Function at 0x401000
Capabilities:
Allocate thread local storage
Clear file content
Create directory
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set current directory
Set environment variable
Set file attributes
Suspend thread
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7cc
push ebx
lea eax, [ebp + 0x14]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
xor ebx, ebx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
jne 0x401f1c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x334]
push eax
call esi
test eax, eax
je 0x40104f
cmp byte [ebp - 0x333], 0x3a
jne 0x40104f
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x334]
push eax
push 3
jne 0x40109e
call edi
test eax, eax
je 0x40107f
cmp byte [ebp - 0x333], 0x3a
jne 0x40107f
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3bc]
mov byte [ebp - 0x3bc], 0x42
push eax
mov byte [ebp - 0x3bb], 0x3a
mov byte [ebp - 0x3ba], bl
call esi
jmp 0x4010bb
call edi
test eax, eax
je 0x4010bb
cmp byte [ebp - 0x333], 0x3a
jne 0x4010bb
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xc]
push eax
call esi
test eax, eax
je 0x4010d6
cmp byte [ebp - 0xb], 0x3a
jne 0x4010d6
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc]
push eax
push 3
jne 0x40111c
call edi
test eax, eax
je 0x4010fd
cmp byte [ebp - 0xb], 0x3a
jne 0x4010fd
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b4]
mov byte [ebp - 0x3b4], 0x42
push eax
mov byte [ebp - 0x3b3], 0x3a
mov byte [ebp - 0x3b2], bl
call esi
jmp 0x401133
call edi
test eax, eax
je 0x401133
cmp byte [ebp - 0xb], 0x3a
jne 0x401133
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x1dc]
push eax
call esi
test eax, eax
je 0x40116f
cmp byte [ebp - 0x1db], 0x3a
jne 0x40116f
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1dc]
push eax
push 3
jne 0x4011be
call edi
test eax, eax
je 0x40119f
cmp byte [ebp - 0x1db], 0x3a
jne 0x40119f
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x594]
mov byte [ebp - 0x594], 0x42
push eax
mov byte [ebp - 0x593], 0x3a
mov byte [ebp - 0x592], bl
call esi
jmp 0x4011db
call edi
test eax, eax
je 0x4011db
cmp byte [ebp - 0x1db], 0x3a
jne 0x4011db
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x14]
push eax
call esi
test eax, eax
je 0x4011fd
cmp byte [ebp - 0x13], 0x3a
jne 0x4011fd
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14]
push eax
push 3
jne 0x401243
call edi
test eax, eax
je 0x401224
cmp byte [ebp - 0x13], 0x3a
jne 0x401224
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3ac]
mov byte [ebp - 0x3ac], 0x42
push eax
mov byte [ebp - 0x3ab], 0x3a
mov byte [ebp - 0x3aa], bl
call esi
jmp 0x40125a
call edi
test eax, eax
je 0x40125a
cmp byte [ebp - 0x13], 0x3a
jne 0x40125a
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x2c4]
push eax
call esi
test eax, eax
je 0x401284
cmp byte [ebp - 0x2c3], 0x3a
jne 0x401284
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c4]
push eax
push 3
jne 0x4012d3
call edi
test eax, eax
je 0x4012b4
cmp byte [ebp - 0x2c3], 0x3a
jne 0x4012b4
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x684]
mov byte [ebp - 0x684], 0x42
push eax
mov byte [ebp - 0x683], 0x3a
mov byte [ebp - 0x682], bl
call esi
jmp 0x4012f0
call edi
test eax, eax
je 0x4012f0
cmp byte [ebp - 0x2c3], 0x3a
jne 0x4012f0
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x1c]
push eax
call esi
test eax, eax
je 0x40132c
cmp byte [ebp - 0x1b], 0x3a
jne 0x40132c
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c]
push eax
push 3
jne 0x401372
call edi
test eax, eax
je 0x401353
cmp byte [ebp - 0x1b], 0x3a
jne 0x401353
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c4]
mov byte [ebp - 0x3c4], 0x42
push eax
mov byte [ebp - 0x3c3], 0x3a
mov byte [ebp - 0x3c2], bl
call esi
jmp 0x401389
call edi
test eax, eax
je 0x401389
cmp byte [ebp - 0x1b], 0x3a
jne 0x401389
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x1e4]
push eax
call esi
test eax, eax
je 0x4013bd
cmp byte [ebp - 0x1e3], 0x3a
jne 0x4013bd
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e4]
push eax
push 3
jne 0x40140c
call edi
test eax, eax
je 0x4013ed
cmp byte [ebp - 0x1e3], 0x3a
jne 0x4013ed
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x59c]
mov byte [ebp - 0x59c], 0x42
push eax
mov byte [ebp - 0x59b], 0x3a
mov byte [ebp - 0x59a], bl
call esi
jmp 0x401429
call edi
test eax, eax
je 0x401429
cmp byte [ebp - 0x1e3], 0x3a
jne 0x401429
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x24]
push eax
call esi
test eax, eax
je 0x401453
cmp byte [ebp - 0x23], 0x3a
jne 0x401453
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24]
push eax
push 3
jne 0x401499
call edi
test eax, eax
je 0x40147a
cmp byte [ebp - 0x23], 0x3a
jne 0x40147a
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3cc]
mov byte [ebp - 0x3cc], 0x42
push eax
mov byte [ebp - 0x3cb], 0x3a
mov byte [ebp - 0x3ca], bl
call esi
jmp 0x4014b0
call edi
test eax, eax
je 0x4014b0
cmp byte [ebp - 0x23], 0x3a
jne 0x4014b0
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x38c]
push eax
call esi
test eax, eax
je 0x4014e6
cmp byte [ebp - 0x38b], 0x3a
jne 0x4014e6
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38c]
push eax
push 3
jne 0x401535
call edi
test eax, eax
je 0x401516
cmp byte [ebp - 0x38b], 0x3a
jne 0x401516
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6fc]
mov byte [ebp - 0x6fc], 0x42
push eax
mov byte [ebp - 0x6fb], 0x3a
mov byte [ebp - 0x6fa], bl
call esi
jmp 0x401552
call edi
test eax, eax
je 0x401552
cmp byte [ebp - 0x38b], 0x3a
jne 0x401552
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x2c]
push eax
call esi
test eax, eax
je 0x401585
cmp byte [ebp - 0x2b], 0x3a
jne 0x401585
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c]
push eax
push 3
jne 0x4015cb
call edi
test eax, eax
je 0x4015ac
cmp byte [ebp - 0x2b], 0x3a
jne 0x4015ac
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d4]
mov byte [ebp - 0x3d4], 0x42
push eax
mov byte [ebp - 0x3d3], 0x3a
mov byte [ebp - 0x3d2], bl
call esi
jmp 0x4015e2
call edi
test eax, eax
je 0x4015e2
cmp byte [ebp - 0x2b], 0x3a
jne 0x4015e2
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x1ec]
push eax
call esi
test eax, eax
je 0x40161a
cmp byte [ebp - 0x1eb], 0x3a
jne 0x40161a
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ec]
push eax
push 3
jne 0x401669
call edi
test eax, eax
je 0x40164a
cmp byte [ebp - 0x1eb], 0x3a
jne 0x40164a
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a4]
mov byte [ebp - 0x5a4], 0x42
push eax
mov byte [ebp - 0x5a3], 0x3a
mov byte [ebp - 0x5a2], bl
call esi
jmp 0x401686
call edi
test eax, eax
je 0x401686
cmp byte [ebp - 0x1eb], 0x3a
jne 0x401686
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x34]
push eax
call esi
test eax, eax
je 0x4016a8
cmp byte [ebp - 0x33], 0x3a
jne 0x4016a8
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34]
push eax
push 3
jne 0x4016ee
call edi
test eax, eax
je 0x4016cf
cmp byte [ebp - 0x33], 0x3a
jne 0x4016cf
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3dc]
mov byte [ebp - 0x3dc], 0x42
push eax
mov byte [ebp - 0x3db], 0x3a
mov byte [ebp - 0x3da], bl
call esi
jmp 0x401705
call edi
test eax, eax
je 0x401705
cmp byte [ebp - 0x33], 0x3a
jne 0x401705
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x2cc]
push eax
call esi
test eax, eax
je 0x401730
cmp byte [ebp - 0x2cb], 0x3a
jne 0x401730
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2cc]
push eax
push 3
jne 0x40177f
call edi
test eax, eax
je 0x401760
cmp byte [ebp - 0x2cb], 0x3a
jne 0x401760
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x68c]
mov byte [ebp - 0x68c], 0x42
push eax
mov byte [ebp - 0x68b], 0x3a
mov byte [ebp - 0x68a], bl
call esi
jmp 0x40179c
call edi
test eax, eax
je 0x40179c
cmp byte [ebp - 0x2cb], 0x3a
jne 0x40179c
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x3c]
push eax
call esi
test eax, eax
je 0x4017c6
cmp byte [ebp - 0x3b], 0x3a
jne 0x4017c6
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c]
push eax
push 3
jne 0x40180c
call edi
test eax, eax
je 0x4017ed
cmp byte [ebp - 0x3b], 0x3a
jne 0x4017ed
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e4]
mov byte [ebp - 0x3e4], 0x42
push eax
mov byte [ebp - 0x3e3], 0x3a
mov byte [ebp - 0x3e2], bl
call esi
jmp 0x401823
call edi
test eax, eax
je 0x401823
cmp byte [ebp - 0x3b], 0x3a
jne 0x401823
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x1f4]
push eax
call esi
test eax, eax
je 0x401857
cmp byte [ebp - 0x1f3], 0x3a
jne 0x401857
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f4]
push eax
push 3
jne 0x4018a6
call edi
test eax, eax
je 0x401887
cmp byte [ebp - 0x1f3], 0x3a
jne 0x401887
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5ac]
mov byte [ebp - 0x5ac], 0x42
push eax
mov byte [ebp - 0x5ab], 0x3a
mov byte [ebp - 0x5aa], bl
call esi
jmp 0x4018c3
call edi
test eax, eax
je 0x4018c3
cmp byte [ebp - 0x1f3], 0x3a
jne 0x4018c3
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x44]
push eax
call esi
test eax, eax
je 0x4018ee
cmp byte [ebp - 0x43], 0x3a
jne 0x4018ee
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x44]
push eax
push 3
jne 0x401934
call edi
test eax, eax
je 0x401915
cmp byte [ebp - 0x43], 0x3a
jne 0x401915
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3ec]
mov byte [ebp - 0x3ec], 0x42
push eax
mov byte [ebp - 0x3eb], 0x3a
mov byte [ebp - 0x3ea], bl
call esi
jmp 0x40194b
call edi
test eax, eax
je 0x40194b
cmp byte [ebp - 0x43], 0x3a
jne 0x40194b
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x33c]
push eax
call esi
test eax, eax
je 0x40197e
cmp byte [ebp - 0x33b], 0x3a
jne 0x40197e
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x33c]
push eax
push 3
jne 0x4019cd
call edi
test eax, eax
je 0x4019ae
cmp byte [ebp - 0x33b], 0x3a
jne 0x4019ae
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x750]
mov byte [ebp - 0x750], 0x42
push eax
mov byte [ebp - 0x74f], 0x3a
mov byte [ebp - 0x74e], bl
call esi
jmp 0x4019ea
call edi
test eax, eax
je 0x4019ea
cmp byte [ebp - 0x33b], 0x3a
jne 0x4019ea
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x4c]
push eax
call esi
test eax, eax
je 0x401a0e
cmp byte [ebp - 0x4b], 0x3a
jne 0x401a0e
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x4c]
push eax
push 3
jne 0x401a54
call edi
test eax, eax
je 0x401a35
cmp byte [ebp - 0x4b], 0x3a
jne 0x401a35
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f4]
mov byte [ebp - 0x3f4], 0x42
push eax
mov byte [ebp - 0x3f3], 0x3a
mov byte [ebp - 0x3f2], bl
call esi
jmp 0x401a6b
call edi
test eax, eax
je 0x401a6b
cmp byte [ebp - 0x4b], 0x3a
jne 0x401a6b
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x1fc]
push eax
call esi
test eax, eax
je 0x401a9d
cmp byte [ebp - 0x1fb], 0x3a
jne 0x401a9d
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1fc]
push eax
push 3
jne 0x401aec
call edi
test eax, eax
je 0x401acd
cmp byte [ebp - 0x1fb], 0x3a
jne 0x401acd
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b4]
mov byte [ebp - 0x5b4], 0x42
push eax
mov byte [ebp - 0x5b3], 0x3a
mov byte [ebp - 0x5b2], bl
call esi
jmp 0x401b09
call edi
test eax, eax
je 0x401b09
cmp byte [ebp - 0x1fb], 0x3a
jne 0x401b09
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x54]
push eax
call esi
test eax, eax
je 0x401b32
cmp byte [ebp - 0x53], 0x3a
jne 0x401b32
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x54]
push eax
push 3
jne 0x401b78
call edi
test eax, eax
je 0x401b59
cmp byte [ebp - 0x53], 0x3a
jne 0x401b59
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3fc]
mov byte [ebp - 0x3fc], 0x42
push eax
mov byte [ebp - 0x3fb], 0x3a
mov byte [ebp - 0x3fa], bl
call esi
jmp 0x401b8f
call edi
test eax, eax
je 0x401b8f
cmp byte [ebp - 0x53], 0x3a
jne 0x401b8f
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x2d4]
push eax
call esi
test eax, eax
je 0x401bc6
cmp byte [ebp - 0x2d3], 0x3a
jne 0x401bc6
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d4]
push eax
push 3
jne 0x401c15
call edi
test eax, eax
je 0x401bf6
cmp byte [ebp - 0x2d3], 0x3a
jne 0x401bf6
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x694]
mov byte [ebp - 0x694], 0x42
push eax
mov byte [ebp - 0x693], 0x3a
mov byte [ebp - 0x692], bl
call esi
jmp 0x401c32
call edi
test eax, eax
je 0x401c32
cmp byte [ebp - 0x2d3], 0x3a
jne 0x401c32
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x5c]
push eax
call esi
test eax, eax
je 0x401c5b
cmp byte [ebp - 0x5b], 0x3a
jne 0x401c5b
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x5c]
push eax
push 3
jne 0x401ca1
call edi
test eax, eax
je 0x401c82
cmp byte [ebp - 0x5b], 0x3a
jne 0x401c82
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], 0x42
push eax
mov byte [ebp - 0x403], 0x3a
mov byte [ebp - 0x402], bl
call esi
jmp 0x401cb8
call edi
test eax, eax
je 0x401cb8
cmp byte [ebp - 0x5b], 0x3a
jne 0x401cb8
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x204]
push eax
call esi
test eax, eax
je 0x401ce3
cmp byte [ebp - 0x203], 0x3a
jne 0x401ce3
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x204]
push eax
push 3
jne 0x401d32
call edi
test eax, eax
je 0x401d13
cmp byte [ebp - 0x203], 0x3a
jne 0x401d13
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5bc]
mov byte [ebp - 0x5bc], 0x42
push eax
mov byte [ebp - 0x5bb], 0x3a
mov byte [ebp - 0x5ba], bl
call esi
jmp 0x401d4f
call edi
test eax, eax
je 0x401d4f
cmp byte [ebp - 0x203], 0x3a
jne 0x401d4f
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x64]
push eax
call esi
test eax, eax
je 0x401d78
cmp byte [ebp - 0x63], 0x3a
jne 0x401d78
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x64]
push eax
push 3
jne 0x401dbe
call edi
test eax, eax
je 0x401d9f
cmp byte [ebp - 0x63], 0x3a
jne 0x401d9f
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x40c]
mov byte [ebp - 0x40c], 0x42
push eax
mov byte [ebp - 0x40b], 0x3a
mov byte [ebp - 0x40a], bl
call esi
jmp 0x401dd5
call edi
test eax, eax
je 0x401dd5
cmp byte [ebp - 0x63], 0x3a
jne 0x401dd5
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x374]
push eax
call esi
test eax, eax
je 0x401e08
cmp byte [ebp - 0x373], 0x3a
jne 0x401e08
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x374]
push eax
push 3
jne 0x401e57
call edi
test eax, eax
je 0x401e38
cmp byte [ebp - 0x373], 0x3a
jne 0x401e38
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x704]
mov byte [ebp - 0x704], 0x42
push eax
mov byte [ebp - 0x703], 0x3a
mov byte [ebp - 0x702], bl
call esi
jmp 0x401e74
call edi
test eax, eax
je 0x401e74
cmp byte [ebp - 0x373], 0x3a
jne 0x401e74
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x6c]
push eax
call esi
test eax, eax
je 0x401e9f
cmp byte [ebp - 0x6b], 0x3a
jne 0x401e9f
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x6c]
push eax
push 3
jne 0x401ee5
call edi
test eax, eax
je 0x401ec6
cmp byte [ebp - 0x6b], 0x3a
jne 0x401ec6
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x414]
mov byte [ebp - 0x414], 0x42
push eax
mov byte [ebp - 0x413], 0x3a
mov byte [ebp - 0x412], bl
call esi
jmp 0x401efc
call edi
test eax, eax
je 0x401efc
cmp byte [ebp - 0x6b], 0x3a
jne 0x401efc
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0x220
call sub.MFC42.DLL_operatornew
cmp eax, ebx
pop ecx
je 0x401f34
mov ecx, eax
call fcn.004174f8
jmp 0x401f36
xor eax, eax
lea ecx, [ebp - 0x76c]
mov dword [0x4503d0], eax
call fcn.0041af37
lea ecx, [ebp - 0x760]
call fcn.00434457
lea ecx, [ebp - 0x760]
call fcn.0043448c
lea eax, [ebp + 0x14]
test eax, eax
jne 0x402f66
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x20c]
push eax
call esi
test eax, eax
je 0x401f91
cmp byte [ebp - 0x20b], 0x3a
jne 0x401f91
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20c]
push eax
push 3
jne 0x401fe0
call edi
test eax, eax
je 0x401fc1
cmp byte [ebp - 0x20b], 0x3a
jne 0x401fc1
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c4]
mov byte [ebp - 0x5c4], 0x42
push eax
mov byte [ebp - 0x5c3], 0x3a
mov byte [ebp - 0x5c2], bl
call esi
jmp 0x401ffd
call edi
test eax, eax
je 0x401ffd
cmp byte [ebp - 0x20b], 0x3a
jne 0x401ffd
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x74]
push eax
call esi
test eax, eax
je 0x402018
cmp byte [ebp - 0x73], 0x3a
jne 0x402018
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x74]
push eax
push 3
jne 0x40205e
call edi
test eax, eax
je 0x40203f
cmp byte [ebp - 0x73], 0x3a
jne 0x40203f
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x41c]
mov byte [ebp - 0x41c], 0x42
push eax
mov byte [ebp - 0x41b], 0x3a
mov byte [ebp - 0x41a], bl
call esi
jmp 0x402075
call edi
test eax, eax
je 0x402075
cmp byte [ebp - 0x73], 0x3a
jne 0x402075
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x2dc]
push eax
call esi
test eax, eax
je 0x4020b1
cmp byte [ebp - 0x2db], 0x3a
jne 0x4020b1
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2dc]
push eax
push 3
jne 0x402100
call edi
test eax, eax
je 0x4020e1
cmp byte [ebp - 0x2db], 0x3a
