Function at 0x401000
Capabilities:
Allocate thread local storage
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x958
push ebx
lea eax, [ebp + 0x14]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
xor ebx, ebx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
jne 0x402058
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401067
lea eax, [ebp - 0x600]
push eax
push 3
call esi
test eax, eax
je 0x401067
cmp byte [ebp - 0x5ff], 0x3a
jne 0x401067
movzx eax, byte [ebp - 0x600]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 8]
push eax
push 3
jne 0x4010ae
call esi
test eax, eax
je 0x40108f
cmp byte [ebp - 7], 0x3a
jne 0x40108f
movzx eax, byte [ebp - 8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x318]
mov byte [ebp - 0x318], 0x42
push eax
mov byte [ebp - 0x317], 0x3a
mov byte [ebp - 0x316], bl
call edi
jmp 0x4010c6
call esi
test eax, eax
je 0x4010c6
cmp byte [ebp - 7], 0x3a
jne 0x4010c6
movzx eax, byte [ebp - 8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x4010e4
cmp byte [ebp - 7], 0x3a
jne 0x4010e4
movzx eax, byte [ebp - 8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40111c
lea eax, [ebp - 0x8c4]
push eax
push 3
call esi
test eax, eax
je 0x40111c
cmp byte [ebp - 0x8c3], 0x3a
jne 0x40111c
movzx eax, byte [ebp - 0x8c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x180]
push eax
push 3
jne 0x40116c
call esi
test eax, eax
je 0x40114d
cmp byte [ebp - 0x17f], 0x3a
jne 0x40114d
movzx eax, byte [ebp - 0x180]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x304]
mov byte [ebp - 0x304], 0x42
push eax
mov byte [ebp - 0x303], 0x3a
mov byte [ebp - 0x302], bl
call edi
jmp 0x40118a
call esi
test eax, eax
je 0x40118a
cmp byte [ebp - 0x17f], 0x3a
jne 0x40118a
movzx eax, byte [ebp - 0x180]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x180]
push eax
push 3
call esi
test eax, eax
je 0x4011b1
cmp byte [ebp - 0x17f], 0x3a
jne 0x4011b1
movzx eax, byte [ebp - 0x180]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4011e9
lea eax, [ebp - 0x5f8]
push eax
push 3
call esi
test eax, eax
je 0x4011e9
cmp byte [ebp - 0x5f7], 0x3a
jne 0x4011e9
movzx eax, byte [ebp - 0x5f8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x401230
call esi
test eax, eax
je 0x401211
cmp byte [ebp - 0xf], 0x3a
jne 0x401211
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x300]
mov byte [ebp - 0x300], 0x42
push eax
mov byte [ebp - 0x2ff], 0x3a
mov byte [ebp - 0x2fe], bl
call edi
jmp 0x401248
call esi
test eax, eax
je 0x401248
cmp byte [ebp - 0xf], 0x3a
jne 0x401248
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x401266
cmp byte [ebp - 0xf], 0x3a
jne 0x401266
movzx eax, byte [ebp - 0x10]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4012a9
lea eax, [ebp - 0x8dc]
push eax
push 3
call esi
test eax, eax
je 0x4012a9
cmp byte [ebp - 0x8db], 0x3a
jne 0x4012a9
movzx eax, byte [ebp - 0x8dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x298]
push eax
push 3
jne 0x4012f9
call esi
test eax, eax
je 0x4012da
cmp byte [ebp - 0x297], 0x3a
jne 0x4012da
movzx eax, byte [ebp - 0x298]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x58c]
mov byte [ebp - 0x58c], 0x42
push eax
mov byte [ebp - 0x58b], 0x3a
mov byte [ebp - 0x58a], bl
call edi
jmp 0x401317
call esi
test eax, eax
je 0x401317
cmp byte [ebp - 0x297], 0x3a
jne 0x401317
movzx eax, byte [ebp - 0x298]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x298]
push eax
push 3
call esi
test eax, eax
je 0x40133e
cmp byte [ebp - 0x297], 0x3a
jne 0x40133e
movzx eax, byte [ebp - 0x298]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40137f
lea eax, [ebp - 0x5f0]
push eax
push 3
call esi
test eax, eax
je 0x40137f
cmp byte [ebp - 0x5ef], 0x3a
jne 0x40137f
movzx eax, byte [ebp - 0x5f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18]
push eax
push 3
jne 0x4013c6
call esi
test eax, eax
je 0x4013a7
cmp byte [ebp - 0x17], 0x3a
jne 0x4013a7
movzx eax, byte [ebp - 0x18]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x30c]
mov byte [ebp - 0x30c], 0x42
push eax
mov byte [ebp - 0x30b], 0x3a
mov byte [ebp - 0x30a], bl
call edi
jmp 0x4013de
call esi
test eax, eax
je 0x4013de
cmp byte [ebp - 0x17], 0x3a
jne 0x4013de
movzx eax, byte [ebp - 0x18]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18]
push eax
push 3
call esi
test eax, eax
je 0x4013fc
cmp byte [ebp - 0x17], 0x3a
jne 0x4013fc
movzx eax, byte [ebp - 0x18]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401435
lea eax, [ebp - 0x780]
push eax
push 3
call esi
test eax, eax
je 0x401435
cmp byte [ebp - 0x77f], 0x3a
jne 0x401435
movzx eax, byte [ebp - 0x780]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x188]
push eax
push 3
jne 0x401485
call esi
test eax, eax
je 0x401466
cmp byte [ebp - 0x187], 0x3a
jne 0x401466
movzx eax, byte [ebp - 0x188]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x47c]
mov byte [ebp - 0x47c], 0x42
push eax
mov byte [ebp - 0x47b], 0x3a
mov byte [ebp - 0x47a], bl
call edi
jmp 0x4014a3
call esi
test eax, eax
je 0x4014a3
cmp byte [ebp - 0x187], 0x3a
jne 0x4014a3
movzx eax, byte [ebp - 0x188]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x188]
push eax
push 3
call esi
test eax, eax
je 0x4014ca
cmp byte [ebp - 0x187], 0x3a
jne 0x4014ca
movzx eax, byte [ebp - 0x188]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401509
lea eax, [ebp - 0x608]
push eax
push 3
call esi
test eax, eax
je 0x401509
cmp byte [ebp - 0x607], 0x3a
jne 0x401509
movzx eax, byte [ebp - 0x608]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20]
push eax
push 3
jne 0x401550
call esi
test eax, eax
je 0x401531
cmp byte [ebp - 0x1f], 0x3a
jne 0x401531
movzx eax, byte [ebp - 0x20]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x314]
mov byte [ebp - 0x314], 0x42
push eax
mov byte [ebp - 0x313], 0x3a
mov byte [ebp - 0x312], bl
call edi
jmp 0x401568
call esi
test eax, eax
je 0x401568
cmp byte [ebp - 0x1f], 0x3a
jne 0x401568
movzx eax, byte [ebp - 0x20]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x20]
push eax
push 3
call esi
test eax, eax
je 0x401586
cmp byte [ebp - 0x1f], 0x3a
jne 0x401586
movzx eax, byte [ebp - 0x20]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4015bf
lea eax, [ebp - 0x840]
push eax
push 3
call esi
test eax, eax
je 0x4015bf
cmp byte [ebp - 0x83f], 0x3a
jne 0x4015bf
movzx eax, byte [ebp - 0x840]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x240]
push eax
push 3
jne 0x40160f
call esi
test eax, eax
je 0x4015f0
cmp byte [ebp - 0x23f], 0x3a
jne 0x4015f0
movzx eax, byte [ebp - 0x240]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x534]
mov byte [ebp - 0x534], 0x42
push eax
mov byte [ebp - 0x533], 0x3a
mov byte [ebp - 0x532], bl
call edi
jmp 0x40162d
call esi
test eax, eax
je 0x40162d
cmp byte [ebp - 0x23f], 0x3a
jne 0x40162d
movzx eax, byte [ebp - 0x240]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x240]
push eax
push 3
call esi
test eax, eax
je 0x401654
cmp byte [ebp - 0x23f], 0x3a
jne 0x401654
movzx eax, byte [ebp - 0x240]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40168c
lea eax, [ebp - 0x610]
push eax
push 3
call esi
test eax, eax
je 0x40168c
cmp byte [ebp - 0x60f], 0x3a
jne 0x40168c
movzx eax, byte [ebp - 0x610]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28]
push eax
push 3
jne 0x4016d3
call esi
test eax, eax
je 0x4016b4
cmp byte [ebp - 0x27], 0x3a
jne 0x4016b4
movzx eax, byte [ebp - 0x28]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x31c]
mov byte [ebp - 0x31c], 0x42
push eax
mov byte [ebp - 0x31b], 0x3a
mov byte [ebp - 0x31a], bl
call edi
jmp 0x4016eb
call esi
test eax, eax
je 0x4016eb
cmp byte [ebp - 0x27], 0x3a
jne 0x4016eb
movzx eax, byte [ebp - 0x28]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x28]
push eax
push 3
call esi
test eax, eax
je 0x401709
cmp byte [ebp - 0x27], 0x3a
jne 0x401709
movzx eax, byte [ebp - 0x28]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401742
lea eax, [ebp - 0x788]
push eax
push 3
call esi
test eax, eax
je 0x401742
cmp byte [ebp - 0x787], 0x3a
jne 0x401742
movzx eax, byte [ebp - 0x788]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x190]
push eax
push 3
jne 0x401792
call esi
test eax, eax
je 0x401773
cmp byte [ebp - 0x18f], 0x3a
jne 0x401773
movzx eax, byte [ebp - 0x190]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x484]
mov byte [ebp - 0x484], 0x42
push eax
mov byte [ebp - 0x483], 0x3a
mov byte [ebp - 0x482], bl
call edi
jmp 0x4017b0
call esi
test eax, eax
je 0x4017b0
cmp byte [ebp - 0x18f], 0x3a
jne 0x4017b0
movzx eax, byte [ebp - 0x190]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x190]
push eax
push 3
call esi
test eax, eax
je 0x4017d7
cmp byte [ebp - 0x18f], 0x3a
jne 0x4017d7
movzx eax, byte [ebp - 0x190]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40180e
lea eax, [ebp - 0x618]
push eax
push 3
call esi
test eax, eax
je 0x40180e
cmp byte [ebp - 0x617], 0x3a
jne 0x40180e
movzx eax, byte [ebp - 0x618]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30]
push eax
push 3
jne 0x401855
call esi
test eax, eax
je 0x401836
cmp byte [ebp - 0x2f], 0x3a
jne 0x401836
movzx eax, byte [ebp - 0x30]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x324]
mov byte [ebp - 0x324], 0x42
push eax
mov byte [ebp - 0x323], 0x3a
mov byte [ebp - 0x322], bl
call edi
jmp 0x40186d
call esi
test eax, eax
je 0x40186d
cmp byte [ebp - 0x2f], 0x3a
jne 0x40186d
movzx eax, byte [ebp - 0x30]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x30]
push eax
push 3
call esi
test eax, eax
je 0x40188b
cmp byte [ebp - 0x2f], 0x3a
jne 0x40188b
movzx eax, byte [ebp - 0x30]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4018c5
lea eax, [ebp - 0x8a0]
push eax
push 3
call esi
test eax, eax
je 0x4018c5
cmp byte [ebp - 0x89f], 0x3a
jne 0x4018c5
movzx eax, byte [ebp - 0x8a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c8]
push eax
push 3
jne 0x401915
call esi
test eax, eax
je 0x4018f6
cmp byte [ebp - 0x2c7], 0x3a
jne 0x4018f6
movzx eax, byte [ebp - 0x2c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5bc]
mov byte [ebp - 0x5bc], 0x42
push eax
mov byte [ebp - 0x5bb], 0x3a
mov byte [ebp - 0x5ba], bl
call edi
jmp 0x401933
call esi
test eax, eax
je 0x401933
cmp byte [ebp - 0x2c7], 0x3a
jne 0x401933
movzx eax, byte [ebp - 0x2c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2c8]
push eax
push 3
call esi
test eax, eax
je 0x40195a
cmp byte [ebp - 0x2c7], 0x3a
jne 0x40195a
movzx eax, byte [ebp - 0x2c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401993
lea eax, [ebp - 0x620]
push eax
push 3
call esi
test eax, eax
je 0x401993
cmp byte [ebp - 0x61f], 0x3a
jne 0x401993
movzx eax, byte [ebp - 0x620]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38]
push eax
push 3
jne 0x4019da
call esi
test eax, eax
je 0x4019bb
cmp byte [ebp - 0x37], 0x3a
jne 0x4019bb
movzx eax, byte [ebp - 0x38]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x32c]
mov byte [ebp - 0x32c], 0x42
push eax
mov byte [ebp - 0x32b], 0x3a
mov byte [ebp - 0x32a], bl
call edi
jmp 0x4019f2
call esi
test eax, eax
je 0x4019f2
cmp byte [ebp - 0x37], 0x3a
jne 0x4019f2
movzx eax, byte [ebp - 0x38]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x38]
push eax
push 3
call esi
test eax, eax
je 0x401a10
cmp byte [ebp - 0x37], 0x3a
jne 0x401a10
movzx eax, byte [ebp - 0x38]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401a49
lea eax, [ebp - 0x790]
push eax
push 3
call esi
test eax, eax
je 0x401a49
cmp byte [ebp - 0x78f], 0x3a
jne 0x401a49
movzx eax, byte [ebp - 0x790]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x198]
push eax
push 3
jne 0x401a99
call esi
test eax, eax
je 0x401a7a
cmp byte [ebp - 0x197], 0x3a
jne 0x401a7a
movzx eax, byte [ebp - 0x198]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x48c]
mov byte [ebp - 0x48c], 0x42
push eax
mov byte [ebp - 0x48b], 0x3a
mov byte [ebp - 0x48a], bl
call edi
jmp 0x401ab7
call esi
test eax, eax
je 0x401ab7
cmp byte [ebp - 0x197], 0x3a
jne 0x401ab7
movzx eax, byte [ebp - 0x198]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x198]
push eax
push 3
call esi
test eax, eax
je 0x401ade
cmp byte [ebp - 0x197], 0x3a
jne 0x401ade
movzx eax, byte [ebp - 0x198]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401b16
lea eax, [ebp - 0x628]
push eax
push 3
call esi
test eax, eax
je 0x401b16
cmp byte [ebp - 0x627], 0x3a
jne 0x401b16
movzx eax, byte [ebp - 0x628]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x40]
push eax
push 3
jne 0x401b5d
call esi
test eax, eax
je 0x401b3e
cmp byte [ebp - 0x3f], 0x3a
jne 0x401b3e
movzx eax, byte [ebp - 0x40]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x334]
mov byte [ebp - 0x334], 0x42
push eax
mov byte [ebp - 0x333], 0x3a
mov byte [ebp - 0x332], bl
call edi
jmp 0x401b75
call esi
test eax, eax
je 0x401b75
cmp byte [ebp - 0x3f], 0x3a
jne 0x401b75
