Function at 0x424c59
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
lea eax, [ebp + 8]
push ebx
test eax, eax
jne 0x425902
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x424cb3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424cb3
cmp byte [ebp - 7], 0x3a
jne 0x424cb3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424cf1
call esi
test eax, eax
je 0x424cdd
cmp byte [ebp - 3], 0x3a
jne 0x424cdd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424d05
call esi
test eax, eax
je 0x424d05
cmp byte [ebp - 3], 0x3a
jne 0x424d05
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424d1f
cmp byte [ebp - 3], 0x3a
jne 0x424d1f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x424d4b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424d4b
cmp byte [ebp - 7], 0x3a
jne 0x424d4b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424d83
call esi
test eax, eax
je 0x424d6f
cmp byte [ebp - 3], 0x3a
jne 0x424d6f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424d97
call esi
test eax, eax
je 0x424d97
cmp byte [ebp - 3], 0x3a
jne 0x424d97
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424db1
cmp byte [ebp - 3], 0x3a
jne 0x424db1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x424ddd
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424ddd
cmp byte [ebp - 7], 0x3a
jne 0x424ddd
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424e15
call esi
test eax, eax
je 0x424e01
cmp byte [ebp - 3], 0x3a
jne 0x424e01
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424e29
call esi
test eax, eax
je 0x424e29
cmp byte [ebp - 3], 0x3a
jne 0x424e29
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424e43
cmp byte [ebp - 3], 0x3a
jne 0x424e43
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x424e7d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424e7d
cmp byte [ebp - 7], 0x3a
jne 0x424e7d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424eb5
call esi
test eax, eax
je 0x424ea1
cmp byte [ebp - 3], 0x3a
jne 0x424ea1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424ec9
call esi
test eax, eax
je 0x424ec9
cmp byte [ebp - 3], 0x3a
jne 0x424ec9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424ee3
cmp byte [ebp - 3], 0x3a
jne 0x424ee3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x424f1a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424f1a
cmp byte [ebp - 7], 0x3a
jne 0x424f1a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424f52
call esi
test eax, eax
je 0x424f3e
cmp byte [ebp - 3], 0x3a
jne 0x424f3e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424f66
call esi
test eax, eax
je 0x424f66
cmp byte [ebp - 3], 0x3a
jne 0x424f66
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x424f80
cmp byte [ebp - 3], 0x3a
jne 0x424f80
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x424fae
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x424fae
cmp byte [ebp - 7], 0x3a
jne 0x424fae
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x424fe6
call esi
test eax, eax
je 0x424fd2
cmp byte [ebp - 3], 0x3a
jne 0x424fd2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x424ffa
call esi
test eax, eax
je 0x424ffa
cmp byte [ebp - 3], 0x3a
jne 0x424ffa
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x425014
cmp byte [ebp - 3], 0x3a
jne 0x425014
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x425048
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x425048
cmp byte [ebp - 7], 0x3a
jne 0x425048
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x425080
call esi
test eax, eax
je 0x42506c
cmp byte [ebp - 3], 0x3a
jne 0x42506c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x425094
call esi
test eax, eax
je 0x425094
cmp byte [ebp - 3], 0x3a
jne 0x425094
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4250ae
cmp byte [ebp - 3], 0x3a
jne 0x4250ae
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4250dc
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4250dc
cmp byte [ebp - 7], 0x3a
jne 0x4250dc
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x425114
call esi
test eax, eax
je 0x425100
cmp byte [ebp - 3], 0x3a
jne 0x425100
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x425128
call esi
test eax, eax
je 0x425128
cmp byte [ebp - 3], 0x3a
jne 0x425128
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x425142
cmp byte [ebp - 3], 0x3a
jne 0x425142
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42516e
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42516e
cmp byte [ebp - 7], 0x3a
jne 0x42516e
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4251a6
call esi
test eax, eax
je 0x425192
cmp byte [ebp - 3], 0x3a
jne 0x425192
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4251ba
call esi
test eax, eax
je 0x4251ba
cmp byte [ebp - 3], 0x3a
jne 0x4251ba
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4251d4
cmp byte [ebp - 3], 0x3a
jne 0x4251d4
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x425202
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x425202
cmp byte [ebp - 7], 0x3a
jne 0x425202
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42523a
call esi
test eax, eax
je 0x425226
cmp byte [ebp - 3], 0x3a
jne 0x425226
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42524e
call esi
test eax, eax
je 0x42524e
cmp byte [ebp - 3], 0x3a
jne 0x42524e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x425268
cmp byte [ebp - 3], 0x3a
jne 0x425268
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x425292
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x425292
cmp byte [ebp - 7], 0x3a
jne 0x425292
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4252ca
call esi
test eax, eax
je 0x4252b6
cmp byte [ebp - 3], 0x3a
jne 0x4252b6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4252de
call esi
test eax, eax
je 0x4252de
cmp byte [ebp - 3], 0x3a
jne 0x4252de
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4252f8