jne 0x4020e1
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x69c]
mov byte [ebp - 0x69c], 0x42
push eax
mov byte [ebp - 0x69b], 0x3a
mov byte [ebp - 0x69a], bl
call esi
jmp 0x40211d
call edi
test eax, eax
je 0x40211d
cmp byte [ebp - 0x2db], 0x3a
jne 0x40211d
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x7c]
push eax
call esi
test eax, eax
je 0x40213f
cmp byte [ebp - 0x7b], 0x3a
jne 0x40213f
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x7c]
push eax
push 3
jne 0x402185
call edi
test eax, eax
je 0x402166
cmp byte [ebp - 0x7b], 0x3a
jne 0x402166
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x424]
mov byte [ebp - 0x424], 0x42
push eax
mov byte [ebp - 0x423], 0x3a
mov byte [ebp - 0x422], bl
call esi
jmp 0x40219c
call edi
test eax, eax
je 0x40219c
cmp byte [ebp - 0x7b], 0x3a
jne 0x40219c
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x214]
push eax
call esi
test eax, eax
je 0x4021c6
cmp byte [ebp - 0x213], 0x3a
jne 0x4021c6
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x214]
push eax
push 3
jne 0x402215
call edi
test eax, eax
je 0x4021f6
cmp byte [ebp - 0x213], 0x3a
jne 0x4021f6
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5cc]
mov byte [ebp - 0x5cc], 0x42
push eax
mov byte [ebp - 0x5cb], 0x3a
mov byte [ebp - 0x5ca], bl
call esi
jmp 0x402232
call edi
test eax, eax
je 0x402232
cmp byte [ebp - 0x213], 0x3a
jne 0x402232
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x84]
push eax
call esi
test eax, eax
je 0x402277
cmp byte [ebp - 0x83], 0x3a
jne 0x402277
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x84]
push eax
push 3
jne 0x4022c6
call edi
test eax, eax
je 0x4022a7
cmp byte [ebp - 0x83], 0x3a
jne 0x4022a7
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x42c]
mov byte [ebp - 0x42c], 0x42
push eax
mov byte [ebp - 0x42b], 0x3a
mov byte [ebp - 0x42a], bl
call esi
jmp 0x4022e3
call edi
test eax, eax
je 0x4022e3
cmp byte [ebp - 0x83], 0x3a
jne 0x4022e3
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x344]
push eax
call esi
test eax, eax
je 0x402317
cmp byte [ebp - 0x343], 0x3a
jne 0x402317
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x344]
push eax
push 3
jne 0x402366
call edi
test eax, eax
je 0x402347
cmp byte [ebp - 0x343], 0x3a
jne 0x402347
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x73c]
mov byte [ebp - 0x73c], 0x42
push eax
mov byte [ebp - 0x73b], 0x3a
mov byte [ebp - 0x73a], bl
call esi
jmp 0x402383
call edi
test eax, eax
je 0x402383
cmp byte [ebp - 0x343], 0x3a
jne 0x402383
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x8c]
push eax
call esi
test eax, eax
je 0x4023b6
cmp byte [ebp - 0x8b], 0x3a
jne 0x4023b6
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x8c]
push eax
push 3
jne 0x402405
call edi
test eax, eax
je 0x4023e6
cmp byte [ebp - 0x8b], 0x3a
jne 0x4023e6
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x434]
mov byte [ebp - 0x434], 0x42
push eax
mov byte [ebp - 0x433], 0x3a
mov byte [ebp - 0x432], bl
call esi
jmp 0x402422
call edi
test eax, eax
je 0x402422
cmp byte [ebp - 0x8b], 0x3a
jne 0x402422
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x21c]
push eax
call esi
test eax, eax
je 0x402458
cmp byte [ebp - 0x21b], 0x3a
jne 0x402458
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x21c]
push eax
push 3
jne 0x4024a7
call edi
test eax, eax
je 0x402488
cmp byte [ebp - 0x21b], 0x3a
jne 0x402488
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d4]
mov byte [ebp - 0x5d4], 0x42
push eax
mov byte [ebp - 0x5d3], 0x3a
mov byte [ebp - 0x5d2], bl
call esi
jmp 0x4024c4
call edi
test eax, eax
je 0x4024c4
cmp byte [ebp - 0x21b], 0x3a
jne 0x4024c4
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x94]
push eax
call esi
test eax, eax
je 0x402500
cmp byte [ebp - 0x93], 0x3a
jne 0x402500
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x94]
push eax
push 3
jne 0x40254f
call edi
test eax, eax
je 0x402530
cmp byte [ebp - 0x93], 0x3a
jne 0x402530
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x43c]
mov byte [ebp - 0x43c], 0x42
push eax
mov byte [ebp - 0x43b], 0x3a
mov byte [ebp - 0x43a], bl
call esi
jmp 0x40256c
call edi
test eax, eax
je 0x40256c
cmp byte [ebp - 0x93], 0x3a
jne 0x40256c
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x2e4]
push eax
call esi
test eax, eax
je 0x4025a4
cmp byte [ebp - 0x2e3], 0x3a
jne 0x4025a4
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e4]
push eax
push 3
jne 0x4025f3
call edi
test eax, eax
je 0x4025d4
cmp byte [ebp - 0x2e3], 0x3a
jne 0x4025d4
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a4]
mov byte [ebp - 0x6a4], 0x42
push eax
mov byte [ebp - 0x6a3], 0x3a
mov byte [ebp - 0x6a2], bl
call esi
jmp 0x402610
call edi
test eax, eax
je 0x402610
cmp byte [ebp - 0x2e3], 0x3a
jne 0x402610
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x9c]
push eax
call esi
test eax, eax
je 0x40263b
cmp byte [ebp - 0x9b], 0x3a
jne 0x40263b
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x9c]
push eax
push 3
jne 0x40268a
call edi
test eax, eax
je 0x40266b
cmp byte [ebp - 0x9b], 0x3a
jne 0x40266b
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x444]
mov byte [ebp - 0x444], 0x42
push eax
mov byte [ebp - 0x443], 0x3a
mov byte [ebp - 0x442], bl
call esi
jmp 0x4026a7
call edi
test eax, eax
je 0x4026a7
cmp byte [ebp - 0x9b], 0x3a
jne 0x4026a7
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x224]
push eax
call esi
test eax, eax
je 0x4026d2
cmp byte [ebp - 0x223], 0x3a
jne 0x4026d2
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x224]
push eax
push 3
jne 0x402721
call edi
test eax, eax
je 0x402702
cmp byte [ebp - 0x223], 0x3a
jne 0x402702
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5dc]
mov byte [ebp - 0x5dc], 0x42
push eax
mov byte [ebp - 0x5db], 0x3a
mov byte [ebp - 0x5da], bl
call esi
jmp 0x40273e
call edi
test eax, eax
je 0x40273e
cmp byte [ebp - 0x223], 0x3a
jne 0x40273e
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0xa4]
push eax
call esi
test eax, eax
je 0x402771
cmp byte [ebp - 0xa3], 0x3a
jne 0x402771
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa4]
push eax
push 3
jne 0x4027c0
call edi
test eax, eax
je 0x4027a1
cmp byte [ebp - 0xa3], 0x3a
jne 0x4027a1
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x44c]
mov byte [ebp - 0x44c], 0x42
push eax
mov byte [ebp - 0x44b], 0x3a
mov byte [ebp - 0x44a], bl
call esi
jmp 0x4027dd
call edi
test eax, eax
je 0x4027dd
cmp byte [ebp - 0xa3], 0x3a
jne 0x4027dd
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x39c]
push eax
call esi
test eax, eax
je 0x402811
cmp byte [ebp - 0x39b], 0x3a
jne 0x402811
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x39c]
push eax
push 3
jne 0x402860
call edi
test eax, eax
je 0x402841
cmp byte [ebp - 0x39b], 0x3a
jne 0x402841
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x70c]
mov byte [ebp - 0x70c], 0x42
push eax
mov byte [ebp - 0x70b], 0x3a
mov byte [ebp - 0x70a], bl
call esi
jmp 0x40287d
call edi
test eax, eax
je 0x40287d
cmp byte [ebp - 0x39b], 0x3a
jne 0x40287d
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0xac]
push eax
call esi
test eax, eax
je 0x4028b1
cmp byte [ebp - 0xab], 0x3a
jne 0x4028b1
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xac]
push eax
push 3
jne 0x402900
call edi
test eax, eax
je 0x4028e1
cmp byte [ebp - 0xab], 0x3a
jne 0x4028e1
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x454]
mov byte [ebp - 0x454], 0x42
push eax
mov byte [ebp - 0x453], 0x3a
mov byte [ebp - 0x452], bl
call esi
jmp 0x40291d
call edi
test eax, eax
je 0x40291d
cmp byte [ebp - 0xab], 0x3a
jne 0x40291d
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x22c]
push eax
call esi
test eax, eax
je 0x402950
cmp byte [ebp - 0x22b], 0x3a
jne 0x402950
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x22c]
push eax
push 3
jne 0x40299f
call edi
test eax, eax
je 0x402980
cmp byte [ebp - 0x22b], 0x3a
jne 0x402980
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e4]
mov byte [ebp - 0x5e4], 0x42
push eax
mov byte [ebp - 0x5e3], 0x3a
mov byte [ebp - 0x5e2], bl
call esi
jmp 0x4029bc
call edi
test eax, eax
je 0x4029bc
cmp byte [ebp - 0x22b], 0x3a
jne 0x4029bc
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0xb4]
push eax
call esi
test eax, eax
je 0x4029e9
cmp byte [ebp - 0xb3], 0x3a
jne 0x4029e9
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb4]
push eax
push 3
jne 0x402a38
call edi
test eax, eax
je 0x402a19
cmp byte [ebp - 0xb3], 0x3a
jne 0x402a19
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x45c]
mov byte [ebp - 0x45c], 0x42
push eax
mov byte [ebp - 0x45b], 0x3a
mov byte [ebp - 0x45a], bl
call esi
jmp 0x402a55
call edi
test eax, eax
je 0x402a55
cmp byte [ebp - 0xb3], 0x3a
jne 0x402a55
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x2ec]
push eax
call esi
test eax, eax
je 0x402a87
cmp byte [ebp - 0x2eb], 0x3a
jne 0x402a87
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ec]
push eax
push 3
jne 0x402ad6
call edi
test eax, eax
je 0x402ab7
cmp byte [ebp - 0x2eb], 0x3a
jne 0x402ab7
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6ac]
mov byte [ebp - 0x6ac], 0x42
push eax
mov byte [ebp - 0x6ab], 0x3a
mov byte [ebp - 0x6aa], bl
call esi
jmp 0x402af3
call edi
test eax, eax
je 0x402af3
cmp byte [ebp - 0x2eb], 0x3a
jne 0x402af3
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0xbc]
push eax
call esi
test eax, eax
je 0x402b25
cmp byte [ebp - 0xbb], 0x3a
jne 0x402b25
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xbc]
push eax
push 3
jne 0x402b74
call edi
test eax, eax
je 0x402b55
cmp byte [ebp - 0xbb], 0x3a
jne 0x402b55
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x464]
mov byte [ebp - 0x464], 0x42
push eax
mov byte [ebp - 0x463], 0x3a
mov byte [ebp - 0x462], bl
call esi
jmp 0x402b91
call edi
test eax, eax
je 0x402b91
cmp byte [ebp - 0xbb], 0x3a
jne 0x402b91
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x234]
push eax
call esi
test eax, eax
je 0x402bc8
cmp byte [ebp - 0x233], 0x3a
jne 0x402bc8
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x234]
push eax
push 3
jne 0x402c17
call edi
test eax, eax
je 0x402bf8
cmp byte [ebp - 0x233], 0x3a
jne 0x402bf8
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5ec]
mov byte [ebp - 0x5ec], 0x42
push eax
mov byte [ebp - 0x5eb], 0x3a
mov byte [ebp - 0x5ea], bl
call esi
jmp 0x402c34
call edi
test eax, eax
je 0x402c34
cmp byte [ebp - 0x233], 0x3a
jne 0x402c34
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0xc4]
push eax
call esi
test eax, eax
je 0x402c66
cmp byte [ebp - 0xc3], 0x3a
jne 0x402c66
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc4]
push eax
push 3
jne 0x402cb5
call edi
test eax, eax
je 0x402c96
cmp byte [ebp - 0xc3], 0x3a
jne 0x402c96
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x46c]
mov byte [ebp - 0x46c], 0x42
push eax
mov byte [ebp - 0x46b], 0x3a
mov byte [ebp - 0x46a], bl
call esi
jmp 0x402cd2
call edi
test eax, eax
je 0x402cd2
cmp byte [ebp - 0xc3], 0x3a
jne 0x402cd2
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x34c]
push eax
call esi
test eax, eax
je 0x402cfd
cmp byte [ebp - 0x34b], 0x3a
jne 0x402cfd
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34c]
push eax
push 3
jne 0x402d4c
call edi
test eax, eax
je 0x402d2d
cmp byte [ebp - 0x34b], 0x3a
jne 0x402d2d
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x74c]
mov byte [ebp - 0x74c], 0x42
push eax
mov byte [ebp - 0x74b], 0x3a
mov byte [ebp - 0x74a], bl
call esi
jmp 0x402d69
call edi
test eax, eax
je 0x402d69
cmp byte [ebp - 0x34b], 0x3a
jne 0x402d69
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0xcc]
push eax
call esi
test eax, eax
je 0x402d9b
cmp byte [ebp - 0xcb], 0x3a
jne 0x402d9b
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xcc]
push eax
push 3
jne 0x402dea
call edi
test eax, eax
je 0x402dcb
cmp byte [ebp - 0xcb], 0x3a
jne 0x402dcb
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x474]
mov byte [ebp - 0x474], 0x42
push eax
mov byte [ebp - 0x473], 0x3a
mov byte [ebp - 0x472], bl
call esi
jmp 0x402e07
call edi
test eax, eax
je 0x402e07
cmp byte [ebp - 0xcb], 0x3a
jne 0x402e07
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x23c]
push eax
call esi
test eax, eax
je 0x402e3a
cmp byte [ebp - 0x23b], 0x3a
jne 0x402e3a
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x23c]
push eax
push 3
jne 0x402e89
call edi
test eax, eax
je 0x402e6a
cmp byte [ebp - 0x23b], 0x3a
jne 0x402e6a
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f4]
mov byte [ebp - 0x5f4], 0x42
push eax
mov byte [ebp - 0x5f3], 0x3a
mov byte [ebp - 0x5f2], bl
call esi
jmp 0x402ea6
call edi
test eax, eax
je 0x402ea6
cmp byte [ebp - 0x23b], 0x3a
jne 0x402ea6
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0xd4]
push eax
call esi
test eax, eax
je 0x402eda
cmp byte [ebp - 0xd3], 0x3a
jne 0x402eda
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd4]
push eax
push 3
jne 0x402f29
call edi
test eax, eax
je 0x402f0a
cmp byte [ebp - 0xd3], 0x3a
jne 0x402f0a
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x47c]
mov byte [ebp - 0x47c], 0x42
push eax
mov byte [ebp - 0x47b], 0x3a
mov byte [ebp - 0x47a], bl
call esi
jmp 0x402f46
call edi
test eax, eax
je 0x402f46
cmp byte [ebp - 0xd3], 0x3a
jne 0x402f46
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x758]
call fcn.0041b012
lea ecx, [ebp - 0x758]
call fcn.0041c99b
test eax, eax
je 0x405071
lea eax, [ebp + 0x14]
test eax, eax
jne 0x403fbe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x2f4]
push eax
call esi
test eax, eax
je 0x402fb9
cmp byte [ebp - 0x2f3], 0x3a
jne 0x402fb9
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f4]
push eax
push 3
jne 0x403008
call edi
test eax, eax
je 0x402fe9
cmp byte [ebp - 0x2f3], 0x3a
jne 0x402fe9
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b4]
mov byte [ebp - 0x6b4], 0x42
push eax
mov byte [ebp - 0x6b3], 0x3a
mov byte [ebp - 0x6b2], bl
call esi
jmp 0x403025
call edi
test eax, eax
je 0x403025
cmp byte [ebp - 0x2f3], 0x3a
jne 0x403025
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xdc]
push eax
call esi
test eax, eax
je 0x403049
cmp byte [ebp - 0xdb], 0x3a
jne 0x403049
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xdc]
push eax
push 3
jne 0x403098
call edi
test eax, eax
je 0x403079
cmp byte [ebp - 0xdb], 0x3a
jne 0x403079
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x484]
mov byte [ebp - 0x484], 0x42
push eax
mov byte [ebp - 0x483], 0x3a
mov byte [ebp - 0x482], bl
call esi
jmp 0x4030b5
call edi
test eax, eax
je 0x4030b5
cmp byte [ebp - 0xdb], 0x3a
jne 0x4030b5
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x244]
push eax
call esi
test eax, eax
je 0x4030f1
cmp byte [ebp - 0x243], 0x3a
jne 0x4030f1
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x244]
push eax
push 3
jne 0x403140
call edi
test eax, eax
je 0x403121
cmp byte [ebp - 0x243], 0x3a
jne 0x403121
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5fc]
mov byte [ebp - 0x5fc], 0x42
push eax
mov byte [ebp - 0x5fb], 0x3a
mov byte [ebp - 0x5fa], bl
call esi
jmp 0x40315d
call edi
test eax, eax
je 0x40315d
cmp byte [ebp - 0x243], 0x3a
jne 0x40315d
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xe4]
push eax
call esi
test eax, eax
je 0x403188
cmp byte [ebp - 0xe3], 0x3a
jne 0x403188
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe4]
push eax
push 3
jne 0x4031d7
call edi
test eax, eax
je 0x4031b8
cmp byte [ebp - 0xe3], 0x3a
jne 0x4031b8
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x48c]
mov byte [ebp - 0x48c], 0x42
push eax
mov byte [ebp - 0x48b], 0x3a
mov byte [ebp - 0x48a], bl
call esi
jmp 0x4031f4
call edi
test eax, eax
je 0x4031f4
cmp byte [ebp - 0xe3], 0x3a
jne 0x4031f4
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x37c]
push eax
call esi
test eax, eax
je 0x40321e
cmp byte [ebp - 0x37b], 0x3a
jne 0x40321e
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x37c]
push eax
push 3
jne 0x40326d
call edi
test eax, eax
je 0x40324e
cmp byte [ebp - 0x37b], 0x3a
jne 0x40324e
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x714]
mov byte [ebp - 0x714], 0x42
push eax
mov byte [ebp - 0x713], 0x3a
mov byte [ebp - 0x712], bl
call esi
jmp 0x40328a
call edi
test eax, eax
je 0x40328a
cmp byte [ebp - 0x37b], 0x3a
jne 0x40328a
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0xec]
push eax
call esi
test eax, eax
je 0x4032cf
cmp byte [ebp - 0xeb], 0x3a
jne 0x4032cf
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xec]
push eax
push 3
jne 0x40331e
call edi
test eax, eax
je 0x4032ff
cmp byte [ebp - 0xeb], 0x3a
jne 0x4032ff
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x494]
mov byte [ebp - 0x494], 0x42
push eax
mov byte [ebp - 0x493], 0x3a
mov byte [ebp - 0x492], bl
call esi
jmp 0x40333b
call edi
test eax, eax
je 0x40333b
cmp byte [ebp - 0xeb], 0x3a
jne 0x40333b
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x24c]