movzx eax, byte [ebp - 0x40]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x40]
push eax
push 3
call esi
test eax, eax
je 0x401b93
cmp byte [ebp - 0x3f], 0x3a
jne 0x401b93
movzx eax, byte [ebp - 0x40]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401bce
lea eax, [ebp - 0x848]
push eax
push 3
call esi
test eax, eax
je 0x401bce
cmp byte [ebp - 0x847], 0x3a
jne 0x401bce
movzx eax, byte [ebp - 0x848]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x248]
push eax
push 3
jne 0x401c1e
call esi
test eax, eax
je 0x401bff
cmp byte [ebp - 0x247], 0x3a
jne 0x401bff
movzx eax, byte [ebp - 0x248]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x53c]
mov byte [ebp - 0x53c], 0x42
push eax
mov byte [ebp - 0x53b], 0x3a
mov byte [ebp - 0x53a], bl
call edi
jmp 0x401c3c
call esi
test eax, eax
je 0x401c3c
cmp byte [ebp - 0x247], 0x3a
jne 0x401c3c
movzx eax, byte [ebp - 0x248]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x248]
push eax
push 3
call esi
test eax, eax
je 0x401c63
cmp byte [ebp - 0x247], 0x3a
jne 0x401c63
movzx eax, byte [ebp - 0x248]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401ca5
lea eax, [ebp - 0x630]
push eax
push 3
call esi
test eax, eax
je 0x401ca5
cmp byte [ebp - 0x62f], 0x3a
jne 0x401ca5
movzx eax, byte [ebp - 0x630]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x48]
push eax
push 3
jne 0x401cec
call esi
test eax, eax
je 0x401ccd
cmp byte [ebp - 0x47], 0x3a
jne 0x401ccd
movzx eax, byte [ebp - 0x48]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x33c]
mov byte [ebp - 0x33c], 0x42
push eax
mov byte [ebp - 0x33b], 0x3a
mov byte [ebp - 0x33a], bl
call edi
jmp 0x401d04
call esi
test eax, eax
je 0x401d04
cmp byte [ebp - 0x47], 0x3a
jne 0x401d04
movzx eax, byte [ebp - 0x48]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x48]
push eax
push 3
call esi
test eax, eax
je 0x401d22
cmp byte [ebp - 0x47], 0x3a
jne 0x401d22
movzx eax, byte [ebp - 0x48]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401d5c
lea eax, [ebp - 0x798]
push eax
push 3
call esi
test eax, eax
je 0x401d5c
cmp byte [ebp - 0x797], 0x3a
jne 0x401d5c
movzx eax, byte [ebp - 0x798]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a0]
push eax
push 3
jne 0x401dac
call esi
test eax, eax
je 0x401d8d
cmp byte [ebp - 0x19f], 0x3a
jne 0x401d8d
movzx eax, byte [ebp - 0x1a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x494]
mov byte [ebp - 0x494], 0x42
push eax
mov byte [ebp - 0x493], 0x3a
mov byte [ebp - 0x492], bl
call edi
jmp 0x401dca
call esi
test eax, eax
je 0x401dca
cmp byte [ebp - 0x19f], 0x3a
jne 0x401dca
movzx eax, byte [ebp - 0x1a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1a0]
push eax
push 3
call esi
test eax, eax
je 0x401df1
cmp byte [ebp - 0x19f], 0x3a
jne 0x401df1
movzx eax, byte [ebp - 0x1a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401e29
lea eax, [ebp - 0x638]
push eax
push 3
call esi
test eax, eax
je 0x401e29
cmp byte [ebp - 0x637], 0x3a
jne 0x401e29
movzx eax, byte [ebp - 0x638]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x50]
push eax
push 3
jne 0x401e70
call esi
test eax, eax
je 0x401e51
cmp byte [ebp - 0x4f], 0x3a
jne 0x401e51
movzx eax, byte [ebp - 0x50]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x344]
mov byte [ebp - 0x344], 0x42
push eax
mov byte [ebp - 0x343], 0x3a
mov byte [ebp - 0x342], bl
call edi
jmp 0x401e88
call esi
test eax, eax
je 0x401e88
cmp byte [ebp - 0x4f], 0x3a
jne 0x401e88
movzx eax, byte [ebp - 0x50]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x50]
push eax
push 3
call esi
test eax, eax
je 0x401ea6
cmp byte [ebp - 0x4f], 0x3a
jne 0x401ea6
movzx eax, byte [ebp - 0x50]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401ee1
lea eax, [ebp - 0x8d0]
push eax
push 3
call esi
test eax, eax
je 0x401ee1
cmp byte [ebp - 0x8cf], 0x3a
jne 0x401ee1
movzx eax, byte [ebp - 0x8d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a0]
push eax
push 3
jne 0x401f31
call esi
test eax, eax
je 0x401f12
cmp byte [ebp - 0x29f], 0x3a
jne 0x401f12
movzx eax, byte [ebp - 0x2a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x594]
mov byte [ebp - 0x594], 0x42
push eax
mov byte [ebp - 0x593], 0x3a
mov byte [ebp - 0x592], bl
call edi
jmp 0x401f4f
call esi
test eax, eax
je 0x401f4f
cmp byte [ebp - 0x29f], 0x3a
jne 0x401f4f
movzx eax, byte [ebp - 0x2a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2a0]
push eax
push 3
call esi
test eax, eax
je 0x401f76
cmp byte [ebp - 0x29f], 0x3a
jne 0x401f76
movzx eax, byte [ebp - 0x2a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x401fdb
lea eax, [ebp - 0x640]
push eax
push 3
call esi
test eax, eax
je 0x401fdb
cmp byte [ebp - 0x63f], 0x3a
jne 0x401fdb
movzx eax, byte [ebp - 0x640]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x58]
push eax
push 3
jne 0x402022
call esi
test eax, eax
je 0x402003
cmp byte [ebp - 0x57], 0x3a
jne 0x402003
movzx eax, byte [ebp - 0x58]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x34c]
mov byte [ebp - 0x34c], 0x42
push eax
mov byte [ebp - 0x34b], 0x3a
mov byte [ebp - 0x34a], bl
call edi
jmp 0x40203a
call esi
test eax, eax
je 0x40203a
cmp byte [ebp - 0x57], 0x3a
jne 0x40203a
movzx eax, byte [ebp - 0x58]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x58]
push eax
push 3
call esi
test eax, eax
je 0x402058
cmp byte [ebp - 0x57], 0x3a
jne 0x402058
movzx eax, byte [ebp - 0x58]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push 0x21c
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
je 0x402070
mov ecx, eax
call fcn.00418b11
jmp 0x402072
xor eax, eax
lea ecx, [ebp - 0x8f8]
mov dword [0x4513d0], eax
call fcn.0041c515
lea ecx, [ebp - 0x8ec]
call fcn.00434ce4
lea ecx, [ebp - 0x8ec]
call fcn.00434d19
lea eax, [ebp + 0x14]
test eax, eax
jne 0x403166
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4020e5
lea eax, [ebp - 0x7a0]
push eax
push 3
call esi
test eax, eax
je 0x4020e5
cmp byte [ebp - 0x79f], 0x3a
jne 0x4020e5
movzx eax, byte [ebp - 0x7a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a8]
push eax
push 3
jne 0x402135
call esi
test eax, eax
je 0x402116
cmp byte [ebp - 0x1a7], 0x3a
jne 0x402116
movzx eax, byte [ebp - 0x1a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x49c]
mov byte [ebp - 0x49c], 0x42
push eax
mov byte [ebp - 0x49b], 0x3a
mov byte [ebp - 0x49a], bl
call edi
jmp 0x402153
call esi
test eax, eax
je 0x402153
cmp byte [ebp - 0x1a7], 0x3a
jne 0x402153
movzx eax, byte [ebp - 0x1a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1a8]
push eax
push 3
call esi
test eax, eax
je 0x40217a
cmp byte [ebp - 0x1a7], 0x3a
jne 0x40217a
movzx eax, byte [ebp - 0x1a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4021b2
lea eax, [ebp - 0x648]
push eax
push 3
call esi
test eax, eax
je 0x4021b2
cmp byte [ebp - 0x647], 0x3a
jne 0x4021b2
movzx eax, byte [ebp - 0x648]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x60]
push eax
push 3
jne 0x4021f9
call esi
test eax, eax
je 0x4021da
cmp byte [ebp - 0x5f], 0x3a
jne 0x4021da
movzx eax, byte [ebp - 0x60]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x354]
mov byte [ebp - 0x354], 0x42
push eax
mov byte [ebp - 0x353], 0x3a
mov byte [ebp - 0x352], bl
call edi
jmp 0x402211
call esi
test eax, eax
je 0x402211
cmp byte [ebp - 0x5f], 0x3a
jne 0x402211
movzx eax, byte [ebp - 0x60]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x60]
push eax
push 3
call esi
test eax, eax
je 0x40222f
cmp byte [ebp - 0x5f], 0x3a
jne 0x40222f
movzx eax, byte [ebp - 0x60]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402267
lea eax, [ebp - 0x850]
push eax
push 3
call esi
test eax, eax
je 0x402267
cmp byte [ebp - 0x84f], 0x3a
jne 0x402267
movzx eax, byte [ebp - 0x850]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x250]
push eax
push 3
jne 0x4022b7
call esi
test eax, eax
je 0x402298
cmp byte [ebp - 0x24f], 0x3a
jne 0x402298
movzx eax, byte [ebp - 0x250]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x544]
mov byte [ebp - 0x544], 0x42
push eax
mov byte [ebp - 0x543], 0x3a
mov byte [ebp - 0x542], bl
call edi
jmp 0x4022d5
call esi
test eax, eax
je 0x4022d5
cmp byte [ebp - 0x24f], 0x3a
jne 0x4022d5
movzx eax, byte [ebp - 0x250]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x250]
push eax
push 3
call esi
test eax, eax
je 0x4022fc
cmp byte [ebp - 0x24f], 0x3a
jne 0x4022fc
movzx eax, byte [ebp - 0x250]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40233f
lea eax, [ebp - 0x650]
push eax
push 3
call esi
test eax, eax
je 0x40233f
cmp byte [ebp - 0x64f], 0x3a
jne 0x40233f
movzx eax, byte [ebp - 0x650]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x68]
push eax
push 3
jne 0x402386
call esi
test eax, eax
je 0x402367
cmp byte [ebp - 0x67], 0x3a
jne 0x402367
movzx eax, byte [ebp - 0x68]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x35c]
mov byte [ebp - 0x35c], 0x42
push eax
mov byte [ebp - 0x35b], 0x3a
mov byte [ebp - 0x35a], bl
call edi
jmp 0x40239e
call esi
test eax, eax
je 0x40239e
cmp byte [ebp - 0x67], 0x3a
jne 0x40239e
movzx eax, byte [ebp - 0x68]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x68]
push eax
push 3
call esi
test eax, eax
je 0x4023bc
cmp byte [ebp - 0x67], 0x3a
jne 0x4023bc
movzx eax, byte [ebp - 0x68]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4023fd
lea eax, [ebp - 0x7a8]
push eax
push 3
call esi
test eax, eax
je 0x4023fd
cmp byte [ebp - 0x7a7], 0x3a
jne 0x4023fd
movzx eax, byte [ebp - 0x7a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b0]
push eax
push 3
jne 0x40244d
call esi
test eax, eax
je 0x40242e
cmp byte [ebp - 0x1af], 0x3a
jne 0x40242e
movzx eax, byte [ebp - 0x1b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4a4]
mov byte [ebp - 0x4a4], 0x42
push eax
mov byte [ebp - 0x4a3], 0x3a
mov byte [ebp - 0x4a2], bl
call edi
jmp 0x40246b
call esi
test eax, eax
je 0x40246b
cmp byte [ebp - 0x1af], 0x3a
jne 0x40246b
movzx eax, byte [ebp - 0x1b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1b0]
push eax
push 3
call esi
test eax, eax
je 0x402492
cmp byte [ebp - 0x1af], 0x3a
jne 0x402492
movzx eax, byte [ebp - 0x1b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4024cb
lea eax, [ebp - 0x658]
push eax
push 3
call esi
test eax, eax
je 0x4024cb
cmp byte [ebp - 0x657], 0x3a
jne 0x4024cb
movzx eax, byte [ebp - 0x658]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x70]
push eax
push 3
jne 0x402512
call esi
test eax, eax
je 0x4024f3
cmp byte [ebp - 0x6f], 0x3a
jne 0x4024f3
movzx eax, byte [ebp - 0x70]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x364]
mov byte [ebp - 0x364], 0x42
push eax
mov byte [ebp - 0x363], 0x3a
mov byte [ebp - 0x362], bl
call edi
jmp 0x40252a
call esi
test eax, eax
je 0x40252a
cmp byte [ebp - 0x6f], 0x3a
jne 0x40252a
movzx eax, byte [ebp - 0x70]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x70]
push eax
push 3
call esi
test eax, eax
je 0x402548
cmp byte [ebp - 0x6f], 0x3a
jne 0x402548
movzx eax, byte [ebp - 0x70]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402587
lea eax, [ebp - 0x8a8]
push eax
push 3
call esi
test eax, eax
je 0x402587
cmp byte [ebp - 0x8a7], 0x3a
jne 0x402587
movzx eax, byte [ebp - 0x8a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e0]
push eax
push 3
jne 0x4025d7
call esi
test eax, eax
je 0x4025b8
cmp byte [ebp - 0x2df], 0x3a
jne 0x4025b8
movzx eax, byte [ebp - 0x2e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5d4]
mov byte [ebp - 0x5d4], 0x42
push eax
mov byte [ebp - 0x5d3], 0x3a
mov byte [ebp - 0x5d2], bl
call edi
jmp 0x4025f5
call esi
test eax, eax
je 0x4025f5
cmp byte [ebp - 0x2df], 0x3a
jne 0x4025f5
movzx eax, byte [ebp - 0x2e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2e0]
push eax
push 3
call esi
test eax, eax
je 0x40261c
cmp byte [ebp - 0x2df], 0x3a
jne 0x40261c
movzx eax, byte [ebp - 0x2e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402655
lea eax, [ebp - 0x660]
push eax
push 3
call esi
test eax, eax
je 0x402655
cmp byte [ebp - 0x65f], 0x3a
jne 0x402655
movzx eax, byte [ebp - 0x660]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x78]
push eax
push 3
jne 0x40269c
call esi
test eax, eax
je 0x40267d
cmp byte [ebp - 0x77], 0x3a
jne 0x40267d
movzx eax, byte [ebp - 0x78]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x36c]
mov byte [ebp - 0x36c], 0x42
push eax
mov byte [ebp - 0x36b], 0x3a
mov byte [ebp - 0x36a], bl
call edi
jmp 0x4026b4
call esi
test eax, eax
je 0x4026b4
cmp byte [ebp - 0x77], 0x3a
jne 0x4026b4
movzx eax, byte [ebp - 0x78]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x78]
push eax
push 3
call esi
test eax, eax
je 0x4026d2
cmp byte [ebp - 0x77], 0x3a
jne 0x4026d2
movzx eax, byte [ebp - 0x78]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40270a
lea eax, [ebp - 0x7b0]
push eax
push 3
call esi
test eax, eax
je 0x40270a
cmp byte [ebp - 0x7af], 0x3a
jne 0x40270a
movzx eax, byte [ebp - 0x7b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b8]
