Function at 0x4208d7
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp - 0xc]
push ebx
test eax, eax
mov dword [ebp - 0xc], ecx
mov dword [ecx], 0x44b124
jne 0x421586
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420937
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420937
cmp byte [ebp - 7], 0x3a
jne 0x420937
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420975
call esi
test eax, eax
je 0x420961
cmp byte [ebp - 3], 0x3a
jne 0x420961
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420989
call esi
test eax, eax
je 0x420989
cmp byte [ebp - 3], 0x3a
jne 0x420989
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4209a3
cmp byte [ebp - 3], 0x3a
jne 0x4209a3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4209cf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4209cf
cmp byte [ebp - 7], 0x3a
jne 0x4209cf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420a07
call esi
test eax, eax
je 0x4209f3
cmp byte [ebp - 3], 0x3a
jne 0x4209f3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420a1b
call esi
test eax, eax
je 0x420a1b
cmp byte [ebp - 3], 0x3a
jne 0x420a1b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420a35
cmp byte [ebp - 3], 0x3a
jne 0x420a35
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420a61
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420a61
cmp byte [ebp - 7], 0x3a
jne 0x420a61
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420a99
call esi
test eax, eax
je 0x420a85
cmp byte [ebp - 3], 0x3a
jne 0x420a85
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420aad
call esi
test eax, eax
je 0x420aad
cmp byte [ebp - 3], 0x3a
jne 0x420aad
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420ac7
cmp byte [ebp - 3], 0x3a
jne 0x420ac7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420b01
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420b01
cmp byte [ebp - 7], 0x3a
jne 0x420b01
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420b39
call esi
test eax, eax
je 0x420b25
cmp byte [ebp - 3], 0x3a
jne 0x420b25
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420b4d
call esi
test eax, eax
je 0x420b4d
cmp byte [ebp - 3], 0x3a
jne 0x420b4d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420b67
cmp byte [ebp - 3], 0x3a
jne 0x420b67
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420b9e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420b9e
cmp byte [ebp - 7], 0x3a
jne 0x420b9e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420bd6
call esi
test eax, eax
je 0x420bc2
cmp byte [ebp - 3], 0x3a
jne 0x420bc2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420bea
call esi
test eax, eax
je 0x420bea
cmp byte [ebp - 3], 0x3a
jne 0x420bea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420c04
cmp byte [ebp - 3], 0x3a
jne 0x420c04
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420c32
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420c32
cmp byte [ebp - 7], 0x3a
jne 0x420c32
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420c6a
call esi
test eax, eax
je 0x420c56
cmp byte [ebp - 3], 0x3a
jne 0x420c56
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420c7e
call esi
test eax, eax
je 0x420c7e
cmp byte [ebp - 3], 0x3a
jne 0x420c7e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420c98
cmp byte [ebp - 3], 0x3a
jne 0x420c98
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420ccc
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420ccc
cmp byte [ebp - 7], 0x3a
jne 0x420ccc
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420d04
call esi
test eax, eax
je 0x420cf0
cmp byte [ebp - 3], 0x3a
jne 0x420cf0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420d18
call esi
test eax, eax
je 0x420d18
cmp byte [ebp - 3], 0x3a
jne 0x420d18
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420d32
cmp byte [ebp - 3], 0x3a
jne 0x420d32
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420d60
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420d60
cmp byte [ebp - 7], 0x3a
jne 0x420d60
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420d98
call esi
test eax, eax
je 0x420d84
cmp byte [ebp - 3], 0x3a
jne 0x420d84
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420dac
call esi
test eax, eax
je 0x420dac
cmp byte [ebp - 3], 0x3a
jne 0x420dac
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420dc6
cmp byte [ebp - 3], 0x3a
jne 0x420dc6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420df2
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420df2
cmp byte [ebp - 7], 0x3a
jne 0x420df2
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420e2a
call esi
test eax, eax
je 0x420e16
cmp byte [ebp - 3], 0x3a
jne 0x420e16
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420e3e
call esi
test eax, eax
je 0x420e3e
cmp byte [ebp - 3], 0x3a
jne 0x420e3e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420e58
cmp byte [ebp - 3], 0x3a
jne 0x420e58
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420e86
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420e86
cmp byte [ebp - 7], 0x3a
jne 0x420e86
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420ebe
call esi
test eax, eax
je 0x420eaa
cmp byte [ebp - 3], 0x3a
jne 0x420eaa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420ed2
call esi
test eax, eax
je 0x420ed2
cmp byte [ebp - 3], 0x3a
jne 0x420ed2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420eec
cmp byte [ebp - 3], 0x3a
jne 0x420eec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420f16
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420f16
cmp byte [ebp - 7], 0x3a
jne 0x420f16
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420f4e
call esi
test eax, eax
je 0x420f3a
cmp byte [ebp - 3], 0x3a
jne 0x420f3a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420f62
call esi
test eax, eax
je 0x420f62
cmp byte [ebp - 3], 0x3a
jne 0x420f62
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420f7c
cmp byte [ebp - 3], 0x3a
jne 0x420f7c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420fab
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420fab
cmp byte [ebp - 7], 0x3a
jne 0x420fab
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420fe3
call esi
test eax, eax
je 0x420fcf
cmp byte [ebp - 3], 0x3a
jne 0x420fcf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420ff7
call esi
test eax, eax
je 0x420ff7
cmp byte [ebp - 3], 0x3a
jne 0x420ff7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x421011
cmp byte [ebp - 3], 0x3a
jne 0x421011
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42103f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42103f
cmp byte [ebp - 7], 0x3a
jne 0x42103f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x421077
call esi
test eax, eax
je 0x421063
cmp byte [ebp - 3], 0x3a
jne 0x421063
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42108b
call esi
test eax, eax
je 0x42108b
cmp byte [ebp - 3], 0x3a
jne 0x42108b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4210a5
cmp byte [ebp - 3], 0x3a
jne 0x4210a5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4210d3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4210d3
cmp byte [ebp - 7], 0x3a
jne 0x4210d3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42110b
call esi
test eax, eax
je 0x4210f7
cmp byte [ebp - 3], 0x3a
jne 0x4210f7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42111f
call esi
test eax, eax
je 0x42111f
cmp byte [ebp - 3], 0x3a
jne 0x42111f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x421139
cmp byte [ebp - 3], 0x3a
jne 0x421139
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x421165
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x421165
cmp byte [ebp - 7], 0x3a
jne 0x421165
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42119d
call esi
test eax, eax
je 0x421189
cmp byte [ebp - 3], 0x3a
jne 0x421189
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4211b1
call esi
test eax, eax
je 0x4211b1
cmp byte [ebp - 3], 0x3a
jne 0x4211b1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4211cb
cmp byte [ebp - 3], 0x3a
jne 0x4211cb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4211fb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4211fb
cmp byte [ebp - 7], 0x3a
jne 0x4211fb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x421233
call esi
test eax, eax
je 0x42121f
cmp byte [ebp - 3], 0x3a
jne 0x42121f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x421247
call esi
test eax, eax
je 0x421247
cmp byte [ebp - 3], 0x3a
jne 0x421247
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x421261
cmp byte [ebp - 3], 0x3a
jne 0x421261
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42129a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42129a
cmp byte [ebp - 7], 0x3a
jne 0x42129a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4212d2
call esi
test eax, eax
je 0x4212be
cmp byte [ebp - 3], 0x3a
jne 0x4212be
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4212e6
call esi
test eax, eax
je 0x4212e6
cmp byte [ebp - 3], 0x3a
jne 0x4212e6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x421300
cmp byte [ebp - 3], 0x3a
jne 0x421300
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42132f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42132f
cmp byte [ebp - 7], 0x3a
jne 0x42132f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x421367
call esi
test eax, eax
je 0x421353
cmp byte [ebp - 3], 0x3a
jne 0x421353
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42137b
call esi
test eax, eax
je 0x42137b
cmp byte [ebp - 3], 0x3a
jne 0x42137b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x421395
cmp byte [ebp - 3], 0x3a
jne 0x421395
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4213c1
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4213c1
cmp byte [ebp - 7], 0x3a
jne 0x4213c1
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4213f9
call esi
test eax, eax
je 0x4213e5
cmp byte [ebp - 3], 0x3a
jne 0x4213e5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42140d
call esi
test eax, eax
je 0x42140d
cmp byte [ebp - 3], 0x3a
jne 0x42140d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x421427
cmp byte [ebp - 3], 0x3a
jne 0x421427
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x421457
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x421457
cmp byte [ebp - 7], 0x3a
jne 0x421457
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42148f
call esi
test eax, eax
je 0x42147b
cmp byte [ebp - 3], 0x3a
jne 0x42147b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4214a3
call esi
test eax, eax
je 0x4214a3
cmp byte [ebp - 3], 0x3a
jne 0x4214a3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4214bd
cmp byte [ebp - 3], 0x3a
jne 0x4214bd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42151e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42151e
cmp byte [ebp - 7], 0x3a
jne 0x42151e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x421556
call esi
test eax, eax
je 0x421542
cmp byte [ebp - 3], 0x3a
jne 0x421542
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42156a
call esi
test eax, eax
je 0x42156a
cmp byte [ebp - 3], 0x3a
jne 0x42156a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x421586
cmp byte [ebp - 3], 0x3a
jne 0x421586
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
lea ecx, [eax + 4]
call fcn.00428495
pop ebx
leave
ret