push eax
call esi
test eax, eax
je 0x40336f
cmp byte [ebp - 0x24b], 0x3a
jne 0x40336f
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24c]
push eax
push 3
jne 0x4033be
call edi
test eax, eax
je 0x40339f
cmp byte [ebp - 0x24b], 0x3a
jne 0x40339f
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x604]
mov byte [ebp - 0x604], 0x42
push eax
mov byte [ebp - 0x603], 0x3a
mov byte [ebp - 0x602], bl
call esi
jmp 0x4033db
call edi
test eax, eax
je 0x4033db
cmp byte [ebp - 0x24b], 0x3a
jne 0x4033db
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xf4]
push eax
call esi
test eax, eax
je 0x40340e
cmp byte [ebp - 0xf3], 0x3a
jne 0x40340e
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf4]
push eax
push 3
jne 0x40345d
call edi
test eax, eax
je 0x40343e
cmp byte [ebp - 0xf3], 0x3a
jne 0x40343e
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x49c]
mov byte [ebp - 0x49c], 0x42
push eax
mov byte [ebp - 0x49b], 0x3a
mov byte [ebp - 0x49a], bl
call esi
jmp 0x40347a
call edi
test eax, eax
je 0x40347a
cmp byte [ebp - 0xf3], 0x3a
jne 0x40347a
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x2fc]
push eax
call esi
test eax, eax
je 0x4034b0
cmp byte [ebp - 0x2fb], 0x3a
jne 0x4034b0
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2fc]
push eax
push 3
jne 0x4034ff
call edi
test eax, eax
je 0x4034e0
cmp byte [ebp - 0x2fb], 0x3a
jne 0x4034e0
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6bc]
mov byte [ebp - 0x6bc], 0x42
push eax
mov byte [ebp - 0x6bb], 0x3a
mov byte [ebp - 0x6ba], bl
call esi
jmp 0x40351c
call edi
test eax, eax
je 0x40351c
cmp byte [ebp - 0x2fb], 0x3a
jne 0x40351c
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xfc]
push eax
call esi
test eax, eax
je 0x403558
cmp byte [ebp - 0xfb], 0x3a
jne 0x403558
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xfc]
push eax
push 3
jne 0x4035a7
call edi
test eax, eax
je 0x403588
cmp byte [ebp - 0xfb], 0x3a
jne 0x403588
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a4]
mov byte [ebp - 0x4a4], 0x42
push eax
mov byte [ebp - 0x4a3], 0x3a
mov byte [ebp - 0x4a2], bl
call esi
jmp 0x4035c4
call edi
test eax, eax
je 0x4035c4
cmp byte [ebp - 0xfb], 0x3a
jne 0x4035c4
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x254]
push eax
call esi
test eax, eax
je 0x4035fc
cmp byte [ebp - 0x253], 0x3a
jne 0x4035fc
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x254]
push eax
push 3
jne 0x40364b
call edi
test eax, eax
je 0x40362c
cmp byte [ebp - 0x253], 0x3a
jne 0x40362c
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x60c]
mov byte [ebp - 0x60c], 0x42
push eax
mov byte [ebp - 0x60b], 0x3a
mov byte [ebp - 0x60a], bl
call esi
jmp 0x403668
call edi
test eax, eax
je 0x403668
cmp byte [ebp - 0x253], 0x3a
jne 0x403668
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x104]
push eax
call esi
test eax, eax
je 0x403693
cmp byte [ebp - 0x103], 0x3a
jne 0x403693
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x104]
push eax
push 3
jne 0x4036e2
call edi
test eax, eax
je 0x4036c3
cmp byte [ebp - 0x103], 0x3a
jne 0x4036c3
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4ac]
mov byte [ebp - 0x4ac], 0x42
push eax
mov byte [ebp - 0x4ab], 0x3a
mov byte [ebp - 0x4aa], bl
call esi
jmp 0x4036ff
call edi
test eax, eax
je 0x4036ff
cmp byte [ebp - 0x103], 0x3a
jne 0x4036ff
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x354]
push eax
call esi
test eax, eax
je 0x40372a
cmp byte [ebp - 0x353], 0x3a
jne 0x40372a
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x354]
push eax
push 3
jne 0x403779
call edi
test eax, eax
je 0x40375a
cmp byte [ebp - 0x353], 0x3a
jne 0x40375a
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x744]
mov byte [ebp - 0x744], 0x42
push eax
mov byte [ebp - 0x743], 0x3a
mov byte [ebp - 0x742], bl
call esi
jmp 0x403796
call edi
test eax, eax
je 0x403796
cmp byte [ebp - 0x353], 0x3a
jne 0x403796
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x10c]
push eax
call esi
test eax, eax
je 0x4037c9
cmp byte [ebp - 0x10b], 0x3a
jne 0x4037c9
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10c]
push eax
push 3
jne 0x403818
call edi
test eax, eax
je 0x4037f9
cmp byte [ebp - 0x10b], 0x3a
jne 0x4037f9
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b4]
mov byte [ebp - 0x4b4], 0x42
push eax
mov byte [ebp - 0x4b3], 0x3a
mov byte [ebp - 0x4b2], bl
call esi
jmp 0x403835
call edi
test eax, eax
je 0x403835
cmp byte [ebp - 0x10b], 0x3a
jne 0x403835
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x25c]
push eax
call esi
test eax, eax
je 0x403869
cmp byte [ebp - 0x25b], 0x3a
jne 0x403869
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x25c]
push eax
push 3
jne 0x4038b8
call edi
test eax, eax
je 0x403899
cmp byte [ebp - 0x25b], 0x3a
jne 0x403899
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x614]
mov byte [ebp - 0x614], 0x42
push eax
mov byte [ebp - 0x613], 0x3a
mov byte [ebp - 0x612], bl
call esi
jmp 0x4038d5
call edi
test eax, eax
je 0x4038d5
cmp byte [ebp - 0x25b], 0x3a
jne 0x4038d5
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x114]
push eax
call esi
test eax, eax
je 0x403909
cmp byte [ebp - 0x113], 0x3a
jne 0x403909
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x114]
push eax
push 3
jne 0x403958
call edi
test eax, eax
je 0x403939
cmp byte [ebp - 0x113], 0x3a
jne 0x403939
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4bc]
mov byte [ebp - 0x4bc], 0x42
push eax
mov byte [ebp - 0x4bb], 0x3a
mov byte [ebp - 0x4ba], bl
call esi
jmp 0x403975
call edi
test eax, eax
je 0x403975
cmp byte [ebp - 0x113], 0x3a
jne 0x403975
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x304]
push eax
call esi
test eax, eax
je 0x4039a8
cmp byte [ebp - 0x303], 0x3a
jne 0x4039a8
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x304]
push eax
push 3
jne 0x4039f7
call edi
test eax, eax
je 0x4039d8
cmp byte [ebp - 0x303], 0x3a
jne 0x4039d8
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c4]
mov byte [ebp - 0x6c4], 0x42
push eax
mov byte [ebp - 0x6c3], 0x3a
mov byte [ebp - 0x6c2], bl
call esi
jmp 0x403a14
call edi
test eax, eax
je 0x403a14
cmp byte [ebp - 0x303], 0x3a
jne 0x403a14
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x11c]
push eax
call esi
test eax, eax
je 0x403a41
cmp byte [ebp - 0x11b], 0x3a
jne 0x403a41
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x11c]
push eax
push 3
jne 0x403a90
call edi
test eax, eax
je 0x403a71
cmp byte [ebp - 0x11b], 0x3a
jne 0x403a71
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c4]
mov byte [ebp - 0x4c4], 0x42
push eax
mov byte [ebp - 0x4c3], 0x3a
mov byte [ebp - 0x4c2], bl
call esi
jmp 0x403aad
call edi
test eax, eax
je 0x403aad
cmp byte [ebp - 0x11b], 0x3a
jne 0x403aad
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x264]
push eax
call esi
test eax, eax
je 0x403adf
cmp byte [ebp - 0x263], 0x3a
jne 0x403adf
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x264]
push eax
push 3
jne 0x403b2e
call edi
test eax, eax
je 0x403b0f
cmp byte [ebp - 0x263], 0x3a
jne 0x403b0f
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x61c]
mov byte [ebp - 0x61c], 0x42
push eax
mov byte [ebp - 0x61b], 0x3a
mov byte [ebp - 0x61a], bl
call esi
jmp 0x403b4b
call edi
test eax, eax
je 0x403b4b
cmp byte [ebp - 0x263], 0x3a
jne 0x403b4b
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x124]
push eax
call esi
test eax, eax
je 0x403b7d
cmp byte [ebp - 0x123], 0x3a
jne 0x403b7d
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x124]
push eax
push 3
jne 0x403bcc
call edi
test eax, eax
je 0x403bad
cmp byte [ebp - 0x123], 0x3a
jne 0x403bad
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4cc]
mov byte [ebp - 0x4cc], 0x42
push eax
mov byte [ebp - 0x4cb], 0x3a
mov byte [ebp - 0x4ca], bl
call esi
jmp 0x403be9
call edi
test eax, eax
je 0x403be9
cmp byte [ebp - 0x123], 0x3a
jne 0x403be9
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x394]
push eax
call esi
test eax, eax
je 0x403c20
cmp byte [ebp - 0x393], 0x3a
jne 0x403c20
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x394]
push eax
push 3
jne 0x403c6f
call edi
test eax, eax
je 0x403c50
cmp byte [ebp - 0x393], 0x3a
jne 0x403c50
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x71c]
mov byte [ebp - 0x71c], 0x42
push eax
mov byte [ebp - 0x71b], 0x3a
mov byte [ebp - 0x71a], bl
call esi
jmp 0x403c8c
call edi
test eax, eax
je 0x403c8c
cmp byte [ebp - 0x393], 0x3a
jne 0x403c8c
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x12c]
push eax
call esi
test eax, eax
je 0x403cbe
cmp byte [ebp - 0x12b], 0x3a
jne 0x403cbe
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x12c]
push eax
push 3
jne 0x403d0d
call edi
test eax, eax
je 0x403cee
cmp byte [ebp - 0x12b], 0x3a
jne 0x403cee
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d4]
mov byte [ebp - 0x4d4], 0x42
push eax
mov byte [ebp - 0x4d3], 0x3a
mov byte [ebp - 0x4d2], bl
call esi
jmp 0x403d2a
call edi
test eax, eax
je 0x403d2a
cmp byte [ebp - 0x12b], 0x3a
jne 0x403d2a
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x26c]
push eax
call esi
test eax, eax
je 0x403d55
cmp byte [ebp - 0x26b], 0x3a
jne 0x403d55
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x26c]
push eax
push 3
jne 0x403da4
call edi
test eax, eax
je 0x403d85
cmp byte [ebp - 0x26b], 0x3a
jne 0x403d85
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x624]
mov byte [ebp - 0x624], 0x42
push eax
mov byte [ebp - 0x623], 0x3a
mov byte [ebp - 0x622], bl
call esi
jmp 0x403dc1
call edi
test eax, eax
je 0x403dc1
cmp byte [ebp - 0x26b], 0x3a
jne 0x403dc1
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x134]
push eax
call esi
test eax, eax
je 0x403df3
cmp byte [ebp - 0x133], 0x3a
jne 0x403df3
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x134]
push eax
push 3
jne 0x403e42
call edi
test eax, eax
je 0x403e23
cmp byte [ebp - 0x133], 0x3a
jne 0x403e23
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x4dc], 0x42
push eax
mov byte [ebp - 0x4db], 0x3a
mov byte [ebp - 0x4da], bl
call esi
jmp 0x403e5f
call edi
test eax, eax
je 0x403e5f
cmp byte [ebp - 0x133], 0x3a
jne 0x403e5f
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x30c]
push eax
call esi
test eax, eax
je 0x403e92
cmp byte [ebp - 0x30b], 0x3a
jne 0x403e92
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30c]
push eax
push 3
jne 0x403ee1
call edi
test eax, eax
je 0x403ec2
cmp byte [ebp - 0x30b], 0x3a
jne 0x403ec2
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6cc]
mov byte [ebp - 0x6cc], 0x42
push eax
mov byte [ebp - 0x6cb], 0x3a
mov byte [ebp - 0x6ca], bl
call esi
jmp 0x403efe
call edi
test eax, eax
je 0x403efe
cmp byte [ebp - 0x30b], 0x3a
jne 0x403efe
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
je 0x403f32
cmp byte [ebp - 0x13b], 0x3a
jne 0x403f32
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x13c]
push eax
push 3
jne 0x403f81
call edi
test eax, eax
je 0x403f62
cmp byte [ebp - 0x13b], 0x3a
jne 0x403f62
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e4]
mov byte [ebp - 0x4e4], 0x42
push eax
mov byte [ebp - 0x4e3], 0x3a
mov byte [ebp - 0x4e2], bl
call esi
jmp 0x403f9e
call edi
test eax, eax
je 0x403f9e
cmp byte [ebp - 0x13b], 0x3a
jne 0x403f9e
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push dword [ebp + 0x14]
lea ecx, [ebp - 0x758]
push dword [ebp + 0x10]
call fcn.0041d698
lea ecx, [ebp - 0x75c]
call fcn.00413269
lea ecx, [ebp - 0x75c]
call fcn.00414bf2
test eax, eax
jne 0x405066
lea ecx, [ebp - 0x76c]
call fcn.0043b14d
test eax, eax
jne 0x405066
lea eax, [ebp + 0x14]
test eax, eax
jne 0x40503a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x274]
push eax
call esi
test eax, eax
je 0x404035
cmp byte [ebp - 0x273], 0x3a
jne 0x404035
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x274]
push eax
push 3
jne 0x404084
call edi
test eax, eax
je 0x404065
cmp byte [ebp - 0x273], 0x3a
jne 0x404065
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x62c]
mov byte [ebp - 0x62c], 0x42
push eax
mov byte [ebp - 0x62b], 0x3a
mov byte [ebp - 0x62a], bl
call esi
jmp 0x4040a1
call edi
test eax, eax
je 0x4040a1
cmp byte [ebp - 0x273], 0x3a
jne 0x4040a1
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x144]
push eax
call esi
test eax, eax
je 0x4040c5
cmp byte [ebp - 0x143], 0x3a
jne 0x4040c5
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x144]
push eax
push 3
jne 0x404114
call edi
test eax, eax
je 0x4040f5
cmp byte [ebp - 0x143], 0x3a
jne 0x4040f5
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4ec], 0x42
push eax
mov byte [ebp - 0x4eb], 0x3a
mov byte [ebp - 0x4ea], bl
call esi
jmp 0x404131
call edi
test eax, eax
je 0x404131
cmp byte [ebp - 0x143], 0x3a
jne 0x404131
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x35c]
push eax
call esi
test eax, eax
je 0x40416d
cmp byte [ebp - 0x35b], 0x3a
jne 0x40416d
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x35c]
push eax
push 3
jne 0x4041bc
call edi
test eax, eax
je 0x40419d
cmp byte [ebp - 0x35b], 0x3a
jne 0x40419d
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x738]
mov byte [ebp - 0x738], 0x42
push eax
mov byte [ebp - 0x737], 0x3a
mov byte [ebp - 0x736], bl
call esi
jmp 0x4041d9
call edi
test eax, eax
je 0x4041d9
cmp byte [ebp - 0x35b], 0x3a
jne 0x4041d9
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x14c]
push eax
call esi
test eax, eax
je 0x404204
cmp byte [ebp - 0x14b], 0x3a
jne 0x404204
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14c]
push eax
push 3
jne 0x404253
call edi
test eax, eax
je 0x404234
cmp byte [ebp - 0x14b], 0x3a
jne 0x404234
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f4]
mov byte [ebp - 0x4f4], 0x42
push eax
mov byte [ebp - 0x4f3], 0x3a
mov byte [ebp - 0x4f2], bl
call esi
jmp 0x404270
call edi
test eax, eax
je 0x404270
cmp byte [ebp - 0x14b], 0x3a
jne 0x404270
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x27c]
push eax
call esi
test eax, eax
je 0x40429a
cmp byte [ebp - 0x27b], 0x3a
jne 0x40429a
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x27c]
push eax
push 3
jne 0x4042e9
call edi
test eax, eax
je 0x4042ca
cmp byte [ebp - 0x27b], 0x3a
jne 0x4042ca
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x634]
mov byte [ebp - 0x634], 0x42
push eax
mov byte [ebp - 0x633], 0x3a
mov byte [ebp - 0x632], bl
call esi
jmp 0x404306
call edi
test eax, eax
je 0x404306
cmp byte [ebp - 0x27b], 0x3a
jne 0x404306
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x154]
push eax
call esi
test eax, eax
je 0x40434b
cmp byte [ebp - 0x153], 0x3a
jne 0x40434b
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x154]
push eax
push 3
jne 0x40439a
call edi
test eax, eax
je 0x40437b
cmp byte [ebp - 0x153], 0x3a
jne 0x40437b
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4fc]
mov byte [ebp - 0x4fc], 0x42
push eax
mov byte [ebp - 0x4fb], 0x3a
mov byte [ebp - 0x4fa], bl
call esi
jmp 0x4043b7
call edi
test eax, eax
je 0x4043b7
cmp byte [ebp - 0x153], 0x3a
jne 0x4043b7
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x314]
push eax
call esi
test eax, eax
je 0x4043eb
cmp byte [ebp - 0x313], 0x3a
jne 0x4043eb
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x314]
push eax
push 3
jne 0x40443a
call edi
test eax, eax
je 0x40441b
cmp byte [ebp - 0x313], 0x3a
jne 0x40441b
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d4]
mov byte [ebp - 0x6d4], 0x42
push eax
mov byte [ebp - 0x6d3], 0x3a
mov byte [ebp - 0x6d2], bl
call esi
jmp 0x404457
call edi
test eax, eax
je 0x404457
cmp byte [ebp - 0x313], 0x3a
jne 0x404457
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x15c]
push eax
call esi
test eax, eax
je 0x40448a
cmp byte [ebp - 0x15b], 0x3a
jne 0x40448a
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x15c]
push eax
push 3
jne 0x4044d9
call edi
test eax, eax
je 0x4044ba
cmp byte [ebp - 0x15b], 0x3a
jne 0x4044ba
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x504]
mov byte [ebp - 0x504], 0x42
push eax
mov byte [ebp - 0x503], 0x3a
mov byte [ebp - 0x502], bl
call esi
jmp 0x4044f6
call edi
test eax, eax
je 0x4044f6
cmp byte [ebp - 0x15b], 0x3a
jne 0x4044f6
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x284]
push eax
call esi
test eax, eax
je 0x40452c
cmp byte [ebp - 0x283], 0x3a
jne 0x40452c
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x284]
push eax
push 3
jne 0x40457b
call edi
test eax, eax
je 0x40455c
cmp byte [ebp - 0x283], 0x3a
jne 0x40455c
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x63c]
mov byte [ebp - 0x63c], 0x42
push eax
mov byte [ebp - 0x63b], 0x3a
mov byte [ebp - 0x63a], bl
call esi
jmp 0x404598
call edi
test eax, eax
je 0x404598
cmp byte [ebp - 0x283], 0x3a
jne 0x404598
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x164]
push eax
call esi
test eax, eax
je 0x4045d4
cmp byte [ebp - 0x163], 0x3a
jne 0x4045d4
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x164]
push eax
push 3
jne 0x404623
call edi
test eax, eax
je 0x404604
cmp byte [ebp - 0x163], 0x3a
jne 0x404604
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x50c]
mov byte [ebp - 0x50c], 0x42
push eax
mov byte [ebp - 0x50b], 0x3a
mov byte [ebp - 0x50a], bl
call esi
jmp 0x404640
call edi
test eax, eax
je 0x404640
cmp byte [ebp - 0x163], 0x3a
jne 0x404640
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x384]
push eax
call esi
test eax, eax
je 0x404678
cmp byte [ebp - 0x383], 0x3a
jne 0x404678
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x384]
push eax
push 3
jne 0x4046c7
call edi
test eax, eax
je 0x4046a8
cmp byte [ebp - 0x383], 0x3a
jne 0x4046a8
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x724]
mov byte [ebp - 0x724], 0x42
push eax
mov byte [ebp - 0x723], 0x3a
mov byte [ebp - 0x722], bl
call esi
jmp 0x4046e4
call edi
test eax, eax
je 0x4046e4
cmp byte [ebp - 0x383], 0x3a
jne 0x4046e4
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x16c]
push eax
call esi
test eax, eax
je 0x40470f
cmp byte [ebp - 0x16b], 0x3a
jne 0x40470f
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x16c]
push eax
push 3
jne 0x40475e
call edi
test eax, eax
je 0x40473f
cmp byte [ebp - 0x16b], 0x3a
jne 0x40473f
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x514]
mov byte [ebp - 0x514], 0x42
push eax
mov byte [ebp - 0x513], 0x3a
mov byte [ebp - 0x512], bl
call esi
jmp 0x40477b
call edi
test eax, eax
je 0x40477b
cmp byte [ebp - 0x16b], 0x3a
jne 0x40477b
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x28c]
push eax
call esi
test eax, eax
je 0x4047a6
cmp byte [ebp - 0x28b], 0x3a
jne 0x4047a6
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28c]
push eax
push 3
jne 0x4047f5
call edi
test eax, eax
je 0x4047d6
cmp byte [ebp - 0x28b], 0x3a
jne 0x4047d6
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x644]
mov byte [ebp - 0x644], 0x42
push eax
mov byte [ebp - 0x643], 0x3a
mov byte [ebp - 0x642], bl
call esi
jmp 0x404812
call edi
test eax, eax
je 0x404812
cmp byte [ebp - 0x28b], 0x3a
jne 0x404812
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x174]
push eax
call esi
test eax, eax
je 0x404845
cmp byte [ebp - 0x173], 0x3a
jne 0x404845
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x174]
push eax
push 3
jne 0x404894
call edi
test eax, eax
je 0x404875
cmp byte [ebp - 0x173], 0x3a
jne 0x404875
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x51c], 0x42
push eax
mov byte [ebp - 0x51b], 0x3a
mov byte [ebp - 0x51a], bl
call esi
jmp 0x4048b1
call edi
test eax, eax
je 0x4048b1
cmp byte [ebp - 0x173], 0x3a
jne 0x4048b1
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x31c]
push eax
call esi
test eax, eax
je 0x4048e5
cmp byte [ebp - 0x31b], 0x3a
jne 0x4048e5
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x31c]
push eax
push 3
jne 0x404934
call edi
test eax, eax
je 0x404915
cmp byte [ebp - 0x31b], 0x3a
jne 0x404915
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6dc]
mov byte [ebp - 0x6dc], 0x42
push eax
mov byte [ebp - 0x6db], 0x3a
mov byte [ebp - 0x6da], bl
call esi
jmp 0x404951
call edi
test eax, eax
je 0x404951
cmp byte [ebp - 0x31b], 0x3a
jne 0x404951
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x17c]
push eax
call esi
test eax, eax
je 0x404985
cmp byte [ebp - 0x17b], 0x3a
jne 0x404985
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x17c]
push eax
push 3
jne 0x4049d4
call edi
test eax, eax
je 0x4049b5
cmp byte [ebp - 0x17b], 0x3a
jne 0x4049b5
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x524]
mov byte [ebp - 0x524], 0x42
push eax
mov byte [ebp - 0x523], 0x3a
mov byte [ebp - 0x522], bl
call esi
jmp 0x4049f1
call edi
test eax, eax
je 0x4049f1
cmp byte [ebp - 0x17b], 0x3a
jne 0x4049f1
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x294]
push eax
call esi
test eax, eax
je 0x404a24
cmp byte [ebp - 0x293], 0x3a
jne 0x404a24
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x294]
push eax
push 3
jne 0x404a73
call edi
test eax, eax
je 0x404a54
cmp byte [ebp - 0x293], 0x3a
jne 0x404a54
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x64c]
mov byte [ebp - 0x64c], 0x42
push eax
mov byte [ebp - 0x64b], 0x3a
mov byte [ebp - 0x64a], bl
call esi
jmp 0x404a90
call edi
test eax, eax
je 0x404a90
cmp byte [ebp - 0x293], 0x3a
jne 0x404a90
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x184]
push eax
call esi
test eax, eax
je 0x404abd
cmp byte [ebp - 0x183], 0x3a
jne 0x404abd
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x184]
push eax
push 3
jne 0x404b0c
call edi
test eax, eax
je 0x404aed
cmp byte [ebp - 0x183], 0x3a
jne 0x404aed
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x52c]
mov byte [ebp - 0x52c], 0x42
push eax
mov byte [ebp - 0x52b], 0x3a
mov byte [ebp - 0x52a], bl
call esi
jmp 0x404b29
call edi
test eax, eax
je 0x404b29
cmp byte [ebp - 0x183], 0x3a
jne 0x404b29
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x364]
push eax
call esi
test eax, eax
je 0x404b5b
cmp byte [ebp - 0x363], 0x3a
jne 0x404b5b
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x364]
push eax
push 3
jne 0x404baa
call edi
test eax, eax
je 0x404b8b
cmp byte [ebp - 0x363], 0x3a
jne 0x404b8b
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x740]
mov byte [ebp - 0x740], 0x42
push eax
mov byte [ebp - 0x73f], 0x3a
mov byte [ebp - 0x73e], bl
call esi
jmp 0x404bc7
call edi
test eax, eax
je 0x404bc7
cmp byte [ebp - 0x363], 0x3a
jne 0x404bc7
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x18c]
push eax
call esi
test eax, eax
je 0x404bf9
cmp byte [ebp - 0x18b], 0x3a
jne 0x404bf9
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18c]
push eax
push 3
jne 0x404c48
call edi
test eax, eax
je 0x404c29
cmp byte [ebp - 0x18b], 0x3a
jne 0x404c29
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x534]
mov byte [ebp - 0x534], 0x42
push eax
mov byte [ebp - 0x533], 0x3a
mov byte [ebp - 0x532], bl
call esi
jmp 0x404c65
call edi
test eax, eax
je 0x404c65
cmp byte [ebp - 0x18b], 0x3a
jne 0x404c65
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x29c]
push eax
call esi
test eax, eax
je 0x404c9c
cmp byte [ebp - 0x29b], 0x3a
jne 0x404c9c
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x29c]
push eax
push 3
jne 0x404ceb
call edi
test eax, eax
je 0x404ccc
cmp byte [ebp - 0x29b], 0x3a
jne 0x404ccc
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x654]
mov byte [ebp - 0x654], 0x42
push eax
mov byte [ebp - 0x653], 0x3a
mov byte [ebp - 0x652], bl
call esi
jmp 0x404d08
call edi
test eax, eax
je 0x404d08
cmp byte [ebp - 0x29b], 0x3a
jne 0x404d08
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x194]
push eax
call esi
test eax, eax
je 0x404d3a
cmp byte [ebp - 0x193], 0x3a
jne 0x404d3a
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x194]
push eax
push 3
jne 0x404d89
call edi
test eax, eax
je 0x404d6a
cmp byte [ebp - 0x193], 0x3a
jne 0x404d6a
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x53c]
mov byte [ebp - 0x53c], 0x42
push eax
mov byte [ebp - 0x53b], 0x3a
mov byte [ebp - 0x53a], bl
call esi
jmp 0x404da6
call edi
test eax, eax
je 0x404da6
cmp byte [ebp - 0x193], 0x3a
jne 0x404da6
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x324]
push eax
call esi
test eax, eax
je 0x404dd1
cmp byte [ebp - 0x323], 0x3a
jne 0x404dd1
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x324]
push eax
push 3
jne 0x404e20
call edi
test eax, eax
je 0x404e01
cmp byte [ebp - 0x323], 0x3a
jne 0x404e01
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e4]
mov byte [ebp - 0x6e4], 0x42
push eax
mov byte [ebp - 0x6e3], 0x3a
mov byte [ebp - 0x6e2], bl
call esi
jmp 0x404e3d
call edi
test eax, eax
je 0x404e3d
cmp byte [ebp - 0x323], 0x3a
jne 0x404e3d
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x19c]
push eax
call esi
test eax, eax
je 0x404e6f
cmp byte [ebp - 0x19b], 0x3a
jne 0x404e6f
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x19c]
push eax
push 3
jne 0x404ebe
call edi
test eax, eax
je 0x404e9f
cmp byte [ebp - 0x19b], 0x3a
jne 0x404e9f
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x544]
mov byte [ebp - 0x544], 0x42
push eax
mov byte [ebp - 0x543], 0x3a
mov byte [ebp - 0x542], bl
call esi
jmp 0x404edb
call edi
test eax, eax
je 0x404edb
cmp byte [ebp - 0x19b], 0x3a
jne 0x404edb
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x2a4]
push eax
call esi
test eax, eax
je 0x404f0e
cmp byte [ebp - 0x2a3], 0x3a
jne 0x404f0e
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a4]
push eax
push 3
jne 0x404f5d
call edi
test eax, eax
je 0x404f3e
cmp byte [ebp - 0x2a3], 0x3a
jne 0x404f3e
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x65c]
mov byte [ebp - 0x65c], 0x42
push eax
mov byte [ebp - 0x65b], 0x3a
mov byte [ebp - 0x65a], bl
call esi
jmp 0x404f7a
call edi
test eax, eax
je 0x404f7a
cmp byte [ebp - 0x2a3], 0x3a
jne 0x404f7a
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x1a4]
push eax
call esi
test eax, eax
je 0x404fae
cmp byte [ebp - 0x1a3], 0x3a
jne 0x404fae
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a4]
push eax
push 3
jne 0x404ffd
call edi
test eax, eax
je 0x404fde
cmp byte [ebp - 0x1a3], 0x3a
jne 0x404fde
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x54c]
mov byte [ebp - 0x54c], 0x42
push eax
mov byte [ebp - 0x54b], 0x3a
mov byte [ebp - 0x54a], bl
call esi
jmp 0x40501a
call edi
test eax, eax
je 0x40501a
cmp byte [ebp - 0x1a3], 0x3a
jne 0x40501a
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x7ac]
call fcn.0042bd9a
lea ecx, [ebp - 0x7ac]
call fcn.0042d849
lea ecx, [ebp - 0x7ac]
call fcn.0042e515
lea ecx, [ebp - 0x7ac]
call fcn.0042cb06
lea ecx, [ebp - 0x75c]
jmp 0x409082
lea eax, [ebp + 0x14]
test eax, eax
jne 0x405f5b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x3a4]
push eax
call esi
test eax, eax
je 0x4050a6
cmp byte [ebp - 0x3a3], 0x3a
jne 0x4050a6
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a4]
push eax
push 3
jne 0x4050f5
call edi
test eax, eax
je 0x4050d6
cmp byte [ebp - 0x3a3], 0x3a
jne 0x4050d6
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x72c]
mov byte [ebp - 0x72c], 0x42
push eax
mov byte [ebp - 0x72b], 0x3a
mov byte [ebp - 0x72a], bl
call esi
jmp 0x405112
call edi
test eax, eax
je 0x405112
cmp byte [ebp - 0x3a3], 0x3a
jne 0x405112
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x1ac]
push eax
call esi
test eax, eax
je 0x405136
cmp byte [ebp - 0x1ab], 0x3a
jne 0x405136
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ac]
push eax
push 3
jne 0x405185
call edi
test eax, eax
je 0x405166
cmp byte [ebp - 0x1ab], 0x3a
jne 0x405166
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x554]
mov byte [ebp - 0x554], 0x42
push eax
mov byte [ebp - 0x553], 0x3a
mov byte [ebp - 0x552], bl
call esi
jmp 0x4051a2
call edi
test eax, eax
je 0x4051a2
cmp byte [ebp - 0x1ab], 0x3a
jne 0x4051a2
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x2ac]
push eax
call esi
test eax, eax
je 0x4051de
cmp byte [ebp - 0x2ab], 0x3a
jne 0x4051de
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ac]
push eax
push 3
jne 0x40522d
call edi
test eax, eax
je 0x40520e
cmp byte [ebp - 0x2ab], 0x3a
jne 0x40520e
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x664]
mov byte [ebp - 0x664], 0x42
push eax
mov byte [ebp - 0x663], 0x3a
mov byte [ebp - 0x662], bl
call esi
jmp 0x40524a
call edi
test eax, eax
je 0x40524a
cmp byte [ebp - 0x2ab], 0x3a
jne 0x40524a
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x1b4]
push eax
call esi
test eax, eax
je 0x405275
cmp byte [ebp - 0x1b3], 0x3a
jne 0x405275
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b4]
push eax
push 3
jne 0x4052c4
call edi
test eax, eax
je 0x4052a5
cmp byte [ebp - 0x1b3], 0x3a
jne 0x4052a5
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x55c]
mov byte [ebp - 0x55c], 0x42
push eax
mov byte [ebp - 0x55b], 0x3a
mov byte [ebp - 0x55a], bl
call esi
jmp 0x4052e1
call edi
test eax, eax
je 0x4052e1
cmp byte [ebp - 0x1b3], 0x3a
jne 0x4052e1
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x32c]
push eax
call esi
test eax, eax
je 0x40530b
cmp byte [ebp - 0x32b], 0x3a
jne 0x40530b
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x32c]
push eax
push 3
jne 0x40535a
call edi
test eax, eax
je 0x40533b
cmp byte [ebp - 0x32b], 0x3a
jne 0x40533b
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6ec]
mov byte [ebp - 0x6ec], 0x42
push eax
mov byte [ebp - 0x6eb], 0x3a
mov byte [ebp - 0x6ea], bl
call esi
jmp 0x405377
call edi
test eax, eax
je 0x405377
cmp byte [ebp - 0x32b], 0x3a
jne 0x405377
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x1bc]
push eax
call esi
test eax, eax
je 0x4053bc
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4053bc
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1bc]
push eax
push 3
jne 0x40540b
call edi
test eax, eax
je 0x4053ec
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4053ec
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x564]
mov byte [ebp - 0x564], 0x42
push eax
mov byte [ebp - 0x563], 0x3a
mov byte [ebp - 0x562], bl
call esi
jmp 0x405428
call edi
test eax, eax
je 0x405428
cmp byte [ebp - 0x1bb], 0x3a
jne 0x405428
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x2b4]
push eax
call esi
test eax, eax
je 0x40545c
cmp byte [ebp - 0x2b3], 0x3a
jne 0x40545c
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b4]
push eax
push 3
jne 0x4054ab
call edi
test eax, eax
je 0x40548c
cmp byte [ebp - 0x2b3], 0x3a
jne 0x40548c
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x66c]
mov byte [ebp - 0x66c], 0x42
push eax
mov byte [ebp - 0x66b], 0x3a
mov byte [ebp - 0x66a], bl
call esi
jmp 0x4054c8
call edi
test eax, eax
je 0x4054c8
cmp byte [ebp - 0x2b3], 0x3a
jne 0x4054c8
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x1c4]
push eax
call esi
test eax, eax
je 0x4054fb
cmp byte [ebp - 0x1c3], 0x3a
jne 0x4054fb
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c4]
push eax
push 3
jne 0x40554a
call edi
test eax, eax
je 0x40552b
cmp byte [ebp - 0x1c3], 0x3a
jne 0x40552b
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x56c]
mov byte [ebp - 0x56c], 0x42
push eax
mov byte [ebp - 0x56b], 0x3a
mov byte [ebp - 0x56a], bl
call esi
jmp 0x405567
call edi
test eax, eax
je 0x405567
cmp byte [ebp - 0x1c3], 0x3a
jne 0x405567
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x36c]
push eax
call esi
test eax, eax
je 0x40559d
cmp byte [ebp - 0x36b], 0x3a
jne 0x40559d
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x36c]
push eax
push 3
jne 0x4055ec
call edi
test eax, eax
je 0x4055cd
cmp byte [ebp - 0x36b], 0x3a
jne 0x4055cd
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x748]
mov byte [ebp - 0x748], 0x42
push eax
mov byte [ebp - 0x747], 0x3a
mov byte [ebp - 0x746], bl
call esi
jmp 0x405609
call edi
test eax, eax
je 0x405609
cmp byte [ebp - 0x36b], 0x3a
jne 0x405609
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x1cc]
push eax
call esi
test eax, eax
je 0x405645
cmp byte [ebp - 0x1cb], 0x3a
jne 0x405645
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1cc]
push eax
push 3
jne 0x405694
call edi
test eax, eax
je 0x405675
cmp byte [ebp - 0x1cb], 0x3a
jne 0x405675
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x574]
mov byte [ebp - 0x574], 0x42
push eax
mov byte [ebp - 0x573], 0x3a
mov byte [ebp - 0x572], bl
call esi
jmp 0x4056b1
call edi
test eax, eax
je 0x4056b1
cmp byte [ebp - 0x1cb], 0x3a
jne 0x4056b1
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x2bc]
push eax
call esi
test eax, eax
je 0x4056e9
cmp byte [ebp - 0x2bb], 0x3a
jne 0x4056e9
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2bc]
push eax
push 3
jne 0x405738
call edi
test eax, eax
je 0x405719
cmp byte [ebp - 0x2bb], 0x3a
jne 0x405719
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x674]
mov byte [ebp - 0x674], 0x42
push eax
mov byte [ebp - 0x673], 0x3a
mov byte [ebp - 0x672], bl
call esi
jmp 0x405755
call edi
test eax, eax
je 0x405755
cmp byte [ebp - 0x2bb], 0x3a
jne 0x405755
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x1d4]
push eax
call esi
test eax, eax
je 0x405780
cmp byte [ebp - 0x1d3], 0x3a
jne 0x405780
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d4]
push eax
push 3
jne 0x4057cf
call edi
test eax, eax
je 0x4057b0
cmp byte [ebp - 0x1d3], 0x3a
jne 0x4057b0
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x57c]
mov byte [ebp - 0x57c], 0x42
push eax
mov byte [ebp - 0x57b], 0x3a
mov byte [ebp - 0x57a], bl
call esi
jmp 0x4057ec
call edi
test eax, eax
je 0x4057ec
cmp byte [ebp - 0x1d3], 0x3a
jne 0x4057ec
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 4]
push eax
call esi
test eax, eax
je 0x40580e
cmp byte [ebp - 3], 0x3a
jne 0x40580e
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x405854
call edi
test eax, eax
je 0x405835
cmp byte [ebp - 3], 0x3a
jne 0x405835
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f4]
mov byte [ebp - 0x6f4], 0x42
push eax
mov byte [ebp - 0x6f3], 0x3a
mov byte [ebp - 0x6f2], bl
call esi
jmp 0x40586b
call edi
test eax, eax
je 0x40586b
cmp byte [ebp - 3], 0x3a
jne 0x40586b
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 8]
push eax
call esi
test eax, eax
je 0x405895
cmp byte [ebp - 7], 0x3a
jne 0x405895
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 8]
push eax
push 3
jne 0x4058db
call edi
test eax, eax
je 0x4058bc
cmp byte [ebp - 7], 0x3a
jne 0x4058bc
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x584]
mov byte [ebp - 0x584], 0x42
push eax
mov byte [ebp - 0x583], 0x3a
mov byte [ebp - 0x582], bl
call esi
jmp 0x4058f2
call edi
test eax, eax
je 0x4058f2
cmp byte [ebp - 7], 0x3a
jne 0x4058f2
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x40591d
cmp byte [ebp - 0xf], 0x3a
jne 0x40591d
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x405963
call edi
test eax, eax
je 0x405944
cmp byte [ebp - 0xf], 0x3a
jne 0x405944
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x67c]
mov byte [ebp - 0x67c], 0x42
push eax
mov byte [ebp - 0x67b], 0x3a
mov byte [ebp - 0x67a], bl
call esi
jmp 0x40597a
call edi
test eax, eax
je 0x40597a
cmp byte [ebp - 0xf], 0x3a
jne 0x40597a
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x18]
push eax
call esi
test eax, eax
je 0x4059a5
cmp byte [ebp - 0x17], 0x3a
jne 0x4059a5
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18]
push eax
push 3
jne 0x4059eb
call edi
test eax, eax
je 0x4059cc
cmp byte [ebp - 0x17], 0x3a
jne 0x4059cc
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x58c]
mov byte [ebp - 0x58c], 0x42
push eax
mov byte [ebp - 0x58b], 0x3a
mov byte [ebp - 0x58a], bl
call esi
jmp 0x405a02
call edi
test eax, eax
je 0x405a02
cmp byte [ebp - 0x17], 0x3a
jne 0x405a02
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x20]
push eax
call esi
test eax, eax
je 0x405a2c
cmp byte [ebp - 0x1f], 0x3a
jne 0x405a2c
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20]
push eax
push 3
jne 0x405a72
call edi
test eax, eax
je 0x405a53
cmp byte [ebp - 0x1f], 0x3a
jne 0x405a53
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x734]
mov byte [ebp - 0x734], 0x42
push eax
mov byte [ebp - 0x733], 0x3a
mov byte [ebp - 0x732], bl
call esi
jmp 0x405a89
call edi
test eax, eax
je 0x405a89
cmp byte [ebp - 0x1f], 0x3a
jne 0x405a89
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x405aad
cmp byte [ebp - 0x27], 0x3a
jne 0x405aad
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28]
push eax
push 3
jne 0x405af3
call edi
test eax, eax
je 0x405ad4
cmp byte [ebp - 0x27], 0x3a
jne 0x405ad4
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b0]
mov byte [ebp - 0x3b0], 0x42
push eax
mov byte [ebp - 0x3af], 0x3a
mov byte [ebp - 0x3ae], bl
call esi
jmp 0x405b0a
call edi
test eax, eax
je 0x405b0a
cmp byte [ebp - 0x27], 0x3a
jne 0x405b0a
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x30]
push eax
call esi
test eax, eax
je 0x405b33
cmp byte [ebp - 0x2f], 0x3a
jne 0x405b33
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30]
push eax
push 3
jne 0x405b79
call edi
test eax, eax
je 0x405b5a
cmp byte [ebp - 0x2f], 0x3a
jne 0x405b5a
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b8]
mov byte [ebp - 0x3b8], 0x42
push eax
mov byte [ebp - 0x3b7], 0x3a
mov byte [ebp - 0x3b6], bl
call esi
jmp 0x405b90
call edi
test eax, eax
je 0x405b90
cmp byte [ebp - 0x2f], 0x3a
jne 0x405b90
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x38]
push eax
call esi
test eax, eax
je 0x405bb9
cmp byte [ebp - 0x37], 0x3a
jne 0x405bb9
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38]
push eax
push 3
jne 0x405bff
call edi
test eax, eax
je 0x405be0
cmp byte [ebp - 0x37], 0x3a
jne 0x405be0
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c0]
mov byte [ebp - 0x3c0], 0x42
push eax
mov byte [ebp - 0x3bf], 0x3a
mov byte [ebp - 0x3be], bl
call esi
jmp 0x405c16
call edi
test eax, eax
je 0x405c16
cmp byte [ebp - 0x37], 0x3a
jne 0x405c16
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x40]
push eax
call esi
test eax, eax
je 0x405c44
cmp byte [ebp - 0x3f], 0x3a
jne 0x405c44
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x40]
push eax
push 3
jne 0x405c8a
call edi
test eax, eax
je 0x405c6b
cmp byte [ebp - 0x3f], 0x3a
jne 0x405c6b
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c8]
mov byte [ebp - 0x3c8], 0x42
push eax
mov byte [ebp - 0x3c7], 0x3a
mov byte [ebp - 0x3c6], bl
call esi
jmp 0x405ca1
call edi
test eax, eax
je 0x405ca1
cmp byte [ebp - 0x3f], 0x3a
jne 0x405ca1
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x48]
push eax
call esi
test eax, eax
je 0x405cca
cmp byte [ebp - 0x47], 0x3a
jne 0x405cca
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x48]
push eax
push 3
jne 0x405d10
call edi
test eax, eax
je 0x405cf1
cmp byte [ebp - 0x47], 0x3a
jne 0x405cf1
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d0]
mov byte [ebp - 0x3d0], 0x42
push eax
mov byte [ebp - 0x3cf], 0x3a
mov byte [ebp - 0x3ce], bl
call esi
jmp 0x405d27
call edi
test eax, eax
je 0x405d27
cmp byte [ebp - 0x47], 0x3a
jne 0x405d27
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x50]
push eax
call esi
test eax, eax
je 0x405d49
cmp byte [ebp - 0x4f], 0x3a
jne 0x405d49
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x50]
push eax
push 3
jne 0x405d8f
call edi
test eax, eax
je 0x405d70
cmp byte [ebp - 0x4f], 0x3a
jne 0x405d70
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d8]
mov byte [ebp - 0x3d8], 0x42
push eax
mov byte [ebp - 0x3d7], 0x3a
mov byte [ebp - 0x3d6], bl
call esi
jmp 0x405da6
call edi
test eax, eax
je 0x405da6
cmp byte [ebp - 0x4f], 0x3a
jne 0x405da6
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x58]
push eax
call esi
test eax, eax
je 0x405dcf
cmp byte [ebp - 0x57], 0x3a
jne 0x405dcf
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x58]
push eax
push 3
jne 0x405e15
call edi
test eax, eax
je 0x405df6
cmp byte [ebp - 0x57], 0x3a
jne 0x405df6
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e0]
mov byte [ebp - 0x3e0], 0x42
push eax
mov byte [ebp - 0x3df], 0x3a
mov byte [ebp - 0x3de], bl
call esi
jmp 0x405e2c
call edi
test eax, eax
je 0x405e2c
cmp byte [ebp - 0x57], 0x3a
jne 0x405e2c
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x60]
push eax
call esi
test eax, eax
je 0x405e56
cmp byte [ebp - 0x5f], 0x3a
jne 0x405e56
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x60]
push eax
push 3
jne 0x405e9c
call edi
test eax, eax
je 0x405e7d
cmp byte [ebp - 0x5f], 0x3a
jne 0x405e7d
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e8]
mov byte [ebp - 0x3e8], 0x42
push eax
mov byte [ebp - 0x3e7], 0x3a
mov byte [ebp - 0x3e6], bl
call esi
jmp 0x405eb3
call edi
test eax, eax
je 0x405eb3
cmp byte [ebp - 0x5f], 0x3a
jne 0x405eb3
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x68]
push eax
call esi
test eax, eax
je 0x405ede
cmp byte [ebp - 0x67], 0x3a
jne 0x405ede
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x68]
push eax
push 3
jne 0x405f24
call edi
test eax, eax
je 0x405f05
cmp byte [ebp - 0x67], 0x3a
jne 0x405f05
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f0]
mov byte [ebp - 0x3f0], 0x42
push eax
mov byte [ebp - 0x3ef], 0x3a
mov byte [ebp - 0x3ee], bl
call esi
jmp 0x405f3b
call edi
test eax, eax
je 0x405f3b
cmp byte [ebp - 0x67], 0x3a
jne 0x405f3b
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x754]
call fcn.00413269
lea ecx, [ebp - 0x754]
call fcn.00414bf2
test eax, eax
jne 0x406faa
lea ecx, [ebp - 0x76c]
call fcn.0043b14d
test eax, eax
jne 0x406faa
lea eax, [ebp + 0x14]
test eax, eax
jne 0x406f7e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x70]
push eax
call esi
test eax, eax
je 0x405fb8
cmp byte [ebp - 0x6f], 0x3a
jne 0x405fb8
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x70]
push eax
push 3
jne 0x405ffe
call edi
test eax, eax
je 0x405fdf
cmp byte [ebp - 0x6f], 0x3a
jne 0x405fdf
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f8]
mov byte [ebp - 0x3f8], 0x42
push eax
mov byte [ebp - 0x3f7], 0x3a
mov byte [ebp - 0x3f6], bl
call esi
jmp 0x406015
call edi
test eax, eax
je 0x406015
cmp byte [ebp - 0x6f], 0x3a
jne 0x406015
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x78]
push eax
call esi
test eax, eax
je 0x406030
cmp byte [ebp - 0x77], 0x3a
jne 0x406030
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x78]
push eax
push 3
jne 0x406076
call edi
test eax, eax
je 0x406057
cmp byte [ebp - 0x77], 0x3a
jne 0x406057
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x400]
mov byte [ebp - 0x400], 0x42
push eax
mov byte [ebp - 0x3ff], 0x3a
mov byte [ebp - 0x3fe], bl
call esi
jmp 0x40608d
call edi
test eax, eax
je 0x40608d
cmp byte [ebp - 0x77], 0x3a
jne 0x40608d
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x80]
push eax
call esi
test eax, eax
je 0x4060c0
cmp byte [ebp - 0x7f], 0x3a
jne 0x4060c0
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x80]
push eax
push 3
jne 0x406106
call edi
test eax, eax
je 0x4060e7
cmp byte [ebp - 0x7f], 0x3a
jne 0x4060e7
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x408]
mov byte [ebp - 0x408], 0x42
push eax
mov byte [ebp - 0x407], 0x3a
mov byte [ebp - 0x406], bl
call esi
jmp 0x40611d
call edi
test eax, eax
je 0x40611d
cmp byte [ebp - 0x7f], 0x3a
jne 0x40611d
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x88]
push eax
call esi
test eax, eax
je 0x406148
cmp byte [ebp - 0x87], 0x3a
jne 0x406148
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x88]
push eax
push 3
jne 0x406197
call edi
test eax, eax
je 0x406178
cmp byte [ebp - 0x87], 0x3a
jne 0x406178
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x410]
mov byte [ebp - 0x410], 0x42
push eax
mov byte [ebp - 0x40f], 0x3a
mov byte [ebp - 0x40e], bl
call esi
jmp 0x4061b4
call edi
test eax, eax
je 0x4061b4
cmp byte [ebp - 0x87], 0x3a
jne 0x4061b4
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x90]
push eax
call esi
test eax, eax
je 0x4061de
cmp byte [ebp - 0x8f], 0x3a
jne 0x4061de
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x90]
push eax
push 3
jne 0x40622d
call edi
test eax, eax
je 0x40620e
cmp byte [ebp - 0x8f], 0x3a
jne 0x40620e
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x418]
mov byte [ebp - 0x418], 0x42
push eax
mov byte [ebp - 0x417], 0x3a
mov byte [ebp - 0x416], bl
call esi
jmp 0x40624a
call edi
test eax, eax
je 0x40624a
cmp byte [ebp - 0x8f], 0x3a
jne 0x40624a
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x98]
push eax
call esi
test eax, eax
je 0x40628f
cmp byte [ebp - 0x97], 0x3a
jne 0x40628f
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x98]
push eax
push 3
jne 0x4062de
call edi
test eax, eax
je 0x4062bf
cmp byte [ebp - 0x97], 0x3a
jne 0x4062bf
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x420]
mov byte [ebp - 0x420], 0x42
push eax
mov byte [ebp - 0x41f], 0x3a
mov byte [ebp - 0x41e], bl
call esi
jmp 0x4062fb
call edi
test eax, eax
je 0x4062fb
cmp byte [ebp - 0x97], 0x3a
jne 0x4062fb
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0xa0]
push eax
call esi
test eax, eax
je 0x40632f
cmp byte [ebp - 0x9f], 0x3a
jne 0x40632f
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa0]
push eax
push 3
jne 0x40637e
call edi
test eax, eax
je 0x40635f
cmp byte [ebp - 0x9f], 0x3a
jne 0x40635f
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x428]
mov byte [ebp - 0x428], 0x42
push eax
mov byte [ebp - 0x427], 0x3a
mov byte [ebp - 0x426], bl
call esi
jmp 0x40639b
call edi
test eax, eax
je 0x40639b
cmp byte [ebp - 0x9f], 0x3a
jne 0x40639b
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xa8]
push eax
call esi
test eax, eax
je 0x4063ce
cmp byte [ebp - 0xa7], 0x3a
jne 0x4063ce
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa8]
push eax
push 3
jne 0x40641d
call edi
test eax, eax
je 0x4063fe
cmp byte [ebp - 0xa7], 0x3a
jne 0x4063fe
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x430]
mov byte [ebp - 0x430], 0x42
push eax
mov byte [ebp - 0x42f], 0x3a
mov byte [ebp - 0x42e], bl
call esi
jmp 0x40643a
call edi
test eax, eax
je 0x40643a
cmp byte [ebp - 0xa7], 0x3a
jne 0x40643a
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0xb0]
push eax
call esi
test eax, eax
je 0x406470
cmp byte [ebp - 0xaf], 0x3a
jne 0x406470
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb0]
push eax
push 3
jne 0x4064bf
call edi
test eax, eax
je 0x4064a0
cmp byte [ebp - 0xaf], 0x3a
jne 0x4064a0
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x438]
mov byte [ebp - 0x438], 0x42
push eax
mov byte [ebp - 0x437], 0x3a
mov byte [ebp - 0x436], bl
call esi
jmp 0x4064dc
call edi
test eax, eax
je 0x4064dc
cmp byte [ebp - 0xaf], 0x3a
jne 0x4064dc
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xb8]
push eax
call esi
test eax, eax
je 0x406518
cmp byte [ebp - 0xb7], 0x3a
jne 0x406518
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb8]
push eax
push 3
jne 0x406567
call edi
test eax, eax
je 0x406548
cmp byte [ebp - 0xb7], 0x3a
jne 0x406548
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x440]
mov byte [ebp - 0x440], 0x42
push eax
mov byte [ebp - 0x43f], 0x3a
mov byte [ebp - 0x43e], bl
call esi
jmp 0x406584
call edi
test eax, eax
je 0x406584
cmp byte [ebp - 0xb7], 0x3a
jne 0x406584
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0xc0]
push eax
call esi
test eax, eax
je 0x4065bc
cmp byte [ebp - 0xbf], 0x3a
jne 0x4065bc
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc0]
push eax
push 3
jne 0x40660b
call edi
test eax, eax
je 0x4065ec
cmp byte [ebp - 0xbf], 0x3a
jne 0x4065ec
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x448]
mov byte [ebp - 0x448], 0x42
push eax
mov byte [ebp - 0x447], 0x3a
mov byte [ebp - 0x446], bl
call esi
jmp 0x406628
call edi
test eax, eax
je 0x406628
cmp byte [ebp - 0xbf], 0x3a
jne 0x406628
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0xc8]
push eax
call esi
test eax, eax
je 0x406653
cmp byte [ebp - 0xc7], 0x3a
jne 0x406653
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc8]
push eax
push 3
jne 0x4066a2
call edi
test eax, eax
je 0x406683
cmp byte [ebp - 0xc7], 0x3a
jne 0x406683
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x450]
mov byte [ebp - 0x450], 0x42
push eax
mov byte [ebp - 0x44f], 0x3a
mov byte [ebp - 0x44e], bl
call esi
jmp 0x4066bf
call edi
test eax, eax
je 0x4066bf
cmp byte [ebp - 0xc7], 0x3a
jne 0x4066bf
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xd0]
push eax
call esi
test eax, eax
je 0x4066ea
cmp byte [ebp - 0xcf], 0x3a
jne 0x4066ea
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd0]
push eax
push 3
jne 0x406739
call edi
test eax, eax
je 0x40671a
cmp byte [ebp - 0xcf], 0x3a
jne 0x40671a
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x458]
mov byte [ebp - 0x458], 0x42
push eax
mov byte [ebp - 0x457], 0x3a
mov byte [ebp - 0x456], bl
call esi
jmp 0x406756
call edi
test eax, eax
je 0x406756
cmp byte [ebp - 0xcf], 0x3a
jne 0x406756
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0xd8]
push eax
call esi
test eax, eax
je 0x406789
cmp byte [ebp - 0xd7], 0x3a
jne 0x406789
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd8]
push eax
push 3
jne 0x4067d8
call edi
test eax, eax
je 0x4067b9
cmp byte [ebp - 0xd7], 0x3a
jne 0x4067b9
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x460]
mov byte [ebp - 0x460], 0x42
push eax
mov byte [ebp - 0x45f], 0x3a
mov byte [ebp - 0x45e], bl
call esi
jmp 0x4067f5
call edi
test eax, eax
je 0x4067f5
cmp byte [ebp - 0xd7], 0x3a
jne 0x4067f5
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0xe0]
push eax
call esi
test eax, eax
je 0x406829
cmp byte [ebp - 0xdf], 0x3a
jne 0x406829
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe0]
push eax
push 3
jne 0x406878
call edi
test eax, eax
je 0x406859
cmp byte [ebp - 0xdf], 0x3a
jne 0x406859
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x468]
mov byte [ebp - 0x468], 0x42
push eax
mov byte [ebp - 0x467], 0x3a
mov byte [ebp - 0x466], bl
call esi
jmp 0x406895
call edi
test eax, eax
je 0x406895
cmp byte [ebp - 0xdf], 0x3a
jne 0x406895
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0xe8]
push eax
call esi
test eax, eax
je 0x4068c9
cmp byte [ebp - 0xe7], 0x3a
jne 0x4068c9
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe8]
push eax
push 3
jne 0x406918
call edi
test eax, eax
je 0x4068f9
cmp byte [ebp - 0xe7], 0x3a
jne 0x4068f9
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x470]
mov byte [ebp - 0x470], 0x42
push eax
mov byte [ebp - 0x46f], 0x3a
mov byte [ebp - 0x46e], bl
call esi
jmp 0x406935
call edi
test eax, eax
je 0x406935
cmp byte [ebp - 0xe7], 0x3a
jne 0x406935
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0xf0]
push eax
call esi
test eax, eax
je 0x406968
cmp byte [ebp - 0xef], 0x3a
jne 0x406968
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf0]
push eax
push 3
jne 0x4069b7
call edi
test eax, eax
je 0x406998
cmp byte [ebp - 0xef], 0x3a
jne 0x406998
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x478]
mov byte [ebp - 0x478], 0x42
push eax
mov byte [ebp - 0x477], 0x3a
mov byte [ebp - 0x476], bl
call esi
jmp 0x4069d4
call edi
test eax, eax
je 0x4069d4
cmp byte [ebp - 0xef], 0x3a
jne 0x4069d4
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0xf8]
push eax
call esi
test eax, eax
je 0x406a01
cmp byte [ebp - 0xf7], 0x3a
jne 0x406a01
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf8]
push eax
push 3
jne 0x406a50
call edi
test eax, eax
je 0x406a31
cmp byte [ebp - 0xf7], 0x3a
jne 0x406a31
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x480]
mov byte [ebp - 0x480], 0x42
push eax
mov byte [ebp - 0x47f], 0x3a
mov byte [ebp - 0x47e], bl
call esi
jmp 0x406a6d
call edi
test eax, eax
je 0x406a6d
cmp byte [ebp - 0xf7], 0x3a
jne 0x406a6d
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x100]
push eax
call esi
test eax, eax
je 0x406a9f
cmp byte [ebp - 0xff], 0x3a
jne 0x406a9f
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x100]
push eax
push 3
jne 0x406aee
call edi
test eax, eax
je 0x406acf
cmp byte [ebp - 0xff], 0x3a
jne 0x406acf
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x488]
mov byte [ebp - 0x488], 0x42
push eax
mov byte [ebp - 0x487], 0x3a
mov byte [ebp - 0x486], bl
call esi
jmp 0x406b0b
call edi
test eax, eax
je 0x406b0b
cmp byte [ebp - 0xff], 0x3a
jne 0x406b0b
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x108]
push eax
call esi
test eax, eax
je 0x406b3d
cmp byte [ebp - 0x107], 0x3a
jne 0x406b3d
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x108]
push eax
push 3
jne 0x406b8c
call edi
test eax, eax
je 0x406b6d
cmp byte [ebp - 0x107], 0x3a
jne 0x406b6d
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x490]
mov byte [ebp - 0x490], 0x42
push eax
mov byte [ebp - 0x48f], 0x3a
mov byte [ebp - 0x48e], bl
call esi
jmp 0x406ba9
call edi
test eax, eax
je 0x406ba9
cmp byte [ebp - 0x107], 0x3a
jne 0x406ba9
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x110]
push eax
call esi
test eax, eax
je 0x406be0
cmp byte [ebp - 0x10f], 0x3a
jne 0x406be0
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x110]
push eax
push 3
jne 0x406c2f
call edi
test eax, eax
je 0x406c10
cmp byte [ebp - 0x10f], 0x3a
jne 0x406c10
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x498]
mov byte [ebp - 0x498], 0x42
push eax
mov byte [ebp - 0x497], 0x3a
mov byte [ebp - 0x496], bl
call esi
jmp 0x406c4c
call edi
test eax, eax
je 0x406c4c
cmp byte [ebp - 0x10f], 0x3a
jne 0x406c4c
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x118]
push eax
call esi
test eax, eax
je 0x406c7e
cmp byte [ebp - 0x117], 0x3a
jne 0x406c7e
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x118]
push eax
push 3
jne 0x406ccd
call edi
test eax, eax
je 0x406cae
cmp byte [ebp - 0x117], 0x3a
jne 0x406cae
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a0]
mov byte [ebp - 0x4a0], 0x42
push eax
mov byte [ebp - 0x49f], 0x3a
mov byte [ebp - 0x49e], bl
call esi
jmp 0x406cea
call edi
test eax, eax
je 0x406cea
cmp byte [ebp - 0x117], 0x3a
jne 0x406cea
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x120]
push eax
call esi
test eax, eax
je 0x406d15
cmp byte [ebp - 0x11f], 0x3a
jne 0x406d15
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x120]
push eax
push 3
jne 0x406d64
call edi
test eax, eax
je 0x406d45
cmp byte [ebp - 0x11f], 0x3a
jne 0x406d45
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a8]
mov byte [ebp - 0x4a8], 0x42
push eax
mov byte [ebp - 0x4a7], 0x3a
mov byte [ebp - 0x4a6], bl
call esi
jmp 0x406d81
call edi
test eax, eax
je 0x406d81
cmp byte [ebp - 0x11f], 0x3a
jne 0x406d81
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x128]
push eax
call esi
test eax, eax
je 0x406db3
cmp byte [ebp - 0x127], 0x3a
jne 0x406db3
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x128]
push eax
push 3
jne 0x406e02
call edi
test eax, eax
je 0x406de3
cmp byte [ebp - 0x127], 0x3a
jne 0x406de3
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b0]
mov byte [ebp - 0x4b0], 0x42
push eax
mov byte [ebp - 0x4af], 0x3a
mov byte [ebp - 0x4ae], bl
call esi
jmp 0x406e1f
call edi
test eax, eax
je 0x406e1f
cmp byte [ebp - 0x127], 0x3a
jne 0x406e1f
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x130]
push eax
call esi
test eax, eax
je 0x406e52
cmp byte [ebp - 0x12f], 0x3a
jne 0x406e52
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x130]
push eax
push 3
jne 0x406ea1
call edi
test eax, eax
je 0x406e82
cmp byte [ebp - 0x12f], 0x3a
jne 0x406e82
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b8]
mov byte [ebp - 0x4b8], 0x42
push eax
mov byte [ebp - 0x4b7], 0x3a
mov byte [ebp - 0x4b6], bl
call esi
jmp 0x406ebe
call edi
test eax, eax
je 0x406ebe
cmp byte [ebp - 0x12f], 0x3a
jne 0x406ebe
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x138]
push eax
call esi
test eax, eax
je 0x406ef2
cmp byte [ebp - 0x137], 0x3a
jne 0x406ef2
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x138]
push eax
push 3
jne 0x406f41
call edi
test eax, eax
je 0x406f22
cmp byte [ebp - 0x137], 0x3a
jne 0x406f22
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c0]
mov byte [ebp - 0x4c0], 0x42
push eax
mov byte [ebp - 0x4bf], 0x3a
mov byte [ebp - 0x4be], bl
call esi
jmp 0x406f5e
call edi
test eax, eax
je 0x406f5e
cmp byte [ebp - 0x137], 0x3a
jne 0x406f5e
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x7cc]
call fcn.0042bd9a
lea ecx, [ebp - 0x7cc]
call fcn.0042d849
lea ecx, [ebp - 0x7cc]
call fcn.0042e515
lea ecx, [ebp - 0x7cc]
jmp 0x409077
lea eax, [ebp + 0x14]
test eax, eax
jne 0x407fe4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x140]
push eax
call esi
test eax, eax
je 0x406fdf
cmp byte [ebp - 0x13f], 0x3a
jne 0x406fdf
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x140]
push eax
push 3
jne 0x40702e
call edi
test eax, eax
je 0x40700f
cmp byte [ebp - 0x13f], 0x3a
jne 0x40700f
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c8]
mov byte [ebp - 0x4c8], 0x42
push eax
mov byte [ebp - 0x4c7], 0x3a
mov byte [ebp - 0x4c6], bl
call esi
jmp 0x40704b
call edi
test eax, eax
je 0x40704b
cmp byte [ebp - 0x13f], 0x3a
jne 0x40704b
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x148]
push eax
call esi
test eax, eax
je 0x40706f
cmp byte [ebp - 0x147], 0x3a
jne 0x40706f
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x148]
push eax
push 3
jne 0x4070be
call edi
test eax, eax
je 0x40709f
cmp byte [ebp - 0x147], 0x3a
jne 0x40709f
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d0]
mov byte [ebp - 0x4d0], 0x42
push eax
mov byte [ebp - 0x4cf], 0x3a
mov byte [ebp - 0x4ce], bl
call esi
jmp 0x4070db
call edi
test eax, eax
je 0x4070db
cmp byte [ebp - 0x147], 0x3a
jne 0x4070db
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x150]
push eax
call esi
test eax, eax
je 0x407117
cmp byte [ebp - 0x14f], 0x3a
jne 0x407117
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x150]
push eax
push 3
jne 0x407166
call edi
test eax, eax
je 0x407147
cmp byte [ebp - 0x14f], 0x3a
jne 0x407147
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d8]
mov byte [ebp - 0x4d8], 0x42
push eax
mov byte [ebp - 0x4d7], 0x3a
mov byte [ebp - 0x4d6], bl
call esi
jmp 0x407183
call edi
test eax, eax
je 0x407183
cmp byte [ebp - 0x14f], 0x3a
jne 0x407183
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x158]
push eax
call esi
test eax, eax
je 0x4071ae
cmp byte [ebp - 0x157], 0x3a
jne 0x4071ae
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x158]
push eax
push 3
jne 0x4071fd
call edi
test eax, eax
je 0x4071de
cmp byte [ebp - 0x157], 0x3a
jne 0x4071de
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x4e0], 0x42
push eax
mov byte [ebp - 0x4df], 0x3a
mov byte [ebp - 0x4de], bl
call esi
jmp 0x40721a
call edi
test eax, eax
je 0x40721a
cmp byte [ebp - 0x157], 0x3a
jne 0x40721a
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x160]
push eax
call esi
test eax, eax
je 0x407244
cmp byte [ebp - 0x15f], 0x3a
jne 0x407244
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x160]
push eax
push 3
jne 0x407293
call edi
test eax, eax
je 0x407274
cmp byte [ebp - 0x15f], 0x3a
jne 0x407274
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e8]
mov byte [ebp - 0x4e8], 0x42
push eax
mov byte [ebp - 0x4e7], 0x3a
mov byte [ebp - 0x4e6], bl
call esi
jmp 0x4072b0
call edi
test eax, eax
je 0x4072b0
cmp byte [ebp - 0x15f], 0x3a
jne 0x4072b0
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x168]
push eax
call esi
test eax, eax
je 0x4072f5
cmp byte [ebp - 0x167], 0x3a
jne 0x4072f5
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x168]
push eax
push 3
jne 0x407344
call edi
test eax, eax
je 0x407325
cmp byte [ebp - 0x167], 0x3a
jne 0x407325
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f0]
mov byte [ebp - 0x4f0], 0x42
push eax
mov byte [ebp - 0x4ef], 0x3a
mov byte [ebp - 0x4ee], bl
call esi
jmp 0x407361
call edi
test eax, eax
je 0x407361
cmp byte [ebp - 0x167], 0x3a
jne 0x407361
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x170]
push eax
call esi
test eax, eax
je 0x407395
cmp byte [ebp - 0x16f], 0x3a
jne 0x407395
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x170]
push eax
push 3
jne 0x4073e4
call edi
test eax, eax
je 0x4073c5
cmp byte [ebp - 0x16f], 0x3a
jne 0x4073c5
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f8]
mov byte [ebp - 0x4f8], 0x42
push eax
mov byte [ebp - 0x4f7], 0x3a
mov byte [ebp - 0x4f6], bl
call esi
jmp 0x407401
call edi
test eax, eax
je 0x407401
cmp byte [ebp - 0x16f], 0x3a
jne 0x407401
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x178]
push eax
call esi
test eax, eax
je 0x407434
cmp byte [ebp - 0x177], 0x3a
jne 0x407434
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x178]
push eax
push 3
jne 0x407483
call edi
test eax, eax
je 0x407464
cmp byte [ebp - 0x177], 0x3a
jne 0x407464
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x500]
mov byte [ebp - 0x500], 0x42
push eax
mov byte [ebp - 0x4ff], 0x3a
mov byte [ebp - 0x4fe], bl
call esi
jmp 0x4074a0
call edi
test eax, eax
je 0x4074a0
cmp byte [ebp - 0x177], 0x3a
jne 0x4074a0
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x180]
push eax
call esi
test eax, eax
je 0x4074d6
cmp byte [ebp - 0x17f], 0x3a
jne 0x4074d6
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x180]
push eax
push 3
jne 0x407525
call edi
test eax, eax
je 0x407506
cmp byte [ebp - 0x17f], 0x3a
jne 0x407506
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x508]
mov byte [ebp - 0x508], 0x42
push eax
mov byte [ebp - 0x507], 0x3a
mov byte [ebp - 0x506], bl
call esi
jmp 0x407542
call edi
test eax, eax
je 0x407542
cmp byte [ebp - 0x17f], 0x3a
jne 0x407542
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x188]
push eax
call esi
test eax, eax
je 0x40757e
cmp byte [ebp - 0x187], 0x3a
jne 0x40757e
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x188]
push eax
push 3
jne 0x4075cd
call edi
test eax, eax
je 0x4075ae
cmp byte [ebp - 0x187], 0x3a
jne 0x4075ae
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x510]
mov byte [ebp - 0x510], 0x42
push eax
mov byte [ebp - 0x50f], 0x3a
mov byte [ebp - 0x50e], bl
call esi
jmp 0x4075ea
call edi
test eax, eax
je 0x4075ea
cmp byte [ebp - 0x187], 0x3a
jne 0x4075ea
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x190]
push eax
call esi
test eax, eax
je 0x407622
cmp byte [ebp - 0x18f], 0x3a
jne 0x407622
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x190]
push eax
push 3
jne 0x407671
call edi
test eax, eax
je 0x407652
cmp byte [ebp - 0x18f], 0x3a
jne 0x407652
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x518]
mov byte [ebp - 0x518], 0x42
push eax
mov byte [ebp - 0x517], 0x3a
mov byte [ebp - 0x516], bl
call esi
jmp 0x40768e
call edi
test eax, eax
je 0x40768e
cmp byte [ebp - 0x18f], 0x3a
jne 0x40768e
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x198]
push eax
call esi
test eax, eax
je 0x4076b9
cmp byte [ebp - 0x197], 0x3a
jne 0x4076b9
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x198]
push eax
push 3
jne 0x407708
call edi
test eax, eax
je 0x4076e9
cmp byte [ebp - 0x197], 0x3a
jne 0x4076e9
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x520]
mov byte [ebp - 0x520], 0x42
push eax
mov byte [ebp - 0x51f], 0x3a
mov byte [ebp - 0x51e], bl
call esi
jmp 0x407725
call edi
test eax, eax
je 0x407725
cmp byte [ebp - 0x197], 0x3a
jne 0x407725
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x1a0]
push eax
call esi
test eax, eax
je 0x407750
cmp byte [ebp - 0x19f], 0x3a
jne 0x407750
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a0]
push eax
push 3
jne 0x40779f
call edi
test eax, eax
je 0x407780
cmp byte [ebp - 0x19f], 0x3a
jne 0x407780
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x528]
mov byte [ebp - 0x528], 0x42
push eax
mov byte [ebp - 0x527], 0x3a
mov byte [ebp - 0x526], bl
call esi
jmp 0x4077bc
call edi
test eax, eax
je 0x4077bc
cmp byte [ebp - 0x19f], 0x3a
jne 0x4077bc
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x1a8]
push eax
call esi
test eax, eax
je 0x4077ef
cmp byte [ebp - 0x1a7], 0x3a
jne 0x4077ef
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a8]
push eax
push 3
jne 0x40783e
call edi
test eax, eax
je 0x40781f
cmp byte [ebp - 0x1a7], 0x3a
jne 0x40781f
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x530]
mov byte [ebp - 0x530], 0x42
push eax
mov byte [ebp - 0x52f], 0x3a
mov byte [ebp - 0x52e], bl
call esi
jmp 0x40785b
call edi
test eax, eax
je 0x40785b
cmp byte [ebp - 0x1a7], 0x3a
jne 0x40785b
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x1b0]
push eax
call esi
test eax, eax
je 0x40788f
cmp byte [ebp - 0x1af], 0x3a
jne 0x40788f
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b0]
push eax
push 3
jne 0x4078de
call edi
test eax, eax
je 0x4078bf
cmp byte [ebp - 0x1af], 0x3a
jne 0x4078bf
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x538]
mov byte [ebp - 0x538], 0x42
push eax
mov byte [ebp - 0x537], 0x3a
mov byte [ebp - 0x536], bl
call esi
jmp 0x4078fb
call edi
test eax, eax
je 0x4078fb
cmp byte [ebp - 0x1af], 0x3a
jne 0x4078fb
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x1b8]
push eax
call esi
test eax, eax
je 0x40792f
cmp byte [ebp - 0x1b7], 0x3a
jne 0x40792f
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b8]
push eax
push 3
jne 0x40797e
call edi
test eax, eax
je 0x40795f
cmp byte [ebp - 0x1b7], 0x3a
jne 0x40795f
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x540]
mov byte [ebp - 0x540], 0x42
push eax
mov byte [ebp - 0x53f], 0x3a
mov byte [ebp - 0x53e], bl
call esi
jmp 0x40799b
call edi
test eax, eax
je 0x40799b
cmp byte [ebp - 0x1b7], 0x3a
jne 0x40799b
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x1c0]
push eax
call esi
test eax, eax
je 0x4079ce
cmp byte [ebp - 0x1bf], 0x3a
jne 0x4079ce
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c0]
push eax
push 3
jne 0x407a1d
call edi
test eax, eax
je 0x4079fe
cmp byte [ebp - 0x1bf], 0x3a
jne 0x4079fe
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x548]
mov byte [ebp - 0x548], 0x42
push eax
mov byte [ebp - 0x547], 0x3a
mov byte [ebp - 0x546], bl
call esi
jmp 0x407a3a
call edi
test eax, eax
je 0x407a3a
cmp byte [ebp - 0x1bf], 0x3a
jne 0x407a3a
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x1c8]
push eax
call esi
test eax, eax
je 0x407a67
cmp byte [ebp - 0x1c7], 0x3a
jne 0x407a67
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c8]
push eax
push 3
jne 0x407ab6
call edi
test eax, eax
je 0x407a97
cmp byte [ebp - 0x1c7], 0x3a
jne 0x407a97
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x550]
mov byte [ebp - 0x550], 0x42
push eax
mov byte [ebp - 0x54f], 0x3a
mov byte [ebp - 0x54e], bl
call esi
jmp 0x407ad3
call edi
test eax, eax
je 0x407ad3
cmp byte [ebp - 0x1c7], 0x3a
jne 0x407ad3
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x1d0]
push eax
call esi
test eax, eax
je 0x407b05
cmp byte [ebp - 0x1cf], 0x3a
jne 0x407b05
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d0]
push eax
push 3
jne 0x407b54
call edi
test eax, eax
je 0x407b35
cmp byte [ebp - 0x1cf], 0x3a
jne 0x407b35
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x558]
mov byte [ebp - 0x558], 0x42
push eax
mov byte [ebp - 0x557], 0x3a
mov byte [ebp - 0x556], bl
call esi
jmp 0x407b71
call edi
test eax, eax
je 0x407b71
cmp byte [ebp - 0x1cf], 0x3a
jne 0x407b71
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x1d8]
push eax
call esi
test eax, eax
je 0x407ba3
cmp byte [ebp - 0x1d7], 0x3a
jne 0x407ba3
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d8]
push eax
push 3
jne 0x407bf2
call edi
test eax, eax
je 0x407bd3
cmp byte [ebp - 0x1d7], 0x3a
jne 0x407bd3
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x560]
mov byte [ebp - 0x560], 0x42
push eax
mov byte [ebp - 0x55f], 0x3a
mov byte [ebp - 0x55e], bl
call esi
jmp 0x407c0f
call edi
test eax, eax
