Function at 0x42ecde
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
mov eax, 0x44957a
call fcn.00448b30
sub esp, 0x580
push ebx
push esi
push edi
lea eax, [ebp - 0x18]
mov edi, ecx
xor esi, esi
test eax, eax
mov dword [ebp - 0x18], edi
jne 0x42fadb
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42ed42
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42ed42
cmp byte [ebp - 0x13], 0x3a
jne 0x42ed42
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
mov ebx, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42ed84
call esi
test eax, eax
je 0x42ed70
cmp byte [ebp - 0xf], 0x3a
jne 0x42ed70
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42ed9c
call esi
test eax, eax
je 0x42ed9c
cmp byte [ebp - 0xf], 0x3a
jne 0x42ed9c
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42edba
cmp byte [ebp - 0xf], 0x3a
jne 0x42edba
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42edea
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42edea
cmp byte [ebp - 0x13], 0x3a
jne 0x42edea
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42ee26
call esi
test eax, eax
je 0x42ee12
cmp byte [ebp - 0xf], 0x3a
jne 0x42ee12
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42ee3e
call esi
test eax, eax
je 0x42ee3e
cmp byte [ebp - 0xf], 0x3a
jne 0x42ee3e
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42ee5c
cmp byte [ebp - 0xf], 0x3a
jne 0x42ee5c
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42ee8c
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42ee8c
cmp byte [ebp - 0x13], 0x3a
jne 0x42ee8c
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42eec8
call esi
test eax, eax
je 0x42eeb4
cmp byte [ebp - 0xf], 0x3a
jne 0x42eeb4
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42eee0
call esi
test eax, eax
je 0x42eee0
cmp byte [ebp - 0xf], 0x3a
jne 0x42eee0
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42eefe
cmp byte [ebp - 0xf], 0x3a
jne 0x42eefe
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42ef3c
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42ef3c
cmp byte [ebp - 0x13], 0x3a
jne 0x42ef3c
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42ef78
call esi
test eax, eax
je 0x42ef64
cmp byte [ebp - 0xf], 0x3a
jne 0x42ef64
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42ef90
call esi
test eax, eax
je 0x42ef90
cmp byte [ebp - 0xf], 0x3a
jne 0x42ef90
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42efae
cmp byte [ebp - 0xf], 0x3a
jne 0x42efae
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42efe9
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42efe9
cmp byte [ebp - 0x13], 0x3a
jne 0x42efe9
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f025
call esi
test eax, eax
je 0x42f011
cmp byte [ebp - 0xf], 0x3a
jne 0x42f011
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f03d
call esi
test eax, eax
je 0x42f03d
cmp byte [ebp - 0xf], 0x3a
jne 0x42f03d
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f05b
cmp byte [ebp - 0xf], 0x3a
jne 0x42f05b
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f08d
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f08d
cmp byte [ebp - 0x13], 0x3a
jne 0x42f08d
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f0c9
call esi
test eax, eax
je 0x42f0b5
cmp byte [ebp - 0xf], 0x3a
jne 0x42f0b5
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f0e1
call esi
test eax, eax
je 0x42f0e1
cmp byte [ebp - 0xf], 0x3a
jne 0x42f0e1
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f0ff
cmp byte [ebp - 0xf], 0x3a
jne 0x42f0ff
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f137
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f137
cmp byte [ebp - 0x13], 0x3a
jne 0x42f137
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f173
call esi
test eax, eax
je 0x42f15f
cmp byte [ebp - 0xf], 0x3a
jne 0x42f15f
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f18b
call esi
test eax, eax
je 0x42f18b
cmp byte [ebp - 0xf], 0x3a
jne 0x42f18b
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f1a9
cmp byte [ebp - 0xf], 0x3a
jne 0x42f1a9