push eax
push 3
jne 0x40275a
call esi
test eax, eax
je 0x40273b
cmp byte [ebp - 0x1b7], 0x3a
jne 0x40273b
movzx eax, byte [ebp - 0x1b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4ac]
mov byte [ebp - 0x4ac], 0x42
push eax
mov byte [ebp - 0x4ab], 0x3a
mov byte [ebp - 0x4aa], bl
call edi
jmp 0x402778
call esi
test eax, eax
je 0x402778
cmp byte [ebp - 0x1b7], 0x3a
jne 0x402778
movzx eax, byte [ebp - 0x1b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1b8]
push eax
push 3
call esi
test eax, eax
je 0x40279f
cmp byte [ebp - 0x1b7], 0x3a
jne 0x40279f
movzx eax, byte [ebp - 0x1b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4027d8
lea eax, [ebp - 0x668]
push eax
push 3
call esi
test eax, eax
je 0x4027d8
cmp byte [ebp - 0x667], 0x3a
jne 0x4027d8
movzx eax, byte [ebp - 0x668]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x80]
push eax
push 3
jne 0x40281f
call esi
test eax, eax
je 0x402800
cmp byte [ebp - 0x7f], 0x3a
jne 0x402800
movzx eax, byte [ebp - 0x80]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x374]
mov byte [ebp - 0x374], 0x42
push eax
mov byte [ebp - 0x373], 0x3a
mov byte [ebp - 0x372], bl
call edi
jmp 0x402837
call esi
test eax, eax
je 0x402837
cmp byte [ebp - 0x7f], 0x3a
jne 0x402837
movzx eax, byte [ebp - 0x80]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x80]
push eax
push 3
call esi
test eax, eax
je 0x402855
cmp byte [ebp - 0x7f], 0x3a
jne 0x402855
movzx eax, byte [ebp - 0x80]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40288c
lea eax, [ebp - 0x858]
push eax
push 3
call esi
test eax, eax
je 0x40288c
cmp byte [ebp - 0x857], 0x3a
jne 0x40288c
movzx eax, byte [ebp - 0x858]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x258]
push eax
push 3
jne 0x4028dc
call esi
test eax, eax
je 0x4028bd
cmp byte [ebp - 0x257], 0x3a
jne 0x4028bd
movzx eax, byte [ebp - 0x258]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x54c]
mov byte [ebp - 0x54c], 0x42
push eax
mov byte [ebp - 0x54b], 0x3a
mov byte [ebp - 0x54a], bl
call edi
jmp 0x4028fa
call esi
test eax, eax
je 0x4028fa
cmp byte [ebp - 0x257], 0x3a
jne 0x4028fa
movzx eax, byte [ebp - 0x258]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x258]
push eax
push 3
call esi
test eax, eax
je 0x402921
cmp byte [ebp - 0x257], 0x3a
jne 0x402921
movzx eax, byte [ebp - 0x258]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40295b
lea eax, [ebp - 0x670]
push eax
push 3
call esi
test eax, eax
je 0x40295b
cmp byte [ebp - 0x66f], 0x3a
jne 0x40295b
movzx eax, byte [ebp - 0x670]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x88]
push eax
push 3
jne 0x4029ab
call esi
test eax, eax
je 0x40298c
cmp byte [ebp - 0x87], 0x3a
jne 0x40298c
movzx eax, byte [ebp - 0x88]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x37c]
mov byte [ebp - 0x37c], 0x42
push eax
mov byte [ebp - 0x37b], 0x3a
mov byte [ebp - 0x37a], bl
call edi
jmp 0x4029c9
call esi
test eax, eax
je 0x4029c9
cmp byte [ebp - 0x87], 0x3a
jne 0x4029c9
movzx eax, byte [ebp - 0x88]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x88]
push eax
push 3
call esi
test eax, eax
je 0x4029f0
cmp byte [ebp - 0x87], 0x3a
jne 0x4029f0
movzx eax, byte [ebp - 0x88]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402a29
lea eax, [ebp - 0x7b8]
push eax
push 3
call esi
test eax, eax
je 0x402a29
cmp byte [ebp - 0x7b7], 0x3a
jne 0x402a29
movzx eax, byte [ebp - 0x7b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c0]
push eax
push 3
jne 0x402a79
call esi
test eax, eax
je 0x402a5a
cmp byte [ebp - 0x1bf], 0x3a
jne 0x402a5a
movzx eax, byte [ebp - 0x1c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4b4]
mov byte [ebp - 0x4b4], 0x42
push eax
mov byte [ebp - 0x4b3], 0x3a
mov byte [ebp - 0x4b2], bl
call edi
jmp 0x402a97
call esi
test eax, eax
je 0x402a97
cmp byte [ebp - 0x1bf], 0x3a
jne 0x402a97
movzx eax, byte [ebp - 0x1c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1c0]
push eax
push 3
call esi
test eax, eax
je 0x402abe
cmp byte [ebp - 0x1bf], 0x3a
jne 0x402abe
movzx eax, byte [ebp - 0x1c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402af7
lea eax, [ebp - 0x678]
push eax
push 3
call esi
test eax, eax
je 0x402af7
cmp byte [ebp - 0x677], 0x3a
jne 0x402af7
movzx eax, byte [ebp - 0x678]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x90]
push eax
push 3
jne 0x402b47
call esi
test eax, eax
je 0x402b28
cmp byte [ebp - 0x8f], 0x3a
jne 0x402b28
movzx eax, byte [ebp - 0x90]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x384]
mov byte [ebp - 0x384], 0x42
push eax
mov byte [ebp - 0x383], 0x3a
mov byte [ebp - 0x382], bl
call edi
jmp 0x402b65
call esi
test eax, eax
je 0x402b65
cmp byte [ebp - 0x8f], 0x3a
jne 0x402b65
movzx eax, byte [ebp - 0x90]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x90]
push eax
push 3
call esi
test eax, eax
je 0x402b8c
cmp byte [ebp - 0x8f], 0x3a
jne 0x402b8c
movzx eax, byte [ebp - 0x90]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402bc4
lea eax, [ebp - 0x8e4]
push eax
push 3
call esi
test eax, eax
je 0x402bc4
cmp byte [ebp - 0x8e3], 0x3a
jne 0x402bc4
movzx eax, byte [ebp - 0x8e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a8]
push eax
push 3
jne 0x402c14
call esi
test eax, eax
je 0x402bf5
cmp byte [ebp - 0x2a7], 0x3a
jne 0x402bf5
movzx eax, byte [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x59c]
mov byte [ebp - 0x59c], 0x42
push eax
mov byte [ebp - 0x59b], 0x3a
mov byte [ebp - 0x59a], bl
call edi
jmp 0x402c32
call esi
test eax, eax
je 0x402c32
cmp byte [ebp - 0x2a7], 0x3a
jne 0x402c32
movzx eax, byte [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2a8]
push eax
push 3
call esi
test eax, eax
je 0x402c59
cmp byte [ebp - 0x2a7], 0x3a
jne 0x402c59
movzx eax, byte [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402c94
lea eax, [ebp - 0x680]
push eax
push 3
call esi
test eax, eax
je 0x402c94
cmp byte [ebp - 0x67f], 0x3a
jne 0x402c94
movzx eax, byte [ebp - 0x680]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x98]
push eax
push 3
jne 0x402ce4
call esi
test eax, eax
je 0x402cc5
cmp byte [ebp - 0x97], 0x3a
jne 0x402cc5
movzx eax, byte [ebp - 0x98]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x38c]
mov byte [ebp - 0x38c], 0x42
push eax
mov byte [ebp - 0x38b], 0x3a
mov byte [ebp - 0x38a], bl
call edi
jmp 0x402d02
call esi
test eax, eax
je 0x402d02
cmp byte [ebp - 0x97], 0x3a
jne 0x402d02
movzx eax, byte [ebp - 0x98]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x98]
push eax
push 3
call esi
test eax, eax
je 0x402d29
cmp byte [ebp - 0x97], 0x3a
jne 0x402d29
movzx eax, byte [ebp - 0x98]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402d6b
lea eax, [ebp - 0x7c0]
push eax
push 3
call esi
test eax, eax
je 0x402d6b
cmp byte [ebp - 0x7bf], 0x3a
jne 0x402d6b
movzx eax, byte [ebp - 0x7c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c8]
push eax
push 3
jne 0x402dbb
call esi
test eax, eax
je 0x402d9c
cmp byte [ebp - 0x1c7], 0x3a
jne 0x402d9c
movzx eax, byte [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4bc]
mov byte [ebp - 0x4bc], 0x42
push eax
mov byte [ebp - 0x4bb], 0x3a
mov byte [ebp - 0x4ba], bl
call edi
jmp 0x402dd9
call esi
test eax, eax
je 0x402dd9
cmp byte [ebp - 0x1c7], 0x3a
jne 0x402dd9
movzx eax, byte [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1c8]
push eax
push 3
call esi
test eax, eax
je 0x402e00
cmp byte [ebp - 0x1c7], 0x3a
jne 0x402e00
movzx eax, byte [ebp - 0x1c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402e3a
lea eax, [ebp - 0x688]
push eax
push 3
call esi
test eax, eax
je 0x402e3a
cmp byte [ebp - 0x687], 0x3a
jne 0x402e3a
movzx eax, byte [ebp - 0x688]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa0]
push eax
push 3
jne 0x402e8a
call esi
test eax, eax
je 0x402e6b
cmp byte [ebp - 0x9f], 0x3a
jne 0x402e6b
movzx eax, byte [ebp - 0xa0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x394]
mov byte [ebp - 0x394], 0x42
push eax
mov byte [ebp - 0x393], 0x3a
mov byte [ebp - 0x392], bl
call edi
jmp 0x402ea8
call esi
test eax, eax
je 0x402ea8
cmp byte [ebp - 0x9f], 0x3a
jne 0x402ea8
movzx eax, byte [ebp - 0xa0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xa0]
push eax
push 3
call esi
test eax, eax
je 0x402ecf
cmp byte [ebp - 0x9f], 0x3a
jne 0x402ecf
movzx eax, byte [ebp - 0xa0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402f07
lea eax, [ebp - 0x860]
push eax
push 3
call esi
test eax, eax
je 0x402f07
cmp byte [ebp - 0x85f], 0x3a
jne 0x402f07
movzx eax, byte [ebp - 0x860]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x260]
push eax
push 3
jne 0x402f57
call esi
test eax, eax
je 0x402f38
cmp byte [ebp - 0x25f], 0x3a
jne 0x402f38
movzx eax, byte [ebp - 0x260]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x554]
mov byte [ebp - 0x554], 0x42
push eax
mov byte [ebp - 0x553], 0x3a
mov byte [ebp - 0x552], bl
call edi
jmp 0x402f75
call esi
test eax, eax
je 0x402f75
cmp byte [ebp - 0x25f], 0x3a
jne 0x402f75
movzx eax, byte [ebp - 0x260]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x260]
push eax
push 3
call esi
test eax, eax
je 0x402f9c
cmp byte [ebp - 0x25f], 0x3a
jne 0x402f9c
movzx eax, byte [ebp - 0x260]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x402fd7
lea eax, [ebp - 0x690]
push eax
push 3
call esi
test eax, eax
je 0x402fd7
cmp byte [ebp - 0x68f], 0x3a
jne 0x402fd7
movzx eax, byte [ebp - 0x690]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa8]
push eax
push 3
jne 0x403027
call esi
test eax, eax
je 0x403008
cmp byte [ebp - 0xa7], 0x3a
jne 0x403008
movzx eax, byte [ebp - 0xa8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x39c]
mov byte [ebp - 0x39c], 0x42
push eax
mov byte [ebp - 0x39b], 0x3a
mov byte [ebp - 0x39a], bl
call edi
jmp 0x403045
call esi
test eax, eax
je 0x403045
cmp byte [ebp - 0xa7], 0x3a
jne 0x403045
movzx eax, byte [ebp - 0xa8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xa8]
push eax
push 3
call esi
test eax, eax
je 0x40306c
cmp byte [ebp - 0xa7], 0x3a
jne 0x40306c
movzx eax, byte [ebp - 0xa8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4030d1
lea eax, [ebp - 0x7c8]
push eax
push 3
call esi
test eax, eax
je 0x4030d1
cmp byte [ebp - 0x7c7], 0x3a
jne 0x4030d1
movzx eax, byte [ebp - 0x7c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d0]
push eax
push 3
jne 0x403121
call esi
test eax, eax
je 0x403102
cmp byte [ebp - 0x1cf], 0x3a
jne 0x403102
movzx eax, byte [ebp - 0x1d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4c4]
mov byte [ebp - 0x4c4], 0x42
push eax
mov byte [ebp - 0x4c3], 0x3a
mov byte [ebp - 0x4c2], bl
call edi
jmp 0x40313f
call esi
test eax, eax
je 0x40313f
cmp byte [ebp - 0x1cf], 0x3a
jne 0x40313f
movzx eax, byte [ebp - 0x1d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1d0]
push eax
push 3
call esi
test eax, eax
je 0x403166
cmp byte [ebp - 0x1cf], 0x3a
jne 0x403166
movzx eax, byte [ebp - 0x1d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea ecx, [ebp - 0x8cc]
call fcn.0041c5f4
lea ecx, [ebp - 0x8cc]
call fcn.0041df73
test eax, eax
je 0x405489
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4042ca
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4031d1
lea eax, [ebp - 0x698]
push eax
push 3
call esi
test eax, eax
je 0x4031d1
cmp byte [ebp - 0x697], 0x3a
jne 0x4031d1
movzx eax, byte [ebp - 0x698]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb0]
push eax
push 3
jne 0x403221
call esi
test eax, eax
je 0x403202
cmp byte [ebp - 0xaf], 0x3a
jne 0x403202
movzx eax, byte [ebp - 0xb0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3a4]
mov byte [ebp - 0x3a4], 0x42
push eax
mov byte [ebp - 0x3a3], 0x3a
mov byte [ebp - 0x3a2], bl
call edi
jmp 0x40323f
call esi
test eax, eax
je 0x40323f
cmp byte [ebp - 0xaf], 0x3a
jne 0x40323f
movzx eax, byte [ebp - 0xb0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xb0]
push eax
push 3
call esi
test eax, eax
je 0x403266
cmp byte [ebp - 0xaf], 0x3a
jne 0x403266
movzx eax, byte [ebp - 0xb0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40329e
lea eax, [ebp - 0x8b0]
push eax
push 3
call esi
test eax, eax
je 0x40329e
cmp byte [ebp - 0x8af], 0x3a
jne 0x40329e
movzx eax, byte [ebp - 0x8b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d0]
push eax
push 3
jne 0x4032ee
call esi
test eax, eax
je 0x4032cf
cmp byte [ebp - 0x2cf], 0x3a
jne 0x4032cf
movzx eax, byte [ebp - 0x2d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5c4]
mov byte [ebp - 0x5c4], 0x42
push eax
mov byte [ebp - 0x5c3], 0x3a
mov byte [ebp - 0x5c2], bl
call edi
jmp 0x40330c
call esi
test eax, eax
je 0x40330c
cmp byte [ebp - 0x2cf], 0x3a
jne 0x40330c
movzx eax, byte [ebp - 0x2d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2d0]
push eax
push 3
call esi
test eax, eax
je 0x403333
cmp byte [ebp - 0x2cf], 0x3a
jne 0x403333
movzx eax, byte [ebp - 0x2d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40336b
lea eax, [ebp - 0x6a0]
push eax
push 3
call esi
test eax, eax
je 0x40336b
cmp byte [ebp - 0x69f], 0x3a
jne 0x40336b
movzx eax, byte [ebp - 0x6a0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb8]
push eax
push 3
jne 0x4033bb
call esi
test eax, eax
je 0x40339c
cmp byte [ebp - 0xb7], 0x3a
jne 0x40339c
movzx eax, byte [ebp - 0xb8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3ac]
mov byte [ebp - 0x3ac], 0x42
push eax
mov byte [ebp - 0x3ab], 0x3a
mov byte [ebp - 0x3aa], bl
call edi
jmp 0x4033d9
call esi
test eax, eax
je 0x4033d9
cmp byte [ebp - 0xb7], 0x3a
jne 0x4033d9
movzx eax, byte [ebp - 0xb8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xb8]
push eax
push 3
call esi
test eax, eax
je 0x403400
cmp byte [ebp - 0xb7], 0x3a
jne 0x403400
movzx eax, byte [ebp - 0xb8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403443
lea eax, [ebp - 0x7d0]
push eax
push 3
call esi
test eax, eax
je 0x403443
cmp byte [ebp - 0x7cf], 0x3a
jne 0x403443
movzx eax, byte [ebp - 0x7d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d8]
push eax
push 3
jne 0x403493
call esi
test eax, eax
je 0x403474
cmp byte [ebp - 0x1d7], 0x3a
jne 0x403474
movzx eax, byte [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4cc]
mov byte [ebp - 0x4cc], 0x42
push eax
mov byte [ebp - 0x4cb], 0x3a
mov byte [ebp - 0x4ca], bl
call edi
jmp 0x4034b1
call esi
test eax, eax
je 0x4034b1
cmp byte [ebp - 0x1d7], 0x3a
jne 0x4034b1
movzx eax, byte [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1d8]
push eax
push 3
call esi
test eax, eax
je 0x4034d8
cmp byte [ebp - 0x1d7], 0x3a
jne 0x4034d8
movzx eax, byte [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403519
lea eax, [ebp - 0x6a8]
push eax
push 3
call esi
test eax, eax
je 0x403519
cmp byte [ebp - 0x6a7], 0x3a
jne 0x403519
movzx eax, byte [ebp - 0x6a8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc0]
push eax
push 3
jne 0x403569
call esi
test eax, eax
je 0x40354a
cmp byte [ebp - 0xbf], 0x3a
jne 0x40354a
movzx eax, byte [ebp - 0xc0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3b4]
mov byte [ebp - 0x3b4], 0x42
push eax
mov byte [ebp - 0x3b3], 0x3a
mov byte [ebp - 0x3b2], bl
call edi
jmp 0x403587
call esi
test eax, eax
je 0x403587
cmp byte [ebp - 0xbf], 0x3a
jne 0x403587
movzx eax, byte [ebp - 0xc0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xc0]
push eax
push 3
call esi
test eax, eax
je 0x4035ae
cmp byte [ebp - 0xbf], 0x3a
jne 0x4035ae
movzx eax, byte [ebp - 0xc0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4035e7
lea eax, [ebp - 0x868]
push eax
push 3
call esi
test eax, eax
je 0x4035e7
cmp byte [ebp - 0x867], 0x3a
jne 0x4035e7
movzx eax, byte [ebp - 0x868]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x268]
push eax
push 3
jne 0x403637
call esi
test eax, eax
je 0x403618
cmp byte [ebp - 0x267], 0x3a
jne 0x403618
movzx eax, byte [ebp - 0x268]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x55c]
mov byte [ebp - 0x55c], 0x42
push eax
mov byte [ebp - 0x55b], 0x3a
mov byte [ebp - 0x55a], bl
call edi
jmp 0x403655
call esi
test eax, eax
je 0x403655
cmp byte [ebp - 0x267], 0x3a
jne 0x403655
movzx eax, byte [ebp - 0x268]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x268]
push eax
push 3
call esi
test eax, eax
je 0x40367c
cmp byte [ebp - 0x267], 0x3a
jne 0x40367c
movzx eax, byte [ebp - 0x268]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4036bb
lea eax, [ebp - 0x6b0]
push eax
push 3
call esi
test eax, eax
je 0x4036bb
cmp byte [ebp - 0x6af], 0x3a
jne 0x4036bb
movzx eax, byte [ebp - 0x6b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc8]
push eax
push 3
jne 0x40370b
call esi
test eax, eax
je 0x4036ec
cmp byte [ebp - 0xc7], 0x3a
jne 0x4036ec
movzx eax, byte [ebp - 0xc8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3bc]
mov byte [ebp - 0x3bc], 0x42
push eax
mov byte [ebp - 0x3bb], 0x3a
mov byte [ebp - 0x3ba], bl
call edi
jmp 0x403729
call esi
test eax, eax
je 0x403729
cmp byte [ebp - 0xc7], 0x3a
jne 0x403729
movzx eax, byte [ebp - 0xc8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xc8]
push eax
push 3
call esi
test eax, eax
je 0x403750
cmp byte [ebp - 0xc7], 0x3a
jne 0x403750
movzx eax, byte [ebp - 0xc8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403789
lea eax, [ebp - 0x7d8]
push eax
push 3
call esi
test eax, eax
je 0x403789
cmp byte [ebp - 0x7d7], 0x3a
jne 0x403789
movzx eax, byte [ebp - 0x7d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e0]
push eax
push 3
jne 0x4037d9
call esi
test eax, eax
je 0x4037ba
cmp byte [ebp - 0x1df], 0x3a
jne 0x4037ba
movzx eax, byte [ebp - 0x1e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4d4]
mov byte [ebp - 0x4d4], 0x42
push eax
mov byte [ebp - 0x4d3], 0x3a
mov byte [ebp - 0x4d2], bl
call edi
jmp 0x4037f7
call esi
test eax, eax
je 0x4037f7
cmp byte [ebp - 0x1df], 0x3a
jne 0x4037f7
movzx eax, byte [ebp - 0x1e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1e0]
push eax
push 3
call esi
test eax, eax
je 0x40381e
cmp byte [ebp - 0x1df], 0x3a
jne 0x40381e
movzx eax, byte [ebp - 0x1e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403856
lea eax, [ebp - 0x6b8]
push eax
push 3
call esi
test eax, eax
je 0x403856
cmp byte [ebp - 0x6b7], 0x3a
jne 0x403856
movzx eax, byte [ebp - 0x6b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd0]
push eax
push 3
jne 0x4038a6
call esi
test eax, eax
je 0x403887
cmp byte [ebp - 0xcf], 0x3a
jne 0x403887
movzx eax, byte [ebp - 0xd0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3c4]
mov byte [ebp - 0x3c4], 0x42
push eax
mov byte [ebp - 0x3c3], 0x3a
mov byte [ebp - 0x3c2], bl
call edi
jmp 0x4038c4
call esi
test eax, eax
je 0x4038c4
cmp byte [ebp - 0xcf], 0x3a
jne 0x4038c4
movzx eax, byte [ebp - 0xd0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xd0]
push eax
push 3
call esi
test eax, eax
je 0x4038eb
cmp byte [ebp - 0xcf], 0x3a
jne 0x4038eb
movzx eax, byte [ebp - 0xd0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403924
lea eax, [ebp - 0x8d8]
push eax
push 3
call esi
test eax, eax
je 0x403924
cmp byte [ebp - 0x8d7], 0x3a
jne 0x403924
movzx eax, byte [ebp - 0x8d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b0]
push eax
push 3
jne 0x403974
call esi
test eax, eax
je 0x403955
cmp byte [ebp - 0x2af], 0x3a
jne 0x403955
movzx eax, byte [ebp - 0x2b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5a4]
mov byte [ebp - 0x5a4], 0x42
push eax
mov byte [ebp - 0x5a3], 0x3a
mov byte [ebp - 0x5a2], bl
call edi
jmp 0x403992
call esi
test eax, eax
je 0x403992
cmp byte [ebp - 0x2af], 0x3a
jne 0x403992
movzx eax, byte [ebp - 0x2b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2b0]
push eax
push 3
call esi
test eax, eax
je 0x4039b9
cmp byte [ebp - 0x2af], 0x3a
jne 0x4039b9
movzx eax, byte [ebp - 0x2b0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4039f0
lea eax, [ebp - 0x6c0]
push eax
push 3
call esi
test eax, eax
je 0x4039f0
cmp byte [ebp - 0x6bf], 0x3a
jne 0x4039f0
movzx eax, byte [ebp - 0x6c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd8]
push eax
push 3
jne 0x403a40
call esi
test eax, eax
je 0x403a21
cmp byte [ebp - 0xd7], 0x3a
jne 0x403a21
movzx eax, byte [ebp - 0xd8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3cc]
mov byte [ebp - 0x3cc], 0x42
push eax
mov byte [ebp - 0x3cb], 0x3a
mov byte [ebp - 0x3ca], bl
call edi
jmp 0x403a5e
call esi
test eax, eax
je 0x403a5e
cmp byte [ebp - 0xd7], 0x3a
jne 0x403a5e
movzx eax, byte [ebp - 0xd8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xd8]
push eax
push 3
call esi
test eax, eax
je 0x403a85
cmp byte [ebp - 0xd7], 0x3a
jne 0x403a85
movzx eax, byte [ebp - 0xd8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403abf
lea eax, [ebp - 0x7e0]
push eax
push 3
call esi
test eax, eax
je 0x403abf
cmp byte [ebp - 0x7df], 0x3a
jne 0x403abf
movzx eax, byte [ebp - 0x7e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e8]
push eax
push 3
jne 0x403b0f
call esi
test eax, eax
je 0x403af0
cmp byte [ebp - 0x1e7], 0x3a
jne 0x403af0
movzx eax, byte [ebp - 0x1e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x4dc], 0x42
push eax
mov byte [ebp - 0x4db], 0x3a
mov byte [ebp - 0x4da], bl
call edi
jmp 0x403b2d
call esi
test eax, eax
je 0x403b2d
cmp byte [ebp - 0x1e7], 0x3a
jne 0x403b2d
movzx eax, byte [ebp - 0x1e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1e8]
push eax
push 3
call esi
test eax, eax
je 0x403b54
cmp byte [ebp - 0x1e7], 0x3a
jne 0x403b54
movzx eax, byte [ebp - 0x1e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403b8d
lea eax, [ebp - 0x6c8]
push eax
push 3
call esi
test eax, eax
je 0x403b8d
cmp byte [ebp - 0x6c7], 0x3a
jne 0x403b8d
movzx eax, byte [ebp - 0x6c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe0]
push eax
push 3
jne 0x403bdd
call esi
test eax, eax
je 0x403bbe
cmp byte [ebp - 0xdf], 0x3a
jne 0x403bbe
movzx eax, byte [ebp - 0xe0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3d4]
mov byte [ebp - 0x3d4], 0x42
push eax
mov byte [ebp - 0x3d3], 0x3a
mov byte [ebp - 0x3d2], bl
call edi
jmp 0x403bfb
call esi
test eax, eax
je 0x403bfb
cmp byte [ebp - 0xdf], 0x3a
jne 0x403bfb
movzx eax, byte [ebp - 0xe0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xe0]
push eax
push 3
call esi
test eax, eax
je 0x403c22
cmp byte [ebp - 0xdf], 0x3a
jne 0x403c22
movzx eax, byte [ebp - 0xe0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403c5b
lea eax, [ebp - 0x870]
push eax
push 3
call esi
test eax, eax
je 0x403c5b
cmp byte [ebp - 0x86f], 0x3a
jne 0x403c5b
movzx eax, byte [ebp - 0x870]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x270]
push eax
push 3
jne 0x403cab
call esi
test eax, eax
je 0x403c8c
cmp byte [ebp - 0x26f], 0x3a
jne 0x403c8c
movzx eax, byte [ebp - 0x270]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x564]
mov byte [ebp - 0x564], 0x42
push eax
mov byte [ebp - 0x563], 0x3a
mov byte [ebp - 0x562], bl
call edi
jmp 0x403cc9
call esi
test eax, eax
je 0x403cc9
cmp byte [ebp - 0x26f], 0x3a
jne 0x403cc9
movzx eax, byte [ebp - 0x270]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x270]
push eax
push 3
call esi
test eax, eax
je 0x403cf0
cmp byte [ebp - 0x26f], 0x3a
jne 0x403cf0
movzx eax, byte [ebp - 0x270]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403d28
lea eax, [ebp - 0x6d0]
push eax
push 3
call esi
test eax, eax
je 0x403d28
cmp byte [ebp - 0x6cf], 0x3a
jne 0x403d28
movzx eax, byte [ebp - 0x6d0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe8]
push eax
push 3
jne 0x403d78
call esi
test eax, eax
je 0x403d59
cmp byte [ebp - 0xe7], 0x3a
jne 0x403d59
movzx eax, byte [ebp - 0xe8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3dc]
mov byte [ebp - 0x3dc], 0x42
push eax
mov byte [ebp - 0x3db], 0x3a
mov byte [ebp - 0x3da], bl
call edi
jmp 0x403d96
call esi
test eax, eax
je 0x403d96
cmp byte [ebp - 0xe7], 0x3a
jne 0x403d96
movzx eax, byte [ebp - 0xe8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xe8]
push eax
push 3
call esi
test eax, eax
je 0x403dbd
cmp byte [ebp - 0xe7], 0x3a
jne 0x403dbd
movzx eax, byte [ebp - 0xe8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403df8
lea eax, [ebp - 0x7e8]
push eax
push 3
call esi
test eax, eax
je 0x403df8
cmp byte [ebp - 0x7e7], 0x3a
jne 0x403df8
movzx eax, byte [ebp - 0x7e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f0]
push eax
push 3
jne 0x403e48
call esi
test eax, eax
je 0x403e29
cmp byte [ebp - 0x1ef], 0x3a
jne 0x403e29
movzx eax, byte [ebp - 0x1f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4e4]
mov byte [ebp - 0x4e4], 0x42
push eax
mov byte [ebp - 0x4e3], 0x3a
mov byte [ebp - 0x4e2], bl
call edi
jmp 0x403e66
call esi
test eax, eax
je 0x403e66
cmp byte [ebp - 0x1ef], 0x3a
jne 0x403e66
movzx eax, byte [ebp - 0x1f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1f0]
push eax
push 3
call esi
test eax, eax
je 0x403e8d
cmp byte [ebp - 0x1ef], 0x3a
jne 0x403e8d
movzx eax, byte [ebp - 0x1f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403ecf
lea eax, [ebp - 0x6d8]
push eax
push 3
call esi
test eax, eax
je 0x403ecf
cmp byte [ebp - 0x6d7], 0x3a
jne 0x403ecf
movzx eax, byte [ebp - 0x6d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf0]
push eax
push 3
jne 0x403f1f
call esi
test eax, eax
je 0x403f00
cmp byte [ebp - 0xef], 0x3a
jne 0x403f00
movzx eax, byte [ebp - 0xf0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3e4]
mov byte [ebp - 0x3e4], 0x42
push eax
mov byte [ebp - 0x3e3], 0x3a
mov byte [ebp - 0x3e2], bl
call edi
jmp 0x403f3d
call esi
test eax, eax
je 0x403f3d
cmp byte [ebp - 0xef], 0x3a
jne 0x403f3d
movzx eax, byte [ebp - 0xf0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xf0]
push eax
push 3
call esi
test eax, eax
je 0x403f64
cmp byte [ebp - 0xef], 0x3a
jne 0x403f64
movzx eax, byte [ebp - 0xf0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x403f9e
lea eax, [ebp - 0x8b8]
push eax
push 3
call esi
test eax, eax
je 0x403f9e
cmp byte [ebp - 0x8b7], 0x3a
jne 0x403f9e
movzx eax, byte [ebp - 0x8b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f0]
push eax
push 3
jne 0x403fee
call esi
test eax, eax
je 0x403fcf
cmp byte [ebp - 0x2ef], 0x3a
jne 0x403fcf
movzx eax, byte [ebp - 0x2f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5e4]
mov byte [ebp - 0x5e4], 0x42
push eax
mov byte [ebp - 0x5e3], 0x3a
mov byte [ebp - 0x5e2], bl
call edi
jmp 0x40400c
call esi
test eax, eax
je 0x40400c
cmp byte [ebp - 0x2ef], 0x3a
jne 0x40400c
movzx eax, byte [ebp - 0x2f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2f0]
push eax
push 3
call esi
test eax, eax
je 0x404033
cmp byte [ebp - 0x2ef], 0x3a
jne 0x404033
movzx eax, byte [ebp - 0x2f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40406b
lea eax, [ebp - 0x6e0]
push eax
push 3
call esi
test eax, eax
je 0x40406b
cmp byte [ebp - 0x6df], 0x3a
jne 0x40406b
movzx eax, byte [ebp - 0x6e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf8]
push eax
push 3
jne 0x4040bb
call esi
test eax, eax
je 0x40409c
cmp byte [ebp - 0xf7], 0x3a
jne 0x40409c
movzx eax, byte [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3ec]
mov byte [ebp - 0x3ec], 0x42
push eax
mov byte [ebp - 0x3eb], 0x3a
mov byte [ebp - 0x3ea], bl
call edi
jmp 0x4040d9
call esi
test eax, eax
je 0x4040d9
cmp byte [ebp - 0xf7], 0x3a
jne 0x4040d9
movzx eax, byte [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xf8]
push eax
push 3
call esi
test eax, eax
je 0x404100
cmp byte [ebp - 0xf7], 0x3a
jne 0x404100
movzx eax, byte [ebp - 0xf8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40413b
lea eax, [ebp - 0x7f0]
push eax
push 3
call esi
test eax, eax
je 0x40413b
cmp byte [ebp - 0x7ef], 0x3a
jne 0x40413b
movzx eax, byte [ebp - 0x7f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f8]
push eax
push 3
jne 0x40418b
call esi
test eax, eax
je 0x40416c
cmp byte [ebp - 0x1f7], 0x3a
jne 0x40416c
movzx eax, byte [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4ec], 0x42
push eax
mov byte [ebp - 0x4eb], 0x3a
mov byte [ebp - 0x4ea], bl
call edi
jmp 0x4041a9
call esi
test eax, eax
je 0x4041a9
cmp byte [ebp - 0x1f7], 0x3a
jne 0x4041a9
movzx eax, byte [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1f8]
push eax
push 3
call esi
test eax, eax
je 0x4041d0
cmp byte [ebp - 0x1f7], 0x3a
jne 0x4041d0
movzx eax, byte [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404235
lea eax, [ebp - 0x6e8]
push eax
push 3
call esi
test eax, eax
je 0x404235
cmp byte [ebp - 0x6e7], 0x3a
jne 0x404235
movzx eax, byte [ebp - 0x6e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x100]
push eax
push 3
jne 0x404285
call esi
test eax, eax
je 0x404266
cmp byte [ebp - 0xff], 0x3a
jne 0x404266
movzx eax, byte [ebp - 0x100]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3f4]
mov byte [ebp - 0x3f4], 0x42
push eax
mov byte [ebp - 0x3f3], 0x3a
mov byte [ebp - 0x3f2], bl
call edi
jmp 0x4042a3
call esi
test eax, eax
je 0x4042a3
cmp byte [ebp - 0xff], 0x3a
jne 0x4042a3
movzx eax, byte [ebp - 0x100]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x100]
push eax
push 3
call esi
test eax, eax
je 0x4042ca
cmp byte [ebp - 0xff], 0x3a
jne 0x4042ca
movzx eax, byte [ebp - 0x100]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x8cc]
push dword [ebp + 0x10]
call fcn.0041ec97
lea ecx, [ebp - 0x8e8]
call fcn.004148a7
lea ecx, [ebp - 0x8e8]
call fcn.00416226
test eax, eax
jne 0x40547e
lea ecx, [ebp - 0x8f8]
call fcn.0041c5f0
test eax, eax
jne 0x40547e
lea eax, [ebp + 0x14]
test eax, eax
jne 0x405452
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404359
lea eax, [ebp - 0x878]
push eax
push 3
call esi
test eax, eax
je 0x404359
cmp byte [ebp - 0x877], 0x3a
jne 0x404359
movzx eax, byte [ebp - 0x878]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x278]
push eax
push 3
jne 0x4043a9
call esi
test eax, eax
je 0x40438a
cmp byte [ebp - 0x277], 0x3a
jne 0x40438a
movzx eax, byte [ebp - 0x278]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x56c]
mov byte [ebp - 0x56c], 0x42
push eax
mov byte [ebp - 0x56b], 0x3a
mov byte [ebp - 0x56a], bl
call edi
jmp 0x4043c7
call esi
test eax, eax
je 0x4043c7
cmp byte [ebp - 0x277], 0x3a
jne 0x4043c7
movzx eax, byte [ebp - 0x278]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x278]
push eax
push 3
call esi
test eax, eax
je 0x4043ee
cmp byte [ebp - 0x277], 0x3a
jne 0x4043ee
movzx eax, byte [ebp - 0x278]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404426
lea eax, [ebp - 0x6f0]
push eax
push 3
call esi
test eax, eax
je 0x404426
cmp byte [ebp - 0x6ef], 0x3a
jne 0x404426
movzx eax, byte [ebp - 0x6f0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x108]
push eax
push 3
jne 0x404476
call esi
test eax, eax
je 0x404457
cmp byte [ebp - 0x107], 0x3a
jne 0x404457
movzx eax, byte [ebp - 0x108]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3fc]
mov byte [ebp - 0x3fc], 0x42
push eax
mov byte [ebp - 0x3fb], 0x3a
mov byte [ebp - 0x3fa], bl
call edi
jmp 0x404494
call esi
test eax, eax
je 0x404494
cmp byte [ebp - 0x107], 0x3a
jne 0x404494
movzx eax, byte [ebp - 0x108]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x108]
push eax
push 3
call esi
test eax, eax
je 0x4044bb
cmp byte [ebp - 0x107], 0x3a
jne 0x4044bb
movzx eax, byte [ebp - 0x108]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4044f3
lea eax, [ebp - 0x7f8]
push eax
push 3
call esi
test eax, eax
je 0x4044f3
cmp byte [ebp - 0x7f7], 0x3a
jne 0x4044f3
movzx eax, byte [ebp - 0x7f8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x200]
push eax
push 3
jne 0x404543
call esi
test eax, eax
je 0x404524
cmp byte [ebp - 0x1ff], 0x3a
jne 0x404524
movzx eax, byte [ebp - 0x200]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4f4]
mov byte [ebp - 0x4f4], 0x42
push eax
mov byte [ebp - 0x4f3], 0x3a
mov byte [ebp - 0x4f2], bl
call edi
jmp 0x404561
call esi
test eax, eax
je 0x404561
cmp byte [ebp - 0x1ff], 0x3a
jne 0x404561
movzx eax, byte [ebp - 0x200]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x200]
push eax
push 3
call esi
test eax, eax
je 0x404588
cmp byte [ebp - 0x1ff], 0x3a
jne 0x404588
movzx eax, byte [ebp - 0x200]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4045cb
lea eax, [ebp - 0x6f8]
push eax
push 3
call esi
test eax, eax
je 0x4045cb
cmp byte [ebp - 0x6f7], 0x3a
jne 0x4045cb
movzx eax, byte [ebp - 0x6f8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x110]
push eax
push 3
jne 0x40461b
call esi
test eax, eax
je 0x4045fc
cmp byte [ebp - 0x10f], 0x3a
jne 0x4045fc
movzx eax, byte [ebp - 0x110]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], 0x42
push eax
mov byte [ebp - 0x403], 0x3a
mov byte [ebp - 0x402], bl
call edi
jmp 0x404639
call esi
test eax, eax
je 0x404639
cmp byte [ebp - 0x10f], 0x3a
jne 0x404639
movzx eax, byte [ebp - 0x110]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x110]
push eax
push 3
call esi
test eax, eax
je 0x404660
cmp byte [ebp - 0x10f], 0x3a
jne 0x404660
movzx eax, byte [ebp - 0x110]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4046a1
lea eax, [ebp - 0x8e0]
push eax
push 3
call esi
test eax, eax
je 0x4046a1
cmp byte [ebp - 0x8df], 0x3a
jne 0x4046a1
movzx eax, byte [ebp - 0x8e0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b8]
push eax
push 3
jne 0x4046f1
call esi
test eax, eax
je 0x4046d2
cmp byte [ebp - 0x2b7], 0x3a
jne 0x4046d2
movzx eax, byte [ebp - 0x2b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5ac]
mov byte [ebp - 0x5ac], 0x42
push eax
mov byte [ebp - 0x5ab], 0x3a
mov byte [ebp - 0x5aa], bl
call edi
jmp 0x40470f
call esi
test eax, eax
je 0x40470f
cmp byte [ebp - 0x2b7], 0x3a
jne 0x40470f
movzx eax, byte [ebp - 0x2b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2b8]
push eax
push 3
call esi
test eax, eax
je 0x404736
cmp byte [ebp - 0x2b7], 0x3a
jne 0x404736
movzx eax, byte [ebp - 0x2b8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40476f
lea eax, [ebp - 0x700]
push eax
push 3
call esi
test eax, eax
je 0x40476f
cmp byte [ebp - 0x6ff], 0x3a
jne 0x40476f
movzx eax, byte [ebp - 0x700]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x118]
push eax
push 3
jne 0x4047bf
call esi
test eax, eax
je 0x4047a0
cmp byte [ebp - 0x117], 0x3a
jne 0x4047a0
movzx eax, byte [ebp - 0x118]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x40c]
mov byte [ebp - 0x40c], 0x42
push eax
mov byte [ebp - 0x40b], 0x3a
mov byte [ebp - 0x40a], bl
call edi
jmp 0x4047dd
call esi
test eax, eax
je 0x4047dd
cmp byte [ebp - 0x117], 0x3a
jne 0x4047dd
movzx eax, byte [ebp - 0x118]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x118]
push eax
push 3
call esi
test eax, eax
je 0x404804
cmp byte [ebp - 0x117], 0x3a
jne 0x404804
movzx eax, byte [ebp - 0x118]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404843
lea eax, [ebp - 0x800]
push eax
push 3
call esi
test eax, eax
je 0x404843
cmp byte [ebp - 0x7ff], 0x3a
jne 0x404843
movzx eax, byte [ebp - 0x800]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x208]
push eax
push 3
jne 0x404893
call esi
test eax, eax
je 0x404874
cmp byte [ebp - 0x207], 0x3a
jne 0x404874
movzx eax, byte [ebp - 0x208]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4fc]
mov byte [ebp - 0x4fc], 0x42
push eax
mov byte [ebp - 0x4fb], 0x3a
mov byte [ebp - 0x4fa], bl
call edi
jmp 0x4048b1
call esi
test eax, eax
je 0x4048b1
cmp byte [ebp - 0x207], 0x3a
jne 0x4048b1
movzx eax, byte [ebp - 0x208]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x208]
push eax
push 3
call esi
test eax, eax
je 0x4048d8
cmp byte [ebp - 0x207], 0x3a
jne 0x4048d8
movzx eax, byte [ebp - 0x208]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404911
lea eax, [ebp - 0x708]
push eax
push 3
call esi
test eax, eax
je 0x404911
cmp byte [ebp - 0x707], 0x3a
jne 0x404911
movzx eax, byte [ebp - 0x708]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x120]
push eax
push 3
jne 0x404961
call esi
test eax, eax
je 0x404942
cmp byte [ebp - 0x11f], 0x3a
jne 0x404942
movzx eax, byte [ebp - 0x120]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x414]
mov byte [ebp - 0x414], 0x42
push eax
mov byte [ebp - 0x413], 0x3a
mov byte [ebp - 0x412], bl
call edi
jmp 0x40497f
call esi
test eax, eax
je 0x40497f
cmp byte [ebp - 0x11f], 0x3a
jne 0x40497f
movzx eax, byte [ebp - 0x120]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x120]
push eax
push 3
call esi
test eax, eax
je 0x4049a6
cmp byte [ebp - 0x11f], 0x3a
jne 0x4049a6
movzx eax, byte [ebp - 0x120]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4049de
lea eax, [ebp - 0x880]
push eax
push 3
call esi
test eax, eax
je 0x4049de
cmp byte [ebp - 0x87f], 0x3a
jne 0x4049de
movzx eax, byte [ebp - 0x880]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x280]
push eax
push 3
jne 0x404a2e
call esi
test eax, eax
je 0x404a0f
cmp byte [ebp - 0x27f], 0x3a
jne 0x404a0f
movzx eax, byte [ebp - 0x280]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x574]
mov byte [ebp - 0x574], 0x42
push eax
mov byte [ebp - 0x573], 0x3a
mov byte [ebp - 0x572], bl
call edi
jmp 0x404a4c
call esi
test eax, eax
je 0x404a4c
cmp byte [ebp - 0x27f], 0x3a
jne 0x404a4c
movzx eax, byte [ebp - 0x280]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x280]
push eax
push 3
call esi
test eax, eax
je 0x404a73
cmp byte [ebp - 0x27f], 0x3a
jne 0x404a73
movzx eax, byte [ebp - 0x280]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404aac
lea eax, [ebp - 0x710]
push eax
push 3
call esi
test eax, eax
je 0x404aac
cmp byte [ebp - 0x70f], 0x3a
jne 0x404aac
movzx eax, byte [ebp - 0x710]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x128]
push eax
push 3
jne 0x404afc
call esi
test eax, eax
je 0x404add
cmp byte [ebp - 0x127], 0x3a
jne 0x404add
movzx eax, byte [ebp - 0x128]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x41c]
mov byte [ebp - 0x41c], 0x42
push eax
mov byte [ebp - 0x41b], 0x3a
mov byte [ebp - 0x41a], bl
call edi
jmp 0x404b1a
call esi
test eax, eax
je 0x404b1a
cmp byte [ebp - 0x127], 0x3a
jne 0x404b1a
movzx eax, byte [ebp - 0x128]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x128]
push eax
push 3
call esi
test eax, eax
je 0x404b41
cmp byte [ebp - 0x127], 0x3a
jne 0x404b41
movzx eax, byte [ebp - 0x128]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404b78
lea eax, [ebp - 0x808]
push eax
push 3
call esi
test eax, eax
je 0x404b78
cmp byte [ebp - 0x807], 0x3a
jne 0x404b78
movzx eax, byte [ebp - 0x808]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x210]
push eax
push 3
jne 0x404bc8
call esi
test eax, eax
je 0x404ba9
cmp byte [ebp - 0x20f], 0x3a
jne 0x404ba9
movzx eax, byte [ebp - 0x210]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x504]
mov byte [ebp - 0x504], 0x42
push eax
mov byte [ebp - 0x503], 0x3a
mov byte [ebp - 0x502], bl
call edi
jmp 0x404be6
call esi
test eax, eax
je 0x404be6
cmp byte [ebp - 0x20f], 0x3a
jne 0x404be6
movzx eax, byte [ebp - 0x210]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x210]
push eax
push 3
call esi
test eax, eax
je 0x404c0d
cmp byte [ebp - 0x20f], 0x3a
jne 0x404c0d
movzx eax, byte [ebp - 0x210]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404c47
lea eax, [ebp - 0x718]
push eax
push 3
call esi
test eax, eax
je 0x404c47
cmp byte [ebp - 0x717], 0x3a
jne 0x404c47
movzx eax, byte [ebp - 0x718]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x130]
push eax
push 3
jne 0x404c97
call esi
test eax, eax
je 0x404c78
cmp byte [ebp - 0x12f], 0x3a
jne 0x404c78
movzx eax, byte [ebp - 0x130]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x424]
mov byte [ebp - 0x424], 0x42
push eax
mov byte [ebp - 0x423], 0x3a
mov byte [ebp - 0x422], bl
call edi
jmp 0x404cb5
call esi
test eax, eax
je 0x404cb5
cmp byte [ebp - 0x12f], 0x3a
jne 0x404cb5
movzx eax, byte [ebp - 0x130]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x130]
push eax
push 3
call esi
test eax, eax
je 0x404cdc
cmp byte [ebp - 0x12f], 0x3a
jne 0x404cdc
movzx eax, byte [ebp - 0x130]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404d15
lea eax, [ebp - 0x8c0]
push eax
push 3
call esi
test eax, eax
je 0x404d15
cmp byte [ebp - 0x8bf], 0x3a
jne 0x404d15
movzx eax, byte [ebp - 0x8c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d8]
push eax
push 3
jne 0x404d65
call esi
test eax, eax
je 0x404d46
cmp byte [ebp - 0x2d7], 0x3a
jne 0x404d46
movzx eax, byte [ebp - 0x2d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5cc]
mov byte [ebp - 0x5cc], 0x42
push eax
mov byte [ebp - 0x5cb], 0x3a
mov byte [ebp - 0x5ca], bl
call edi
jmp 0x404d83
call esi
test eax, eax
je 0x404d83
cmp byte [ebp - 0x2d7], 0x3a
jne 0x404d83
movzx eax, byte [ebp - 0x2d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2d8]
push eax
push 3
call esi
test eax, eax
je 0x404daa
cmp byte [ebp - 0x2d7], 0x3a
jne 0x404daa
movzx eax, byte [ebp - 0x2d8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404de3
lea eax, [ebp - 0x720]
push eax
push 3
call esi
test eax, eax
je 0x404de3
cmp byte [ebp - 0x71f], 0x3a
jne 0x404de3
movzx eax, byte [ebp - 0x720]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x138]
push eax
push 3
jne 0x404e33
call esi
test eax, eax
je 0x404e14
cmp byte [ebp - 0x137], 0x3a
jne 0x404e14
movzx eax, byte [ebp - 0x138]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x42c]
mov byte [ebp - 0x42c], 0x42
push eax
mov byte [ebp - 0x42b], 0x3a
mov byte [ebp - 0x42a], bl
call edi
jmp 0x404e51
call esi
test eax, eax
je 0x404e51
cmp byte [ebp - 0x137], 0x3a
jne 0x404e51
movzx eax, byte [ebp - 0x138]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x138]
push eax
push 3
call esi
test eax, eax
je 0x404e78
cmp byte [ebp - 0x137], 0x3a
jne 0x404e78
movzx eax, byte [ebp - 0x138]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404eb0
lea eax, [ebp - 0x810]
push eax
push 3
call esi
test eax, eax
je 0x404eb0
cmp byte [ebp - 0x80f], 0x3a
jne 0x404eb0
movzx eax, byte [ebp - 0x810]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x218]
push eax
push 3
jne 0x404f00
call esi
test eax, eax
je 0x404ee1
cmp byte [ebp - 0x217], 0x3a
jne 0x404ee1
movzx eax, byte [ebp - 0x218]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x50c]
mov byte [ebp - 0x50c], 0x42
push eax
mov byte [ebp - 0x50b], 0x3a
mov byte [ebp - 0x50a], bl
call edi
jmp 0x404f1e
call esi
test eax, eax
je 0x404f1e
cmp byte [ebp - 0x217], 0x3a
jne 0x404f1e
movzx eax, byte [ebp - 0x218]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x218]
push eax
push 3
call esi
test eax, eax
je 0x404f45
cmp byte [ebp - 0x217], 0x3a
jne 0x404f45
movzx eax, byte [ebp - 0x218]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x404f80
lea eax, [ebp - 0x728]
push eax
push 3
call esi
test eax, eax
je 0x404f80
cmp byte [ebp - 0x727], 0x3a
jne 0x404f80
movzx eax, byte [ebp - 0x728]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x140]
push eax
push 3
jne 0x404fd0
call esi
test eax, eax
je 0x404fb1
cmp byte [ebp - 0x13f], 0x3a
jne 0x404fb1
movzx eax, byte [ebp - 0x140]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x434]
mov byte [ebp - 0x434], 0x42
push eax
mov byte [ebp - 0x433], 0x3a
mov byte [ebp - 0x432], bl
call edi
jmp 0x404fee
call esi
test eax, eax
je 0x404fee
cmp byte [ebp - 0x13f], 0x3a
jne 0x404fee
movzx eax, byte [ebp - 0x140]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x140]
push eax
push 3
call esi
test eax, eax
je 0x405015
cmp byte [ebp - 0x13f], 0x3a
jne 0x405015
movzx eax, byte [ebp - 0x140]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405057
lea eax, [ebp - 0x888]
push eax
push 3
call esi
test eax, eax
je 0x405057
cmp byte [ebp - 0x887], 0x3a
jne 0x405057
movzx eax, byte [ebp - 0x888]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x288]
push eax
push 3
jne 0x4050a7
call esi
test eax, eax
je 0x405088
cmp byte [ebp - 0x287], 0x3a
jne 0x405088
movzx eax, byte [ebp - 0x288]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x57c]
mov byte [ebp - 0x57c], 0x42
push eax
mov byte [ebp - 0x57b], 0x3a
mov byte [ebp - 0x57a], bl
call edi
jmp 0x4050c5
call esi
test eax, eax
je 0x4050c5
cmp byte [ebp - 0x287], 0x3a
jne 0x4050c5
movzx eax, byte [ebp - 0x288]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x288]
push eax
push 3
call esi
test eax, eax
je 0x4050ec
cmp byte [ebp - 0x287], 0x3a
jne 0x4050ec
movzx eax, byte [ebp - 0x288]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405126
lea eax, [ebp - 0x730]
push eax
push 3
call esi
test eax, eax
je 0x405126
cmp byte [ebp - 0x72f], 0x3a
jne 0x405126
movzx eax, byte [ebp - 0x730]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x148]
push eax
push 3
jne 0x405176
call esi
test eax, eax
je 0x405157
cmp byte [ebp - 0x147], 0x3a
jne 0x405157
movzx eax, byte [ebp - 0x148]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x43c]
mov byte [ebp - 0x43c], 0x42
push eax
mov byte [ebp - 0x43b], 0x3a
mov byte [ebp - 0x43a], bl
call edi
jmp 0x405194
call esi
test eax, eax
je 0x405194
cmp byte [ebp - 0x147], 0x3a
jne 0x405194
movzx eax, byte [ebp - 0x148]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x148]
push eax
push 3
call esi
test eax, eax
je 0x4051bb
cmp byte [ebp - 0x147], 0x3a
jne 0x4051bb
movzx eax, byte [ebp - 0x148]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4051f3
lea eax, [ebp - 0x818]
push eax
push 3
call esi
test eax, eax
je 0x4051f3
cmp byte [ebp - 0x817], 0x3a
jne 0x4051f3
movzx eax, byte [ebp - 0x818]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x220]
push eax
push 3
jne 0x405243
call esi
test eax, eax
je 0x405224
cmp byte [ebp - 0x21f], 0x3a
jne 0x405224
movzx eax, byte [ebp - 0x220]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x514]
mov byte [ebp - 0x514], 0x42
push eax
mov byte [ebp - 0x513], 0x3a
mov byte [ebp - 0x512], bl
call edi
jmp 0x405261
call esi
test eax, eax
je 0x405261
cmp byte [ebp - 0x21f], 0x3a
jne 0x405261
movzx eax, byte [ebp - 0x220]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x220]
push eax
push 3
call esi
test eax, eax
je 0x405288
cmp byte [ebp - 0x21f], 0x3a
jne 0x405288
movzx eax, byte [ebp - 0x220]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4052c3
lea eax, [ebp - 0x738]
push eax
push 3
call esi
test eax, eax
je 0x4052c3
cmp byte [ebp - 0x737], 0x3a
jne 0x4052c3
movzx eax, byte [ebp - 0x738]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x150]
push eax
push 3
jne 0x405313
call esi
test eax, eax
je 0x4052f4
cmp byte [ebp - 0x14f], 0x3a
jne 0x4052f4
movzx eax, byte [ebp - 0x150]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x444]
mov byte [ebp - 0x444], 0x42
push eax
mov byte [ebp - 0x443], 0x3a
mov byte [ebp - 0x442], bl
call edi
jmp 0x405331
call esi
test eax, eax
je 0x405331
cmp byte [ebp - 0x14f], 0x3a
jne 0x405331
movzx eax, byte [ebp - 0x150]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x150]
push eax
push 3
call esi
test eax, eax
je 0x405358
cmp byte [ebp - 0x14f], 0x3a
jne 0x405358
movzx eax, byte [ebp - 0x150]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4053bd
lea eax, [ebp - 0x8d4]
push eax
push 3
call esi
test eax, eax
je 0x4053bd
cmp byte [ebp - 0x8d3], 0x3a
jne 0x4053bd
movzx eax, byte [ebp - 0x8d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c0]
push eax
push 3
jne 0x40540d
call esi
test eax, eax
je 0x4053ee
cmp byte [ebp - 0x2bf], 0x3a
jne 0x4053ee
movzx eax, byte [ebp - 0x2c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5b4]
mov byte [ebp - 0x5b4], 0x42
push eax
mov byte [ebp - 0x5b3], 0x3a
mov byte [ebp - 0x5b2], bl
call edi
jmp 0x40542b
call esi
test eax, eax
je 0x40542b
cmp byte [ebp - 0x2bf], 0x3a
jne 0x40542b
movzx eax, byte [ebp - 0x2c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2c0]
push eax
push 3
call esi
test eax, eax
je 0x405452
cmp byte [ebp - 0x2bf], 0x3a
jne 0x405452
movzx eax, byte [ebp - 0x2c0]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea ecx, [ebp - 0x938]
call fcn.0042c571
lea ecx, [ebp - 0x938]
call fcn.0042e015
lea ecx, [ebp - 0x938]
call fcn.0042ecde
lea ecx, [ebp - 0x938]
call fcn.0042d2d8
lea ecx, [ebp - 0x8e8]
jmp 0x4098e2
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4064c7
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4054d6
lea eax, [ebp - 0x740]
push eax
push 3
call esi
test eax, eax
je 0x4054d6
cmp byte [ebp - 0x73f], 0x3a
jne 0x4054d6
movzx eax, byte [ebp - 0x740]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x158]
push eax
push 3
jne 0x405526
call esi
test eax, eax
je 0x405507
cmp byte [ebp - 0x157], 0x3a
jne 0x405507
movzx eax, byte [ebp - 0x158]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x44c]
mov byte [ebp - 0x44c], 0x42
push eax
mov byte [ebp - 0x44b], 0x3a
mov byte [ebp - 0x44a], bl
call edi
jmp 0x405544
call esi
test eax, eax
je 0x405544
cmp byte [ebp - 0x157], 0x3a
jne 0x405544
movzx eax, byte [ebp - 0x158]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x158]
push eax
push 3
call esi
test eax, eax
je 0x40556b
cmp byte [ebp - 0x157], 0x3a
jne 0x40556b
movzx eax, byte [ebp - 0x158]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4055a3
lea eax, [ebp - 0x820]
push eax
push 3
call esi
test eax, eax
je 0x4055a3
cmp byte [ebp - 0x81f], 0x3a
jne 0x4055a3
movzx eax, byte [ebp - 0x820]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x228]
push eax
push 3
jne 0x4055f3
call esi
test eax, eax
je 0x4055d4
cmp byte [ebp - 0x227], 0x3a
jne 0x4055d4
movzx eax, byte [ebp - 0x228]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x51c], 0x42
push eax
mov byte [ebp - 0x51b], 0x3a
mov byte [ebp - 0x51a], bl
call edi
jmp 0x405611
call esi
test eax, eax
je 0x405611
cmp byte [ebp - 0x227], 0x3a
jne 0x405611
movzx eax, byte [ebp - 0x228]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x228]
push eax
push 3
call esi
test eax, eax
je 0x405638
cmp byte [ebp - 0x227], 0x3a
jne 0x405638
movzx eax, byte [ebp - 0x228]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405670
lea eax, [ebp - 0x748]
push eax
push 3
call esi
test eax, eax
je 0x405670
cmp byte [ebp - 0x747], 0x3a
jne 0x405670
movzx eax, byte [ebp - 0x748]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x160]
push eax
push 3
jne 0x4056c0
call esi
test eax, eax
je 0x4056a1
cmp byte [ebp - 0x15f], 0x3a
jne 0x4056a1
movzx eax, byte [ebp - 0x160]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x454]
mov byte [ebp - 0x454], 0x42
push eax
mov byte [ebp - 0x453], 0x3a
mov byte [ebp - 0x452], bl
call edi
jmp 0x4056de
call esi
test eax, eax
je 0x4056de
cmp byte [ebp - 0x15f], 0x3a
jne 0x4056de
movzx eax, byte [ebp - 0x160]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x160]
push eax
push 3
call esi
test eax, eax
je 0x405705
cmp byte [ebp - 0x15f], 0x3a
jne 0x405705
movzx eax, byte [ebp - 0x160]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405748
lea eax, [ebp - 0x890]
push eax
push 3
call esi
test eax, eax
je 0x405748
cmp byte [ebp - 0x88f], 0x3a
jne 0x405748
movzx eax, byte [ebp - 0x890]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x290]
push eax
push 3
jne 0x405798
call esi
test eax, eax
je 0x405779
cmp byte [ebp - 0x28f], 0x3a
jne 0x405779
movzx eax, byte [ebp - 0x290]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x584]
mov byte [ebp - 0x584], 0x42
push eax
mov byte [ebp - 0x583], 0x3a
mov byte [ebp - 0x582], bl
call edi
jmp 0x4057b6
call esi
test eax, eax
je 0x4057b6
cmp byte [ebp - 0x28f], 0x3a
jne 0x4057b6
movzx eax, byte [ebp - 0x290]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x290]
push eax
push 3
call esi
test eax, eax
je 0x4057dd
cmp byte [ebp - 0x28f], 0x3a
jne 0x4057dd
movzx eax, byte [ebp - 0x290]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40581e
lea eax, [ebp - 0x750]
push eax
push 3
