Function at 0x42c571
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
lea eax, [ebp - 0xc]
push ebx
push esi
push edi
test eax, eax
mov dword [ebp - 0xc], ecx
mov dword [ecx], 0x44b12c
jne 0x42d221
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c5d4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c5d4
cmp byte [ebp - 7], 0x3a
jne 0x42c5d4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c612
call esi
test eax, eax
je 0x42c5fe
cmp byte [ebp - 3], 0x3a
jne 0x42c5fe
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c626
call esi
test eax, eax
je 0x42c626
cmp byte [ebp - 3], 0x3a
jne 0x42c626
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c640
cmp byte [ebp - 3], 0x3a
jne 0x42c640
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c66c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c66c
cmp byte [ebp - 7], 0x3a
jne 0x42c66c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c6a4
call esi
test eax, eax
je 0x42c690
cmp byte [ebp - 3], 0x3a
jne 0x42c690
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c6b8
call esi
test eax, eax
je 0x42c6b8
cmp byte [ebp - 3], 0x3a
jne 0x42c6b8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c6d2
cmp byte [ebp - 3], 0x3a
jne 0x42c6d2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c6fe
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c6fe
cmp byte [ebp - 7], 0x3a
jne 0x42c6fe
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c736
call esi
test eax, eax
je 0x42c722
cmp byte [ebp - 3], 0x3a
jne 0x42c722
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c74a
call esi
test eax, eax
je 0x42c74a
cmp byte [ebp - 3], 0x3a
jne 0x42c74a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c764
cmp byte [ebp - 3], 0x3a
jne 0x42c764
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c79e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c79e
cmp byte [ebp - 7], 0x3a
jne 0x42c79e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c7d6
call esi
test eax, eax
je 0x42c7c2
cmp byte [ebp - 3], 0x3a
jne 0x42c7c2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c7ea
call esi
test eax, eax
je 0x42c7ea
cmp byte [ebp - 3], 0x3a
jne 0x42c7ea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c804
cmp byte [ebp - 3], 0x3a
jne 0x42c804
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c83b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c83b
cmp byte [ebp - 7], 0x3a
jne 0x42c83b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c873
call esi
test eax, eax
je 0x42c85f
cmp byte [ebp - 3], 0x3a
jne 0x42c85f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c887
call esi
test eax, eax
je 0x42c887
cmp byte [ebp - 3], 0x3a
jne 0x42c887
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c8a1
cmp byte [ebp - 3], 0x3a
jne 0x42c8a1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c8cf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c8cf
cmp byte [ebp - 7], 0x3a
jne 0x42c8cf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c907
call esi
test eax, eax
je 0x42c8f3
cmp byte [ebp - 3], 0x3a
jne 0x42c8f3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c91b
call esi
test eax, eax
je 0x42c91b
cmp byte [ebp - 3], 0x3a
jne 0x42c91b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c935
cmp byte [ebp - 3], 0x3a
jne 0x42c935
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c969
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c969
cmp byte [ebp - 7], 0x3a
jne 0x42c969
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c9a1
call esi
test eax, eax
je 0x42c98d
cmp byte [ebp - 3], 0x3a
jne 0x42c98d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c9b5
call esi
test eax, eax
je 0x42c9b5
cmp byte [ebp - 3], 0x3a
jne 0x42c9b5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c9cf
cmp byte [ebp - 3], 0x3a
jne 0x42c9cf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42c9fd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c9fd
cmp byte [ebp - 7], 0x3a
jne 0x42c9fd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ca35
call esi
test eax, eax
je 0x42ca21
cmp byte [ebp - 3], 0x3a
jne 0x42ca21
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ca49
call esi
test eax, eax
je 0x42ca49
cmp byte [ebp - 3], 0x3a
jne 0x42ca49
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ca63
cmp byte [ebp - 3], 0x3a
jne 0x42ca63
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ca8f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ca8f
cmp byte [ebp - 7], 0x3a
jne 0x42ca8f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42cac7
call esi
test eax, eax
je 0x42cab3
cmp byte [ebp - 3], 0x3a
jne 0x42cab3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cadb
call esi
test eax, eax
je 0x42cadb
cmp byte [ebp - 3], 0x3a
jne 0x42cadb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42caf5
cmp byte [ebp - 3], 0x3a
jne 0x42caf5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42cb23
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42cb23
cmp byte [ebp - 7], 0x3a
jne 0x42cb23
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42cb5b
call esi
test eax, eax
je 0x42cb47
cmp byte [ebp - 3], 0x3a
jne 0x42cb47
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cb6f
call esi
test eax, eax
je 0x42cb6f
cmp byte [ebp - 3], 0x3a
jne 0x42cb6f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42cb89
cmp byte [ebp - 3], 0x3a
jne 0x42cb89
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42cbb3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42cbb3
cmp byte [ebp - 7], 0x3a
jne 0x42cbb3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42cbeb
call esi
test eax, eax
je 0x42cbd7
cmp byte [ebp - 3], 0x3a
jne 0x42cbd7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cbff
call esi
test eax, eax
je 0x42cbff
cmp byte [ebp - 3], 0x3a
jne 0x42cbff
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42cc19
cmp byte [ebp - 3], 0x3a
jne 0x42cc19
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42cc48
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42cc48