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f1db
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f1db
cmp byte [ebp - 0x13], 0x3a
jne 0x42f1db
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f217
call esi
test eax, eax
je 0x42f203
cmp byte [ebp - 0xf], 0x3a
jne 0x42f203
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f22f
call esi
test eax, eax
je 0x42f22f
cmp byte [ebp - 0xf], 0x3a
jne 0x42f22f
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f24d
cmp byte [ebp - 0xf], 0x3a
jne 0x42f24d
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f27d
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f27d
cmp byte [ebp - 0x13], 0x3a
jne 0x42f27d
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f2b9
call esi
test eax, eax
je 0x42f2a5
cmp byte [ebp - 0xf], 0x3a
jne 0x42f2a5
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f2d1
call esi
test eax, eax
je 0x42f2d1
cmp byte [ebp - 0xf], 0x3a
jne 0x42f2d1
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f2ef
cmp byte [ebp - 0xf], 0x3a
jne 0x42f2ef
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f321
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f321
cmp byte [ebp - 0x13], 0x3a
jne 0x42f321
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f35d
call esi
test eax, eax
je 0x42f349
cmp byte [ebp - 0xf], 0x3a
jne 0x42f349
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f375
call esi
test eax, eax
je 0x42f375
cmp byte [ebp - 0xf], 0x3a
jne 0x42f375
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f393
cmp byte [ebp - 0xf], 0x3a
jne 0x42f393
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f3c1
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f3c1
cmp byte [ebp - 0x13], 0x3a
jne 0x42f3c1
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f3fd
call esi
test eax, eax
je 0x42f3e9
cmp byte [ebp - 0xf], 0x3a
jne 0x42f3e9
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f415
call esi
test eax, eax
je 0x42f415
cmp byte [ebp - 0xf], 0x3a
jne 0x42f415
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f433
cmp byte [ebp - 0xf], 0x3a
jne 0x42f433
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f466
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f466
cmp byte [ebp - 0x13], 0x3a
jne 0x42f466
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f4a2
call esi
test eax, eax
je 0x42f48e
cmp byte [ebp - 0xf], 0x3a
jne 0x42f48e
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f4ba
call esi
test eax, eax
je 0x42f4ba
cmp byte [ebp - 0xf], 0x3a
jne 0x42f4ba
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f4d8
cmp byte [ebp - 0xf], 0x3a
jne 0x42f4d8
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f50a
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f50a
cmp byte [ebp - 0x13], 0x3a
jne 0x42f50a
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f546
call esi
test eax, eax
je 0x42f532
cmp byte [ebp - 0xf], 0x3a
jne 0x42f532
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f55e
call esi
test eax, eax
je 0x42f55e
cmp byte [ebp - 0xf], 0x3a
jne 0x42f55e
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f57c
cmp byte [ebp - 0xf], 0x3a
jne 0x42f57c
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f5ae
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f5ae
cmp byte [ebp - 0x13], 0x3a
jne 0x42f5ae
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f5ea
call esi
test eax, eax
je 0x42f5d6
cmp byte [ebp - 0xf], 0x3a
jne 0x42f5d6
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f602
call esi
test eax, eax
je 0x42f602
cmp byte [ebp - 0xf], 0x3a
jne 0x42f602
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f620
cmp byte [ebp - 0xf], 0x3a
jne 0x42f620
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f650
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f650
cmp byte [ebp - 0x13], 0x3a
jne 0x42f650
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f68c
call esi
test eax, eax
je 0x42f678
cmp byte [ebp - 0xf], 0x3a
jne 0x42f678
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f6a4
call esi
test eax, eax