call esi
test eax, eax
je 0x40581e
cmp byte [ebp - 0x74f], 0x3a
jne 0x40581e
movzx eax, byte [ebp - 0x750]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x168]
push eax
push 3
jne 0x40586e
call esi
test eax, eax
je 0x40584f
cmp byte [ebp - 0x167], 0x3a
jne 0x40584f
movzx eax, byte [ebp - 0x168]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x45c]
mov byte [ebp - 0x45c], 0x42
push eax
mov byte [ebp - 0x45b], 0x3a
mov byte [ebp - 0x45a], bl
call edi
jmp 0x40588c
call esi
test eax, eax
je 0x40588c
cmp byte [ebp - 0x167], 0x3a
jne 0x40588c
movzx eax, byte [ebp - 0x168]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x168]
push eax
push 3
call esi
test eax, eax
je 0x4058b3
cmp byte [ebp - 0x167], 0x3a
jne 0x4058b3
movzx eax, byte [ebp - 0x168]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4058ec
lea eax, [ebp - 0x828]
push eax
push 3
call esi
test eax, eax
je 0x4058ec
cmp byte [ebp - 0x827], 0x3a
jne 0x4058ec
movzx eax, byte [ebp - 0x828]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x230]
push eax
push 3
jne 0x40593c
call esi
test eax, eax
je 0x40591d
cmp byte [ebp - 0x22f], 0x3a
jne 0x40591d
movzx eax, byte [ebp - 0x230]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x524]
mov byte [ebp - 0x524], 0x42
push eax
mov byte [ebp - 0x523], 0x3a
mov byte [ebp - 0x522], bl
call edi
jmp 0x40595a
call esi
test eax, eax
je 0x40595a
cmp byte [ebp - 0x22f], 0x3a
jne 0x40595a
movzx eax, byte [ebp - 0x230]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x230]
push eax
push 3
call esi
test eax, eax
je 0x405981
cmp byte [ebp - 0x22f], 0x3a
jne 0x405981
movzx eax, byte [ebp - 0x230]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4059c0
lea eax, [ebp - 0x758]
push eax
push 3
call esi
test eax, eax
je 0x4059c0
cmp byte [ebp - 0x757], 0x3a
jne 0x4059c0
movzx eax, byte [ebp - 0x758]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x170]
push eax
push 3
jne 0x405a10
call esi
test eax, eax
je 0x4059f1
cmp byte [ebp - 0x16f], 0x3a
jne 0x4059f1
movzx eax, byte [ebp - 0x170]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x464]
mov byte [ebp - 0x464], 0x42
push eax
mov byte [ebp - 0x463], 0x3a
mov byte [ebp - 0x462], bl
call edi
jmp 0x405a2e
call esi
test eax, eax
je 0x405a2e
cmp byte [ebp - 0x16f], 0x3a
jne 0x405a2e
movzx eax, byte [ebp - 0x170]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x170]
push eax
push 3
call esi
test eax, eax
je 0x405a55
cmp byte [ebp - 0x16f], 0x3a
jne 0x405a55
movzx eax, byte [ebp - 0x170]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405a8e
lea eax, [ebp - 0x8c8]
push eax
push 3
call esi
test eax, eax
je 0x405a8e
cmp byte [ebp - 0x8c7], 0x3a
jne 0x405a8e
movzx eax, byte [ebp - 0x8c8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e8]
push eax
push 3
jne 0x405ade
call esi
test eax, eax
je 0x405abf
cmp byte [ebp - 0x2e7], 0x3a
jne 0x405abf
movzx eax, byte [ebp - 0x2e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5dc]
mov byte [ebp - 0x5dc], 0x42
push eax
mov byte [ebp - 0x5db], 0x3a
mov byte [ebp - 0x5da], bl
call edi
jmp 0x405afc
call esi
test eax, eax
je 0x405afc
cmp byte [ebp - 0x2e7], 0x3a
jne 0x405afc
movzx eax, byte [ebp - 0x2e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2e8]
push eax
push 3
call esi
test eax, eax
je 0x405b23
cmp byte [ebp - 0x2e7], 0x3a
jne 0x405b23
movzx eax, byte [ebp - 0x2e8]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405b5b
lea eax, [ebp - 0x760]
push eax
push 3
call esi
test eax, eax
je 0x405b5b
cmp byte [ebp - 0x75f], 0x3a
jne 0x405b5b
movzx eax, byte [ebp - 0x760]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x178]
push eax
push 3
jne 0x405bab
call esi
test eax, eax
je 0x405b8c
cmp byte [ebp - 0x177], 0x3a
jne 0x405b8c
movzx eax, byte [ebp - 0x178]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x46c]
mov byte [ebp - 0x46c], 0x42
push eax
mov byte [ebp - 0x46b], 0x3a
mov byte [ebp - 0x46a], bl
call edi
jmp 0x405bc9
call esi
test eax, eax
je 0x405bc9
cmp byte [ebp - 0x177], 0x3a
jne 0x405bc9
movzx eax, byte [ebp - 0x178]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x178]
push eax
push 3
call esi
test eax, eax
je 0x405bf0
cmp byte [ebp - 0x177], 0x3a
jne 0x405bf0
movzx eax, byte [ebp - 0x178]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405c29
lea eax, [ebp - 0x830]
push eax
push 3
call esi
test eax, eax
je 0x405c29
cmp byte [ebp - 0x82f], 0x3a
jne 0x405c29
movzx eax, byte [ebp - 0x830]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x238]
push eax
push 3
jne 0x405c79
call esi
test eax, eax
je 0x405c5a
cmp byte [ebp - 0x237], 0x3a
jne 0x405c5a
movzx eax, byte [ebp - 0x238]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x52c]
mov byte [ebp - 0x52c], 0x42
push eax
mov byte [ebp - 0x52b], 0x3a
mov byte [ebp - 0x52a], bl
call edi
jmp 0x405c97
call esi
test eax, eax
je 0x405c97
cmp byte [ebp - 0x237], 0x3a
jne 0x405c97
movzx eax, byte [ebp - 0x238]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x238]
push eax
push 3
call esi
test eax, eax
je 0x405cbe
cmp byte [ebp - 0x237], 0x3a
jne 0x405cbe
movzx eax, byte [ebp - 0x238]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405cf5
lea eax, [ebp - 0x768]
push eax
push 3
call esi
test eax, eax
je 0x405cf5
cmp byte [ebp - 0x767], 0x3a
jne 0x405cf5
movzx eax, byte [ebp - 0x768]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x405d3c
call esi
test eax, eax
je 0x405d1d
cmp byte [ebp - 3], 0x3a
jne 0x405d1d
movzx eax, byte [ebp - 4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x474]
mov byte [ebp - 0x474], 0x42
push eax
mov byte [ebp - 0x473], 0x3a
mov byte [ebp - 0x472], bl
call edi
jmp 0x405d54
call esi
test eax, eax
je 0x405d54
cmp byte [ebp - 3], 0x3a
jne 0x405d54
movzx eax, byte [ebp - 4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x405d72
cmp byte [ebp - 3], 0x3a
jne 0x405d72
movzx eax, byte [ebp - 4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405dac
lea eax, [ebp - 0x898]
push eax
push 3
call esi
test eax, eax
je 0x405dac
cmp byte [ebp - 0x897], 0x3a
jne 0x405dac
movzx eax, byte [ebp - 0x898]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc]
push eax
push 3
jne 0x405df3
call esi
test eax, eax
je 0x405dd4
cmp byte [ebp - 0xb], 0x3a
jne 0x405dd4
movzx eax, byte [ebp - 0xc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2fc]
mov byte [ebp - 0x2fc], 0x42
push eax
mov byte [ebp - 0x2fb], 0x3a
mov byte [ebp - 0x2fa], bl
call edi
jmp 0x405e0b
call esi
test eax, eax
je 0x405e0b
cmp byte [ebp - 0xb], 0x3a
jne 0x405e0b
movzx eax, byte [ebp - 0xc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xc]
push eax
push 3
call esi
test eax, eax
je 0x405e29
cmp byte [ebp - 0xb], 0x3a
jne 0x405e29
movzx eax, byte [ebp - 0xc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405e62
lea eax, [ebp - 0x770]
push eax
push 3
call esi
test eax, eax
je 0x405e62
cmp byte [ebp - 0x76f], 0x3a
jne 0x405e62
movzx eax, byte [ebp - 0x770]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14]
push eax
push 3
jne 0x405ea9
call esi
test eax, eax
je 0x405e8a
cmp byte [ebp - 0x13], 0x3a
jne 0x405e8a
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x308]
mov byte [ebp - 0x308], 0x42
push eax
mov byte [ebp - 0x307], 0x3a
mov byte [ebp - 0x306], bl
call edi
jmp 0x405ec1
call esi
test eax, eax
je 0x405ec1
cmp byte [ebp - 0x13], 0x3a
jne 0x405ec1
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x405edf
cmp byte [ebp - 0x13], 0x3a
jne 0x405edf
movzx eax, byte [ebp - 0x14]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405f18
lea eax, [ebp - 0x838]
push eax
push 3
call esi
test eax, eax
je 0x405f18
cmp byte [ebp - 0x837], 0x3a
jne 0x405f18
movzx eax, byte [ebp - 0x838]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c]
push eax
push 3
jne 0x405f5f
call esi
test eax, eax
je 0x405f40
cmp byte [ebp - 0x1b], 0x3a
jne 0x405f40
movzx eax, byte [ebp - 0x1c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x310]
mov byte [ebp - 0x310], 0x42
push eax
mov byte [ebp - 0x30f], 0x3a
mov byte [ebp - 0x30e], bl
call edi
jmp 0x405f77
call esi
test eax, eax
je 0x405f77
cmp byte [ebp - 0x1b], 0x3a
jne 0x405f77
movzx eax, byte [ebp - 0x1c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1c]
push eax
push 3
call esi
test eax, eax
je 0x405f95
cmp byte [ebp - 0x1b], 0x3a
jne 0x405f95
movzx eax, byte [ebp - 0x1c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x405fcd
lea eax, [ebp - 0x778]
push eax
push 3
call esi
test eax, eax
je 0x405fcd
cmp byte [ebp - 0x777], 0x3a
jne 0x405fcd
movzx eax, byte [ebp - 0x778]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24]
push eax
push 3
jne 0x406014
call esi
test eax, eax
je 0x405ff5
cmp byte [ebp - 0x23], 0x3a
jne 0x405ff5
movzx eax, byte [ebp - 0x24]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2f8]
mov byte [ebp - 0x2f8], 0x42
push eax
mov byte [ebp - 0x2f7], 0x3a
mov byte [ebp - 0x2f6], bl
call edi
jmp 0x40602c
call esi
test eax, eax
je 0x40602c
cmp byte [ebp - 0x23], 0x3a
jne 0x40602c
movzx eax, byte [ebp - 0x24]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x24]
push eax
push 3
call esi
test eax, eax
je 0x40604a
cmp byte [ebp - 0x23], 0x3a
jne 0x40604a
movzx eax, byte [ebp - 0x24]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406085
lea eax, [ebp - 0x5f4]
push eax
push 3
call esi
test eax, eax
je 0x406085
cmp byte [ebp - 0x5f3], 0x3a
jne 0x406085
movzx eax, byte [ebp - 0x5f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c]
push eax
push 3
jne 0x4060cc
call esi
test eax, eax
je 0x4060ad
cmp byte [ebp - 0x2b], 0x3a
jne 0x4060ad
movzx eax, byte [ebp - 0x2c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x320]
mov byte [ebp - 0x320], 0x42
push eax
mov byte [ebp - 0x31f], 0x3a
mov byte [ebp - 0x31e], bl
call edi
jmp 0x4060e4
call esi
test eax, eax
je 0x4060e4
cmp byte [ebp - 0x2b], 0x3a
jne 0x4060e4
movzx eax, byte [ebp - 0x2c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2c]
push eax
push 3
call esi
test eax, eax
je 0x406102
cmp byte [ebp - 0x2b], 0x3a
jne 0x406102
movzx eax, byte [ebp - 0x2c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406144
lea eax, [ebp - 0x5fc]
push eax
push 3
call esi
test eax, eax
je 0x406144
cmp byte [ebp - 0x5fb], 0x3a
jne 0x406144
movzx eax, byte [ebp - 0x5fc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34]
push eax
push 3
jne 0x40618b
call esi
test eax, eax
je 0x40616c
cmp byte [ebp - 0x33], 0x3a
jne 0x40616c
movzx eax, byte [ebp - 0x34]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x328]
mov byte [ebp - 0x328], 0x42
push eax
mov byte [ebp - 0x327], 0x3a
mov byte [ebp - 0x326], bl
call edi
jmp 0x4061a3
call esi
test eax, eax
je 0x4061a3
cmp byte [ebp - 0x33], 0x3a
jne 0x4061a3
movzx eax, byte [ebp - 0x34]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x34]
push eax
push 3
call esi
test eax, eax
je 0x4061c1
cmp byte [ebp - 0x33], 0x3a
jne 0x4061c1
movzx eax, byte [ebp - 0x34]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4061fb
lea eax, [ebp - 0x604]
push eax
push 3
call esi
test eax, eax
je 0x4061fb
cmp byte [ebp - 0x603], 0x3a
jne 0x4061fb
movzx eax, byte [ebp - 0x604]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c]
push eax
push 3
jne 0x406242
call esi
test eax, eax
je 0x406223
cmp byte [ebp - 0x3b], 0x3a
jne 0x406223
movzx eax, byte [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x330]
mov byte [ebp - 0x330], 0x42
push eax
mov byte [ebp - 0x32f], 0x3a
mov byte [ebp - 0x32e], bl
call edi
jmp 0x40625a
call esi
test eax, eax
je 0x40625a
cmp byte [ebp - 0x3b], 0x3a
jne 0x40625a
movzx eax, byte [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3c]
push eax
push 3
call esi
test eax, eax
je 0x406278
cmp byte [ebp - 0x3b], 0x3a
jne 0x406278
movzx eax, byte [ebp - 0x3c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4062b0
lea eax, [ebp - 0x60c]
push eax
push 3
call esi
test eax, eax
je 0x4062b0
cmp byte [ebp - 0x60b], 0x3a
jne 0x4062b0
movzx eax, byte [ebp - 0x60c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x44]
push eax
push 3
jne 0x4062f7
call esi
test eax, eax
je 0x4062d8
cmp byte [ebp - 0x43], 0x3a
jne 0x4062d8
movzx eax, byte [ebp - 0x44]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x338]
mov byte [ebp - 0x338], 0x42
push eax
mov byte [ebp - 0x337], 0x3a
mov byte [ebp - 0x336], bl
call edi
jmp 0x40630f
call esi
test eax, eax
je 0x40630f
cmp byte [ebp - 0x43], 0x3a
jne 0x40630f
movzx eax, byte [ebp - 0x44]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x44]
push eax
push 3
call esi
test eax, eax
je 0x40632d
cmp byte [ebp - 0x43], 0x3a
jne 0x40632d
movzx eax, byte [ebp - 0x44]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406368
lea eax, [ebp - 0x614]
push eax
push 3
call esi
test eax, eax
je 0x406368
cmp byte [ebp - 0x613], 0x3a
jne 0x406368
movzx eax, byte [ebp - 0x614]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x4c]