je 0x407c0f
cmp byte [ebp - 0x1d7], 0x3a
jne 0x407c0f
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x1e0]
push eax
call esi
test eax, eax
je 0x407c46
cmp byte [ebp - 0x1df], 0x3a
jne 0x407c46
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e0]
push eax
push 3
jne 0x407c95
call edi
test eax, eax
je 0x407c76
cmp byte [ebp - 0x1df], 0x3a
jne 0x407c76
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x568]
mov byte [ebp - 0x568], 0x42
push eax
mov byte [ebp - 0x567], 0x3a
mov byte [ebp - 0x566], bl
call esi
jmp 0x407cb2
call edi
test eax, eax
je 0x407cb2
cmp byte [ebp - 0x1df], 0x3a
jne 0x407cb2
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x1e8]
push eax
call esi
test eax, eax
je 0x407ce4
cmp byte [ebp - 0x1e7], 0x3a
jne 0x407ce4
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e8]
push eax
push 3
jne 0x407d33
call edi
test eax, eax
je 0x407d14
cmp byte [ebp - 0x1e7], 0x3a
jne 0x407d14
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x570]
mov byte [ebp - 0x570], 0x42
push eax
mov byte [ebp - 0x56f], 0x3a
mov byte [ebp - 0x56e], bl
call esi
jmp 0x407d50
call edi
test eax, eax
je 0x407d50
cmp byte [ebp - 0x1e7], 0x3a
jne 0x407d50
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x1f0]
push eax
call esi
test eax, eax
je 0x407d7b
cmp byte [ebp - 0x1ef], 0x3a
jne 0x407d7b
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f0]
push eax
push 3
jne 0x407dca
call edi
test eax, eax
je 0x407dab
cmp byte [ebp - 0x1ef], 0x3a
jne 0x407dab
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x578]
mov byte [ebp - 0x578], 0x42
push eax
mov byte [ebp - 0x577], 0x3a
mov byte [ebp - 0x576], bl
call esi
jmp 0x407de7
call edi
test eax, eax
je 0x407de7
cmp byte [ebp - 0x1ef], 0x3a
jne 0x407de7
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x1f8]
push eax
call esi
test eax, eax
je 0x407e19
cmp byte [ebp - 0x1f7], 0x3a
jne 0x407e19
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f8]
push eax
push 3
jne 0x407e68
call edi
test eax, eax
je 0x407e49
cmp byte [ebp - 0x1f7], 0x3a
jne 0x407e49
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x580]
mov byte [ebp - 0x580], 0x42
push eax
mov byte [ebp - 0x57f], 0x3a
mov byte [ebp - 0x57e], bl
call esi
jmp 0x407e85
call edi
test eax, eax
je 0x407e85
cmp byte [ebp - 0x1f7], 0x3a
jne 0x407e85
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x200]
push eax
call esi
test eax, eax
je 0x407eb8
cmp byte [ebp - 0x1ff], 0x3a
jne 0x407eb8
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x200]
push eax
push 3
jne 0x407f07
call edi
test eax, eax
je 0x407ee8
cmp byte [ebp - 0x1ff], 0x3a
jne 0x407ee8
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x588]
mov byte [ebp - 0x588], 0x42
push eax
mov byte [ebp - 0x587], 0x3a
mov byte [ebp - 0x586], bl
call esi
jmp 0x407f24
call edi
test eax, eax
je 0x407f24
cmp byte [ebp - 0x1ff], 0x3a
jne 0x407f24
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x208]
push eax
call esi
test eax, eax
je 0x407f58
cmp byte [ebp - 0x207], 0x3a
jne 0x407f58
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x208]
push eax
push 3
jne 0x407fa7
call edi
test eax, eax
je 0x407f88
cmp byte [ebp - 0x207], 0x3a
jne 0x407f88
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x590]
mov byte [ebp - 0x590], 0x42
push eax
mov byte [ebp - 0x58f], 0x3a
mov byte [ebp - 0x58e], bl
call esi
jmp 0x407fc4
call edi
test eax, eax
je 0x407fc4
cmp byte [ebp - 0x207], 0x3a
jne 0x407fc4
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x78c]
call fcn.0042bd9a
lea eax, [ebp - 0x754]
lea ecx, [ebp - 0x78c]
push eax
call fcn.0042f5d4
test eax, eax
je 0x409071
lea eax, [ebp + 0x14]
test eax, eax
jne 0x409043
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x210]
push eax
call esi
test eax, eax
je 0x40803e
cmp byte [ebp - 0x20f], 0x3a
jne 0x40803e
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x210]
push eax
push 3
jne 0x40808d
call edi
test eax, eax
je 0x40806e
cmp byte [ebp - 0x20f], 0x3a
jne 0x40806e
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x598]
mov byte [ebp - 0x598], 0x42
push eax
mov byte [ebp - 0x597], 0x3a
mov byte [ebp - 0x596], bl
call esi
jmp 0x4080aa
call edi
test eax, eax
je 0x4080aa
cmp byte [ebp - 0x20f], 0x3a
jne 0x4080aa
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x218]
push eax
call esi
test eax, eax
je 0x4080ce
cmp byte [ebp - 0x217], 0x3a
jne 0x4080ce
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x218]
push eax
push 3
jne 0x40811d
call edi
test eax, eax
je 0x4080fe
cmp byte [ebp - 0x217], 0x3a
jne 0x4080fe
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a0]
mov byte [ebp - 0x5a0], 0x42
push eax
mov byte [ebp - 0x59f], 0x3a
mov byte [ebp - 0x59e], bl
call esi
jmp 0x40813a
call edi
test eax, eax
je 0x40813a
cmp byte [ebp - 0x217], 0x3a
jne 0x40813a
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x220]
push eax
call esi
test eax, eax
je 0x408176
cmp byte [ebp - 0x21f], 0x3a
jne 0x408176
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x220]
push eax
push 3
jne 0x4081c5
call edi
test eax, eax
je 0x4081a6
cmp byte [ebp - 0x21f], 0x3a
jne 0x4081a6
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a8]
mov byte [ebp - 0x5a8], 0x42
push eax
mov byte [ebp - 0x5a7], 0x3a
mov byte [ebp - 0x5a6], bl
call esi
jmp 0x4081e2
call edi
test eax, eax
je 0x4081e2
cmp byte [ebp - 0x21f], 0x3a
jne 0x4081e2
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x228]
push eax
call esi
test eax, eax
je 0x40820d
cmp byte [ebp - 0x227], 0x3a
jne 0x40820d
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x228]
push eax
push 3
jne 0x40825c
call edi
test eax, eax
je 0x40823d
cmp byte [ebp - 0x227], 0x3a
jne 0x40823d
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b0]
mov byte [ebp - 0x5b0], 0x42
push eax
mov byte [ebp - 0x5af], 0x3a
mov byte [ebp - 0x5ae], bl
call esi
jmp 0x408279
call edi
test eax, eax
je 0x408279
cmp byte [ebp - 0x227], 0x3a
jne 0x408279
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x230]
push eax
call esi
test eax, eax
je 0x4082a3
cmp byte [ebp - 0x22f], 0x3a
jne 0x4082a3
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x230]
push eax
push 3
jne 0x4082f2
call edi
test eax, eax
je 0x4082d3
cmp byte [ebp - 0x22f], 0x3a
jne 0x4082d3
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b8]
mov byte [ebp - 0x5b8], 0x42
push eax
mov byte [ebp - 0x5b7], 0x3a
mov byte [ebp - 0x5b6], bl
call esi
jmp 0x40830f
call edi
test eax, eax
je 0x40830f
cmp byte [ebp - 0x22f], 0x3a
jne 0x40830f
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x238]
push eax
call esi
test eax, eax
je 0x408354
cmp byte [ebp - 0x237], 0x3a
jne 0x408354
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x238]
push eax
push 3
jne 0x4083a3
call edi
test eax, eax
je 0x408384
cmp byte [ebp - 0x237], 0x3a
jne 0x408384
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c0]
mov byte [ebp - 0x5c0], 0x42
push eax
mov byte [ebp - 0x5bf], 0x3a
mov byte [ebp - 0x5be], bl
call esi
jmp 0x4083c0
call edi
test eax, eax
je 0x4083c0
cmp byte [ebp - 0x237], 0x3a
jne 0x4083c0
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x240]
push eax
call esi
test eax, eax
je 0x4083f4
cmp byte [ebp - 0x23f], 0x3a
jne 0x4083f4
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x240]
push eax
push 3
jne 0x408443
call edi
test eax, eax
je 0x408424
cmp byte [ebp - 0x23f], 0x3a
jne 0x408424
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c8]
mov byte [ebp - 0x5c8], 0x42
push eax
mov byte [ebp - 0x5c7], 0x3a
mov byte [ebp - 0x5c6], bl
call esi
jmp 0x408460
call edi
test eax, eax
je 0x408460
cmp byte [ebp - 0x23f], 0x3a
jne 0x408460
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x248]
push eax
call esi
test eax, eax
je 0x408493
cmp byte [ebp - 0x247], 0x3a
jne 0x408493
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x248]
push eax
push 3
jne 0x4084e2
call edi
test eax, eax
je 0x4084c3
cmp byte [ebp - 0x247], 0x3a
jne 0x4084c3
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d0]
mov byte [ebp - 0x5d0], 0x42
push eax
mov byte [ebp - 0x5cf], 0x3a
mov byte [ebp - 0x5ce], bl
call esi
jmp 0x4084ff
call edi
test eax, eax
je 0x4084ff
cmp byte [ebp - 0x247], 0x3a
jne 0x4084ff
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x250]
push eax
call esi
test eax, eax
je 0x408535
cmp byte [ebp - 0x24f], 0x3a
jne 0x408535
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x250]
push eax
push 3
jne 0x408584
call edi
test eax, eax
je 0x408565
cmp byte [ebp - 0x24f], 0x3a
jne 0x408565
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d8]
mov byte [ebp - 0x5d8], 0x42
push eax
mov byte [ebp - 0x5d7], 0x3a
mov byte [ebp - 0x5d6], bl
call esi
jmp 0x4085a1
call edi
test eax, eax
je 0x4085a1
cmp byte [ebp - 0x24f], 0x3a
jne 0x4085a1
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x258]
push eax
call esi
test eax, eax
je 0x4085dd
cmp byte [ebp - 0x257], 0x3a
jne 0x4085dd
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x258]
push eax
push 3
jne 0x40862c
call edi
test eax, eax
je 0x40860d
cmp byte [ebp - 0x257], 0x3a
jne 0x40860d
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e0]
mov byte [ebp - 0x5e0], 0x42
push eax
mov byte [ebp - 0x5df], 0x3a
mov byte [ebp - 0x5de], bl
call esi
jmp 0x408649
call edi
test eax, eax
je 0x408649
cmp byte [ebp - 0x257], 0x3a
jne 0x408649
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x260]
push eax
call esi
test eax, eax
je 0x408681
cmp byte [ebp - 0x25f], 0x3a
jne 0x408681
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x260]
push eax
push 3
jne 0x4086d0
call edi
test eax, eax
je 0x4086b1
cmp byte [ebp - 0x25f], 0x3a
jne 0x4086b1
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e8]
mov byte [ebp - 0x5e8], 0x42
push eax
mov byte [ebp - 0x5e7], 0x3a
mov byte [ebp - 0x5e6], bl
call esi
jmp 0x4086ed
call edi
test eax, eax
je 0x4086ed
cmp byte [ebp - 0x25f], 0x3a
jne 0x4086ed
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x268]
push eax
call esi
test eax, eax
je 0x408718
cmp byte [ebp - 0x267], 0x3a
jne 0x408718
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x268]
push eax
push 3
jne 0x408767
call edi
test eax, eax
je 0x408748
cmp byte [ebp - 0x267], 0x3a
jne 0x408748
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f0]
mov byte [ebp - 0x5f0], 0x42
push eax
mov byte [ebp - 0x5ef], 0x3a
mov byte [ebp - 0x5ee], bl
call esi
jmp 0x408784
call edi
test eax, eax
je 0x408784
cmp byte [ebp - 0x267], 0x3a
jne 0x408784
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x270]
push eax
call esi
test eax, eax
je 0x4087af
cmp byte [ebp - 0x26f], 0x3a
jne 0x4087af
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x270]
push eax
push 3
jne 0x4087fe
call edi
test eax, eax
je 0x4087df
cmp byte [ebp - 0x26f], 0x3a
jne 0x4087df
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f8]
mov byte [ebp - 0x5f8], 0x42
push eax
mov byte [ebp - 0x5f7], 0x3a
mov byte [ebp - 0x5f6], bl
call esi
jmp 0x40881b
call edi
test eax, eax
je 0x40881b
cmp byte [ebp - 0x26f], 0x3a
jne 0x40881b
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x278]
push eax
call esi
test eax, eax
je 0x40884e
cmp byte [ebp - 0x277], 0x3a
jne 0x40884e
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x278]
push eax
push 3
jne 0x40889d
call edi
test eax, eax
je 0x40887e
cmp byte [ebp - 0x277], 0x3a
jne 0x40887e
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x600]
mov byte [ebp - 0x600], 0x42
push eax
mov byte [ebp - 0x5ff], 0x3a
mov byte [ebp - 0x5fe], bl
call esi
jmp 0x4088ba
call edi
test eax, eax
je 0x4088ba
cmp byte [ebp - 0x277], 0x3a
jne 0x4088ba
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x280]
push eax
call esi
test eax, eax
je 0x4088ee
cmp byte [ebp - 0x27f], 0x3a
jne 0x4088ee
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x280]
push eax
push 3
jne 0x40893d
call edi
test eax, eax
je 0x40891e
cmp byte [ebp - 0x27f], 0x3a
jne 0x40891e
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x608]
mov byte [ebp - 0x608], 0x42
push eax
mov byte [ebp - 0x607], 0x3a
mov byte [ebp - 0x606], bl
call esi
jmp 0x40895a
call edi
test eax, eax
je 0x40895a
cmp byte [ebp - 0x27f], 0x3a
jne 0x40895a
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x288]
push eax
call esi
test eax, eax
je 0x40898e
cmp byte [ebp - 0x287], 0x3a
jne 0x40898e
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x288]
push eax
push 3
jne 0x4089dd
call edi
test eax, eax
je 0x4089be
cmp byte [ebp - 0x287], 0x3a
jne 0x4089be
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x610]
mov byte [ebp - 0x610], 0x42
push eax
mov byte [ebp - 0x60f], 0x3a
mov byte [ebp - 0x60e], bl
call esi
jmp 0x4089fa
call edi
test eax, eax
je 0x4089fa
cmp byte [ebp - 0x287], 0x3a
jne 0x4089fa
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x290]
push eax
call esi
test eax, eax
je 0x408a2d
cmp byte [ebp - 0x28f], 0x3a
jne 0x408a2d
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x290]
push eax
push 3
jne 0x408a7c
call edi
test eax, eax
je 0x408a5d
cmp byte [ebp - 0x28f], 0x3a
jne 0x408a5d
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x618]
mov byte [ebp - 0x618], 0x42
push eax
mov byte [ebp - 0x617], 0x3a
mov byte [ebp - 0x616], bl
call esi
jmp 0x408a99
call edi
test eax, eax
je 0x408a99
cmp byte [ebp - 0x28f], 0x3a
jne 0x408a99
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x298]
push eax
call esi
test eax, eax
je 0x408ac6
cmp byte [ebp - 0x297], 0x3a
jne 0x408ac6
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x298]
push eax
push 3
jne 0x408b15
call edi
test eax, eax
je 0x408af6
cmp byte [ebp - 0x297], 0x3a
jne 0x408af6
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x620]
mov byte [ebp - 0x620], 0x42
push eax
mov byte [ebp - 0x61f], 0x3a
mov byte [ebp - 0x61e], bl
call esi
jmp 0x408b32
call edi
test eax, eax
je 0x408b32
cmp byte [ebp - 0x297], 0x3a
jne 0x408b32
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x2a0]
push eax
call esi
test eax, eax
je 0x408b64
cmp byte [ebp - 0x29f], 0x3a
jne 0x408b64
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a0]
push eax
push 3
jne 0x408bb3
call edi
test eax, eax
je 0x408b94
cmp byte [ebp - 0x29f], 0x3a
jne 0x408b94
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x628]
mov byte [ebp - 0x628], 0x42
push eax
mov byte [ebp - 0x627], 0x3a
mov byte [ebp - 0x626], bl
call esi
jmp 0x408bd0
call edi
test eax, eax
je 0x408bd0
cmp byte [ebp - 0x29f], 0x3a
jne 0x408bd0
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x2a8]
push eax
call esi
test eax, eax
je 0x408c02
cmp byte [ebp - 0x2a7], 0x3a
jne 0x408c02
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a8]
push eax
push 3
jne 0x408c51
call edi
test eax, eax
je 0x408c32
cmp byte [ebp - 0x2a7], 0x3a
jne 0x408c32
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x630]
mov byte [ebp - 0x630], 0x42
push eax
mov byte [ebp - 0x62f], 0x3a
mov byte [ebp - 0x62e], bl
call esi
jmp 0x408c6e
call edi
test eax, eax
je 0x408c6e
cmp byte [ebp - 0x2a7], 0x3a
jne 0x408c6e
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x2b0]
push eax
call esi
test eax, eax
je 0x408ca5
cmp byte [ebp - 0x2af], 0x3a
jne 0x408ca5
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b0]
push eax
push 3
jne 0x408cf4
call edi
test eax, eax
je 0x408cd5
cmp byte [ebp - 0x2af], 0x3a
jne 0x408cd5
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x638]
mov byte [ebp - 0x638], 0x42
push eax
mov byte [ebp - 0x637], 0x3a
mov byte [ebp - 0x636], bl
call esi
jmp 0x408d11
call edi
test eax, eax
je 0x408d11
cmp byte [ebp - 0x2af], 0x3a
jne 0x408d11
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x2b8]
push eax
call esi
test eax, eax
je 0x408d43
cmp byte [ebp - 0x2b7], 0x3a
jne 0x408d43
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b8]
push eax
push 3
jne 0x408d92
call edi
test eax, eax
je 0x408d73
cmp byte [ebp - 0x2b7], 0x3a
jne 0x408d73
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x640]
mov byte [ebp - 0x640], 0x42
push eax
mov byte [ebp - 0x63f], 0x3a
mov byte [ebp - 0x63e], bl
call esi
jmp 0x408daf
call edi
test eax, eax
je 0x408daf
cmp byte [ebp - 0x2b7], 0x3a
jne 0x408daf
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x2c0]
push eax
call esi
test eax, eax
je 0x408dda
cmp byte [ebp - 0x2bf], 0x3a
jne 0x408dda
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c0]
push eax
push 3
jne 0x408e29
call edi
test eax, eax
je 0x408e0a
cmp byte [ebp - 0x2bf], 0x3a
jne 0x408e0a
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x648]
mov byte [ebp - 0x648], 0x42
push eax
mov byte [ebp - 0x647], 0x3a
mov byte [ebp - 0x646], bl
call esi
jmp 0x408e46
call edi
test eax, eax
je 0x408e46
cmp byte [ebp - 0x2bf], 0x3a
jne 0x408e46
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x2c8]
push eax
call esi
test eax, eax
je 0x408e78
cmp byte [ebp - 0x2c7], 0x3a
jne 0x408e78
