Function at 0x42308c
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x278
lea eax, [ebp + 8]
push ebx
push esi
push edi
test eax, eax
mov dword [ebp - 0xc], ecx
jne 0x423d36
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4230e9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4230e9
cmp byte [ebp - 7], 0x3a
jne 0x4230e9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423127
call esi
test eax, eax
je 0x423113
cmp byte [ebp - 3], 0x3a
jne 0x423113
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42313b
call esi
test eax, eax
je 0x42313b
cmp byte [ebp - 3], 0x3a
jne 0x42313b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423155
cmp byte [ebp - 3], 0x3a
jne 0x423155
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423181
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423181
cmp byte [ebp - 7], 0x3a
jne 0x423181
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4231b9
call esi
test eax, eax
je 0x4231a5
cmp byte [ebp - 3], 0x3a
jne 0x4231a5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4231cd
call esi
test eax, eax
je 0x4231cd
cmp byte [ebp - 3], 0x3a
jne 0x4231cd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4231e7
cmp byte [ebp - 3], 0x3a
jne 0x4231e7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423213
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423213
cmp byte [ebp - 7], 0x3a
jne 0x423213
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42324b
call esi
test eax, eax
je 0x423237
cmp byte [ebp - 3], 0x3a
jne 0x423237
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42325f
call esi
test eax, eax
je 0x42325f
cmp byte [ebp - 3], 0x3a
jne 0x42325f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423279
cmp byte [ebp - 3], 0x3a
jne 0x423279
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4232b3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4232b3
cmp byte [ebp - 7], 0x3a
jne 0x4232b3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4232eb
call esi
test eax, eax
je 0x4232d7
cmp byte [ebp - 3], 0x3a
jne 0x4232d7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4232ff
call esi
test eax, eax
je 0x4232ff
cmp byte [ebp - 3], 0x3a
jne 0x4232ff
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423319
cmp byte [ebp - 3], 0x3a
jne 0x423319
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423350
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423350
cmp byte [ebp - 7], 0x3a
jne 0x423350
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423388
call esi
test eax, eax
je 0x423374
cmp byte [ebp - 3], 0x3a
jne 0x423374
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42339c
call esi
test eax, eax
je 0x42339c
cmp byte [ebp - 3], 0x3a
jne 0x42339c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4233b6
cmp byte [ebp - 3], 0x3a
jne 0x4233b6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4233e4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4233e4
cmp byte [ebp - 7], 0x3a
jne 0x4233e4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42341c
call esi
test eax, eax
je 0x423408
cmp byte [ebp - 3], 0x3a
jne 0x423408
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423430
call esi
test eax, eax
je 0x423430
cmp byte [ebp - 3], 0x3a
jne 0x423430
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42344a
cmp byte [ebp - 3], 0x3a
jne 0x42344a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42347e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42347e
cmp byte [ebp - 7], 0x3a
jne 0x42347e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4234b6
call esi
test eax, eax
je 0x4234a2
cmp byte [ebp - 3], 0x3a
jne 0x4234a2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4234ca
call esi
test eax, eax
je 0x4234ca
cmp byte [ebp - 3], 0x3a
jne 0x4234ca
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4234e4
cmp byte [ebp - 3], 0x3a
jne 0x4234e4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423512
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423512
cmp byte [ebp - 7], 0x3a
jne 0x423512
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42354a
call esi
test eax, eax
je 0x423536
cmp byte [ebp - 3], 0x3a
jne 0x423536
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42355e
call esi
test eax, eax
je 0x42355e
cmp byte [ebp - 3], 0x3a
jne 0x42355e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423578
cmp byte [ebp - 3], 0x3a
jne 0x423578
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4235a4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4235a4
cmp byte [ebp - 7], 0x3a
jne 0x4235a4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4235dc
call esi
test eax, eax
je 0x4235c8
cmp byte [ebp - 3], 0x3a
jne 0x4235c8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4235f0
call esi
test eax, eax
je 0x4235f0
cmp byte [ebp - 3], 0x3a
jne 0x4235f0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42360a
cmp byte [ebp - 3], 0x3a
jne 0x42360a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423638
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423638
cmp byte [ebp - 7], 0x3a
jne 0x423638
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423670
call esi
test eax, eax
je 0x42365c
cmp byte [ebp - 3], 0x3a
jne 0x42365c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423684
call esi
test eax, eax
je 0x423684
cmp byte [ebp - 3], 0x3a
jne 0x423684
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42369e
cmp byte [ebp - 3], 0x3a
jne 0x42369e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4236c8
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4236c8
cmp byte [ebp - 7], 0x3a
jne 0x4236c8
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423700
call esi
test eax, eax
je 0x4236ec
cmp byte [ebp - 3], 0x3a
jne 0x4236ec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423714
call esi
test eax, eax
je 0x423714
cmp byte [ebp - 3], 0x3a
jne 0x423714
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42372e
cmp byte [ebp - 3], 0x3a
jne 0x42372e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42375d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42375d
cmp byte [ebp - 7], 0x3a
jne 0x42375d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423795
call esi
test eax, eax
je 0x423781
cmp byte [ebp - 3], 0x3a
jne 0x423781
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4237a9
call esi
test eax, eax
je 0x4237a9
cmp byte [ebp - 3], 0x3a
jne 0x4237a9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4237c3
cmp byte [ebp - 3], 0x3a
jne 0x4237c3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4237f1
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4237f1
cmp byte [ebp - 7], 0x3a
jne 0x4237f1
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423829
call esi
test eax, eax
je 0x423815
cmp byte [ebp - 3], 0x3a
jne 0x423815
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42383d
call esi
test eax, eax
je 0x42383d
cmp byte [ebp - 3], 0x3a
jne 0x42383d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423857
cmp byte [ebp - 3], 0x3a
jne 0x423857
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423885
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423885
cmp byte [ebp - 7], 0x3a
jne 0x423885
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4238bd
call esi
test eax, eax
je 0x4238a9
cmp byte [ebp - 3], 0x3a
jne 0x4238a9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4238d1
call esi
test eax, eax
je 0x4238d1
cmp byte [ebp - 3], 0x3a
jne 0x4238d1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4238eb
cmp byte [ebp - 3], 0x3a
jne 0x4238eb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423917
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423917
cmp byte [ebp - 7], 0x3a
jne 0x423917
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42394f
call esi
test eax, eax
je 0x42393b
cmp byte [ebp - 3], 0x3a
jne 0x42393b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423963
call esi
test eax, eax
je 0x423963
cmp byte [ebp - 3], 0x3a
jne 0x423963
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42397d
cmp byte [ebp - 3], 0x3a
jne 0x42397d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4239ad
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4239ad
cmp byte [ebp - 7], 0x3a
jne 0x4239ad
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4239e5
call esi
test eax, eax
je 0x4239d1
cmp byte [ebp - 3], 0x3a
jne 0x4239d1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4239f9
call esi
test eax, eax
je 0x4239f9
cmp byte [ebp - 3], 0x3a
jne 0x4239f9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423a13
cmp byte [ebp - 3], 0x3a
jne 0x423a13
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423a4c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423a4c
cmp byte [ebp - 7], 0x3a
jne 0x423a4c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423a84
call esi
test eax, eax
je 0x423a70
cmp byte [ebp - 3], 0x3a
jne 0x423a70
