Function at 0x429143
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp + 8]
push ebx
push esi
push edi
test eax, eax
mov dword [ebp - 0xc], ecx
jne 0x429dea
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42919d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42919d
cmp byte [ebp - 7], 0x3a
jne 0x42919d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4291db
call esi
test eax, eax
je 0x4291c7
cmp byte [ebp - 3], 0x3a
jne 0x4291c7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4291ef
call esi
test eax, eax
je 0x4291ef
cmp byte [ebp - 3], 0x3a
jne 0x4291ef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429209
cmp byte [ebp - 3], 0x3a
jne 0x429209
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429235
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429235
cmp byte [ebp - 7], 0x3a
jne 0x429235
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42926d
call esi
test eax, eax
je 0x429259
cmp byte [ebp - 3], 0x3a
jne 0x429259
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429281
call esi
test eax, eax
je 0x429281
cmp byte [ebp - 3], 0x3a
jne 0x429281
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42929b
cmp byte [ebp - 3], 0x3a
jne 0x42929b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4292c7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4292c7
cmp byte [ebp - 7], 0x3a
jne 0x4292c7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4292ff
call esi
test eax, eax
je 0x4292eb
cmp byte [ebp - 3], 0x3a
jne 0x4292eb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429313
call esi
test eax, eax
je 0x429313
cmp byte [ebp - 3], 0x3a
jne 0x429313
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42932d
cmp byte [ebp - 3], 0x3a
jne 0x42932d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429367
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429367
cmp byte [ebp - 7], 0x3a
jne 0x429367
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42939f
call esi
test eax, eax
je 0x42938b
cmp byte [ebp - 3], 0x3a
jne 0x42938b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4293b3
call esi
test eax, eax
je 0x4293b3
cmp byte [ebp - 3], 0x3a
jne 0x4293b3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4293cd
cmp byte [ebp - 3], 0x3a
jne 0x4293cd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429404
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429404
cmp byte [ebp - 7], 0x3a
jne 0x429404
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42943c
call esi
test eax, eax
je 0x429428
cmp byte [ebp - 3], 0x3a
jne 0x429428
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429450
call esi
test eax, eax
je 0x429450
cmp byte [ebp - 3], 0x3a
jne 0x429450
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42946a
cmp byte [ebp - 3], 0x3a
jne 0x42946a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429498
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429498
cmp byte [ebp - 7], 0x3a
jne 0x429498
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4294d0
call esi
test eax, eax
je 0x4294bc
cmp byte [ebp - 3], 0x3a
jne 0x4294bc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4294e4
call esi
test eax, eax
je 0x4294e4
cmp byte [ebp - 3], 0x3a
jne 0x4294e4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4294fe
cmp byte [ebp - 3], 0x3a
jne 0x4294fe
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429532
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429532
cmp byte [ebp - 7], 0x3a
jne 0x429532
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42956a
call esi
test eax, eax
je 0x429556
cmp byte [ebp - 3], 0x3a
jne 0x429556
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42957e
call esi
test eax, eax
je 0x42957e
cmp byte [ebp - 3], 0x3a
jne 0x42957e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429598
cmp byte [ebp - 3], 0x3a
jne 0x429598
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4295c6
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4295c6
cmp byte [ebp - 7], 0x3a
jne 0x4295c6
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4295fe
call esi
test eax, eax
je 0x4295ea
cmp byte [ebp - 3], 0x3a
jne 0x4295ea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429612
call esi
test eax, eax
je 0x429612
cmp byte [ebp - 3], 0x3a
jne 0x429612
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42962c
cmp byte [ebp - 3], 0x3a
jne 0x42962c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429658
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429658
cmp byte [ebp - 7], 0x3a
jne 0x429658
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429690
call esi
test eax, eax
je 0x42967c
cmp byte [ebp - 3], 0x3a
jne 0x42967c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4296a4
call esi
test eax, eax
je 0x4296a4
cmp byte [ebp - 3], 0x3a
jne 0x4296a4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4296be
cmp byte [ebp - 3], 0x3a
jne 0x4296be
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4296ec
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4296ec
cmp byte [ebp - 7], 0x3a
jne 0x4296ec
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429724
call esi
test eax, eax
je 0x429710
cmp byte [ebp - 3], 0x3a
jne 0x429710
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429738
call esi
test eax, eax
je 0x429738
cmp byte [ebp - 3], 0x3a
jne 0x429738
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429752
cmp byte [ebp - 3], 0x3a
jne 0x429752
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42977c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42977c
cmp byte [ebp - 7], 0x3a
jne 0x42977c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4297b4
call esi
test eax, eax
je 0x4297a0
cmp byte [ebp - 3], 0x3a
jne 0x4297a0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4297c8
call esi
test eax, eax
je 0x4297c8
cmp byte [ebp - 3], 0x3a
jne 0x4297c8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4297e2
