Function at 0x423eee
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210
push ebx
push esi
lea eax, [ebp + 0xc]
xor esi, esi
test eax, eax
push edi
jne 0x424b95
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x423f48
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423f48
cmp byte [ebp - 7], 0x3a
jne 0x423f48
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423f86
call esi
test eax, eax
je 0x423f72
cmp byte [ebp - 3], 0x3a
jne 0x423f72
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423f9a
call esi
test eax, eax
je 0x423f9a
cmp byte [ebp - 3], 0x3a
jne 0x423f9a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423fb4
cmp byte [ebp - 3], 0x3a
jne 0x423fb4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x423fe0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423fe0
cmp byte [ebp - 7], 0x3a
jne 0x423fe0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424018
call esi
test eax, eax
je 0x424004
cmp byte [ebp - 3], 0x3a
jne 0x424004
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42402c
call esi
test eax, eax
je 0x42402c
cmp byte [ebp - 3], 0x3a
jne 0x42402c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424046
cmp byte [ebp - 3], 0x3a
jne 0x424046
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424072
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424072
cmp byte [ebp - 7], 0x3a
jne 0x424072
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4240aa
call esi
test eax, eax
je 0x424096
cmp byte [ebp - 3], 0x3a
jne 0x424096
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4240be
call esi
test eax, eax
je 0x4240be
cmp byte [ebp - 3], 0x3a
jne 0x4240be
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4240d8
cmp byte [ebp - 3], 0x3a
jne 0x4240d8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424112
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424112
cmp byte [ebp - 7], 0x3a
jne 0x424112
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42414a
call esi
test eax, eax
je 0x424136
cmp byte [ebp - 3], 0x3a
jne 0x424136
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42415e
call esi
test eax, eax
je 0x42415e
cmp byte [ebp - 3], 0x3a
jne 0x42415e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424178
cmp byte [ebp - 3], 0x3a
jne 0x424178
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4241af
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4241af
cmp byte [ebp - 7], 0x3a
jne 0x4241af
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4241e7
call esi
test eax, eax
je 0x4241d3
cmp byte [ebp - 3], 0x3a
jne 0x4241d3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4241fb
call esi
test eax, eax
je 0x4241fb
cmp byte [ebp - 3], 0x3a
jne 0x4241fb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424215
cmp byte [ebp - 3], 0x3a
jne 0x424215
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424243
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424243
cmp byte [ebp - 7], 0x3a
jne 0x424243
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42427b
call esi
test eax, eax
je 0x424267
cmp byte [ebp - 3], 0x3a
jne 0x424267
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42428f
call esi
test eax, eax
je 0x42428f
cmp byte [ebp - 3], 0x3a
jne 0x42428f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4242a9
cmp byte [ebp - 3], 0x3a
jne 0x4242a9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4242dd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4242dd
cmp byte [ebp - 7], 0x3a
jne 0x4242dd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424315
call esi
test eax, eax
je 0x424301
cmp byte [ebp - 3], 0x3a
jne 0x424301
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424329
call esi
test eax, eax
je 0x424329
cmp byte [ebp - 3], 0x3a
jne 0x424329
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424343
cmp byte [ebp - 3], 0x3a
jne 0x424343
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424371
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424371
cmp byte [ebp - 7], 0x3a
jne 0x424371
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4243a9
call esi
test eax, eax
je 0x424395
cmp byte [ebp - 3], 0x3a
jne 0x424395
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4243bd
call esi
test eax, eax
je 0x4243bd
cmp byte [ebp - 3], 0x3a
jne 0x4243bd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4243d7
cmp byte [ebp - 3], 0x3a
jne 0x4243d7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424403
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424403
cmp byte [ebp - 7], 0x3a
jne 0x424403
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42443b
call esi
test eax, eax
je 0x424427
cmp byte [ebp - 3], 0x3a
jne 0x424427
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42444f
call esi
test eax, eax
je 0x42444f
cmp byte [ebp - 3], 0x3a
jne 0x42444f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424469
cmp byte [ebp - 3], 0x3a
jne 0x424469
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424497
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424497
cmp byte [ebp - 7], 0x3a
jne 0x424497
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4244cf
call esi
test eax, eax
je 0x4244bb
cmp byte [ebp - 3], 0x3a
jne 0x4244bb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4244e3
call esi
test eax, eax
je 0x4244e3
cmp byte [ebp - 3], 0x3a
jne 0x4244e3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4244fd
cmp byte [ebp - 3], 0x3a
jne 0x4244fd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424527
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424527
cmp byte [ebp - 7], 0x3a
jne 0x424527
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42455f
call esi
test eax, eax
je 0x42454b
cmp byte [ebp - 3], 0x3a
jne 0x42454b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424573
call esi
test eax, eax
je 0x424573
cmp byte [ebp - 3], 0x3a
jne 0x424573
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42458d
cmp byte [ebp - 3], 0x3a
jne 0x42458d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4245bc
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4245bc
cmp byte [ebp - 7], 0x3a
jne 0x4245bc
