Function at 0x429e55
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
lea eax, [ebp + 0xc]
xor esi, esi
test eax, eax
push edi
mov dword [ebp - 0xc], ecx
jne 0x42aafc
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x429eaf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429eaf
cmp byte [ebp - 7], 0x3a
jne 0x429eaf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429eed
call esi
test eax, eax
je 0x429ed9
cmp byte [ebp - 3], 0x3a
jne 0x429ed9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429f01
call esi
test eax, eax
je 0x429f01
cmp byte [ebp - 3], 0x3a
jne 0x429f01
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429f1b
cmp byte [ebp - 3], 0x3a
jne 0x429f1b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x429f47
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429f47
cmp byte [ebp - 7], 0x3a
jne 0x429f47
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429f7f
call esi
test eax, eax
je 0x429f6b
cmp byte [ebp - 3], 0x3a
jne 0x429f6b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429f93
call esi
test eax, eax
je 0x429f93
cmp byte [ebp - 3], 0x3a
jne 0x429f93
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429fad
cmp byte [ebp - 3], 0x3a
jne 0x429fad
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x429fd9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429fd9
cmp byte [ebp - 7], 0x3a
jne 0x429fd9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a011
call esi
test eax, eax
je 0x429ffd
cmp byte [ebp - 3], 0x3a
jne 0x429ffd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a025
call esi
test eax, eax
je 0x42a025
cmp byte [ebp - 3], 0x3a
jne 0x42a025
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a03f
cmp byte [ebp - 3], 0x3a
jne 0x42a03f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a079
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a079
cmp byte [ebp - 7], 0x3a
jne 0x42a079
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a0b1
call esi
test eax, eax
je 0x42a09d
cmp byte [ebp - 3], 0x3a
jne 0x42a09d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a0c5
call esi
test eax, eax
je 0x42a0c5
cmp byte [ebp - 3], 0x3a
jne 0x42a0c5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a0df
cmp byte [ebp - 3], 0x3a
jne 0x42a0df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a116
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a116
cmp byte [ebp - 7], 0x3a
jne 0x42a116
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a14e
call esi
test eax, eax
je 0x42a13a
cmp byte [ebp - 3], 0x3a
jne 0x42a13a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a162
call esi
test eax, eax
je 0x42a162
cmp byte [ebp - 3], 0x3a
jne 0x42a162
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a17c
cmp byte [ebp - 3], 0x3a
jne 0x42a17c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a1aa
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a1aa
cmp byte [ebp - 7], 0x3a
jne 0x42a1aa
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a1e2
call esi
test eax, eax
je 0x42a1ce
cmp byte [ebp - 3], 0x3a
jne 0x42a1ce
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a1f6
call esi
test eax, eax
je 0x42a1f6
cmp byte [ebp - 3], 0x3a
jne 0x42a1f6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a210
cmp byte [ebp - 3], 0x3a
jne 0x42a210
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a244
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a244
cmp byte [ebp - 7], 0x3a
jne 0x42a244
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a27c
call esi
test eax, eax
je 0x42a268
cmp byte [ebp - 3], 0x3a
jne 0x42a268
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a290
call esi
test eax, eax
je 0x42a290
cmp byte [ebp - 3], 0x3a
jne 0x42a290
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a2aa
cmp byte [ebp - 3], 0x3a
jne 0x42a2aa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a2d8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a2d8
cmp byte [ebp - 7], 0x3a
jne 0x42a2d8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a310
call esi
test eax, eax
je 0x42a2fc
cmp byte [ebp - 3], 0x3a
jne 0x42a2fc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a324
call esi
test eax, eax
je 0x42a324
cmp byte [ebp - 3], 0x3a
jne 0x42a324
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a33e
cmp byte [ebp - 3], 0x3a
jne 0x42a33e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a36a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a36a
cmp byte [ebp - 7], 0x3a
jne 0x42a36a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a3a2
call esi
test eax, eax
je 0x42a38e
cmp byte [ebp - 3], 0x3a
jne 0x42a38e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a3b6
call esi
test eax, eax
je 0x42a3b6
cmp byte [ebp - 3], 0x3a
jne 0x42a3b6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a3d0
cmp byte [ebp - 3], 0x3a
jne 0x42a3d0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a3fe
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a3fe
cmp byte [ebp - 7], 0x3a
jne 0x42a3fe
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a436
call esi
test eax, eax
je 0x42a422
cmp byte [ebp - 3], 0x3a
jne 0x42a422
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a44a
call esi
test eax, eax
je 0x42a44a
cmp byte [ebp - 3], 0x3a
jne 0x42a44a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a464
cmp byte [ebp - 3], 0x3a
jne 0x42a464
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a48e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a48e
cmp byte [ebp - 7], 0x3a
jne 0x42a48e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a4c6
call esi
test eax, eax
je 0x42a4b2
cmp byte [ebp - 3], 0x3a
jne 0x42a4b2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a4da
call esi
test eax, eax
je 0x42a4da
cmp byte [ebp - 3], 0x3a
jne 0x42a4da
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a4f4
cmp byte [ebp - 3], 0x3a
jne 0x42a4f4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a523
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a523
cmp byte [ebp - 7], 0x3a
jne 0x42a523
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a55b
call esi
test eax, eax
je 0x42a547
cmp byte [ebp - 3], 0x3a
jne 0x42a547
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a56f
call esi
test eax, eax
je 0x42a56f
cmp byte [ebp - 3], 0x3a
jne 0x42a56f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a589
cmp byte [ebp - 3], 0x3a
jne 0x42a589
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a5b7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a5b7
cmp byte [ebp - 7], 0x3a
jne 0x42a5b7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a5ef
call esi
test eax, eax
je 0x42a5db
cmp byte [ebp - 3], 0x3a
jne 0x42a5db
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a603
call esi
test eax, eax
je 0x42a603
cmp byte [ebp - 3], 0x3a
jne 0x42a603
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a61d
cmp byte [ebp - 3], 0x3a
jne 0x42a61d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a64b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a64b
cmp byte [ebp - 7], 0x3a
jne 0x42a64b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a683
call esi
test eax, eax
je 0x42a66f
cmp byte [ebp - 3], 0x3a
jne 0x42a66f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a697
call esi
test eax, eax
je 0x42a697
cmp byte [ebp - 3], 0x3a
jne 0x42a697
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a6b1
cmp byte [ebp - 3], 0x3a
jne 0x42a6b1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a6dd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a6dd
cmp byte [ebp - 7], 0x3a
jne 0x42a6dd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a715
call esi
test eax, eax
je 0x42a701
cmp byte [ebp - 3], 0x3a
jne 0x42a701
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a729
call esi
test eax, eax
je 0x42a729
cmp byte [ebp - 3], 0x3a
jne 0x42a729
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a743
cmp byte [ebp - 3], 0x3a
jne 0x42a743
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a773
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a773
cmp byte [ebp - 7], 0x3a
jne 0x42a773
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a7ab
call esi
test eax, eax
je 0x42a797
cmp byte [ebp - 3], 0x3a
jne 0x42a797
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a7bf
call esi
test eax, eax
je 0x42a7bf
cmp byte [ebp - 3], 0x3a
jne 0x42a7bf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a7d9
cmp byte [ebp - 3], 0x3a
jne 0x42a7d9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a812
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a812
cmp byte [ebp - 7], 0x3a
jne 0x42a812
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a84a
call esi
test eax, eax
je 0x42a836
cmp byte [ebp - 3], 0x3a
jne 0x42a836
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a85e
call esi
test eax, eax
je 0x42a85e
cmp byte [ebp - 3], 0x3a
jne 0x42a85e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a878
cmp byte [ebp - 3], 0x3a
jne 0x42a878
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a8a7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a8a7
cmp byte [ebp - 7], 0x3a
jne 0x42a8a7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a8df
call esi
test eax, eax
je 0x42a8cb
cmp byte [ebp - 3], 0x3a
jne 0x42a8cb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a8f3
call esi
test eax, eax
je 0x42a8f3
cmp byte [ebp - 3], 0x3a
jne 0x42a8f3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a90d
cmp byte [ebp - 3], 0x3a
jne 0x42a90d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a939
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a939
cmp byte [ebp - 7], 0x3a
jne 0x42a939
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42a971
call esi
test eax, eax
je 0x42a95d
cmp byte [ebp - 3], 0x3a
jne 0x42a95d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42a985
call esi
test eax, eax
je 0x42a985
cmp byte [ebp - 3], 0x3a
jne 0x42a985
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42a99f
cmp byte [ebp - 3], 0x3a
jne 0x42a99f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42a9cf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42a9cf
cmp byte [ebp - 7], 0x3a
jne 0x42a9cf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42aa07
call esi
test eax, eax
je 0x42a9f3
cmp byte [ebp - 3], 0x3a
jne 0x42a9f3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42aa1b
call esi
test eax, eax
je 0x42aa1b
cmp byte [ebp - 3], 0x3a
jne 0x42aa1b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42aa35
cmp byte [ebp - 3], 0x3a
jne 0x42aa35
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42aa96
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42aa96
cmp byte [ebp - 7], 0x3a
jne 0x42aa96
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42aace
call esi
test eax, eax
je 0x42aaba
cmp byte [ebp - 3], 0x3a
jne 0x42aaba
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42aae2
call esi
test eax, eax
je 0x42aae2
cmp byte [ebp - 3], 0x3a
jne 0x42aae2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42aafc
cmp byte [ebp - 3], 0x3a
jne 0x42aafc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp + 0xc]
xor edi, edi
mov eax, dword [ebx + 0x1fbd4]
mov dword [ecx], eax
cmp dword [ebx + 0x1fbd4], edi
jle 0x42ab44
mov eax, dword [ebp + 8]
add ebx, 4
mov dword [ebp + 0xc], eax
mov esi, 0x104
mov eax, dword [0x4513d0]
push ebx
push dword [ebp + 0xc]
call dword [eax + 0x1e8]
mov eax, dword [ebp - 0xc]
add dword [ebp + 0xc], esi
inc edi
pop ecx
add ebx, esi
cmp edi, dword [eax + 0x1fbd4]
pop ecx
jl 0x42ab22
pop edi
pop esi
pop ebx
leave
ret 8