cmp byte [ebp - 7], 0x3a
jne 0x42cc48
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42cc80
call esi
test eax, eax
je 0x42cc6c
cmp byte [ebp - 3], 0x3a
jne 0x42cc6c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cc94
call esi
test eax, eax
je 0x42cc94
cmp byte [ebp - 3], 0x3a
jne 0x42cc94
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ccae
cmp byte [ebp - 3], 0x3a
jne 0x42ccae
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ccdc
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ccdc
cmp byte [ebp - 7], 0x3a
jne 0x42ccdc
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42cd14
call esi
test eax, eax
je 0x42cd00
cmp byte [ebp - 3], 0x3a
jne 0x42cd00
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cd28
call esi
test eax, eax
je 0x42cd28
cmp byte [ebp - 3], 0x3a
jne 0x42cd28
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42cd42
cmp byte [ebp - 3], 0x3a
jne 0x42cd42
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42cd70
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42cd70
cmp byte [ebp - 7], 0x3a
jne 0x42cd70
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42cda8
call esi
test eax, eax
je 0x42cd94
cmp byte [ebp - 3], 0x3a
jne 0x42cd94
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cdbc
call esi
test eax, eax
je 0x42cdbc
cmp byte [ebp - 3], 0x3a
jne 0x42cdbc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42cdd6
cmp byte [ebp - 3], 0x3a
jne 0x42cdd6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ce02
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ce02
cmp byte [ebp - 7], 0x3a
jne 0x42ce02
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ce3a
call esi
test eax, eax
je 0x42ce26
cmp byte [ebp - 3], 0x3a
jne 0x42ce26
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ce4e
call esi
test eax, eax
je 0x42ce4e
cmp byte [ebp - 3], 0x3a
jne 0x42ce4e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ce68
cmp byte [ebp - 3], 0x3a
jne 0x42ce68
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ce98
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ce98
cmp byte [ebp - 7], 0x3a
jne 0x42ce98
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ced0
call esi
test eax, eax
je 0x42cebc
cmp byte [ebp - 3], 0x3a
jne 0x42cebc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cee4
call esi
test eax, eax
je 0x42cee4
cmp byte [ebp - 3], 0x3a
jne 0x42cee4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42cefe
cmp byte [ebp - 3], 0x3a
jne 0x42cefe
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42cf37
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42cf37
cmp byte [ebp - 7], 0x3a
jne 0x42cf37
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42cf6f
call esi
test eax, eax
je 0x42cf5b
cmp byte [ebp - 3], 0x3a
jne 0x42cf5b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42cf83
call esi
test eax, eax
je 0x42cf83
cmp byte [ebp - 3], 0x3a
jne 0x42cf83
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42cf9d
cmp byte [ebp - 3], 0x3a
jne 0x42cf9d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42cfcc
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42cfcc
cmp byte [ebp - 7], 0x3a
jne 0x42cfcc
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d004
call esi
test eax, eax
je 0x42cff0
cmp byte [ebp - 3], 0x3a
jne 0x42cff0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d018
call esi
test eax, eax
je 0x42d018
cmp byte [ebp - 3], 0x3a
jne 0x42d018
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d032
cmp byte [ebp - 3], 0x3a
jne 0x42d032
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d05e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d05e
cmp byte [ebp - 7], 0x3a
jne 0x42d05e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d096
call esi
test eax, eax
je 0x42d082
cmp byte [ebp - 3], 0x3a
jne 0x42d082
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d0aa
call esi
test eax, eax
je 0x42d0aa
cmp byte [ebp - 3], 0x3a
jne 0x42d0aa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d0c4
cmp byte [ebp - 3], 0x3a
jne 0x42d0c4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d0f4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d0f4
cmp byte [ebp - 7], 0x3a
jne 0x42d0f4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d12c
call esi
test eax, eax
je 0x42d118
cmp byte [ebp - 3], 0x3a
jne 0x42d118
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d140
call esi
test eax, eax
je 0x42d140
cmp byte [ebp - 3], 0x3a
jne 0x42d140
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d15a
cmp byte [ebp - 3], 0x3a
jne 0x42d15a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42d1bb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42d1bb
cmp byte [ebp - 7], 0x3a
jne 0x42d1bb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42d1f3
call esi
test eax, eax
je 0x42d1df
cmp byte [ebp - 3], 0x3a
jne 0x42d1df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42d207
call esi
test eax, eax
je 0x42d207
cmp byte [ebp - 3], 0x3a
jne 0x42d207
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42d221
cmp byte [ebp - 3], 0x3a
jne 0x42d221
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [0x4513d0]
xor ebx, ebx
push ebx
push ebx
push 1
push ebx
call dword [eax + 0x68]
mov edi, dword [ebp - 0xc]
push 0x104
mov dword [edi + 0x18], eax
lea eax, [ebp - 0x110]
mov dword [edi + 0x1c], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x74]
push ebx
push 0x80
push 3
push ebx
push 1
lea eax, [ebp - 0x110]
push 0x80000000
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x50]
mov esi, eax
cmp esi, 0xffffffff
je 0x42d2ac
mov eax, dword [0x4513d0]
push ebx
push esi
call dword [eax + 0x38]
push eax
mov dword [edi + 8], eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [edi + 4], eax
lea ecx, [ebp - 0xc]
push ebx
push ecx
push dword [edi + 8]
push eax
mov eax, dword [0x4513d0]
push esi
call dword [eax + 0x4c]
mov eax, dword [0x4513d0]
push esi
call dword [eax + 0x44]
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret