Function at 0x42b82f
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp + 0xc]
push ebx
push esi
push edi
test eax, eax
mov dword [ebp - 0xc], ecx
jne 0x42c4d6
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42b889
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b889
cmp byte [ebp - 7], 0x3a
jne 0x42b889
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b8c7
call esi
test eax, eax
je 0x42b8b3
cmp byte [ebp - 3], 0x3a
jne 0x42b8b3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b8db
call esi
test eax, eax
je 0x42b8db
cmp byte [ebp - 3], 0x3a
jne 0x42b8db
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b8f5
cmp byte [ebp - 3], 0x3a
jne 0x42b8f5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42b921
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b921
cmp byte [ebp - 7], 0x3a
jne 0x42b921
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b959
call esi
test eax, eax
je 0x42b945
cmp byte [ebp - 3], 0x3a
jne 0x42b945
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b96d
call esi
test eax, eax
je 0x42b96d
cmp byte [ebp - 3], 0x3a
jne 0x42b96d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b987
cmp byte [ebp - 3], 0x3a
jne 0x42b987
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42b9b3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b9b3
cmp byte [ebp - 7], 0x3a
jne 0x42b9b3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b9eb
call esi
test eax, eax
je 0x42b9d7
cmp byte [ebp - 3], 0x3a
jne 0x42b9d7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b9ff
call esi
test eax, eax
je 0x42b9ff
cmp byte [ebp - 3], 0x3a
jne 0x42b9ff
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ba19
cmp byte [ebp - 3], 0x3a
jne 0x42ba19
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42ba53
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ba53
cmp byte [ebp - 7], 0x3a
jne 0x42ba53
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ba8b
call esi
test eax, eax
je 0x42ba77
cmp byte [ebp - 3], 0x3a
jne 0x42ba77
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ba9f
call esi
test eax, eax
je 0x42ba9f
cmp byte [ebp - 3], 0x3a
jne 0x42ba9f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bab9
cmp byte [ebp - 3], 0x3a
jne 0x42bab9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42baf0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42baf0
cmp byte [ebp - 7], 0x3a
jne 0x42baf0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bb28
call esi
test eax, eax
je 0x42bb14
cmp byte [ebp - 3], 0x3a
jne 0x42bb14
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42bb3c
call esi
test eax, eax
je 0x42bb3c
cmp byte [ebp - 3], 0x3a
jne 0x42bb3c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bb56
cmp byte [ebp - 3], 0x3a
jne 0x42bb56
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42bb84
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42bb84
cmp byte [ebp - 7], 0x3a
jne 0x42bb84
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bbbc
call esi
test eax, eax
je 0x42bba8
cmp byte [ebp - 3], 0x3a
jne 0x42bba8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42bbd0
call esi
test eax, eax
je 0x42bbd0
cmp byte [ebp - 3], 0x3a
jne 0x42bbd0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bbea
cmp byte [ebp - 3], 0x3a
jne 0x42bbea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42bc1e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42bc1e
cmp byte [ebp - 7], 0x3a
jne 0x42bc1e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bc56
call esi
test eax, eax
je 0x42bc42
cmp byte [ebp - 3], 0x3a
jne 0x42bc42
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42bc6a
call esi
test eax, eax
je 0x42bc6a
cmp byte [ebp - 3], 0x3a
jne 0x42bc6a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bc84
cmp byte [ebp - 3], 0x3a
jne 0x42bc84
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42bcb2
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42bcb2
cmp byte [ebp - 7], 0x3a
jne 0x42bcb2
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bcea
call esi
test eax, eax
je 0x42bcd6
cmp byte [ebp - 3], 0x3a
jne 0x42bcd6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42bcfe
call esi
test eax, eax
je 0x42bcfe
cmp byte [ebp - 3], 0x3a
jne 0x42bcfe
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bd18
cmp byte [ebp - 3], 0x3a
jne 0x42bd18
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42bd44
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42bd44
cmp byte [ebp - 7], 0x3a
jne 0x42bd44
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bd7c
call esi
test eax, eax
je 0x42bd68
cmp byte [ebp - 3], 0x3a
jne 0x42bd68
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42bd90
call esi
test eax, eax
je 0x42bd90
cmp byte [ebp - 3], 0x3a
jne 0x42bd90
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bdaa
cmp byte [ebp - 3], 0x3a
jne 0x42bdaa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42bdd8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42bdd8
cmp byte [ebp - 7], 0x3a
jne 0x42bdd8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42be10
call esi
test eax, eax
je 0x42bdfc
cmp byte [ebp - 3], 0x3a
jne 0x42bdfc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42be24
call esi
test eax, eax
je 0x42be24
cmp byte [ebp - 3], 0x3a
jne 0x42be24
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42be3e
cmp byte [ebp - 3], 0x3a
jne 0x42be3e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42be68
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42be68
cmp byte [ebp - 7], 0x3a
jne 0x42be68
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bea0
call esi
test eax, eax
je 0x42be8c
cmp byte [ebp - 3], 0x3a
jne 0x42be8c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42beb4
call esi
test eax, eax
je 0x42beb4
cmp byte [ebp - 3], 0x3a
jne 0x42beb4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bece
cmp byte [ebp - 3], 0x3a
jne 0x42bece
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42befd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42befd