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4245f4
call esi
test eax, eax
je 0x4245e0
cmp byte [ebp - 3], 0x3a
jne 0x4245e0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424608
call esi
test eax, eax
je 0x424608
cmp byte [ebp - 3], 0x3a
jne 0x424608
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424622
cmp byte [ebp - 3], 0x3a
jne 0x424622
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424650
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424650
cmp byte [ebp - 7], 0x3a
jne 0x424650
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424688
call esi
test eax, eax
je 0x424674
cmp byte [ebp - 3], 0x3a
jne 0x424674
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42469c
call esi
test eax, eax
je 0x42469c
cmp byte [ebp - 3], 0x3a
jne 0x42469c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4246b6
cmp byte [ebp - 3], 0x3a
jne 0x4246b6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4246e4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4246e4
cmp byte [ebp - 7], 0x3a
jne 0x4246e4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42471c
call esi
test eax, eax
je 0x424708
cmp byte [ebp - 3], 0x3a
jne 0x424708
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424730
call esi
test eax, eax
je 0x424730
cmp byte [ebp - 3], 0x3a
jne 0x424730
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42474a
cmp byte [ebp - 3], 0x3a
jne 0x42474a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424776
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424776
cmp byte [ebp - 7], 0x3a
jne 0x424776
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4247ae
call esi
test eax, eax
je 0x42479a
cmp byte [ebp - 3], 0x3a
jne 0x42479a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4247c2
call esi
test eax, eax
je 0x4247c2
cmp byte [ebp - 3], 0x3a
jne 0x4247c2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4247dc
cmp byte [ebp - 3], 0x3a
jne 0x4247dc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x42480c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42480c
cmp byte [ebp - 7], 0x3a
jne 0x42480c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424844
call esi
test eax, eax
je 0x424830
cmp byte [ebp - 3], 0x3a
jne 0x424830
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424858
call esi
test eax, eax
je 0x424858
cmp byte [ebp - 3], 0x3a
jne 0x424858
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424872
cmp byte [ebp - 3], 0x3a
jne 0x424872
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4248ab
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4248ab
cmp byte [ebp - 7], 0x3a
jne 0x4248ab
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4248e3
call esi
test eax, eax
je 0x4248cf
cmp byte [ebp - 3], 0x3a
jne 0x4248cf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4248f7
call esi
test eax, eax
je 0x4248f7
cmp byte [ebp - 3], 0x3a
jne 0x4248f7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424911
cmp byte [ebp - 3], 0x3a
jne 0x424911
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424940
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424940
cmp byte [ebp - 7], 0x3a
jne 0x424940
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424978
call esi
test eax, eax
je 0x424964
cmp byte [ebp - 3], 0x3a
jne 0x424964
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42498c
call esi
test eax, eax
je 0x42498c
cmp byte [ebp - 3], 0x3a
jne 0x42498c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4249a6
cmp byte [ebp - 3], 0x3a
jne 0x4249a6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x4249d2
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4249d2
cmp byte [ebp - 7], 0x3a
jne 0x4249d2
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424a0a
call esi
test eax, eax
je 0x4249f6
cmp byte [ebp - 3], 0x3a
jne 0x4249f6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424a1e
call esi
test eax, eax
je 0x424a1e
cmp byte [ebp - 3], 0x3a
jne 0x424a1e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424a38
cmp byte [ebp - 3], 0x3a
jne 0x424a38
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424a68
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424a68
cmp byte [ebp - 7], 0x3a
jne 0x424a68
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424aa0
call esi
test eax, eax
je 0x424a8c
cmp byte [ebp - 3], 0x3a
jne 0x424a8c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424ab4
call esi
test eax, eax
je 0x424ab4
cmp byte [ebp - 3], 0x3a
jne 0x424ab4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424ace
cmp byte [ebp - 3], 0x3a
jne 0x424ace
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0xc]
cmp eax, 0xd5
jne 0x424b2f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424b2f
cmp byte [ebp - 7], 0x3a
jne 0x424b2f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424b67
call esi
test eax, eax
je 0x424b53
cmp byte [ebp - 3], 0x3a
jne 0x424b53
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424b7b
call esi
test eax, eax
je 0x424b7b
cmp byte [ebp - 3], 0x3a
jne 0x424b7b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424b95
cmp byte [ebp - 3], 0x3a
jne 0x424b95
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push dword [ebp + 8]
mov eax, dword [0x4513d0]
xor ebx, ebx
push ebx
push 0x410
call dword [eax + 0x18]
mov edi, eax
cmp edi, ebx
je 0x424c52
lea eax, [ebp - 8]
push eax
lea eax, [ebp + 8]
push 4
push eax
mov eax, dword [0x4513d0]
push edi
call dword [eax + 0xd8]
test eax, eax
je 0x424c49
mov esi, 0x104
lea eax, [ebp - 0x10c]
push esi
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x10c]
push esi
push eax
push dword [ebp + 8]
mov eax, dword [0x4513d0]
push edi
call dword [eax + 0xd4]
test eax, eax
je 0x424c49
push esi
lea eax, [ebp - 0x210]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x210]
push esi
push eax
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0xb4]
test eax, eax
lea eax, [ebp - 0x210]
jne 0x424c38
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [0x4513d0]
push dword [ebp + 0xc]
call dword [eax + 0x1e8]
pop ecx
pop ecx
mov eax, dword [0x4513d0]
push edi
call dword [eax + 0x44]
pop edi
pop esi
pop ebx
leave
ret 8