Function at 0x42e015
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
lea eax, [ebp - 0xc]
push ebx
test eax, eax
push esi
mov dword [ebp - 0xc], ecx
jne 0x42ecbd
xor esi, esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e06e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e06e
cmp byte [ebp - 7], 0x3a
jne 0x42e06e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e0ad
call esi
test eax, eax
je 0x42e099
cmp byte [ebp - 3], 0x3a
jne 0x42e099
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e0c1
call esi
test eax, eax
je 0x42e0c1
cmp byte [ebp - 3], 0x3a
jne 0x42e0c1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e0db
cmp byte [ebp - 3], 0x3a
jne 0x42e0db
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e107
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e107
cmp byte [ebp - 7], 0x3a
jne 0x42e107
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e13f
call esi
test eax, eax
je 0x42e12b
cmp byte [ebp - 3], 0x3a
jne 0x42e12b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e153
call esi
test eax, eax
je 0x42e153
cmp byte [ebp - 3], 0x3a
jne 0x42e153
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e16d
cmp byte [ebp - 3], 0x3a
jne 0x42e16d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e199
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e199
cmp byte [ebp - 7], 0x3a
jne 0x42e199
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e1d1
call esi
test eax, eax
je 0x42e1bd
cmp byte [ebp - 3], 0x3a
jne 0x42e1bd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e1e5
call esi
test eax, eax
je 0x42e1e5
cmp byte [ebp - 3], 0x3a
jne 0x42e1e5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e1ff
cmp byte [ebp - 3], 0x3a
jne 0x42e1ff
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e239
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e239
cmp byte [ebp - 7], 0x3a
jne 0x42e239
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e271
call esi
test eax, eax
je 0x42e25d
cmp byte [ebp - 3], 0x3a
jne 0x42e25d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e285
call esi
test eax, eax
je 0x42e285
cmp byte [ebp - 3], 0x3a
jne 0x42e285
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e29f
cmp byte [ebp - 3], 0x3a
jne 0x42e29f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e2d6
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e2d6
cmp byte [ebp - 7], 0x3a
jne 0x42e2d6
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e30e
call esi
test eax, eax
je 0x42e2fa
cmp byte [ebp - 3], 0x3a
jne 0x42e2fa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e322
call esi
test eax, eax
je 0x42e322
cmp byte [ebp - 3], 0x3a
jne 0x42e322
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e33c
cmp byte [ebp - 3], 0x3a
jne 0x42e33c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e36a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e36a
cmp byte [ebp - 7], 0x3a
jne 0x42e36a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e3a2
call esi
test eax, eax
je 0x42e38e
cmp byte [ebp - 3], 0x3a
jne 0x42e38e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e3b6
call esi
test eax, eax
je 0x42e3b6
cmp byte [ebp - 3], 0x3a
jne 0x42e3b6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e3d0
cmp byte [ebp - 3], 0x3a
jne 0x42e3d0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e404
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e404
cmp byte [ebp - 7], 0x3a
jne 0x42e404
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e43c
call esi
test eax, eax
je 0x42e428
cmp byte [ebp - 3], 0x3a
jne 0x42e428
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e450
call esi
test eax, eax
je 0x42e450
cmp byte [ebp - 3], 0x3a
jne 0x42e450
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e46a
cmp byte [ebp - 3], 0x3a
jne 0x42e46a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e498
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e498
cmp byte [ebp - 7], 0x3a
jne 0x42e498
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e4d0
call esi
test eax, eax
je 0x42e4bc
cmp byte [ebp - 3], 0x3a
jne 0x42e4bc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e4e4
call esi
test eax, eax
je 0x42e4e4
cmp byte [ebp - 3], 0x3a
jne 0x42e4e4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e4fe
cmp byte [ebp - 3], 0x3a
jne 0x42e4fe
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e52a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e52a
cmp byte [ebp - 7], 0x3a
jne 0x42e52a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e562
call esi
test eax, eax
je 0x42e54e
cmp byte [ebp - 3], 0x3a
jne 0x42e54e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e576
call esi
test eax, eax
je 0x42e576
cmp byte [ebp - 3], 0x3a
jne 0x42e576
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e590
cmp byte [ebp - 3], 0x3a
jne 0x42e590
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e5be
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e5be
cmp byte [ebp - 7], 0x3a
jne 0x42e5be
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e5f6
call esi
test eax, eax
je 0x42e5e2
cmp byte [ebp - 3], 0x3a
jne 0x42e5e2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e60a
call esi
test eax, eax
je 0x42e60a
cmp byte [ebp - 3], 0x3a
jne 0x42e60a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e624
cmp byte [ebp - 3], 0x3a
jne 0x42e624
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e64e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e64e
cmp byte [ebp - 7], 0x3a
jne 0x42e64e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e686
call esi
test eax, eax
je 0x42e672
cmp byte [ebp - 3], 0x3a
jne 0x42e672
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e69a
call esi
