Function at 0x4331c2
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
mov eax, 0x4495a3
call fcn.00448b30
mov eax, 0x3f7c4
call fcn.00448b60
lea eax, [ebp - 0x18]
push ebx
push esi
push edi
test eax, eax
mov dword [ebp - 0x20], ecx
jne 0x433e77
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x43322a
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43322a
cmp byte [ebp - 0x13], 0x3a
jne 0x43322a
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433268
call esi
test eax, eax
je 0x433254
cmp byte [ebp - 0xf], 0x3a
jne 0x433254
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43327c
call esi
test eax, eax
je 0x43327c
cmp byte [ebp - 0xf], 0x3a
jne 0x43327c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433296
cmp byte [ebp - 0xf], 0x3a
jne 0x433296
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x4332c2
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4332c2
cmp byte [ebp - 0x13], 0x3a
jne 0x4332c2
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4332fa
call esi
test eax, eax
je 0x4332e6
cmp byte [ebp - 0xf], 0x3a
jne 0x4332e6
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43330e
call esi
test eax, eax
je 0x43330e
cmp byte [ebp - 0xf], 0x3a
jne 0x43330e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433328
cmp byte [ebp - 0xf], 0x3a
jne 0x433328
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433354
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433354
cmp byte [ebp - 0x13], 0x3a
jne 0x433354
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43338c
call esi
test eax, eax
je 0x433378
cmp byte [ebp - 0xf], 0x3a
jne 0x433378
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4333a0
call esi
test eax, eax
je 0x4333a0
cmp byte [ebp - 0xf], 0x3a
jne 0x4333a0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4333ba
cmp byte [ebp - 0xf], 0x3a
jne 0x4333ba
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x4333f4
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4333f4
cmp byte [ebp - 0x13], 0x3a
jne 0x4333f4
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43342c
call esi
test eax, eax
je 0x433418
cmp byte [ebp - 0xf], 0x3a
jne 0x433418
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433440
call esi
test eax, eax
je 0x433440
cmp byte [ebp - 0xf], 0x3a
jne 0x433440
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43345a
cmp byte [ebp - 0xf], 0x3a
jne 0x43345a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433491
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433491
cmp byte [ebp - 0x13], 0x3a
jne 0x433491
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4334c9
call esi
test eax, eax
je 0x4334b5
cmp byte [ebp - 0xf], 0x3a
jne 0x4334b5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4334dd
call esi
test eax, eax
je 0x4334dd
cmp byte [ebp - 0xf], 0x3a
jne 0x4334dd
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4334f7
cmp byte [ebp - 0xf], 0x3a
jne 0x4334f7
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433525
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433525
cmp byte [ebp - 0x13], 0x3a
jne 0x433525
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43355d
call esi
test eax, eax
je 0x433549
cmp byte [ebp - 0xf], 0x3a
jne 0x433549
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433571
call esi
test eax, eax
je 0x433571
cmp byte [ebp - 0xf], 0x3a
jne 0x433571
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43358b
cmp byte [ebp - 0xf], 0x3a
jne 0x43358b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x4335bf
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4335bf
cmp byte [ebp - 0x13], 0x3a
jne 0x4335bf
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4335f7
call esi
test eax, eax
je 0x4335e3
cmp byte [ebp - 0xf], 0x3a
jne 0x4335e3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43360b
call esi
test eax, eax
je 0x43360b
cmp byte [ebp - 0xf], 0x3a
jne 0x43360b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433625
cmp byte [ebp - 0xf], 0x3a
jne 0x433625
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433653
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433653
cmp byte [ebp - 0x13], 0x3a
jne 0x433653
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43368b
call esi
test eax, eax
je 0x433677
cmp byte [ebp - 0xf], 0x3a
jne 0x433677
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43369f
call esi
test eax, eax
je 0x43369f
cmp byte [ebp - 0xf], 0x3a
jne 0x43369f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4336b9
cmp byte [ebp - 0xf], 0x3a
jne 0x4336b9
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x4336e5
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4336e5
cmp byte [ebp - 0x13], 0x3a
jne 0x4336e5
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43371d
call esi
test eax, eax
je 0x433709
cmp byte [ebp - 0xf], 0x3a
jne 0x433709
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433731
call esi
test eax, eax
je 0x433731
cmp byte [ebp - 0xf], 0x3a
jne 0x433731
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43374b
cmp byte [ebp - 0xf], 0x3a
jne 0x43374b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433779
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433779
cmp byte [ebp - 0x13], 0x3a
jne 0x433779
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4337b1
call esi
test eax, eax
je 0x43379d
cmp byte [ebp - 0xf], 0x3a
jne 0x43379d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4337c5
call esi
test eax, eax
je 0x4337c5
cmp byte [ebp - 0xf], 0x3a
jne 0x4337c5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4337df
cmp byte [ebp - 0xf], 0x3a
jne 0x4337df
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433809
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433809
cmp byte [ebp - 0x13], 0x3a
jne 0x433809
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433841
call esi
test eax, eax
je 0x43382d
cmp byte [ebp - 0xf], 0x3a
jne 0x43382d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433855
call esi
test eax, eax
je 0x433855
cmp byte [ebp - 0xf], 0x3a
jne 0x433855
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43386f
cmp byte [ebp - 0xf], 0x3a
jne 0x43386f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x43389e
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43389e
cmp byte [ebp - 0x13], 0x3a
jne 0x43389e
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4338d6
call esi
test eax, eax
je 0x4338c2
cmp byte [ebp - 0xf], 0x3a
jne 0x4338c2
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4338ea
call esi
test eax, eax
je 0x4338ea
cmp byte [ebp - 0xf], 0x3a
jne 0x4338ea
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433904
cmp byte [ebp - 0xf], 0x3a
jne 0x433904
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433932
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433932
cmp byte [ebp - 0x13], 0x3a
jne 0x433932
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43396a
call esi
test eax, eax
je 0x433956
cmp byte [ebp - 0xf], 0x3a
jne 0x433956
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43397e
call esi
test eax, eax
je 0x43397e
cmp byte [ebp - 0xf], 0x3a
jne 0x43397e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433998
cmp byte [ebp - 0xf], 0x3a
jne 0x433998
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x4339c6
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4339c6
cmp byte [ebp - 0x13], 0x3a
jne 0x4339c6
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4339fe
call esi
test eax, eax
je 0x4339ea
cmp byte [ebp - 0xf], 0x3a
jne 0x4339ea
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433a12
call esi
test eax, eax
je 0x433a12
cmp byte [ebp - 0xf], 0x3a
jne 0x433a12
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433a2c
cmp byte [ebp - 0xf], 0x3a
jne 0x433a2c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433a58
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433a58
cmp byte [ebp - 0x13], 0x3a
jne 0x433a58
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433a90
call esi
test eax, eax
je 0x433a7c
cmp byte [ebp - 0xf], 0x3a
jne 0x433a7c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433aa4
call esi
test eax, eax
je 0x433aa4
cmp byte [ebp - 0xf], 0x3a
jne 0x433aa4
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433abe
cmp byte [ebp - 0xf], 0x3a
jne 0x433abe
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433aee
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433aee
cmp byte [ebp - 0x13], 0x3a
jne 0x433aee
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433b26
call esi
test eax, eax
je 0x433b12
cmp byte [ebp - 0xf], 0x3a
jne 0x433b12
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433b3a
call esi
test eax, eax
je 0x433b3a
cmp byte [ebp - 0xf], 0x3a
jne 0x433b3a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433b54
cmp byte [ebp - 0xf], 0x3a
jne 0x433b54
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433b8d
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433b8d
cmp byte [ebp - 0x13], 0x3a
jne 0x433b8d
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433bc5
call esi
test eax, eax
je 0x433bb1
cmp byte [ebp - 0xf], 0x3a
jne 0x433bb1
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433bd9
call esi
test eax, eax
je 0x433bd9
cmp byte [ebp - 0xf], 0x3a
jne 0x433bd9
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433bf3
cmp byte [ebp - 0xf], 0x3a
jne 0x433bf3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433c22
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433c22
cmp byte [ebp - 0x13], 0x3a
jne 0x433c22
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433c5a
call esi
test eax, eax
je 0x433c46
cmp byte [ebp - 0xf], 0x3a
jne 0x433c46
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433c6e
call esi
test eax, eax
je 0x433c6e
cmp byte [ebp - 0xf], 0x3a
jne 0x433c6e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433c88
cmp byte [ebp - 0xf], 0x3a
jne 0x433c88
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433cb4
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433cb4
cmp byte [ebp - 0x13], 0x3a
jne 0x433cb4
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433cec
call esi
test eax, eax
je 0x433cd8
cmp byte [ebp - 0xf], 0x3a
jne 0x433cd8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433d00
call esi
test eax, eax
je 0x433d00
cmp byte [ebp - 0xf], 0x3a
jne 0x433d00
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433d1a
cmp byte [ebp - 0xf], 0x3a
jne 0x433d1a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433d4a
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433d4a
cmp byte [ebp - 0x13], 0x3a
jne 0x433d4a
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433d82
call esi
test eax, eax
je 0x433d6e
cmp byte [ebp - 0xf], 0x3a
jne 0x433d6e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433d96
call esi
test eax, eax
je 0x433d96
cmp byte [ebp - 0xf], 0x3a
jne 0x433d96
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433db0
cmp byte [ebp - 0xf], 0x3a
jne 0x433db0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x433e11
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x433e11
cmp byte [ebp - 0x13], 0x3a
jne 0x433e11
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433e49
call esi
test eax, eax
je 0x433e35
cmp byte [ebp - 0xf], 0x3a
jne 0x433e35
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x433e5d
call esi
test eax, eax
je 0x433e5d
cmp byte [ebp - 0xf], 0x3a
jne 0x433e5d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x433e77
cmp byte [ebp - 0xf], 0x3a
jne 0x433e77
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0x20]
push 0x7530
push dword [eax + 0x18]
mov eax, dword [0x4513d0]
call dword [eax + 0x70]
test eax, eax
je 0x433f91
cmp eax, 0xffffffff
je 0x433f91
push 0x1fbd0
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
and dword [ebp - 0x1c], 0
pop ecx
lea ecx, [ebp - 0x3f7d0]
mov dword [ebp - 0x18], eax
call fcn.0041fbfc
and dword [ebp - 4], 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3f7d0]
push dword [ebp - 0x18]
call fcn.00421594
cmp dword [ebp - 0x1c], 0
mov ebx, 0x104
je 0x433f18
mov eax, dword [ebp - 0x20]
push 0xbb8
push dword [eax + 0x18]
mov eax, dword [0x4513d0]
call dword [eax + 0x70]
xor esi, esi
cmp eax, esi
je 0x433f82
cmp eax, 0xffffffff
je 0x433f82
cmp dword [ebp - 0x1c], esi
jle 0x433f18
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
push edi
call fcn.00433fa0
inc esi
add edi, ebx
cmp esi, dword [ebp - 0x1c]
jl 0x433f07
mov esi, dword [ebp - 0x20]
mov eax, dword [0x4513d0]
push 0x1388
push dword [esi + 0x18]
call dword [eax + 0x70]
test eax, eax
je 0x433f82
cmp eax, 0xffffffff
je 0x433f82
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x3f7d0]
push eax
push dword [ebp - 0x18]
call fcn.0042230a
cmp dword [ebp - 0x1c], 0
je 0x433f18
mov eax, dword [0x4513d0]
push 0xbb8
push dword [esi + 0x18]
call dword [eax + 0x70]
test eax, eax
je 0x433f82
cmp eax, 0xffffffff
je 0x433f82
xor esi, esi
cmp dword [ebp - 0x1c], esi
jle 0x433f18
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
push edi
call fcn.00433fa0
inc esi
add edi, ebx
cmp esi, dword [ebp - 0x1c]
jl 0x433f6f
jmp 0x433f18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f7d0]
call fcn.004208d7
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret