Function at 0x431841
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp + 8]
push ebx
test eax, eax
mov dword [ebp - 0xc], ecx
jne 0x4324ea
push esi
xor esi, esi
push edi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov ebx, dword [sym.imp.MSVCRT.dll_toupper]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43189b
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x43189b
cmp byte [ebp - 7], 0x3a
jne 0x43189b
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4318d9
call esi
test eax, eax
je 0x4318c5
cmp byte [ebp - 3], 0x3a
jne 0x4318c5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4318ed
call esi
test eax, eax
je 0x4318ed
cmp byte [ebp - 3], 0x3a
jne 0x4318ed
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431907
cmp byte [ebp - 3], 0x3a
jne 0x431907
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431933
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431933
cmp byte [ebp - 7], 0x3a
jne 0x431933
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x43196b
call esi
test eax, eax
je 0x431957
cmp byte [ebp - 3], 0x3a
jne 0x431957
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x43197f
call esi
test eax, eax
je 0x43197f
cmp byte [ebp - 3], 0x3a
jne 0x43197f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431999
cmp byte [ebp - 3], 0x3a
jne 0x431999
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4319c5
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4319c5
cmp byte [ebp - 7], 0x3a
jne 0x4319c5
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4319fd
call esi
test eax, eax
je 0x4319e9
cmp byte [ebp - 3], 0x3a
jne 0x4319e9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431a11
call esi
test eax, eax
je 0x431a11
cmp byte [ebp - 3], 0x3a
jne 0x431a11
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431a2b
cmp byte [ebp - 3], 0x3a
jne 0x431a2b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431a65
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431a65
cmp byte [ebp - 7], 0x3a
jne 0x431a65
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431a9d
call esi
test eax, eax
je 0x431a89
cmp byte [ebp - 3], 0x3a
jne 0x431a89
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431ab1
call esi
test eax, eax
je 0x431ab1
cmp byte [ebp - 3], 0x3a
jne 0x431ab1
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431acb
cmp byte [ebp - 3], 0x3a
jne 0x431acb
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431b02
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431b02
cmp byte [ebp - 7], 0x3a
jne 0x431b02
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431b3a
call esi
test eax, eax
je 0x431b26
cmp byte [ebp - 3], 0x3a
jne 0x431b26
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431b4e
call esi
test eax, eax
je 0x431b4e
cmp byte [ebp - 3], 0x3a
jne 0x431b4e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431b68
cmp byte [ebp - 3], 0x3a
jne 0x431b68
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431b96
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431b96
cmp byte [ebp - 7], 0x3a
jne 0x431b96
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431bce
call esi
test eax, eax
je 0x431bba
cmp byte [ebp - 3], 0x3a
jne 0x431bba
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431be2
call esi
test eax, eax
je 0x431be2
cmp byte [ebp - 3], 0x3a
jne 0x431be2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431bfc
cmp byte [ebp - 3], 0x3a
jne 0x431bfc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431c30
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431c30
cmp byte [ebp - 7], 0x3a
jne 0x431c30
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431c68
call esi
test eax, eax
je 0x431c54
cmp byte [ebp - 3], 0x3a
jne 0x431c54
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431c7c
call esi
test eax, eax
je 0x431c7c
cmp byte [ebp - 3], 0x3a
jne 0x431c7c
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431c96
cmp byte [ebp - 3], 0x3a
jne 0x431c96
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431cc4
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431cc4
cmp byte [ebp - 7], 0x3a
jne 0x431cc4
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431cfc
call esi
test eax, eax
je 0x431ce8
cmp byte [ebp - 3], 0x3a
jne 0x431ce8
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431d10
call esi
test eax, eax
je 0x431d10
cmp byte [ebp - 3], 0x3a
jne 0x431d10
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431d2a
cmp byte [ebp - 3], 0x3a
jne 0x431d2a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431d56
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431d56
cmp byte [ebp - 7], 0x3a
jne 0x431d56
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431d8e
call esi
test eax, eax
je 0x431d7a
cmp byte [ebp - 3], 0x3a
jne 0x431d7a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431da2
call esi
test eax, eax
je 0x431da2
cmp byte [ebp - 3], 0x3a
jne 0x431da2
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431dbc
cmp byte [ebp - 3], 0x3a
jne 0x431dbc
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431dea
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431dea
cmp byte [ebp - 7], 0x3a
jne 0x431dea
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431e22
call esi
test eax, eax
je 0x431e0e
cmp byte [ebp - 3], 0x3a
jne 0x431e0e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431e36
call esi
test eax, eax
je 0x431e36
cmp byte [ebp - 3], 0x3a
jne 0x431e36
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431e50
cmp byte [ebp - 3], 0x3a
jne 0x431e50
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431e7a
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431e7a
cmp byte [ebp - 7], 0x3a
jne 0x431e7a
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431eb2
call esi
test eax, eax
je 0x431e9e
cmp byte [ebp - 3], 0x3a
jne 0x431e9e
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431ec6
call esi
test eax, eax
je 0x431ec6
cmp byte [ebp - 3], 0x3a