je 0x42f6a4
cmp byte [ebp - 0xf], 0x3a
jne 0x42f6a4
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f6c2
cmp byte [ebp - 0xf], 0x3a
jne 0x42f6c2
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f6f6
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f6f6
cmp byte [ebp - 0x13], 0x3a
jne 0x42f6f6
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f732
call esi
test eax, eax
je 0x42f71e
cmp byte [ebp - 0xf], 0x3a
jne 0x42f71e
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f74a
call esi
test eax, eax
je 0x42f74a
cmp byte [ebp - 0xf], 0x3a
jne 0x42f74a
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f768
cmp byte [ebp - 0xf], 0x3a
jne 0x42f768
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f7a5
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f7a5
cmp byte [ebp - 0x13], 0x3a
jne 0x42f7a5
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f7e1
call esi
test eax, eax
je 0x42f7cd
cmp byte [ebp - 0xf], 0x3a
jne 0x42f7cd
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f7f9
call esi
test eax, eax
je 0x42f7f9
cmp byte [ebp - 0xf], 0x3a
jne 0x42f7f9
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f817
cmp byte [ebp - 0xf], 0x3a
jne 0x42f817
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f84a
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f84a
cmp byte [ebp - 0x13], 0x3a
jne 0x42f84a
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f886
call esi
test eax, eax
je 0x42f872
cmp byte [ebp - 0xf], 0x3a
jne 0x42f872
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f89e
call esi
test eax, eax
je 0x42f89e
cmp byte [ebp - 0xf], 0x3a
jne 0x42f89e
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f8bc
cmp byte [ebp - 0xf], 0x3a
jne 0x42f8bc
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f8ec
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f8ec
cmp byte [ebp - 0x13], 0x3a
jne 0x42f8ec
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f928
call esi
test eax, eax
je 0x42f914
cmp byte [ebp - 0xf], 0x3a
jne 0x42f914
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f940
call esi
test eax, eax
je 0x42f940
cmp byte [ebp - 0xf], 0x3a
jne 0x42f940
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42f95e
cmp byte [ebp - 0xf], 0x3a
jne 0x42f95e
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42f992
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42f992
cmp byte [ebp - 0x13], 0x3a
jne 0x42f992
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42f9ce
call esi
test eax, eax
je 0x42f9ba
cmp byte [ebp - 0xf], 0x3a
jne 0x42f9ba
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42f9e6
call esi
test eax, eax
je 0x42f9e6
cmp byte [ebp - 0xf], 0x3a
jne 0x42f9e6
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42fa04
cmp byte [ebp - 0xf], 0x3a
jne 0x42fa04
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x18]
cmp eax, 0xd5
jne 0x42fa69
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x42fa69
cmp byte [ebp - 0x13], 0x3a
jne 0x42fa69
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x42faa5
call esi
test eax, eax
je 0x42fa91
cmp byte [ebp - 0xf], 0x3a
jne 0x42fa91
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call ebx
jmp 0x42fabd
call esi
test eax, eax
je 0x42fabd
cmp byte [ebp - 0xf], 0x3a
jne 0x42fabd
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x42fadb
cmp byte [ebp - 0xf], 0x3a
jne 0x42fadb
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
push 0x5e
lea eax, [eax + ecx - 0x5e]
push eax
lea eax, [ebp - 0x84]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x1b4]
push 0
push 0x7d
push 0x32
push 0x35
push 0x32
push 0x38
push 0x45
push 0x36
push 0x45
push 0x46
pop esi
push esi
push 0x31
push 0x35
push 0x37
push 0x42
push 0x2d
pop ebx
push ebx
push esi
push 0x43
push 0x39
push 0x42
push ebx
push 0x36
push 0x62
push 0x35
push 0x34
push ebx
push 0x44
push 0x30
push 0x39
push 0x45
push ebx
push 0x35
push esi
push esi
push esi
push 0x45
push 0x37
push 0x38
push 0x37
push 0x7b
push eax
call fcn.004105df
lea eax, [ebp - 0x1b4]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1f0]
add esp, 0xa4
lea ecx, [ebp - 0x384]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.004360d5
and dword [ebp - 4], 0
lea eax, [ebp - 0x84]
push 0x5e
push eax
lea ecx, [ebp - 0x384]
call fcn.00436177
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x384]
call fcn.00436170
push edi
push 0x430b8c
call fcn.00436353
cmp dword [ebp - 0x84], 3
pop ecx
pop ecx
push dword [ebp - 0x28]
lea eax, [ebp - 0x6c]
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0x70]
jne 0x42fbe3
sub esp, 0x10
lea esi, [ebp - 0x80]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
push 0
movsd dword es:[edi], dword [esi]
call fcn.004362be
mov edi, dword [ebp - 0x18]
add esp, 0x28
push 0x46
pop esi
jmp 0x42fbef
push 0
push 0
call fcn.00436258
add esp, 0x18
push 0
push 0x7d
push 0x39
push 0x39
push 0x31
push 0x37
push 0x38
push 0x33
pop eax
push eax
push 0x32
push eax
push 0x36
push 0x32
push esi
push 0x32
push ebx
push 0x36
push 0x31
push 0x43
push 0x39
push ebx
push eax
push 0x65
push 0x31
push 0x34
push ebx
push eax
push 0x34
push 0x30
push esi
push ebx
push 0x44
push esi
push 0x30
push 0x34
push eax
push 0x37
push eax
push 0x41
lea eax, [ebp - 0xf8]
push 0x7b
push eax
call fcn.004105df
add esp, 0xa0
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [0x4513d0]
push 0
push 1
push 0
call dword [eax + 0x68]
mov dword [edi + 0xc], eax
xor eax, eax
push eax
push eax
push 1
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x68]
push 0
push 0x7d
push 0x34
mov dword [edi + 0x10], eax
pop ecx
push ecx
push 0x33
pop eax
push eax
push 0x36
push 0x31
push 0x43
push 0x38
push 0x35
push 0x44
push 0x39
push 0x36
push 0x42
push 0x37
push ebx
push esi
push esi
push 0x42
push 0x41
push ebx
push 0x66
push 0x36
push ecx
push ecx
push ebx
push 0x32
push 0x38
push ecx
push 0x39
push ebx
push 0x41
push eax
push esi
push eax
push eax
push 0x44
push eax
push 0x38
lea eax, [ebp - 0xf8]
push 0x7b
push eax
call fcn.004105df
add esp, 0xa0
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [0x4513d0]
push 0
push 1
push 0
call dword [eax + 0x68]
mov ecx, dword [edi + 0xc]
mov dword [edi + 0x14], eax
mov dword [ebp - 0x24], ecx
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
lea eax, [ebp - 0x24]
push 0
push eax
mov eax, dword [0x4513d0]
push 3
call dword [eax + 0x80]
sub eax, 0
je 0x42fe68
dec eax
je 0x42fe68
dec eax
jne 0x42fe6d
push dword [edi + 0x14]
mov eax, dword [0x4513d0]
call dword [eax + 0x7c]
push 0x5e
push 0x400
push dword [edi + 8]
lea ecx, [ebp - 0x150]
push dword [edi + 4]
call fcn.00435f47
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x150]
push eax
mov dword [ebp - 4], 1
call fcn.00436024
lea eax, [ebp - 0x488]
push eax
mov eax, dword [0x4513d0]
push 0x104
call dword [eax + 0x54]
push 0
push 0x73
push 0x25
push 0x73
lea eax, [ebp - 0x27c]
push 0x25
push eax
call fcn.004105df
add esp, 0x18
push 0
push 0x74
push 0x61
push 0x64
push 0x2e
push 0x7d
push 0x43
pop eax
push eax
push 0x32
pop ecx
push ecx
push 0x37
push ecx
push eax
push ecx
push 0x45
push eax
push 0x31
push 0x44
push 0x35
push 0x31
push ebx
push 0x30
push 0x31
push eax
push 0x41
push ebx
push 0x65
push 0x64
push 0x63
push 0x34
push ebx
push 0x38
push 0x34
push 0x45
push 0x45
push ebx
push 0x41
push 0x39
push esi
push eax
push 0x34
push ecx
push esi
push esi
lea eax, [ebp - 0x218]
push 0x7b
push eax
call fcn.004105df
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x58c]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1dc]
add esp, 0xc0
lea eax, [ebp - 0x58c]
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x50]
cmp eax, 0xffffffff
mov dword [ebp - 0x14], eax
je 0x42fe54
lea eax, [ebp - 0x18]
push 0
push eax
lea eax, [ebp - 0x94]
push 0x10
push eax
push dword [ebp - 0x14]
mov eax, dword [0x4513d0]
call dword [eax + 0x78]
push dword [ebp - 0x14]
mov eax, dword [0x4513d0]
call dword [eax + 0x44]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x150]
call fcn.00435ff2
jmp 0x42fcec
call fcn.00436334
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret