Function at 0x433fa0
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
mov eax, 0x4495bb
call fcn.00448b30
mov eax, 0x19128
call fcn.00448b60
lea eax, [ebp + 8]
push ebx
test eax, eax
mov dword [ebp - 0x18], ecx
jne 0x434c57
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434008
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434008
cmp byte [ebp - 0x13], 0x3a
jne 0x434008
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434046
call esi
test eax, eax
je 0x434032
cmp byte [ebp - 0xf], 0x3a
jne 0x434032
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43405a
call esi
test eax, eax
je 0x43405a
cmp byte [ebp - 0xf], 0x3a
jne 0x43405a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434074
cmp byte [ebp - 0xf], 0x3a
jne 0x434074
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4340a0
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4340a0
cmp byte [ebp - 0x13], 0x3a
jne 0x4340a0
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4340d8
call esi
test eax, eax
je 0x4340c4
cmp byte [ebp - 0xf], 0x3a
jne 0x4340c4
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4340ec
call esi
test eax, eax
je 0x4340ec
cmp byte [ebp - 0xf], 0x3a
jne 0x4340ec
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434106
cmp byte [ebp - 0xf], 0x3a
jne 0x434106
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434132
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434132
cmp byte [ebp - 0x13], 0x3a
jne 0x434132
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43416a
call esi
test eax, eax
je 0x434156
cmp byte [ebp - 0xf], 0x3a
jne 0x434156
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43417e
call esi
test eax, eax
je 0x43417e
cmp byte [ebp - 0xf], 0x3a
jne 0x43417e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434198
cmp byte [ebp - 0xf], 0x3a
jne 0x434198
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4341d2
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4341d2
cmp byte [ebp - 0x13], 0x3a
jne 0x4341d2
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43420a
call esi
test eax, eax
je 0x4341f6
cmp byte [ebp - 0xf], 0x3a
jne 0x4341f6
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43421e
call esi
test eax, eax
je 0x43421e
cmp byte [ebp - 0xf], 0x3a
jne 0x43421e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434238
cmp byte [ebp - 0xf], 0x3a
jne 0x434238
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43426f
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43426f
cmp byte [ebp - 0x13], 0x3a
jne 0x43426f
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4342a7
call esi
test eax, eax
je 0x434293
cmp byte [ebp - 0xf], 0x3a
jne 0x434293
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4342bb
call esi
test eax, eax
je 0x4342bb
cmp byte [ebp - 0xf], 0x3a
jne 0x4342bb
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4342d5
cmp byte [ebp - 0xf], 0x3a
jne 0x4342d5
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434303
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434303
cmp byte [ebp - 0x13], 0x3a
jne 0x434303
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43433b
call esi
test eax, eax
je 0x434327
cmp byte [ebp - 0xf], 0x3a
jne 0x434327
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43434f
call esi
test eax, eax
je 0x43434f
cmp byte [ebp - 0xf], 0x3a
jne 0x43434f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434369
cmp byte [ebp - 0xf], 0x3a
jne 0x434369
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43439d
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43439d
cmp byte [ebp - 0x13], 0x3a
jne 0x43439d
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4343d5
call esi
test eax, eax
je 0x4343c1
cmp byte [ebp - 0xf], 0x3a
jne 0x4343c1
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4343e9
call esi
test eax, eax
je 0x4343e9
cmp byte [ebp - 0xf], 0x3a
jne 0x4343e9
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434403
cmp byte [ebp - 0xf], 0x3a
jne 0x434403
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434431
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434431
cmp byte [ebp - 0x13], 0x3a
jne 0x434431
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434469
call esi
test eax, eax
je 0x434455
cmp byte [ebp - 0xf], 0x3a
jne 0x434455
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43447d
call esi
test eax, eax
je 0x43447d
cmp byte [ebp - 0xf], 0x3a
jne 0x43447d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434497
cmp byte [ebp - 0xf], 0x3a
jne 0x434497
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4344c3
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4344c3
cmp byte [ebp - 0x13], 0x3a
jne 0x4344c3
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4344fb
call esi
test eax, eax
je 0x4344e7
cmp byte [ebp - 0xf], 0x3a
jne 0x4344e7
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43450f
call esi
test eax, eax
je 0x43450f
cmp byte [ebp - 0xf], 0x3a
jne 0x43450f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434529
cmp byte [ebp - 0xf], 0x3a
jne 0x434529
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434557
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434557
cmp byte [ebp - 0x13], 0x3a
jne 0x434557
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43458f
call esi
test eax, eax
je 0x43457b
cmp byte [ebp - 0xf], 0x3a
jne 0x43457b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4345a3
call esi
test eax, eax
je 0x4345a3
cmp byte [ebp - 0xf], 0x3a
jne 0x4345a3
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4345bd
cmp byte [ebp - 0xf], 0x3a
jne 0x4345bd
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4345e7
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4345e7
cmp byte [ebp - 0x13], 0x3a
jne 0x4345e7
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43461f
call esi
test eax, eax
je 0x43460b
cmp byte [ebp - 0xf], 0x3a
jne 0x43460b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x434633
call esi
test eax, eax
je 0x434633
cmp byte [ebp - 0xf], 0x3a
jne 0x434633
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43464d
cmp byte [ebp - 0xf], 0x3a
jne 0x43464d
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43467c
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43467c
cmp byte [ebp - 0x13], 0x3a
jne 0x43467c
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4346b4
call esi
test eax, eax
je 0x4346a0
cmp byte [ebp - 0xf], 0x3a
jne 0x4346a0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4346c8
call esi
test eax, eax
je 0x4346c8
cmp byte [ebp - 0xf], 0x3a
jne 0x4346c8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4346e2
cmp byte [ebp - 0xf], 0x3a
jne 0x4346e2
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434710
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434710
cmp byte [ebp - 0x13], 0x3a
jne 0x434710
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434748
call esi
test eax, eax
je 0x434734
cmp byte [ebp - 0xf], 0x3a
jne 0x434734
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x43475c
call esi
test eax, eax
je 0x43475c
cmp byte [ebp - 0xf], 0x3a
jne 0x43475c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434776
cmp byte [ebp - 0xf], 0x3a
jne 0x434776
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4347a4
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4347a4
cmp byte [ebp - 0x13], 0x3a
jne 0x4347a4
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4347dc
call esi
test eax, eax
je 0x4347c8
cmp byte [ebp - 0xf], 0x3a
jne 0x4347c8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4347f0
call esi
test eax, eax
je 0x4347f0
cmp byte [ebp - 0xf], 0x3a
jne 0x4347f0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43480a
cmp byte [ebp - 0xf], 0x3a
jne 0x43480a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434836
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434836
cmp byte [ebp - 0x13], 0x3a
jne 0x434836
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43486e
call esi
test eax, eax
je 0x43485a
cmp byte [ebp - 0xf], 0x3a
jne 0x43485a
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x434882
call esi
test eax, eax
je 0x434882
cmp byte [ebp - 0xf], 0x3a
jne 0x434882
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x43489c
cmp byte [ebp - 0xf], 0x3a
jne 0x43489c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4348cc
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x4348cc
cmp byte [ebp - 0x13], 0x3a
jne 0x4348cc
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434904
call esi
test eax, eax
je 0x4348f0
cmp byte [ebp - 0xf], 0x3a
jne 0x4348f0
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x434918
call esi
test eax, eax
je 0x434918
cmp byte [ebp - 0xf], 0x3a
jne 0x434918
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434932
cmp byte [ebp - 0xf], 0x3a
jne 0x434932
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43496b
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x43496b
cmp byte [ebp - 0x13], 0x3a
jne 0x43496b
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4349a3
call esi
test eax, eax
je 0x43498f
cmp byte [ebp - 0xf], 0x3a
jne 0x43498f
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x4349b7
call esi
test eax, eax
je 0x4349b7
cmp byte [ebp - 0xf], 0x3a
jne 0x4349b7
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x4349d1
cmp byte [ebp - 0xf], 0x3a
jne 0x4349d1
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434a00
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434a00
cmp byte [ebp - 0x13], 0x3a
jne 0x434a00
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434a38
call esi
test eax, eax
je 0x434a24
cmp byte [ebp - 0xf], 0x3a
jne 0x434a24
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x434a4c
call esi
test eax, eax
je 0x434a4c
cmp byte [ebp - 0xf], 0x3a
jne 0x434a4c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434a66
cmp byte [ebp - 0xf], 0x3a
jne 0x434a66
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434a92
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434a92
cmp byte [ebp - 0x13], 0x3a
jne 0x434a92
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434aca
call esi
test eax, eax
je 0x434ab6
cmp byte [ebp - 0xf], 0x3a
jne 0x434ab6
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x434ade
call esi
test eax, eax
je 0x434ade
cmp byte [ebp - 0xf], 0x3a
jne 0x434ade
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434af8
cmp byte [ebp - 0xf], 0x3a
jne 0x434af8
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434b28
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434b28
cmp byte [ebp - 0x13], 0x3a
jne 0x434b28
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434b60
call esi
test eax, eax
je 0x434b4c
cmp byte [ebp - 0xf], 0x3a
jne 0x434b4c
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x434b74
call esi
test eax, eax
je 0x434b74
cmp byte [ebp - 0xf], 0x3a
jne 0x434b74
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x434b8e
cmp byte [ebp - 0xf], 0x3a
jne 0x434b8e
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x434bef
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x434bef
cmp byte [ebp - 0x13], 0x3a
jne 0x434bef
movzx eax, byte [ebp - 0x14]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x434c27
call esi
test eax, eax
je 0x434c13
cmp byte [ebp - 0xf], 0x3a
jne 0x434c13
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
and byte [ebp - 0x12], 0
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x14], 0x42
mov byte [ebp - 0x13], 0x3a
call edi
jmp 0x434c3b
call esi
test eax, eax
je 0x434c3b
cmp byte [ebp - 0xf], 0x3a
jne 0x434c3b
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x434c57
cmp byte [ebp - 0xf], 0x3a
jne 0x434c57
movzx eax, byte [ebp - 0x10]
push eax
call ebx
pop ecx
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x19134]
push dword [eax + 8]
push dword [eax + 4]
push dword [ebp + 8]
call fcn.0040aa67
and dword [ebp - 4], 0
lea ecx, [ebp - 0x19134]
call fcn.0040c436
cmp eax, 3
pop ebx
je 0x434cc7
cmp eax, 1
lea ecx, [ebp - 0x19134]
jne 0x434cb3
call fcn.0040d179
test eax, eax
jne 0x434cc7
lea ecx, [ebp - 0x19134]
call fcn.0040deb1
test eax, eax
je 0x434cc7
lea ecx, [ebp - 0x19134]
call fcn.0040eb99
jmp 0x434cc7
call fcn.0040deb1
test eax, eax
je 0x434cc7
lea ecx, [ebp - 0x19134]
call fcn.0040f86a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19134]
call fcn.0040b770
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 4