Function at 0x41fbfc
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0xc], esi
lea ecx, [esi + 4]
call fcn.00427793
lea eax, [ebp - 0xc]
mov dword [esi], 0x44b124
test eax, eax
jne 0x4208b4
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41fc65
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41fc65
cmp byte [ebp - 7], 0x3a
jne 0x41fc65
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41fca4
call esi
test eax, eax
je 0x41fc90
cmp byte [ebp - 3], 0x3a
jne 0x41fc90
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41fcb8
call esi
test eax, eax
je 0x41fcb8
cmp byte [ebp - 3], 0x3a
jne 0x41fcb8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41fcd2
cmp byte [ebp - 3], 0x3a
jne 0x41fcd2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41fcfe
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41fcfe
cmp byte [ebp - 7], 0x3a
jne 0x41fcfe
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41fd36
call esi
test eax, eax
je 0x41fd22
cmp byte [ebp - 3], 0x3a
jne 0x41fd22
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41fd4a
call esi
test eax, eax
je 0x41fd4a
cmp byte [ebp - 3], 0x3a
jne 0x41fd4a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41fd64
cmp byte [ebp - 3], 0x3a
jne 0x41fd64
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41fd90
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41fd90
cmp byte [ebp - 7], 0x3a
jne 0x41fd90
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41fdc8
call esi
test eax, eax
je 0x41fdb4
cmp byte [ebp - 3], 0x3a
jne 0x41fdb4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41fddc
call esi
test eax, eax
je 0x41fddc
cmp byte [ebp - 3], 0x3a
jne 0x41fddc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41fdf6
cmp byte [ebp - 3], 0x3a
jne 0x41fdf6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41fe30
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41fe30
cmp byte [ebp - 7], 0x3a
jne 0x41fe30
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41fe68
call esi
test eax, eax
je 0x41fe54
cmp byte [ebp - 3], 0x3a
jne 0x41fe54
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41fe7c
call esi
test eax, eax
je 0x41fe7c
cmp byte [ebp - 3], 0x3a
jne 0x41fe7c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41fe96
cmp byte [ebp - 3], 0x3a
jne 0x41fe96
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41fecd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41fecd
cmp byte [ebp - 7], 0x3a
jne 0x41fecd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41ff05
call esi
test eax, eax
je 0x41fef1
cmp byte [ebp - 3], 0x3a
jne 0x41fef1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41ff19
call esi
test eax, eax
je 0x41ff19
cmp byte [ebp - 3], 0x3a
jne 0x41ff19
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41ff33
cmp byte [ebp - 3], 0x3a
jne 0x41ff33
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41ff61
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41ff61
cmp byte [ebp - 7], 0x3a
jne 0x41ff61
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x41ff99
call esi
test eax, eax
je 0x41ff85
cmp byte [ebp - 3], 0x3a
jne 0x41ff85
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x41ffad
call esi
test eax, eax
je 0x41ffad
cmp byte [ebp - 3], 0x3a
jne 0x41ffad
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x41ffc7
cmp byte [ebp - 3], 0x3a
jne 0x41ffc7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x41fffb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x41fffb
cmp byte [ebp - 7], 0x3a
jne 0x41fffb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420033
call esi
test eax, eax
je 0x42001f
cmp byte [ebp - 3], 0x3a
jne 0x42001f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420047
call esi
test eax, eax
je 0x420047
cmp byte [ebp - 3], 0x3a
jne 0x420047
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420061
cmp byte [ebp - 3], 0x3a
jne 0x420061
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42008f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42008f
cmp byte [ebp - 7], 0x3a
jne 0x42008f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4200c7
call esi
test eax, eax
je 0x4200b3
cmp byte [ebp - 3], 0x3a
jne 0x4200b3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4200db
call esi
test eax, eax
je 0x4200db
cmp byte [ebp - 3], 0x3a
jne 0x4200db
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4200f5
cmp byte [ebp - 3], 0x3a
jne 0x4200f5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420121
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420121
cmp byte [ebp - 7], 0x3a
jne 0x420121
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420159
call esi
test eax, eax
je 0x420145
cmp byte [ebp - 3], 0x3a
jne 0x420145
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42016d
call esi
test eax, eax
je 0x42016d
cmp byte [ebp - 3], 0x3a
jne 0x42016d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420187
cmp byte [ebp - 3], 0x3a
jne 0x420187
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4201b5
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4201b5
cmp byte [ebp - 7], 0x3a
jne 0x4201b5
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4201ed
call esi
test eax, eax
je 0x4201d9
cmp byte [ebp - 3], 0x3a
jne 0x4201d9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420201
call esi
test eax, eax
je 0x420201
cmp byte [ebp - 3], 0x3a
jne 0x420201
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42021b
cmp byte [ebp - 3], 0x3a
jne 0x42021b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420245
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420245
cmp byte [ebp - 7], 0x3a
jne 0x420245
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42027d