test eax, eax
je 0x42e69a
cmp byte [ebp - 3], 0x3a
jne 0x42e69a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e6b4
cmp byte [ebp - 3], 0x3a
jne 0x42e6b4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e6e3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e6e3
cmp byte [ebp - 7], 0x3a
jne 0x42e6e3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e71b
call esi
test eax, eax
je 0x42e707
cmp byte [ebp - 3], 0x3a
jne 0x42e707
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e72f
call esi
test eax, eax
je 0x42e72f
cmp byte [ebp - 3], 0x3a
jne 0x42e72f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e749
cmp byte [ebp - 3], 0x3a
jne 0x42e749
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e777
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e777
cmp byte [ebp - 7], 0x3a
jne 0x42e777
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e7af
call esi
test eax, eax
je 0x42e79b
cmp byte [ebp - 3], 0x3a
jne 0x42e79b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e7c3
call esi
test eax, eax
je 0x42e7c3
cmp byte [ebp - 3], 0x3a
jne 0x42e7c3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e7dd
cmp byte [ebp - 3], 0x3a
jne 0x42e7dd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e80b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e80b
cmp byte [ebp - 7], 0x3a
jne 0x42e80b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e843
call esi
test eax, eax
je 0x42e82f
cmp byte [ebp - 3], 0x3a
jne 0x42e82f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e857
call esi
test eax, eax
je 0x42e857
cmp byte [ebp - 3], 0x3a
jne 0x42e857
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e871
cmp byte [ebp - 3], 0x3a
jne 0x42e871
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e89d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e89d
cmp byte [ebp - 7], 0x3a
jne 0x42e89d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e8d5
call esi
test eax, eax
je 0x42e8c1
cmp byte [ebp - 3], 0x3a
jne 0x42e8c1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e8e9
call esi
test eax, eax
je 0x42e8e9
cmp byte [ebp - 3], 0x3a
jne 0x42e8e9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e903
cmp byte [ebp - 3], 0x3a
jne 0x42e903
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e933
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e933
cmp byte [ebp - 7], 0x3a
jne 0x42e933
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42e96b
call esi
test eax, eax
je 0x42e957
cmp byte [ebp - 3], 0x3a
jne 0x42e957
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42e97f
call esi
test eax, eax
je 0x42e97f
cmp byte [ebp - 3], 0x3a
jne 0x42e97f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42e999
cmp byte [ebp - 3], 0x3a
jne 0x42e999
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42e9d2
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42e9d2
cmp byte [ebp - 7], 0x3a
jne 0x42e9d2
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ea0a
call esi
test eax, eax
je 0x42e9f6
cmp byte [ebp - 3], 0x3a
jne 0x42e9f6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ea1e
call esi
test eax, eax
je 0x42ea1e
cmp byte [ebp - 3], 0x3a
jne 0x42ea1e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ea38
cmp byte [ebp - 3], 0x3a
jne 0x42ea38
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ea67
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ea67
cmp byte [ebp - 7], 0x3a
jne 0x42ea67
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ea9f
call esi
test eax, eax
je 0x42ea8b
cmp byte [ebp - 3], 0x3a
jne 0x42ea8b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42eab3
call esi
test eax, eax
je 0x42eab3
cmp byte [ebp - 3], 0x3a
jne 0x42eab3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42eacd
cmp byte [ebp - 3], 0x3a
jne 0x42eacd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42eaf9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42eaf9
cmp byte [ebp - 7], 0x3a
jne 0x42eaf9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42eb31
call esi
test eax, eax
je 0x42eb1d
cmp byte [ebp - 3], 0x3a
jne 0x42eb1d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42eb45
call esi
test eax, eax
je 0x42eb45
cmp byte [ebp - 3], 0x3a
jne 0x42eb45
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42eb5f
cmp byte [ebp - 3], 0x3a
jne 0x42eb5f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42eb8f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42eb8f
cmp byte [ebp - 7], 0x3a
jne 0x42eb8f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ebc7
call esi
test eax, eax
je 0x42ebb3
cmp byte [ebp - 3], 0x3a
jne 0x42ebb3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42ebdb
call esi
test eax, eax
je 0x42ebdb
cmp byte [ebp - 3], 0x3a
jne 0x42ebdb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42ebf5
cmp byte [ebp - 3], 0x3a
jne 0x42ebf5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xc]
cmp eax, 0xd5
jne 0x42ec56
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42ec56
cmp byte [ebp - 7], 0x3a
jne 0x42ec56
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp - 0xc]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42ec8e
call esi
test eax, eax
je 0x42ec7a
cmp byte [ebp - 3], 0x3a
jne 0x42ec7a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42eca2
call esi
test eax, eax
je 0x42eca2
cmp byte [ebp - 3], 0x3a
jne 0x42eca2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
pop edi
je 0x42ecbd
cmp byte [ebp - 3], 0x3a
jne 0x42ecbd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x10]
push eax
xor eax, eax
push eax
push esi
push 0x43250e
push eax
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x34]
mov dword [esi + 0x1c], eax
pop esi
pop ebx
leave
ret