Function at 0x428495
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
lea eax, [ebp - 8]
push ebx
test eax, eax
mov dword [ecx], 0x44b128
jne 0x429140
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x4284f1
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4284f1
cmp byte [ebp - 7], 0x3a
jne 0x4284f1
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42852f
call esi
test eax, eax
je 0x42851b
cmp byte [ebp - 3], 0x3a
jne 0x42851b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428543
call esi
test eax, eax
je 0x428543
cmp byte [ebp - 3], 0x3a
jne 0x428543
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42855d
cmp byte [ebp - 3], 0x3a
jne 0x42855d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428589
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428589
cmp byte [ebp - 7], 0x3a
jne 0x428589
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4285c1
call esi
test eax, eax
je 0x4285ad
cmp byte [ebp - 3], 0x3a
jne 0x4285ad
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4285d5
call esi
test eax, eax
je 0x4285d5
cmp byte [ebp - 3], 0x3a
jne 0x4285d5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4285ef
cmp byte [ebp - 3], 0x3a
jne 0x4285ef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x42861b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42861b
cmp byte [ebp - 7], 0x3a
jne 0x42861b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428653
call esi
test eax, eax
je 0x42863f
cmp byte [ebp - 3], 0x3a
jne 0x42863f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428667
call esi
test eax, eax
je 0x428667
cmp byte [ebp - 3], 0x3a
jne 0x428667
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428681
cmp byte [ebp - 3], 0x3a
jne 0x428681
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x4286bb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4286bb
cmp byte [ebp - 7], 0x3a
jne 0x4286bb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4286f3
call esi
test eax, eax
je 0x4286df
cmp byte [ebp - 3], 0x3a
jne 0x4286df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428707
call esi
test eax, eax
je 0x428707
cmp byte [ebp - 3], 0x3a
jne 0x428707
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428721
cmp byte [ebp - 3], 0x3a
jne 0x428721
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428758
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428758
cmp byte [ebp - 7], 0x3a
jne 0x428758
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428790
call esi
test eax, eax
je 0x42877c
cmp byte [ebp - 3], 0x3a
jne 0x42877c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4287a4
call esi
test eax, eax
je 0x4287a4
cmp byte [ebp - 3], 0x3a
jne 0x4287a4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4287be
cmp byte [ebp - 3], 0x3a
jne 0x4287be
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x4287ec
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4287ec
cmp byte [ebp - 7], 0x3a
jne 0x4287ec
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428824
call esi
test eax, eax
je 0x428810
cmp byte [ebp - 3], 0x3a
jne 0x428810
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428838
call esi
test eax, eax
je 0x428838
cmp byte [ebp - 3], 0x3a
jne 0x428838
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428852
cmp byte [ebp - 3], 0x3a
jne 0x428852
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428886
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428886
cmp byte [ebp - 7], 0x3a
jne 0x428886
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4288be
call esi
test eax, eax
je 0x4288aa
cmp byte [ebp - 3], 0x3a
jne 0x4288aa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4288d2
call esi
test eax, eax
je 0x4288d2
cmp byte [ebp - 3], 0x3a
jne 0x4288d2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4288ec
cmp byte [ebp - 3], 0x3a
jne 0x4288ec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x42891a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42891a
cmp byte [ebp - 7], 0x3a
jne 0x42891a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428952
call esi
test eax, eax
je 0x42893e
cmp byte [ebp - 3], 0x3a
jne 0x42893e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428966
call esi
test eax, eax
je 0x428966
cmp byte [ebp - 3], 0x3a
jne 0x428966
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428980
cmp byte [ebp - 3], 0x3a
jne 0x428980
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x4289ac
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4289ac
cmp byte [ebp - 7], 0x3a
jne 0x4289ac
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4289e4
call esi
test eax, eax
je 0x4289d0
cmp byte [ebp - 3], 0x3a
jne 0x4289d0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4289f8
call esi
test eax, eax
je 0x4289f8
cmp byte [ebp - 3], 0x3a
jne 0x4289f8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428a12
cmp byte [ebp - 3], 0x3a
jne 0x428a12
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428a40
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428a40
cmp byte [ebp - 7], 0x3a
jne 0x428a40
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428a78
call esi
test eax, eax
je 0x428a64
cmp byte [ebp - 3], 0x3a
jne 0x428a64
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428a8c
call esi
test eax, eax
je 0x428a8c
cmp byte [ebp - 3], 0x3a
jne 0x428a8c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428aa6
cmp byte [ebp - 3], 0x3a
jne 0x428aa6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428ad0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428ad0
cmp byte [ebp - 7], 0x3a
jne 0x428ad0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428b08
call esi
