Function at 0x42d2d8
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp - 0xc]
push ebx
test eax, eax
push esi
mov dword [ebp - 0xc], ecx
mov dword [ecx], 0x44b12c
jne 0x42df86
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d337
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d337
cmp byte [ebp - 7], 0x3a
jne 0x42d337
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d376
call esi
test eax, eax
je 0x42d362
cmp byte [ebp - 3], 0x3a
jne 0x42d362
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d38a
call esi
test eax, eax
je 0x42d38a
cmp byte [ebp - 3], 0x3a
jne 0x42d38a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d3a4
cmp byte [ebp - 3], 0x3a
jne 0x42d3a4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d3d0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d3d0
cmp byte [ebp - 7], 0x3a
jne 0x42d3d0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d408
call esi
test eax, eax
je 0x42d3f4
cmp byte [ebp - 3], 0x3a
jne 0x42d3f4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d41c
call esi
test eax, eax
je 0x42d41c
cmp byte [ebp - 3], 0x3a
jne 0x42d41c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d436
cmp byte [ebp - 3], 0x3a
jne 0x42d436
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d462
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d462
cmp byte [ebp - 7], 0x3a
jne 0x42d462
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d49a
call esi
test eax, eax
je 0x42d486
cmp byte [ebp - 3], 0x3a
jne 0x42d486
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d4ae
call esi
test eax, eax
je 0x42d4ae
cmp byte [ebp - 3], 0x3a
jne 0x42d4ae
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d4c8
cmp byte [ebp - 3], 0x3a
jne 0x42d4c8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d502
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d502
cmp byte [ebp - 7], 0x3a
jne 0x42d502
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d53a
call esi
test eax, eax
je 0x42d526
cmp byte [ebp - 3], 0x3a
jne 0x42d526
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d54e
call esi
test eax, eax
je 0x42d54e
cmp byte [ebp - 3], 0x3a
jne 0x42d54e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d568
cmp byte [ebp - 3], 0x3a
jne 0x42d568
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d59f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d59f
cmp byte [ebp - 7], 0x3a
jne 0x42d59f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d5d7
call esi
test eax, eax
je 0x42d5c3
cmp byte [ebp - 3], 0x3a
jne 0x42d5c3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d5eb
call esi
test eax, eax
je 0x42d5eb
cmp byte [ebp - 3], 0x3a
jne 0x42d5eb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d605
cmp byte [ebp - 3], 0x3a
jne 0x42d605
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d633
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d633
cmp byte [ebp - 7], 0x3a
jne 0x42d633
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d66b
call esi
test eax, eax
je 0x42d657
cmp byte [ebp - 3], 0x3a
jne 0x42d657
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d67f
call esi
test eax, eax
je 0x42d67f
cmp byte [ebp - 3], 0x3a
jne 0x42d67f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d699
cmp byte [ebp - 3], 0x3a
jne 0x42d699
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d6cd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d6cd
cmp byte [ebp - 7], 0x3a
jne 0x42d6cd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d705
call esi
test eax, eax
je 0x42d6f1
cmp byte [ebp - 3], 0x3a
jne 0x42d6f1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d719
call esi
test eax, eax
je 0x42d719
cmp byte [ebp - 3], 0x3a
jne 0x42d719
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d733
cmp byte [ebp - 3], 0x3a
jne 0x42d733
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d761
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d761
cmp byte [ebp - 7], 0x3a
jne 0x42d761
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d799
call esi
test eax, eax
je 0x42d785
cmp byte [ebp - 3], 0x3a
jne 0x42d785
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d7ad
call esi
test eax, eax
je 0x42d7ad
cmp byte [ebp - 3], 0x3a
jne 0x42d7ad
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d7c7
cmp byte [ebp - 3], 0x3a
jne 0x42d7c7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d7f3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d7f3
cmp byte [ebp - 7], 0x3a
jne 0x42d7f3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d82b
call esi
test eax, eax
je 0x42d817
cmp byte [ebp - 3], 0x3a
jne 0x42d817
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d83f
call esi
test eax, eax
je 0x42d83f
cmp byte [ebp - 3], 0x3a
jne 0x42d83f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d859
cmp byte [ebp - 3], 0x3a
jne 0x42d859
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d887
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d887
cmp byte [ebp - 7], 0x3a
jne 0x42d887
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d8bf
call esi
test eax, eax
je 0x42d8ab
cmp byte [ebp - 3], 0x3a
jne 0x42d8ab
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d8d3
call esi
test eax, eax
je 0x42d8d3
cmp byte [ebp - 3], 0x3a
jne 0x42d8d3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d8ed
cmp byte [ebp - 3], 0x3a
jne 0x42d8ed
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d917
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d917
cmp byte [ebp - 7], 0x3a
jne 0x42d917
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d94f
call esi
test eax, eax
je 0x42d93b
cmp byte [ebp - 3], 0x3a
jne 0x42d93b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d963
call esi
test eax, eax
je 0x42d963
cmp byte [ebp - 3], 0x3a
jne 0x42d963
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d97d
cmp byte [ebp - 3], 0x3a
jne 0x42d97d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d9ac
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d9ac
cmp byte [ebp - 7], 0x3a
jne 0x42d9ac
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d9e4
call esi
test eax, eax
je 0x42d9d0
cmp byte [ebp - 3], 0x3a
jne 0x42d9d0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d9f8
call esi
test eax, eax
je 0x42d9f8
cmp byte [ebp - 3], 0x3a
jne 0x42d9f8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42da12
cmp byte [ebp - 3], 0x3a
jne 0x42da12
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42da40
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42da40
cmp byte [ebp - 7], 0x3a
jne 0x42da40
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42da78
call esi
test eax, eax
je 0x42da64
cmp byte [ebp - 3], 0x3a
jne 0x42da64
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42da8c
call esi
test eax, eax
je 0x42da8c
cmp byte [ebp - 3], 0x3a
jne 0x42da8c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42daa6
cmp byte [ebp - 3], 0x3a
jne 0x42daa6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42dad4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42dad4
cmp byte [ebp - 7], 0x3a
jne 0x42dad4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42db0c
call esi
test eax, eax
je 0x42daf8
cmp byte [ebp - 3], 0x3a
jne 0x42daf8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42db20
call esi
test eax, eax
je 0x42db20
cmp byte [ebp - 3], 0x3a
jne 0x42db20
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42db3a
cmp byte [ebp - 3], 0x3a
jne 0x42db3a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42db66
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42db66
cmp byte [ebp - 7], 0x3a
jne 0x42db66
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42db9e
call esi
test eax, eax
je 0x42db8a
cmp byte [ebp - 3], 0x3a
jne 0x42db8a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42dbb2
call esi
test eax, eax
je 0x42dbb2
cmp byte [ebp - 3], 0x3a
jne 0x42dbb2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42dbcc
cmp byte [ebp - 3], 0x3a
jne 0x42dbcc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42dbfc
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42dbfc
cmp byte [ebp - 7], 0x3a
jne 0x42dbfc
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42dc34
call esi
test eax, eax
je 0x42dc20
cmp byte [ebp - 3], 0x3a
jne 0x42dc20
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42dc48
call esi
test eax, eax
je 0x42dc48
cmp byte [ebp - 3], 0x3a
jne 0x42dc48
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42dc62
cmp byte [ebp - 3], 0x3a
jne 0x42dc62
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42dc9b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42dc9b
cmp byte [ebp - 7], 0x3a
jne 0x42dc9b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42dcd3
call esi
test eax, eax
je 0x42dcbf
cmp byte [ebp - 3], 0x3a
jne 0x42dcbf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42dce7
call esi
test eax, eax
je 0x42dce7
cmp byte [ebp - 3], 0x3a
jne 0x42dce7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42dd01
cmp byte [ebp - 3], 0x3a
jne 0x42dd01
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42dd30
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42dd30
cmp byte [ebp - 7], 0x3a
jne 0x42dd30
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42dd68
call esi
test eax, eax
je 0x42dd54
cmp byte [ebp - 3], 0x3a
jne 0x42dd54
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42dd7c
call esi
test eax, eax
je 0x42dd7c
cmp byte [ebp - 3], 0x3a
jne 0x42dd7c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42dd96
cmp byte [ebp - 3], 0x3a
jne 0x42dd96
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ddc2
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ddc2
cmp byte [ebp - 7], 0x3a
jne 0x42ddc2
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ddfa
call esi
test eax, eax
je 0x42dde6
cmp byte [ebp - 3], 0x3a
jne 0x42dde6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42de0e
call esi
test eax, eax
je 0x42de0e
cmp byte [ebp - 3], 0x3a
jne 0x42de0e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42de28
cmp byte [ebp - 3], 0x3a
jne 0x42de28
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42de58
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42de58
cmp byte [ebp - 7], 0x3a
jne 0x42de58
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42de90
call esi
test eax, eax
je 0x42de7c
cmp byte [ebp - 3], 0x3a
jne 0x42de7c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42dea4
call esi
test eax, eax
je 0x42dea4
cmp byte [ebp - 3], 0x3a
jne 0x42dea4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42debe
cmp byte [ebp - 3], 0x3a
jne 0x42debe
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42df1f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42df1f
cmp byte [ebp - 7], 0x3a
jne 0x42df1f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42df57
call esi
test eax, eax
je 0x42df43
cmp byte [ebp - 3], 0x3a
jne 0x42df43
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42df6b
call esi
test eax, eax
je 0x42df6b
cmp byte [ebp - 3], 0x3a
jne 0x42df6b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
pop edi
je 0x42df86
cmp byte [ebp - 3], 0x3a
jne 0x42df86
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov esi, dword [ebp - 0xc]
mov eax, dword [0x4513d0]
push dword [esi + 0x18]
call dword [eax + 0x48]
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x42dfc8
push 0xbb8
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x70]
cmp eax, 0x102
jne 0x42dfbd
mov eax, dword [0x4513d0]
push 0
push dword [esi + 0x1c]
call dword [eax + 0x6c]
push dword [esi + 0x1c]
mov eax, dword [0x4513d0]
call dword [eax + 0x44]
mov eax, dword [esi + 0xc]
test eax, eax
je 0x42dfd8
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x44]
mov eax, dword [esi + 0x10]
test eax, eax
je 0x42dfe8
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x44]
mov eax, dword [esi + 0x14]
test eax, eax
je 0x42dff8
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x44]
mov eax, dword [esi + 4]
test eax, eax
je 0x42e006
push eax
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
push dword [esi + 0x18]
mov eax, dword [0x4513d0]
call dword [eax + 0x44]
pop esi
pop ebx
leave
ret