cmp byte [ebp - 7], 0x3a
jne 0x42befd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bf35
call esi
test eax, eax
je 0x42bf21
cmp byte [ebp - 3], 0x3a
jne 0x42bf21
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42bf49
call esi
test eax, eax
je 0x42bf49
cmp byte [ebp - 3], 0x3a
jne 0x42bf49
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bf63
cmp byte [ebp - 3], 0x3a
jne 0x42bf63
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42bf91
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42bf91
cmp byte [ebp - 7], 0x3a
jne 0x42bf91
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42bfc9
call esi
test eax, eax
je 0x42bfb5
cmp byte [ebp - 3], 0x3a
jne 0x42bfb5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42bfdd
call esi
test eax, eax
je 0x42bfdd
cmp byte [ebp - 3], 0x3a
jne 0x42bfdd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42bff7
cmp byte [ebp - 3], 0x3a
jne 0x42bff7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c025
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c025
cmp byte [ebp - 7], 0x3a
jne 0x42c025
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c05d
call esi
test eax, eax
je 0x42c049
cmp byte [ebp - 3], 0x3a
jne 0x42c049
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c071
call esi
test eax, eax
je 0x42c071
cmp byte [ebp - 3], 0x3a
jne 0x42c071
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c08b
cmp byte [ebp - 3], 0x3a
jne 0x42c08b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c0b7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c0b7
cmp byte [ebp - 7], 0x3a
jne 0x42c0b7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c0ef
call esi
test eax, eax
je 0x42c0db
cmp byte [ebp - 3], 0x3a
jne 0x42c0db
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c103
call esi
test eax, eax
je 0x42c103
cmp byte [ebp - 3], 0x3a
jne 0x42c103
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c11d
cmp byte [ebp - 3], 0x3a
jne 0x42c11d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c14d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c14d
cmp byte [ebp - 7], 0x3a
jne 0x42c14d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c185
call esi
test eax, eax
je 0x42c171
cmp byte [ebp - 3], 0x3a
jne 0x42c171
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c199
call esi
test eax, eax
je 0x42c199
cmp byte [ebp - 3], 0x3a
jne 0x42c199
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c1b3
cmp byte [ebp - 3], 0x3a
jne 0x42c1b3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c1ec
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c1ec
cmp byte [ebp - 7], 0x3a
jne 0x42c1ec
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c224
call esi
test eax, eax
je 0x42c210
cmp byte [ebp - 3], 0x3a
jne 0x42c210
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c238
call esi
test eax, eax
je 0x42c238
cmp byte [ebp - 3], 0x3a
jne 0x42c238
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c252
cmp byte [ebp - 3], 0x3a
jne 0x42c252
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c281
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c281
cmp byte [ebp - 7], 0x3a
jne 0x42c281
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c2b9
call esi
test eax, eax
je 0x42c2a5
cmp byte [ebp - 3], 0x3a
jne 0x42c2a5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c2cd
call esi
test eax, eax
je 0x42c2cd
cmp byte [ebp - 3], 0x3a
jne 0x42c2cd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c2e7
cmp byte [ebp - 3], 0x3a
jne 0x42c2e7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c313
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c313
cmp byte [ebp - 7], 0x3a
jne 0x42c313
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c34b
call esi
test eax, eax
je 0x42c337
cmp byte [ebp - 3], 0x3a
jne 0x42c337
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c35f
call esi
test eax, eax
je 0x42c35f
cmp byte [ebp - 3], 0x3a
jne 0x42c35f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c379
cmp byte [ebp - 3], 0x3a
jne 0x42c379
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c3a9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c3a9
cmp byte [ebp - 7], 0x3a
jne 0x42c3a9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c3e1
call esi
test eax, eax
je 0x42c3cd
cmp byte [ebp - 3], 0x3a
jne 0x42c3cd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c3f5
call esi
test eax, eax
je 0x42c3f5
cmp byte [ebp - 3], 0x3a
jne 0x42c3f5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c40f
cmp byte [ebp - 3], 0x3a
jne 0x42c40f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42c470
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42c470
cmp byte [ebp - 7], 0x3a
jne 0x42c470
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42c4a8
call esi
test eax, eax
je 0x42c494
cmp byte [ebp - 3], 0x3a
jne 0x42c494
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42c4bc
call esi
test eax, eax
je 0x42c4bc
cmp byte [ebp - 3], 0x3a
jne 0x42c4bc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42c4d6
cmp byte [ebp - 3], 0x3a
jne 0x42c4d6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov dword [esi], ecx
cmp dword [eax + 0x3f7a8], ecx
mov dword [ebp - 4], ecx
jle 0x42c56a
add eax, 0x1fbd8
mov edi, 0x104
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0xc]
xor ebx, ebx
cmp dword [eax + 0x1fbd4], ebx
jle 0x42c531
add eax, 4
mov dword [ebp - 8], eax
push dword [ebp - 8]
mov eax, dword [0x4513d0]
push dword [ebp + 0xc]
call dword [eax + 0x1e0]
pop ecx
test eax, eax
pop ecx
je 0x42c556
mov eax, dword [ebp - 0xc]
add dword [ebp - 8], edi
inc ebx
cmp ebx, dword [eax + 0x1fbd4]
jl 0x42c50b
inc dword [esi]
mov eax, dword [esi]
imul eax, eax, 0x104
mov ecx, dword [ebp + 8]
push dword [ebp + 0xc]
lea eax, [eax + ecx - 0x104]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1e8]
pop ecx
pop ecx
inc dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
add dword [ebp + 0xc], edi
cmp ecx, dword [eax + 0x3f7a8]
jl 0x42c4f8
pop edi
pop esi
pop ebx
leave
ret 8