test eax, eax
je 0x428af4
cmp byte [ebp - 3], 0x3a
jne 0x428af4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428b1c
call esi
test eax, eax
je 0x428b1c
cmp byte [ebp - 3], 0x3a
jne 0x428b1c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428b36
cmp byte [ebp - 3], 0x3a
jne 0x428b36
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428b65
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428b65
cmp byte [ebp - 7], 0x3a
jne 0x428b65
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428b9d
call esi
test eax, eax
je 0x428b89
cmp byte [ebp - 3], 0x3a
jne 0x428b89
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428bb1
call esi
test eax, eax
je 0x428bb1
cmp byte [ebp - 3], 0x3a
jne 0x428bb1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428bcb
cmp byte [ebp - 3], 0x3a
jne 0x428bcb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428bf9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428bf9
cmp byte [ebp - 7], 0x3a
jne 0x428bf9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428c31
call esi
test eax, eax
je 0x428c1d
cmp byte [ebp - 3], 0x3a
jne 0x428c1d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428c45
call esi
test eax, eax
je 0x428c45
cmp byte [ebp - 3], 0x3a
jne 0x428c45
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428c5f
cmp byte [ebp - 3], 0x3a
jne 0x428c5f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428c8d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428c8d
cmp byte [ebp - 7], 0x3a
jne 0x428c8d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428cc5
call esi
test eax, eax
je 0x428cb1
cmp byte [ebp - 3], 0x3a
jne 0x428cb1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428cd9
call esi
test eax, eax
je 0x428cd9
cmp byte [ebp - 3], 0x3a
jne 0x428cd9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428cf3
cmp byte [ebp - 3], 0x3a
jne 0x428cf3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428d1f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428d1f
cmp byte [ebp - 7], 0x3a
jne 0x428d1f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428d57
call esi
test eax, eax
je 0x428d43
cmp byte [ebp - 3], 0x3a
jne 0x428d43
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428d6b
call esi
test eax, eax
je 0x428d6b
cmp byte [ebp - 3], 0x3a
jne 0x428d6b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428d85
cmp byte [ebp - 3], 0x3a
jne 0x428d85
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428db5
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428db5
cmp byte [ebp - 7], 0x3a
jne 0x428db5
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428ded
call esi
test eax, eax
je 0x428dd9
cmp byte [ebp - 3], 0x3a
jne 0x428dd9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428e01
call esi
test eax, eax
je 0x428e01
cmp byte [ebp - 3], 0x3a
jne 0x428e01
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428e1b
cmp byte [ebp - 3], 0x3a
jne 0x428e1b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428e54
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428e54
cmp byte [ebp - 7], 0x3a
jne 0x428e54
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428e8c
call esi
test eax, eax
je 0x428e78
cmp byte [ebp - 3], 0x3a
jne 0x428e78
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428ea0
call esi
test eax, eax
je 0x428ea0
cmp byte [ebp - 3], 0x3a
jne 0x428ea0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428eba
cmp byte [ebp - 3], 0x3a
jne 0x428eba
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428ee9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428ee9
cmp byte [ebp - 7], 0x3a
jne 0x428ee9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428f21
call esi
test eax, eax
je 0x428f0d
cmp byte [ebp - 3], 0x3a
jne 0x428f0d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428f35
call esi
test eax, eax
je 0x428f35
cmp byte [ebp - 3], 0x3a
jne 0x428f35
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428f4f
cmp byte [ebp - 3], 0x3a
jne 0x428f4f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x428f7b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x428f7b
cmp byte [ebp - 7], 0x3a
jne 0x428f7b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x428fb3
call esi
test eax, eax
je 0x428f9f
cmp byte [ebp - 3], 0x3a
jne 0x428f9f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x428fc7
call esi
test eax, eax
je 0x428fc7
cmp byte [ebp - 3], 0x3a
jne 0x428fc7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x428fe1
cmp byte [ebp - 3], 0x3a
jne 0x428fe1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x429011
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x429011
cmp byte [ebp - 7], 0x3a
jne 0x429011
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429049
call esi
test eax, eax
je 0x429035
cmp byte [ebp - 3], 0x3a
jne 0x429035
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42905d
call esi
test eax, eax
je 0x42905d
cmp byte [ebp - 3], 0x3a
jne 0x42905d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x429077
cmp byte [ebp - 3], 0x3a
jne 0x429077
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 8]
cmp eax, 0xd5
jne 0x4290d8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4290d8
cmp byte [ebp - 7], 0x3a
jne 0x4290d8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x429110
call esi
test eax, eax
je 0x4290fc
cmp byte [ebp - 3], 0x3a
jne 0x4290fc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x429124
call esi
test eax, eax
je 0x429124
cmp byte [ebp - 3], 0x3a
jne 0x429124
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x429140
cmp byte [ebp - 3], 0x3a
jne 0x429140
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
pop ebx
leave
ret