call esi
test eax, eax
je 0x420269
cmp byte [ebp - 3], 0x3a
jne 0x420269
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420291
call esi
test eax, eax
je 0x420291
cmp byte [ebp - 3], 0x3a
jne 0x420291
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4202ab
cmp byte [ebp - 3], 0x3a
jne 0x4202ab
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4202da
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4202da
cmp byte [ebp - 7], 0x3a
jne 0x4202da
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420312
call esi
test eax, eax
je 0x4202fe
cmp byte [ebp - 3], 0x3a
jne 0x4202fe
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420326
call esi
test eax, eax
je 0x420326
cmp byte [ebp - 3], 0x3a
jne 0x420326
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420340
cmp byte [ebp - 3], 0x3a
jne 0x420340
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42036e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42036e
cmp byte [ebp - 7], 0x3a
jne 0x42036e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4203a6
call esi
test eax, eax
je 0x420392
cmp byte [ebp - 3], 0x3a
jne 0x420392
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4203ba
call esi
test eax, eax
je 0x4203ba
cmp byte [ebp - 3], 0x3a
jne 0x4203ba
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4203d4
cmp byte [ebp - 3], 0x3a
jne 0x4203d4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420402
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420402
cmp byte [ebp - 7], 0x3a
jne 0x420402
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42043a
call esi
test eax, eax
je 0x420426
cmp byte [ebp - 3], 0x3a
jne 0x420426
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42044e
call esi
test eax, eax
je 0x42044e
cmp byte [ebp - 3], 0x3a
jne 0x42044e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420468
cmp byte [ebp - 3], 0x3a
jne 0x420468
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420494
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420494
cmp byte [ebp - 7], 0x3a
jne 0x420494
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4204cc
call esi
test eax, eax
je 0x4204b8
cmp byte [ebp - 3], 0x3a
jne 0x4204b8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4204e0
call esi
test eax, eax
je 0x4204e0
cmp byte [ebp - 3], 0x3a
jne 0x4204e0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4204fa
cmp byte [ebp - 3], 0x3a
jne 0x4204fa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42052a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42052a
cmp byte [ebp - 7], 0x3a
jne 0x42052a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420562
call esi
test eax, eax
je 0x42054e
cmp byte [ebp - 3], 0x3a
jne 0x42054e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420576
call esi
test eax, eax
je 0x420576
cmp byte [ebp - 3], 0x3a
jne 0x420576
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420590
cmp byte [ebp - 3], 0x3a
jne 0x420590
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4205c9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4205c9
cmp byte [ebp - 7], 0x3a
jne 0x4205c9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420601
call esi
test eax, eax
je 0x4205ed
cmp byte [ebp - 3], 0x3a
jne 0x4205ed
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420615
call esi
test eax, eax
je 0x420615
cmp byte [ebp - 3], 0x3a
jne 0x420615
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42062f
cmp byte [ebp - 3], 0x3a
jne 0x42062f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42065e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42065e
cmp byte [ebp - 7], 0x3a
jne 0x42065e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420696
call esi
test eax, eax
je 0x420682
cmp byte [ebp - 3], 0x3a
jne 0x420682
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4206aa
call esi
test eax, eax
je 0x4206aa
cmp byte [ebp - 3], 0x3a
jne 0x4206aa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4206c4
cmp byte [ebp - 3], 0x3a
jne 0x4206c4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x4206f0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4206f0
cmp byte [ebp - 7], 0x3a
jne 0x4206f0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420728
call esi
test eax, eax
je 0x420714
cmp byte [ebp - 3], 0x3a
jne 0x420714
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42073c
call esi
test eax, eax
je 0x42073c
cmp byte [ebp - 3], 0x3a
jne 0x42073c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x420756
cmp byte [ebp - 3], 0x3a
jne 0x420756
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x420786
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x420786
cmp byte [ebp - 7], 0x3a
jne 0x420786
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4207be
call esi
test eax, eax
je 0x4207aa
cmp byte [ebp - 3], 0x3a
jne 0x4207aa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4207d2
call esi
test eax, eax
je 0x4207d2
cmp byte [ebp - 3], 0x3a
jne 0x4207d2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4207ec
cmp byte [ebp - 3], 0x3a
jne 0x4207ec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42084d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42084d
cmp byte [ebp - 7], 0x3a
jne 0x42084d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x420885
call esi
test eax, eax
je 0x420871
cmp byte [ebp - 3], 0x3a
jne 0x420871
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x420899
call esi
test eax, eax
je 0x420899
cmp byte [ebp - 3], 0x3a
jne 0x420899
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
pop edi
je 0x4208b4
cmp byte [ebp - 3], 0x3a
jne 0x4208b4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
pop esi
pop ebx
leave
ret