Function at 0x42ab4b
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
lea eax, [ebp - 0xc]
xor esi, esi
test eax, eax
push edi
mov dword [ebp - 0xc], ecx
jne 0x42b7f2
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42aba5
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42aba5
cmp byte [ebp - 7], 0x3a
jne 0x42aba5
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42abe3
call esi
test eax, eax
je 0x42abcf
cmp byte [ebp - 3], 0x3a
jne 0x42abcf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42abf7
call esi
test eax, eax
je 0x42abf7
cmp byte [ebp - 3], 0x3a
jne 0x42abf7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ac11
cmp byte [ebp - 3], 0x3a
jne 0x42ac11
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ac3d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ac3d
cmp byte [ebp - 7], 0x3a
jne 0x42ac3d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ac75
call esi
test eax, eax
je 0x42ac61
cmp byte [ebp - 3], 0x3a
jne 0x42ac61
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ac89
call esi
test eax, eax
je 0x42ac89
cmp byte [ebp - 3], 0x3a
jne 0x42ac89
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42aca3
cmp byte [ebp - 3], 0x3a
jne 0x42aca3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42accf
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42accf
cmp byte [ebp - 7], 0x3a
jne 0x42accf
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ad07
call esi
test eax, eax
je 0x42acf3
cmp byte [ebp - 3], 0x3a
jne 0x42acf3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ad1b
call esi
test eax, eax
je 0x42ad1b
cmp byte [ebp - 3], 0x3a
jne 0x42ad1b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ad35
cmp byte [ebp - 3], 0x3a
jne 0x42ad35
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ad6f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ad6f
cmp byte [ebp - 7], 0x3a
jne 0x42ad6f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ada7
call esi
test eax, eax
je 0x42ad93
cmp byte [ebp - 3], 0x3a
jne 0x42ad93
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42adbb
call esi
test eax, eax
je 0x42adbb
cmp byte [ebp - 3], 0x3a
jne 0x42adbb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42add5
cmp byte [ebp - 3], 0x3a
jne 0x42add5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ae0c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ae0c
cmp byte [ebp - 7], 0x3a
jne 0x42ae0c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ae44
call esi
test eax, eax
je 0x42ae30
cmp byte [ebp - 3], 0x3a
jne 0x42ae30
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ae58
call esi
test eax, eax
je 0x42ae58
cmp byte [ebp - 3], 0x3a
jne 0x42ae58
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ae72
cmp byte [ebp - 3], 0x3a
jne 0x42ae72
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42aea0
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42aea0
cmp byte [ebp - 7], 0x3a
jne 0x42aea0
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42aed8
call esi
test eax, eax
je 0x42aec4
cmp byte [ebp - 3], 0x3a
jne 0x42aec4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42aeec
call esi
test eax, eax
je 0x42aeec
cmp byte [ebp - 3], 0x3a
jne 0x42aeec
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42af06
cmp byte [ebp - 3], 0x3a
jne 0x42af06
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42af3a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42af3a
cmp byte [ebp - 7], 0x3a
jne 0x42af3a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42af72
call esi
test eax, eax
je 0x42af5e
cmp byte [ebp - 3], 0x3a
jne 0x42af5e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42af86
call esi
test eax, eax
je 0x42af86
cmp byte [ebp - 3], 0x3a
jne 0x42af86
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42afa0
cmp byte [ebp - 3], 0x3a
jne 0x42afa0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42afce
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42afce
cmp byte [ebp - 7], 0x3a
jne 0x42afce
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b006
call esi
test eax, eax
je 0x42aff2
cmp byte [ebp - 3], 0x3a
jne 0x42aff2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b01a
call esi
test eax, eax
je 0x42b01a
cmp byte [ebp - 3], 0x3a
jne 0x42b01a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b034
cmp byte [ebp - 3], 0x3a
jne 0x42b034
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b060
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b060
cmp byte [ebp - 7], 0x3a
jne 0x42b060
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b098
call esi
test eax, eax
je 0x42b084
cmp byte [ebp - 3], 0x3a
jne 0x42b084
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b0ac
call esi
test eax, eax
je 0x42b0ac
cmp byte [ebp - 3], 0x3a
jne 0x42b0ac
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b0c6
cmp byte [ebp - 3], 0x3a
jne 0x42b0c6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b0f4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b0f4
cmp byte [ebp - 7], 0x3a
jne 0x42b0f4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b12c
call esi
test eax, eax
je 0x42b118
cmp byte [ebp - 3], 0x3a
jne 0x42b118
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b140
call esi
test eax, eax
je 0x42b140
cmp byte [ebp - 3], 0x3a
jne 0x42b140
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b15a
cmp byte [ebp - 3], 0x3a
jne 0x42b15a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b184
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b184
cmp byte [ebp - 7], 0x3a
jne 0x42b184
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b1bc
call esi
test eax, eax
je 0x42b1a8
cmp byte [ebp - 3], 0x3a
jne 0x42b1a8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b1d0
call esi
test eax, eax
je 0x42b1d0
cmp byte [ebp - 3], 0x3a
jne 0x42b1d0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b1ea
cmp byte [ebp - 3], 0x3a
jne 0x42b1ea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b219
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b219
cmp byte [ebp - 7], 0x3a
jne 0x42b219
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b251
call esi
test eax, eax
je 0x42b23d
cmp byte [ebp - 3], 0x3a
jne 0x42b23d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b265
call esi
test eax, eax
je 0x42b265
cmp byte [ebp - 3], 0x3a
jne 0x42b265
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b27f
cmp byte [ebp - 3], 0x3a
jne 0x42b27f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b2ad
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b2ad
cmp byte [ebp - 7], 0x3a
jne 0x42b2ad
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b2e5
call esi
test eax, eax
je 0x42b2d1
cmp byte [ebp - 3], 0x3a
jne 0x42b2d1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b2f9
call esi
test eax, eax
je 0x42b2f9
cmp byte [ebp - 3], 0x3a
jne 0x42b2f9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b313
cmp byte [ebp - 3], 0x3a
jne 0x42b313
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b341
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b341
cmp byte [ebp - 7], 0x3a
jne 0x42b341
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b379
call esi
test eax, eax
je 0x42b365
cmp byte [ebp - 3], 0x3a
jne 0x42b365
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b38d
call esi
test eax, eax
je 0x42b38d
cmp byte [ebp - 3], 0x3a
jne 0x42b38d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b3a7
cmp byte [ebp - 3], 0x3a
jne 0x42b3a7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b3d3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b3d3
cmp byte [ebp - 7], 0x3a
jne 0x42b3d3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b40b
call esi
test eax, eax
je 0x42b3f7
cmp byte [ebp - 3], 0x3a
jne 0x42b3f7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b41f
call esi
test eax, eax
je 0x42b41f
cmp byte [ebp - 3], 0x3a
jne 0x42b41f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b439
cmp byte [ebp - 3], 0x3a
jne 0x42b439
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b469
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b469
cmp byte [ebp - 7], 0x3a
jne 0x42b469
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b4a1
call esi
test eax, eax
je 0x42b48d
cmp byte [ebp - 3], 0x3a
jne 0x42b48d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b4b5
call esi
test eax, eax
je 0x42b4b5
cmp byte [ebp - 3], 0x3a
jne 0x42b4b5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b4cf
cmp byte [ebp - 3], 0x3a
jne 0x42b4cf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b508
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b508
cmp byte [ebp - 7], 0x3a
jne 0x42b508
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b540
call esi
test eax, eax
je 0x42b52c
cmp byte [ebp - 3], 0x3a
jne 0x42b52c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b554
call esi
test eax, eax
je 0x42b554
cmp byte [ebp - 3], 0x3a
jne 0x42b554
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b56e
cmp byte [ebp - 3], 0x3a
jne 0x42b56e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b59d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b59d
cmp byte [ebp - 7], 0x3a
jne 0x42b59d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b5d5
call esi
test eax, eax
je 0x42b5c1
cmp byte [ebp - 3], 0x3a
jne 0x42b5c1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b5e9
call esi
test eax, eax
je 0x42b5e9
cmp byte [ebp - 3], 0x3a
jne 0x42b5e9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b603
cmp byte [ebp - 3], 0x3a
jne 0x42b603
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b62f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b62f
cmp byte [ebp - 7], 0x3a
jne 0x42b62f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b667
call esi
test eax, eax
je 0x42b653
cmp byte [ebp - 3], 0x3a
jne 0x42b653
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b67b
call esi
test eax, eax
je 0x42b67b
cmp byte [ebp - 3], 0x3a
jne 0x42b67b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b695
cmp byte [ebp - 3], 0x3a
jne 0x42b695
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b6c5
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b6c5
cmp byte [ebp - 7], 0x3a
jne 0x42b6c5
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b6fd
call esi
test eax, eax
je 0x42b6e9
cmp byte [ebp - 3], 0x3a
jne 0x42b6e9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b711
call esi
test eax, eax
je 0x42b711
cmp byte [ebp - 3], 0x3a
jne 0x42b711
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b72b
cmp byte [ebp - 3], 0x3a
jne 0x42b72b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42b78c
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42b78c
cmp byte [ebp - 7], 0x3a
jne 0x42b78c
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42b7c4
call esi
test eax, eax
je 0x42b7b0
cmp byte [ebp - 3], 0x3a
jne 0x42b7b0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42b7d8
call esi
test eax, eax
je 0x42b7d8
cmp byte [ebp - 3], 0x3a
jne 0x42b7d8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42b7f2
cmp byte [ebp - 3], 0x3a
jne 0x42b7f2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov ebx, dword [ebp - 0xc]
mov esi, 0x1fbd0
push esi
mov eax, dword [ebx + 0x1fbd4]
lea edi, [ebx + 4]
mov dword [ebx + 0x3f7a8], eax
lea eax, [ebx + 0x1fbd8]
push edi
push eax
call sub.MSVCRT.dll_memcpy
push esi
push 0
push edi
call sub.MSVCRT.dll_memset
add esp, 0x18
and dword [ebx + 0x1fbd4], 0
pop edi
pop esi
pop ebx
leave
ret