jne 0x431ec6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431ee0
cmp byte [ebp - 3], 0x3a
jne 0x431ee0
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431f0f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431f0f
cmp byte [ebp - 7], 0x3a
jne 0x431f0f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431f47
call esi
test eax, eax
je 0x431f33
cmp byte [ebp - 3], 0x3a
jne 0x431f33
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431f5b
call esi
test eax, eax
je 0x431f5b
cmp byte [ebp - 3], 0x3a
jne 0x431f5b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x431f75
cmp byte [ebp - 3], 0x3a
jne 0x431f75
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x431fa3
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x431fa3
cmp byte [ebp - 7], 0x3a
jne 0x431fa3
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x431fdb
call esi
test eax, eax
je 0x431fc7
cmp byte [ebp - 3], 0x3a
jne 0x431fc7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x431fef
call esi
test eax, eax
je 0x431fef
cmp byte [ebp - 3], 0x3a
jne 0x431fef
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x432009
cmp byte [ebp - 3], 0x3a
jne 0x432009
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x432037
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x432037
cmp byte [ebp - 7], 0x3a
jne 0x432037
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x43206f
call esi
test eax, eax
je 0x43205b
cmp byte [ebp - 3], 0x3a
jne 0x43205b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x432083
call esi
test eax, eax
je 0x432083
cmp byte [ebp - 3], 0x3a
jne 0x432083
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x43209d
cmp byte [ebp - 3], 0x3a
jne 0x43209d
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4320c9
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4320c9
cmp byte [ebp - 7], 0x3a
jne 0x4320c9
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x432101
call esi
test eax, eax
je 0x4320ed
cmp byte [ebp - 3], 0x3a
jne 0x4320ed
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x432115
call esi
test eax, eax
je 0x432115
cmp byte [ebp - 3], 0x3a
jne 0x432115
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x43212f
cmp byte [ebp - 3], 0x3a
jne 0x43212f
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x43215f
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x43215f
cmp byte [ebp - 7], 0x3a
jne 0x43215f
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x432197
call esi
test eax, eax
je 0x432183
cmp byte [ebp - 3], 0x3a
jne 0x432183
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4321ab
call esi
test eax, eax
je 0x4321ab
cmp byte [ebp - 3], 0x3a
jne 0x4321ab
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4321c5
cmp byte [ebp - 3], 0x3a
jne 0x4321c5
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4321fe
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4321fe
cmp byte [ebp - 7], 0x3a
jne 0x4321fe
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x432236
call esi
test eax, eax
je 0x432222
cmp byte [ebp - 3], 0x3a
jne 0x432222
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x43224a
call esi
test eax, eax
je 0x43224a
cmp byte [ebp - 3], 0x3a
jne 0x43224a
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x432264
cmp byte [ebp - 3], 0x3a
jne 0x432264
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x432293
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x432293
cmp byte [ebp - 7], 0x3a
jne 0x432293
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4322cb
call esi
test eax, eax
je 0x4322b7
cmp byte [ebp - 3], 0x3a
jne 0x4322b7
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4322df
call esi
test eax, eax
je 0x4322df
cmp byte [ebp - 3], 0x3a
jne 0x4322df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x4322f9
cmp byte [ebp - 3], 0x3a
jne 0x4322f9
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x432325
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x432325
cmp byte [ebp - 7], 0x3a
jne 0x432325
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x43235d
call esi
test eax, eax
je 0x432349
cmp byte [ebp - 3], 0x3a
jne 0x432349
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x432371
call esi
test eax, eax
je 0x432371
cmp byte [ebp - 3], 0x3a
jne 0x432371
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x43238b
cmp byte [ebp - 3], 0x3a
jne 0x43238b
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x4323bb
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4323bb
cmp byte [ebp - 7], 0x3a
jne 0x4323bb
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4323f3
call esi
test eax, eax
je 0x4323df
cmp byte [ebp - 3], 0x3a
jne 0x4323df
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x432407
call esi
test eax, eax
je 0x432407
cmp byte [ebp - 3], 0x3a
jne 0x432407
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x432421
cmp byte [ebp - 3], 0x3a
jne 0x432421
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 8]
cmp eax, 0xd5
jne 0x432482
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x432482
cmp byte [ebp - 7], 0x3a
jne 0x432482
movzx eax, byte [ebp - 8]
push eax
call ebx
pop ecx
lea eax, [ebp + 8]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4324ba
call esi
test eax, eax
je 0x4324a6
cmp byte [ebp - 3], 0x3a
jne 0x4324a6
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
and byte [ebp - 6], 0
lea eax, [ebp - 8]
push eax
mov byte [ebp - 8], 0x42
mov byte [ebp - 7], 0x3a
call edi
jmp 0x4324ce
call esi
test eax, eax
je 0x4324ce
cmp byte [ebp - 3], 0x3a
jne 0x4324ce
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
pop edi
pop esi
test eax, eax
je 0x4324ea
cmp byte [ebp - 3], 0x3a
jne 0x4324ea
movzx eax, byte [ebp - 4]
push eax
call ebx
pop ecx
mov eax, dword [ebp + 8]
pop ebx
dec eax
je 0x4324fc
dec eax
jne 0x43250a
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
jmp 0x432502
mov eax, dword [ebp - 0xc]
push dword [eax + 0xc]
mov eax, dword [0x4513d0]
call dword [eax + 0x48]
leave
ret 4