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c8]
push eax
push 3
jne 0x408ec7
call edi
test eax, eax
je 0x408ea8
cmp byte [ebp - 0x2c7], 0x3a
jne 0x408ea8
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x650]
mov byte [ebp - 0x650], 0x42
push eax
mov byte [ebp - 0x64f], 0x3a
mov byte [ebp - 0x64e], bl
call esi
jmp 0x408ee4
call edi
test eax, eax
je 0x408ee4
cmp byte [ebp - 0x2c7], 0x3a
jne 0x408ee4
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x2d0]
push eax
call esi
test eax, eax
je 0x408f17
cmp byte [ebp - 0x2cf], 0x3a
jne 0x408f17
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d0]
push eax
push 3
jne 0x408f66
call edi
test eax, eax
je 0x408f47
cmp byte [ebp - 0x2cf], 0x3a
jne 0x408f47
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x658]
mov byte [ebp - 0x658], 0x42
push eax
mov byte [ebp - 0x657], 0x3a
mov byte [ebp - 0x656], bl
call esi
jmp 0x408f83
call edi
test eax, eax
je 0x408f83
cmp byte [ebp - 0x2cf], 0x3a
jne 0x408f83
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x2d8]
push eax
call esi
test eax, eax
je 0x408fb7
cmp byte [ebp - 0x2d7], 0x3a
jne 0x408fb7
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d8]
push eax
push 3
jne 0x409006
call edi
test eax, eax
je 0x408fe7
cmp byte [ebp - 0x2d7], 0x3a
jne 0x408fe7
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x660]
mov byte [ebp - 0x660], 0x42
push eax
mov byte [ebp - 0x65f], 0x3a
mov byte [ebp - 0x65e], bl
call esi
jmp 0x409023
call edi
test eax, eax
je 0x409023
cmp byte [ebp - 0x2d7], 0x3a
jne 0x409023
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x754]
call fcn.00415935
mov eax, dword [0x4503d0]
push 0xbb8
call dword [eax + 0x3c]
lea ecx, [ebp - 0x78c]
call fcn.0042d849
lea ecx, [ebp - 0x78c]
call fcn.0042e515
lea ecx, [ebp - 0x78c]
call fcn.0042cb06
lea ecx, [ebp - 0x754]
call fcn.00413f3f
lea ecx, [ebp - 0x758]
call fcn.0041bce8
lea ecx, [ebp - 0x760]
call fcn.00434485
lea ecx, [ebp - 0x76c]
call fcn.0041affb
mov ecx, dword [0x4503d0]
cmp ecx, ebx
je 0x4090b8
mov eax, dword [ecx]
push 1
call dword [eax]
lea eax, [ebp + 0x14]
test eax, eax
jne 0x40a0f2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x2e0]
push eax
call esi
test eax, eax
je 0x4090ed
cmp byte [ebp - 0x2df], 0x3a
jne 0x4090ed
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e0]
push eax
push 3
jne 0x40913c
call edi
test eax, eax
je 0x40911d
cmp byte [ebp - 0x2df], 0x3a
jne 0x40911d
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x668]
mov byte [ebp - 0x668], 0x42
push eax
mov byte [ebp - 0x667], 0x3a
mov byte [ebp - 0x666], bl
call esi
jmp 0x409159
call edi
test eax, eax
je 0x409159
cmp byte [ebp - 0x2df], 0x3a
jne 0x409159
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2e8]
push eax
call esi
test eax, eax
je 0x40917d
cmp byte [ebp - 0x2e7], 0x3a
jne 0x40917d
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e8]
push eax
push 3
jne 0x4091cc
call edi
test eax, eax
je 0x4091ad
cmp byte [ebp - 0x2e7], 0x3a
jne 0x4091ad
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x670]
mov byte [ebp - 0x670], 0x42
push eax
mov byte [ebp - 0x66f], 0x3a
mov byte [ebp - 0x66e], bl
call esi
jmp 0x4091e9
call edi
test eax, eax
je 0x4091e9
cmp byte [ebp - 0x2e7], 0x3a
jne 0x4091e9
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x2f0]
push eax
call esi
test eax, eax
je 0x409225
cmp byte [ebp - 0x2ef], 0x3a
jne 0x409225
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f0]
push eax
push 3
jne 0x409274
call edi
test eax, eax
je 0x409255
cmp byte [ebp - 0x2ef], 0x3a
jne 0x409255
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x678]
mov byte [ebp - 0x678], 0x42
push eax
mov byte [ebp - 0x677], 0x3a
mov byte [ebp - 0x676], bl
call esi
jmp 0x409291
call edi
test eax, eax
je 0x409291
cmp byte [ebp - 0x2ef], 0x3a
jne 0x409291
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x2f8]
push eax
call esi
test eax, eax
je 0x4092bc
cmp byte [ebp - 0x2f7], 0x3a
jne 0x4092bc
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f8]
push eax
push 3
jne 0x40930b
call edi
test eax, eax
je 0x4092ec
cmp byte [ebp - 0x2f7], 0x3a
jne 0x4092ec
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x680]
mov byte [ebp - 0x680], 0x42
push eax
mov byte [ebp - 0x67f], 0x3a
mov byte [ebp - 0x67e], bl
call esi
jmp 0x409328
call edi
test eax, eax
je 0x409328
cmp byte [ebp - 0x2f7], 0x3a
jne 0x409328
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x300]
push eax
call esi
test eax, eax
je 0x409352
cmp byte [ebp - 0x2ff], 0x3a
jne 0x409352
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x300]
push eax
push 3
jne 0x4093a1
call edi
test eax, eax
je 0x409382
cmp byte [ebp - 0x2ff], 0x3a
jne 0x409382
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x688]
mov byte [ebp - 0x688], 0x42
push eax
mov byte [ebp - 0x687], 0x3a
mov byte [ebp - 0x686], bl
call esi
jmp 0x4093be
call edi
test eax, eax
je 0x4093be
cmp byte [ebp - 0x2ff], 0x3a
jne 0x4093be
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x308]
push eax
call esi
test eax, eax
je 0x409403
cmp byte [ebp - 0x307], 0x3a
jne 0x409403
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x308]
push eax
push 3
jne 0x409452
call edi
test eax, eax
je 0x409433
cmp byte [ebp - 0x307], 0x3a
jne 0x409433
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x690]
mov byte [ebp - 0x690], 0x42
push eax
mov byte [ebp - 0x68f], 0x3a
mov byte [ebp - 0x68e], bl
call esi
jmp 0x40946f
call edi
test eax, eax
je 0x40946f
cmp byte [ebp - 0x307], 0x3a
jne 0x40946f
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x310]
push eax
call esi
test eax, eax
je 0x4094a3
cmp byte [ebp - 0x30f], 0x3a
jne 0x4094a3
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x310]
push eax
push 3
jne 0x4094f2
call edi
test eax, eax
je 0x4094d3
cmp byte [ebp - 0x30f], 0x3a
jne 0x4094d3
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x698]
mov byte [ebp - 0x698], 0x42
push eax
mov byte [ebp - 0x697], 0x3a
mov byte [ebp - 0x696], bl
call esi
jmp 0x40950f
call edi
test eax, eax
je 0x40950f
cmp byte [ebp - 0x30f], 0x3a
jne 0x40950f
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x318]
push eax
call esi
test eax, eax
je 0x409542
cmp byte [ebp - 0x317], 0x3a
jne 0x409542
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x318]
push eax
push 3
jne 0x409591
call edi
test eax, eax
je 0x409572
cmp byte [ebp - 0x317], 0x3a
jne 0x409572
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a0]
mov byte [ebp - 0x6a0], 0x42
push eax
mov byte [ebp - 0x69f], 0x3a
mov byte [ebp - 0x69e], bl
call esi
jmp 0x4095ae
call edi
test eax, eax
je 0x4095ae
cmp byte [ebp - 0x317], 0x3a
jne 0x4095ae
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x320]
push eax
call esi
test eax, eax
je 0x4095e4
cmp byte [ebp - 0x31f], 0x3a
jne 0x4095e4
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x320]
push eax
push 3
jne 0x409633
call edi
test eax, eax
je 0x409614
cmp byte [ebp - 0x31f], 0x3a
jne 0x409614
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a8]
mov byte [ebp - 0x6a8], 0x42
push eax
mov byte [ebp - 0x6a7], 0x3a
mov byte [ebp - 0x6a6], bl
call esi
jmp 0x409650
call edi
test eax, eax
je 0x409650
cmp byte [ebp - 0x31f], 0x3a
jne 0x409650
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x328]
push eax
call esi
test eax, eax
je 0x40968c
cmp byte [ebp - 0x327], 0x3a
jne 0x40968c
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x328]
push eax
push 3
jne 0x4096db
call edi
test eax, eax
je 0x4096bc
cmp byte [ebp - 0x327], 0x3a
jne 0x4096bc
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b0]
mov byte [ebp - 0x6b0], 0x42
push eax
mov byte [ebp - 0x6af], 0x3a
mov byte [ebp - 0x6ae], bl
call esi
jmp 0x4096f8
call edi
test eax, eax
je 0x4096f8
cmp byte [ebp - 0x327], 0x3a
jne 0x4096f8
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x330]
push eax
call esi
test eax, eax
je 0x409730
cmp byte [ebp - 0x32f], 0x3a
jne 0x409730
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x330]
push eax
push 3
jne 0x40977f
call edi
test eax, eax
je 0x409760
cmp byte [ebp - 0x32f], 0x3a
jne 0x409760
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b8]
mov byte [ebp - 0x6b8], 0x42
push eax
mov byte [ebp - 0x6b7], 0x3a
mov byte [ebp - 0x6b6], bl
call esi
jmp 0x40979c
call edi
test eax, eax
je 0x40979c
cmp byte [ebp - 0x32f], 0x3a
jne 0x40979c
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x338]
push eax
call esi
test eax, eax
je 0x4097c7
cmp byte [ebp - 0x337], 0x3a
jne 0x4097c7
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x338]
push eax
push 3
jne 0x409816
call edi
test eax, eax
je 0x4097f7
cmp byte [ebp - 0x337], 0x3a
jne 0x4097f7
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c0]
mov byte [ebp - 0x6c0], 0x42
push eax
mov byte [ebp - 0x6bf], 0x3a
mov byte [ebp - 0x6be], bl
call esi
jmp 0x409833
call edi
test eax, eax
je 0x409833
cmp byte [ebp - 0x337], 0x3a
jne 0x409833
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x340]
push eax
call esi
test eax, eax
je 0x40985e
cmp byte [ebp - 0x33f], 0x3a
jne 0x40985e
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x340]
push eax
push 3
jne 0x4098ad
call edi
test eax, eax
je 0x40988e
cmp byte [ebp - 0x33f], 0x3a
jne 0x40988e
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c8]
mov byte [ebp - 0x6c8], 0x42
push eax
mov byte [ebp - 0x6c7], 0x3a
mov byte [ebp - 0x6c6], bl
call esi
jmp 0x4098ca
call edi
test eax, eax
je 0x4098ca
cmp byte [ebp - 0x33f], 0x3a
jne 0x4098ca
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x348]
push eax
call esi
test eax, eax
je 0x4098fd
cmp byte [ebp - 0x347], 0x3a
jne 0x4098fd
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x348]
push eax
push 3
jne 0x40994c
call edi
test eax, eax
je 0x40992d
cmp byte [ebp - 0x347], 0x3a
jne 0x40992d
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d0]
mov byte [ebp - 0x6d0], 0x42
push eax
mov byte [ebp - 0x6cf], 0x3a
mov byte [ebp - 0x6ce], bl
call esi
jmp 0x409969
call edi
test eax, eax
je 0x409969
cmp byte [ebp - 0x347], 0x3a
jne 0x409969
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x350]
push eax
call esi
test eax, eax
je 0x40999d
cmp byte [ebp - 0x34f], 0x3a
jne 0x40999d
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x350]
push eax
push 3
jne 0x4099ec
call edi
test eax, eax
je 0x4099cd
cmp byte [ebp - 0x34f], 0x3a
jne 0x4099cd
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d8]
mov byte [ebp - 0x6d8], 0x42
push eax
mov byte [ebp - 0x6d7], 0x3a
mov byte [ebp - 0x6d6], bl
call esi
jmp 0x409a09
call edi
test eax, eax
je 0x409a09
cmp byte [ebp - 0x34f], 0x3a
jne 0x409a09
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x358]
push eax
call esi
test eax, eax
je 0x409a3d
cmp byte [ebp - 0x357], 0x3a
jne 0x409a3d
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x358]
push eax
push 3
jne 0x409a8c
call edi
test eax, eax
je 0x409a6d
cmp byte [ebp - 0x357], 0x3a
jne 0x409a6d
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e0]
mov byte [ebp - 0x6e0], 0x42
push eax
mov byte [ebp - 0x6df], 0x3a
mov byte [ebp - 0x6de], bl
call esi
jmp 0x409aa9
call edi
test eax, eax
je 0x409aa9
cmp byte [ebp - 0x357], 0x3a
jne 0x409aa9
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x360]
push eax
call esi
test eax, eax
je 0x409adc
cmp byte [ebp - 0x35f], 0x3a
jne 0x409adc
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x360]
push eax
push 3
jne 0x409b2b
call edi
test eax, eax
je 0x409b0c
cmp byte [ebp - 0x35f], 0x3a
jne 0x409b0c
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e8]
mov byte [ebp - 0x6e8], 0x42
push eax
mov byte [ebp - 0x6e7], 0x3a
mov byte [ebp - 0x6e6], bl
call esi
jmp 0x409b48
call edi
test eax, eax
je 0x409b48
cmp byte [ebp - 0x35f], 0x3a
jne 0x409b48
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x368]
push eax
call esi
test eax, eax
je 0x409b75
cmp byte [ebp - 0x367], 0x3a
jne 0x409b75
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x368]
push eax
push 3
jne 0x409bc4
call edi
test eax, eax
je 0x409ba5
cmp byte [ebp - 0x367], 0x3a
jne 0x409ba5
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f0]
mov byte [ebp - 0x6f0], 0x42
push eax
mov byte [ebp - 0x6ef], 0x3a
mov byte [ebp - 0x6ee], bl
call esi
jmp 0x409be1
call edi
test eax, eax
je 0x409be1
cmp byte [ebp - 0x367], 0x3a
jne 0x409be1
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x370]
push eax
call esi
test eax, eax
je 0x409c13
cmp byte [ebp - 0x36f], 0x3a
jne 0x409c13
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x370]
push eax
push 3
jne 0x409c62
call edi
test eax, eax
je 0x409c43
cmp byte [ebp - 0x36f], 0x3a
jne 0x409c43
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f8]
mov byte [ebp - 0x6f8], 0x42
push eax
mov byte [ebp - 0x6f7], 0x3a
mov byte [ebp - 0x6f6], bl
call esi
jmp 0x409c7f
call edi
test eax, eax
je 0x409c7f
cmp byte [ebp - 0x36f], 0x3a
jne 0x409c7f
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x378]
push eax
call esi
test eax, eax
je 0x409cb1
cmp byte [ebp - 0x377], 0x3a
jne 0x409cb1
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x378]
push eax
push 3
jne 0x409d00
call edi
test eax, eax
je 0x409ce1
cmp byte [ebp - 0x377], 0x3a
jne 0x409ce1
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x700]
mov byte [ebp - 0x700], 0x42
push eax
mov byte [ebp - 0x6ff], 0x3a
mov byte [ebp - 0x6fe], bl
call esi
jmp 0x409d1d
call edi
test eax, eax
je 0x409d1d
cmp byte [ebp - 0x377], 0x3a
jne 0x409d1d
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x380]
push eax
call esi
test eax, eax
je 0x409d54
cmp byte [ebp - 0x37f], 0x3a
jne 0x409d54
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x380]
push eax
push 3
jne 0x409da3
call edi
test eax, eax
je 0x409d84
cmp byte [ebp - 0x37f], 0x3a
jne 0x409d84
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x708]
mov byte [ebp - 0x708], 0x42
push eax
mov byte [ebp - 0x707], 0x3a
mov byte [ebp - 0x706], bl
call esi
jmp 0x409dc0
call edi
test eax, eax
je 0x409dc0
cmp byte [ebp - 0x37f], 0x3a
jne 0x409dc0
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x388]
push eax
call esi
test eax, eax
je 0x409df2
cmp byte [ebp - 0x387], 0x3a
jne 0x409df2
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x388]
push eax
push 3
jne 0x409e41
call edi
test eax, eax
je 0x409e22
cmp byte [ebp - 0x387], 0x3a
jne 0x409e22
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x710]
mov byte [ebp - 0x710], 0x42
push eax
mov byte [ebp - 0x70f], 0x3a
mov byte [ebp - 0x70e], bl
call esi
jmp 0x409e5e
call edi
test eax, eax
je 0x409e5e
cmp byte [ebp - 0x387], 0x3a
jne 0x409e5e
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x390]
push eax
call esi
test eax, eax
je 0x409e89
cmp byte [ebp - 0x38f], 0x3a
jne 0x409e89
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x390]
push eax
push 3
jne 0x409ed8
call edi
test eax, eax
je 0x409eb9
cmp byte [ebp - 0x38f], 0x3a
jne 0x409eb9
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x718]
mov byte [ebp - 0x718], 0x42
push eax
mov byte [ebp - 0x717], 0x3a
mov byte [ebp - 0x716], bl
call esi
jmp 0x409ef5
call edi
test eax, eax
je 0x409ef5
cmp byte [ebp - 0x38f], 0x3a
jne 0x409ef5
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x398]
push eax
call esi
test eax, eax
je 0x409f27
cmp byte [ebp - 0x397], 0x3a
jne 0x409f27
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x398]
push eax
push 3
jne 0x409f76
call edi
test eax, eax
je 0x409f57
cmp byte [ebp - 0x397], 0x3a
jne 0x409f57
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x720]
mov byte [ebp - 0x720], 0x42
push eax
mov byte [ebp - 0x71f], 0x3a
mov byte [ebp - 0x71e], bl
call esi
jmp 0x409f93
call edi
test eax, eax
je 0x409f93
cmp byte [ebp - 0x397], 0x3a
jne 0x409f93
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x3a0]
push eax
call esi
test eax, eax
je 0x409fc6
cmp byte [ebp - 0x39f], 0x3a
jne 0x409fc6
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a0]
push eax
push 3
jne 0x40a015
call edi
test eax, eax
je 0x409ff6
cmp byte [ebp - 0x39f], 0x3a
jne 0x409ff6
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x728]
mov byte [ebp - 0x728], 0x42
push eax
mov byte [ebp - 0x727], 0x3a
mov byte [ebp - 0x726], bl
call esi
jmp 0x40a032
call edi
test eax, eax
je 0x40a032
cmp byte [ebp - 0x39f], 0x3a
jne 0x40a032
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x3a8]
push eax
call esi
test eax, eax
je 0x40a066
cmp byte [ebp - 0x3a7], 0x3a
jne 0x40a066
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a8]
push eax
push 3
jne 0x40a0b5
call edi
test eax, eax
je 0x40a096
cmp byte [ebp - 0x3a7], 0x3a
jne 0x40a096
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x730]
mov byte [ebp - 0x730], 0x42
push eax
mov byte [ebp - 0x72f], 0x3a
mov byte [ebp - 0x72e], bl
call esi
jmp 0x40a0d2
call edi
test eax, eax
je 0x40a0d2
cmp byte [ebp - 0x3a7], 0x3a
jne 0x40a0d2
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10