cmp byte [ebp - 3], 0x3a
jne 0x4252f8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x425327
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x425327
cmp byte [ebp - 7], 0x3a
jne 0x425327
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42535f
call esi
test eax, eax
je 0x42534b
cmp byte [ebp - 3], 0x3a
jne 0x42534b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x425373
call esi
test eax, eax
je 0x425373
cmp byte [ebp - 3], 0x3a
jne 0x425373
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42538d
cmp byte [ebp - 3], 0x3a
jne 0x42538d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4253bb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4253bb
cmp byte [ebp - 7], 0x3a
jne 0x4253bb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4253f3
call esi
test eax, eax
je 0x4253df
cmp byte [ebp - 3], 0x3a
jne 0x4253df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x425407
call esi
test eax, eax
je 0x425407
cmp byte [ebp - 3], 0x3a
jne 0x425407
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x425421
cmp byte [ebp - 3], 0x3a
jne 0x425421
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42544f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42544f
cmp byte [ebp - 7], 0x3a
jne 0x42544f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x425487
call esi
test eax, eax
je 0x425473
cmp byte [ebp - 3], 0x3a
jne 0x425473
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42549b
call esi
test eax, eax
je 0x42549b
cmp byte [ebp - 3], 0x3a
jne 0x42549b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4254b5
cmp byte [ebp - 3], 0x3a
jne 0x4254b5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4254e1
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4254e1
cmp byte [ebp - 7], 0x3a
jne 0x4254e1
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x425519
call esi
test eax, eax
je 0x425505
cmp byte [ebp - 3], 0x3a
jne 0x425505
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42552d
call esi
test eax, eax
je 0x42552d
cmp byte [ebp - 3], 0x3a
jne 0x42552d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x425547
cmp byte [ebp - 3], 0x3a
jne 0x425547
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x425577
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x425577
cmp byte [ebp - 7], 0x3a
jne 0x425577
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4255af
call esi
test eax, eax
je 0x42559b
cmp byte [ebp - 3], 0x3a
jne 0x42559b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4255c3
call esi
test eax, eax
je 0x4255c3
cmp byte [ebp - 3], 0x3a
jne 0x4255c3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4255dd
cmp byte [ebp - 3], 0x3a
jne 0x4255dd
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x425616
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x425616
cmp byte [ebp - 7], 0x3a
jne 0x425616
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42564e
call esi
test eax, eax
je 0x42563a
cmp byte [ebp - 3], 0x3a
jne 0x42563a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x425662
call esi
test eax, eax
je 0x425662
cmp byte [ebp - 3], 0x3a
jne 0x425662
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x42567c
cmp byte [ebp - 3], 0x3a
jne 0x42567c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4256ab
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4256ab
cmp byte [ebp - 7], 0x3a
jne 0x4256ab
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4256e3
call esi
test eax, eax
je 0x4256cf
cmp byte [ebp - 3], 0x3a
jne 0x4256cf
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4256f7
call esi
test eax, eax
je 0x4256f7
cmp byte [ebp - 3], 0x3a
jne 0x4256f7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x425711
cmp byte [ebp - 3], 0x3a
jne 0x425711
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42573d
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42573d
cmp byte [ebp - 7], 0x3a
jne 0x42573d
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x425775
call esi
test eax, eax
je 0x425761
cmp byte [ebp - 3], 0x3a
jne 0x425761
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x425789
call esi
test eax, eax
je 0x425789
cmp byte [ebp - 3], 0x3a
jne 0x425789
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4257a3
cmp byte [ebp - 3], 0x3a
jne 0x4257a3
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4257d3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4257d3
cmp byte [ebp - 7], 0x3a
jne 0x4257d3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x42580b
call esi
test eax, eax
je 0x4257f7
cmp byte [ebp - 3], 0x3a
jne 0x4257f7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x42581f
call esi
test eax, eax
je 0x42581f
cmp byte [ebp - 3], 0x3a
jne 0x42581f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x425839
cmp byte [ebp - 3], 0x3a
jne 0x425839
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x42589a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x42589a
cmp byte [ebp - 7], 0x3a
jne 0x42589a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4258d2
call esi
test eax, eax
je 0x4258be
cmp byte [ebp - 3], 0x3a
jne 0x4258be
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4258e6
call esi
test eax, eax
je 0x4258e6
cmp byte [ebp - 3], 0x3a
jne 0x4258e6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x425902
cmp byte [ebp - 3], 0x3a
jne 0x425902
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push dword [ebp + 8]
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1e8]
pop ecx
lea eax, [ebp - 0x10c]
pop ecx
push 1
push 0
push 0x5c
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1ec]
pop ecx
pop ecx
push eax
call sub.MSVCRT.dll_memset
lea eax, [ebp - 0x10c]
push 0x5c
push eax
mov eax, dword [0x4513d0]
call dword [eax + 0x1ec]
add esp, 0x14
test eax, eax
pop ebx
je 0x42596a
inc eax
push eax
mov eax, dword [0x4513d0]
push dword [ebp + 0xc]
call dword [eax + 0x1e8]
pop ecx
pop ecx
push 1
pop eax
leave
ret 8