0x3a
jne 0x430450
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430478
call esi
test eax, eax
je 0x430478
cmp byte [ebp - 0xf], 0x3a
jne 0x430478
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x430492
cmp byte [ebp - 0xf], 0x3a
jne 0x430492
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4304bc
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4304bc
cmp byte [ebp - 0x13], 0x3a
jne 0x4304bc
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4304f4
call esi
test eax, eax
je 0x4304e0
cmp byte [ebp - 0xf], 0x3a
jne 0x4304e0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430508
call esi
test eax, eax
je 0x430508
cmp byte [ebp - 0xf], 0x3a
jne 0x430508
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x430522
cmp byte [ebp - 0xf], 0x3a
jne 0x430522
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430551
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430551
cmp byte [ebp - 0x13], 0x3a
jne 0x430551
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x430589
call esi
test eax, eax
je 0x430575
cmp byte [ebp - 0xf], 0x3a
jne 0x430575
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43059d
call esi
test eax, eax
je 0x43059d
cmp byte [ebp - 0xf], 0x3a
jne 0x43059d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4305b7
cmp byte [ebp - 0xf], 0x3a
jne 0x4305b7
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4305e5
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4305e5
cmp byte [ebp - 0x13], 0x3a
jne 0x4305e5
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43061d
call esi
test eax, eax
je 0x430609
cmp byte [ebp - 0xf], 0x3a
jne 0x430609
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430631
call esi
test eax, eax
je 0x430631
cmp byte [ebp - 0xf], 0x3a
jne 0x430631
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43064b
cmp byte [ebp - 0xf], 0x3a
jne 0x43064b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430679
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430679
cmp byte [ebp - 0x13], 0x3a
jne 0x430679
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4306b1
call esi
test eax, eax
je 0x43069d
cmp byte [ebp - 0xf], 0x3a
jne 0x43069d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4306c5
call esi
test eax, eax
je 0x4306c5
cmp byte [ebp - 0xf], 0x3a
jne 0x4306c5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4306df
cmp byte [ebp - 0xf], 0x3a
jne 0x4306df
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43070b
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43070b
cmp byte [ebp - 0x13], 0x3a
jne 0x43070b
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x430743
call esi
test eax, eax
je 0x43072f
cmp byte [ebp - 0xf], 0x3a
jne 0x43072f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430757
call esi
test eax, eax
je 0x430757
cmp byte [ebp - 0xf], 0x3a
jne 0x430757
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x430771
cmp byte [ebp - 0xf], 0x3a
jne 0x430771
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4307a1
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4307a1
cmp byte [ebp - 0x13], 0x3a
jne 0x4307a1
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4307d9
call esi
test eax, eax
je 0x4307c5
cmp byte [ebp - 0xf], 0x3a
jne 0x4307c5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4307ed
call esi
test eax, eax
je 0x4307ed
cmp byte [ebp - 0xf], 0x3a
jne 0x4307ed
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x430807
cmp byte [ebp - 0xf], 0x3a
jne 0x430807
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430840
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430840
cmp byte [ebp - 0x13], 0x3a
jne 0x430840
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x430878
call esi
test eax, eax
je 0x430864
cmp byte [ebp - 0xf], 0x3a
jne 0x430864
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43088c
call esi
test eax, eax
je 0x43088c
cmp byte [ebp - 0xf], 0x3a
jne 0x43088c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4308a6
cmp byte [ebp - 0xf], 0x3a
jne 0x4308a6
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4308d5
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4308d5
cmp byte [ebp - 0x13], 0x3a
jne 0x4308d5
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43090d
call esi
test eax, eax
je 0x4308f9
cmp byte [ebp - 0xf], 0x3a
jne 0x4308f9
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430921
call esi
test eax, eax
je 0x430921
cmp byte [ebp - 0xf], 0x3a
jne 0x430921
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43093b
cmp byte [ebp - 0xf], 0x3a
jne 0x43093b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430967
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430967
cmp byte [ebp - 0x13], 0x3a
jne 0x430967
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43099f
call esi
test eax, eax
je 0x43098b
cmp byte [ebp - 0xf], 0x3a
jne 0x43098b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4309b3
call esi
test eax, eax
je 0x4309b3
cmp byte [ebp - 0xf], 0x3a
jne 0x4309b3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4309cd
cmp byte [ebp - 0xf], 0x3a
jne 0x4309cd
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4309fd
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4309fd
cmp byte [ebp - 0x13], 0x3a
jne 0x4309fd
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x430a35
call esi
test eax, eax
je 0x430a21
cmp byte [ebp - 0xf], 0x3a
jne 0x430a21
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430a49
call esi
test eax, eax
je 0x430a49
cmp byte [ebp - 0xf], 0x3a
jne 0x430a49
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x430a63
cmp byte [ebp - 0xf], 0x3a
jne 0x430a63
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x430ac4
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x430ac4
cmp byte [ebp - 0x13], 0x3a
jne 0x430ac4
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x430afc
call esi
test eax, eax
je 0x430ae8
cmp byte [ebp - 0xf], 0x3a
jne 0x430ae8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x430b10
call esi
test eax, eax
je 0x430b10
cmp byte [ebp - 0xf], 0x3a
jne 0x430b10
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
pop edi
je 0x430b2b
cmp byte [ebp - 0xf], 0x3a
jne 0x430b2b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
call fcn.00417c7c
xor esi, esi
cmp eax, esi
jne 0x430b41
xor eax, eax
jmp 0x430b7c
mov eax, dword [ebp - 0x18]
push 0x5e
push 0x400
lea ecx, [ebp - 0x74]
push dword [eax + 8]
push dword [eax + 4]
call fcn.00435f47
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x74]
mov dword [ebp - 4], esi
call fcn.00436000
test eax, eax
jne 0x430b6e
push 1
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74]
call fcn.00435ff2
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4