cmp byte [ebp - 3], 0x3a
jne 0x4297e2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429811
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429811
cmp byte [ebp - 7], 0x3a
jne 0x429811
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429849
call esi
test eax, eax
je 0x429835
cmp byte [ebp - 3], 0x3a
jne 0x429835
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42985d
call esi
test eax, eax
je 0x42985d
cmp byte [ebp - 3], 0x3a
jne 0x42985d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429877
cmp byte [ebp - 3], 0x3a
jne 0x429877
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4298a5
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4298a5
cmp byte [ebp - 7], 0x3a
jne 0x4298a5
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4298dd
call esi
test eax, eax
je 0x4298c9
cmp byte [ebp - 3], 0x3a
jne 0x4298c9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4298f1
call esi
test eax, eax
je 0x4298f1
cmp byte [ebp - 3], 0x3a
jne 0x4298f1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42990b
cmp byte [ebp - 3], 0x3a
jne 0x42990b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429939
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429939
cmp byte [ebp - 7], 0x3a
jne 0x429939
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429971
call esi
test eax, eax
je 0x42995d
cmp byte [ebp - 3], 0x3a
jne 0x42995d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429985
call esi
test eax, eax
je 0x429985
cmp byte [ebp - 3], 0x3a
jne 0x429985
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42999f
cmp byte [ebp - 3], 0x3a
jne 0x42999f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4299cb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4299cb
cmp byte [ebp - 7], 0x3a
jne 0x4299cb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429a03
call esi
test eax, eax
je 0x4299ef
cmp byte [ebp - 3], 0x3a
jne 0x4299ef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429a17
call esi
test eax, eax
je 0x429a17
cmp byte [ebp - 3], 0x3a
jne 0x429a17
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429a31
cmp byte [ebp - 3], 0x3a
jne 0x429a31
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429a61
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429a61
cmp byte [ebp - 7], 0x3a
jne 0x429a61
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429a99
call esi
test eax, eax
je 0x429a85
cmp byte [ebp - 3], 0x3a
jne 0x429a85
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429aad
call esi
test eax, eax
je 0x429aad
cmp byte [ebp - 3], 0x3a
jne 0x429aad
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429ac7
cmp byte [ebp - 3], 0x3a
jne 0x429ac7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429b00
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429b00
cmp byte [ebp - 7], 0x3a
jne 0x429b00
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429b38
call esi
test eax, eax
je 0x429b24
cmp byte [ebp - 3], 0x3a
jne 0x429b24
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429b4c
call esi
test eax, eax
je 0x429b4c
cmp byte [ebp - 3], 0x3a
jne 0x429b4c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429b66
cmp byte [ebp - 3], 0x3a
jne 0x429b66
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429b95
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429b95
cmp byte [ebp - 7], 0x3a
jne 0x429b95
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429bcd
call esi
test eax, eax
je 0x429bb9
cmp byte [ebp - 3], 0x3a
jne 0x429bb9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429be1
call esi
test eax, eax
je 0x429be1
cmp byte [ebp - 3], 0x3a
jne 0x429be1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429bfb
cmp byte [ebp - 3], 0x3a
jne 0x429bfb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429c27
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429c27
cmp byte [ebp - 7], 0x3a
jne 0x429c27
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429c5f
call esi
test eax, eax
je 0x429c4b
cmp byte [ebp - 3], 0x3a
jne 0x429c4b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429c73
call esi
test eax, eax
je 0x429c73
cmp byte [ebp - 3], 0x3a
jne 0x429c73
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429c8d
cmp byte [ebp - 3], 0x3a
jne 0x429c8d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429cbd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429cbd
cmp byte [ebp - 7], 0x3a
jne 0x429cbd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429cf5
call esi
test eax, eax
je 0x429ce1
cmp byte [ebp - 3], 0x3a
jne 0x429ce1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429d09
call esi
test eax, eax
je 0x429d09
cmp byte [ebp - 3], 0x3a
jne 0x429d09
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429d23
cmp byte [ebp - 3], 0x3a
jne 0x429d23
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x429d84
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429d84
cmp byte [ebp - 7], 0x3a
jne 0x429d84
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429dbc
call esi
test eax, eax
je 0x429da8
cmp byte [ebp - 3], 0x3a
jne 0x429da8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429dd0
call esi
test eax, eax
je 0x429dd0
cmp byte [ebp - 3], 0x3a
jne 0x429dd0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429dea
cmp byte [ebp - 3], 0x3a
jne 0x429dea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0xc]
xor esi, esi
cmp dword [eax + 0x1fbd4], esi
jle 0x429e21
lea edi, [eax + 4]
push dword [ebp + 8]
mov eax, dword [0x4513d0]
push edi
call dword [eax + 0x1e0]
pop ecx
test eax, eax
pop ecx
je 0x429e4e
mov eax, dword [ebp - 0xc]
inc esi
add edi, 0x104
cmp esi, dword [eax + 0x1fbd4]
jl 0x429dfa
mov ecx, dword [ebp - 0xc]
push dword [ebp + 8]
inc dword [ecx + 0x1fbd4]
mov eax, dword [ecx + 0x1fbd4]
imul eax, eax, 0x104
lea eax, [eax + ecx - 0x100]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1e8]
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 4