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423a98
call esi
test eax, eax
je 0x423a98
cmp byte [ebp - 3], 0x3a
jne 0x423a98
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423ab2
cmp byte [ebp - 3], 0x3a
jne 0x423ab2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423ae1
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423ae1
cmp byte [ebp - 7], 0x3a
jne 0x423ae1
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423b19
call esi
test eax, eax
je 0x423b05
cmp byte [ebp - 3], 0x3a
jne 0x423b05
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423b2d
call esi
test eax, eax
je 0x423b2d
cmp byte [ebp - 3], 0x3a
jne 0x423b2d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423b47
cmp byte [ebp - 3], 0x3a
jne 0x423b47
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423b73
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423b73
cmp byte [ebp - 7], 0x3a
jne 0x423b73
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423bab
call esi
test eax, eax
je 0x423b97
cmp byte [ebp - 3], 0x3a
jne 0x423b97
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423bbf
call esi
test eax, eax
je 0x423bbf
cmp byte [ebp - 3], 0x3a
jne 0x423bbf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423bd9
cmp byte [ebp - 3], 0x3a
jne 0x423bd9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423c09
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423c09
cmp byte [ebp - 7], 0x3a
jne 0x423c09
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423c41
call esi
test eax, eax
je 0x423c2d
cmp byte [ebp - 3], 0x3a
jne 0x423c2d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423c55
call esi
test eax, eax
je 0x423c55
cmp byte [ebp - 3], 0x3a
jne 0x423c55
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423c6f
cmp byte [ebp - 3], 0x3a
jne 0x423c6f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x423cd0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x423cd0
cmp byte [ebp - 7], 0x3a
jne 0x423cd0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x423d08
call esi
test eax, eax
je 0x423cf4
cmp byte [ebp - 3], 0x3a
jne 0x423cf4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x423d1c
call esi
test eax, eax
je 0x423d1c
cmp byte [ebp - 3], 0x3a
jne 0x423d1c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x423d36
cmp byte [ebp - 3], 0x3a
jne 0x423d36
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push dword [ebp + 8]
mov eax, dword [0x4513d0]
call dword [eax + 0x1f0]
test eax, eax
pop ecx
je 0x423ee5
mov esi, 0x104
lea eax, [ebp - 0x110]
push esi
push 0
push eax
call sub.MSVCRT.dll_memset
push dword [ebp + 8]
lea eax, [ebp - 0x110]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1e8]
lea eax, [ebp - 0x110]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x210]
add esp, 0x18
lea eax, [ebp - 0x278]
push esi
push eax
mov eax, dword [0x4513d0]
push 0
call dword [eax + 0x74]
lea eax, [ebp - 0x278]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x210]
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x110]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1e0]
add esp, 0xc
test eax, eax
je 0x423ee5
cmp byte [ebp - 0x10f], 0x3a
jne 0x423ee5
cmp byte [ebp - 0x10e], 0x5c
jne 0x423ee5
lea eax, [ebp - 0x110]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1f0]
pop ecx
mov esi, eax
push 0
push 0x65
lea eax, [ebp - 0x110]
pop edi
sub eax, 4
push edi
add esi, eax
push 0x78
push edi
lea eax, [ebp - 0x174]
push 0x2e
push eax
call fcn.004105df
lea eax, [ebp - 0x174]
push eax
mov eax, dword [0x4513d0]
push esi
call dword [eax + 0x1e0]
add esp, 0x20
test eax, eax
jne 0x423ee5
lea eax, [ebp - 0x110]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1f0]
pop ecx
mov esi, eax
lea eax, [ebp - 0x110]
push 0
sub eax, 5
push edi
push 0x78
add esi, eax
push edi
push 0x2e
lea eax, [ebp - 0x174]
push 0x20
push eax
call fcn.004105df
lea eax, [ebp - 0x174]
push eax
mov eax, dword [0x4513d0]
push esi
call dword [eax + 0x1e0]
add esp, 0x24
test eax, eax
je 0x423ee5
mov ecx, dword [ebp - 0xc]
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00424c59
test eax, eax
je 0x423ee5
mov ecx, dword [ebp - 0xc]
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00426658
test eax, eax
je 0x423ee5
mov ecx, dword [ebp - 0xc]
lea eax, [ebp - 0x110]
push eax
call fcn.0042596e
test eax, eax
je 0x423ee5
cmp eax, 0xa00000
ja 0x423ee5
push 1
pop eax
jmp 0x423ee7
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4