push eax
push 3
jne 0x4063af
call esi
test eax, eax
je 0x406390
cmp byte [ebp - 0x4b], 0x3a
jne 0x406390
movzx eax, byte [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x340]
mov byte [ebp - 0x340], 0x42
push eax
mov byte [ebp - 0x33f], 0x3a
mov byte [ebp - 0x33e], bl
call edi
jmp 0x4063c7
call esi
test eax, eax
je 0x4063c7
cmp byte [ebp - 0x4b], 0x3a
jne 0x4063c7
movzx eax, byte [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4c]
push eax
push 3
call esi
test eax, eax
je 0x4063e5
cmp byte [ebp - 0x4b], 0x3a
jne 0x4063e5
movzx eax, byte [ebp - 0x4c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40644a
lea eax, [ebp - 0x61c]
push eax
push 3
call esi
test eax, eax
je 0x40644a
cmp byte [ebp - 0x61b], 0x3a
jne 0x40644a
movzx eax, byte [ebp - 0x61c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x54]
push eax
push 3
jne 0x406491
call esi
test eax, eax
je 0x406472
cmp byte [ebp - 0x53], 0x3a
jne 0x406472
movzx eax, byte [ebp - 0x54]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x348]
mov byte [ebp - 0x348], 0x42
push eax
mov byte [ebp - 0x347], 0x3a
mov byte [ebp - 0x346], bl
call edi
jmp 0x4064a9
call esi
test eax, eax
je 0x4064a9
cmp byte [ebp - 0x53], 0x3a
jne 0x4064a9
movzx eax, byte [ebp - 0x54]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x54]
push eax
push 3
call esi
test eax, eax
je 0x4064c7
cmp byte [ebp - 0x53], 0x3a
jne 0x4064c7
movzx eax, byte [ebp - 0x54]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea ecx, [ebp - 0x5ec]
call fcn.004148a7
lea ecx, [ebp - 0x5ec]
call fcn.00416226
test eax, eax
jne 0x4075f2
lea ecx, [ebp - 0x8f8]
call fcn.0041c5f0
test eax, eax
jne 0x4075f2
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4075c6
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406545
lea eax, [ebp - 0x624]
push eax
push 3
call esi
test eax, eax
je 0x406545
cmp byte [ebp - 0x623], 0x3a
jne 0x406545
movzx eax, byte [ebp - 0x624]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x5c]
push eax
push 3
jne 0x40658c
call esi
test eax, eax
je 0x40656d
cmp byte [ebp - 0x5b], 0x3a
jne 0x40656d
movzx eax, byte [ebp - 0x5c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x350]
mov byte [ebp - 0x350], 0x42
push eax
mov byte [ebp - 0x34f], 0x3a
mov byte [ebp - 0x34e], bl
call edi
jmp 0x4065a4
call esi
test eax, eax
je 0x4065a4
cmp byte [ebp - 0x5b], 0x3a
jne 0x4065a4
movzx eax, byte [ebp - 0x5c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5c]
push eax
push 3
call esi
test eax, eax
je 0x4065c2
cmp byte [ebp - 0x5b], 0x3a
jne 0x4065c2
movzx eax, byte [ebp - 0x5c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4065fa
lea eax, [ebp - 0x62c]
push eax
push 3
call esi
test eax, eax
je 0x4065fa
cmp byte [ebp - 0x62b], 0x3a
jne 0x4065fa
movzx eax, byte [ebp - 0x62c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x64]
push eax
push 3
jne 0x406641
call esi
test eax, eax
je 0x406622
cmp byte [ebp - 0x63], 0x3a
jne 0x406622
movzx eax, byte [ebp - 0x64]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x358]
mov byte [ebp - 0x358], 0x42
push eax
mov byte [ebp - 0x357], 0x3a
mov byte [ebp - 0x356], bl
call edi
jmp 0x406659
call esi
test eax, eax
je 0x406659
cmp byte [ebp - 0x63], 0x3a
jne 0x406659
movzx eax, byte [ebp - 0x64]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x64]
push eax
push 3
call esi
test eax, eax
je 0x406677
cmp byte [ebp - 0x63], 0x3a
jne 0x406677
movzx eax, byte [ebp - 0x64]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4066af
lea eax, [ebp - 0x634]
push eax
push 3
call esi
test eax, eax
je 0x4066af
cmp byte [ebp - 0x633], 0x3a
jne 0x4066af
movzx eax, byte [ebp - 0x634]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x6c]
push eax
push 3
jne 0x4066f6
call esi
test eax, eax
je 0x4066d7
cmp byte [ebp - 0x6b], 0x3a
jne 0x4066d7
movzx eax, byte [ebp - 0x6c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x360]
mov byte [ebp - 0x360], 0x42
push eax
mov byte [ebp - 0x35f], 0x3a
mov byte [ebp - 0x35e], bl
call edi
jmp 0x40670e
call esi
test eax, eax
je 0x40670e
cmp byte [ebp - 0x6b], 0x3a
jne 0x40670e
movzx eax, byte [ebp - 0x6c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x6c]
push eax
push 3
call esi
test eax, eax
je 0x40672c
cmp byte [ebp - 0x6b], 0x3a
jne 0x40672c
movzx eax, byte [ebp - 0x6c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40676f
lea eax, [ebp - 0x63c]
push eax
push 3
call esi
test eax, eax
je 0x40676f
cmp byte [ebp - 0x63b], 0x3a
jne 0x40676f
movzx eax, byte [ebp - 0x63c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x74]
push eax
push 3
jne 0x4067b6
call esi
test eax, eax
je 0x406797
cmp byte [ebp - 0x73], 0x3a
jne 0x406797
movzx eax, byte [ebp - 0x74]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x368]
mov byte [ebp - 0x368], 0x42
push eax
mov byte [ebp - 0x367], 0x3a
mov byte [ebp - 0x366], bl
call edi
jmp 0x4067ce
call esi
test eax, eax
je 0x4067ce
cmp byte [ebp - 0x73], 0x3a
jne 0x4067ce
movzx eax, byte [ebp - 0x74]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x74]
push eax
push 3
call esi
test eax, eax
je 0x4067ec
cmp byte [ebp - 0x73], 0x3a
jne 0x4067ec
movzx eax, byte [ebp - 0x74]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40682d
lea eax, [ebp - 0x644]
push eax
push 3
call esi
test eax, eax
je 0x40682d
cmp byte [ebp - 0x643], 0x3a
jne 0x40682d
movzx eax, byte [ebp - 0x644]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x7c]
push eax
push 3
jne 0x406874
call esi
test eax, eax
je 0x406855
cmp byte [ebp - 0x7b], 0x3a
jne 0x406855
movzx eax, byte [ebp - 0x7c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x370]
mov byte [ebp - 0x370], 0x42
push eax
mov byte [ebp - 0x36f], 0x3a
mov byte [ebp - 0x36e], bl
call edi
jmp 0x40688c
call esi
test eax, eax
je 0x40688c
cmp byte [ebp - 0x7b], 0x3a
jne 0x40688c
movzx eax, byte [ebp - 0x7c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x7c]
push eax
push 3
call esi
test eax, eax
je 0x4068aa
cmp byte [ebp - 0x7b], 0x3a
jne 0x4068aa
movzx eax, byte [ebp - 0x7c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4068e3
lea eax, [ebp - 0x64c]
push eax
push 3
call esi
test eax, eax
je 0x4068e3
cmp byte [ebp - 0x64b], 0x3a
jne 0x4068e3
movzx eax, byte [ebp - 0x64c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x84]
push eax
push 3
jne 0x406933
call esi
test eax, eax
je 0x406914
cmp byte [ebp - 0x83], 0x3a
jne 0x406914
movzx eax, byte [ebp - 0x84]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x378]
mov byte [ebp - 0x378], 0x42
push eax
mov byte [ebp - 0x377], 0x3a
mov byte [ebp - 0x376], bl
call edi
jmp 0x406951
call esi
test eax, eax
je 0x406951
cmp byte [ebp - 0x83], 0x3a
jne 0x406951
movzx eax, byte [ebp - 0x84]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x84]
push eax
push 3
call esi
test eax, eax
je 0x406978
cmp byte [ebp - 0x83], 0x3a
jne 0x406978
movzx eax, byte [ebp - 0x84]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4069b7
lea eax, [ebp - 0x654]
push eax
push 3
call esi
test eax, eax
je 0x4069b7
cmp byte [ebp - 0x653], 0x3a
jne 0x4069b7
movzx eax, byte [ebp - 0x654]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x8c]
push eax
push 3
jne 0x406a07
call esi
test eax, eax
je 0x4069e8
cmp byte [ebp - 0x8b], 0x3a
jne 0x4069e8
movzx eax, byte [ebp - 0x8c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x380]
mov byte [ebp - 0x380], 0x42
push eax
mov byte [ebp - 0x37f], 0x3a
mov byte [ebp - 0x37e], bl
call edi
jmp 0x406a25
call esi
test eax, eax
je 0x406a25
cmp byte [ebp - 0x8b], 0x3a
jne 0x406a25
movzx eax, byte [ebp - 0x8c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x8c]
push eax
push 3
call esi
test eax, eax
je 0x406a4c
cmp byte [ebp - 0x8b], 0x3a
jne 0x406a4c
movzx eax, byte [ebp - 0x8c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406a85
lea eax, [ebp - 0x65c]
push eax
push 3
call esi
test eax, eax
je 0x406a85
cmp byte [ebp - 0x65b], 0x3a
jne 0x406a85
movzx eax, byte [ebp - 0x65c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x94]
push eax
push 3
jne 0x406ad5
call esi
test eax, eax
je 0x406ab6
cmp byte [ebp - 0x93], 0x3a
jne 0x406ab6
movzx eax, byte [ebp - 0x94]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x388]
mov byte [ebp - 0x388], 0x42
push eax
mov byte [ebp - 0x387], 0x3a
mov byte [ebp - 0x386], bl
call edi
jmp 0x406af3
call esi
test eax, eax
je 0x406af3
cmp byte [ebp - 0x93], 0x3a
jne 0x406af3
movzx eax, byte [ebp - 0x94]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x94]
push eax
push 3
call esi
test eax, eax
je 0x406b1a
cmp byte [ebp - 0x93], 0x3a
jne 0x406b1a
movzx eax, byte [ebp - 0x94]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406b52
lea eax, [ebp - 0x664]
push eax
push 3
call esi
test eax, eax
je 0x406b52
cmp byte [ebp - 0x663], 0x3a
jne 0x406b52
movzx eax, byte [ebp - 0x664]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x9c]
push eax
push 3
jne 0x406ba2
call esi
test eax, eax
je 0x406b83
cmp byte [ebp - 0x9b], 0x3a
jne 0x406b83
movzx eax, byte [ebp - 0x9c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x390]
mov byte [ebp - 0x390], 0x42
push eax
mov byte [ebp - 0x38f], 0x3a
mov byte [ebp - 0x38e], bl
call edi
jmp 0x406bc0
call esi
test eax, eax
je 0x406bc0
cmp byte [ebp - 0x9b], 0x3a
jne 0x406bc0
movzx eax, byte [ebp - 0x9c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x9c]
push eax
push 3
call esi
test eax, eax
je 0x406be7
cmp byte [ebp - 0x9b], 0x3a
jne 0x406be7
movzx eax, byte [ebp - 0x9c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406c20
lea eax, [ebp - 0x66c]
push eax
push 3
call esi
test eax, eax
je 0x406c20
cmp byte [ebp - 0x66b], 0x3a
jne 0x406c20
movzx eax, byte [ebp - 0x66c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa4]
push eax
push 3
jne 0x406c70
call esi
test eax, eax
je 0x406c51
cmp byte [ebp - 0xa3], 0x3a
jne 0x406c51
movzx eax, byte [ebp - 0xa4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x398]
mov byte [ebp - 0x398], 0x42
push eax
mov byte [ebp - 0x397], 0x3a
mov byte [ebp - 0x396], bl
call edi
jmp 0x406c8e
call esi
test eax, eax
je 0x406c8e
cmp byte [ebp - 0xa3], 0x3a
jne 0x406c8e
movzx eax, byte [ebp - 0xa4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xa4]
push eax
push 3
call esi
test eax, eax
je 0x406cb5
cmp byte [ebp - 0xa3], 0x3a
jne 0x406cb5
movzx eax, byte [ebp - 0xa4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406cec
lea eax, [ebp - 0x674]
push eax
push 3
call esi
test eax, eax
je 0x406cec
cmp byte [ebp - 0x673], 0x3a
jne 0x406cec
movzx eax, byte [ebp - 0x674]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xac]
push eax
push 3
jne 0x406d3c
call esi
test eax, eax
je 0x406d1d
cmp byte [ebp - 0xab], 0x3a
jne 0x406d1d
movzx eax, byte [ebp - 0xac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3a0]
mov byte [ebp - 0x3a0], 0x42
push eax
mov byte [ebp - 0x39f], 0x3a
mov byte [ebp - 0x39e], bl
call edi
jmp 0x406d5a
call esi
test eax, eax
je 0x406d5a
cmp byte [ebp - 0xab], 0x3a
jne 0x406d5a
movzx eax, byte [ebp - 0xac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xac]
push eax
push 3
call esi
test eax, eax
je 0x406d81
cmp byte [ebp - 0xab], 0x3a
jne 0x406d81
movzx eax, byte [ebp - 0xac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406dbb
lea eax, [ebp - 0x67c]
push eax
push 3
call esi
test eax, eax
je 0x406dbb
cmp byte [ebp - 0x67b], 0x3a
jne 0x406dbb
movzx eax, byte [ebp - 0x67c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb4]
push eax
push 3
jne 0x406e0b
call esi
test eax, eax
je 0x406dec
cmp byte [ebp - 0xb3], 0x3a
jne 0x406dec
movzx eax, byte [ebp - 0xb4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3a8]
mov byte [ebp - 0x3a8], 0x42
push eax
mov byte [ebp - 0x3a7], 0x3a
mov byte [ebp - 0x3a6], bl
call edi
jmp 0x406e29
call esi
test eax, eax
je 0x406e29
cmp byte [ebp - 0xb3], 0x3a
jne 0x406e29
movzx eax, byte [ebp - 0xb4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xb4]
push eax
push 3
call esi
test eax, eax
je 0x406e50
cmp byte [ebp - 0xb3], 0x3a
jne 0x406e50
movzx eax, byte [ebp - 0xb4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406e89
lea eax, [ebp - 0x684]
push eax
push 3
call esi
test eax, eax
je 0x406e89
cmp byte [ebp - 0x683], 0x3a
jne 0x406e89
movzx eax, byte [ebp - 0x684]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xbc]
push eax
push 3
jne 0x406ed9
call esi
test eax, eax
je 0x406eba
cmp byte [ebp - 0xbb], 0x3a
jne 0x406eba
movzx eax, byte [ebp - 0xbc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3b0]
mov byte [ebp - 0x3b0], 0x42
push eax
mov byte [ebp - 0x3af], 0x3a
mov byte [ebp - 0x3ae], bl
call edi
jmp 0x406ef7
call esi
test eax, eax
je 0x406ef7
cmp byte [ebp - 0xbb], 0x3a
jne 0x406ef7
movzx eax, byte [ebp - 0xbc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xbc]
push eax
push 3
call esi
test eax, eax
je 0x406f1e
cmp byte [ebp - 0xbb], 0x3a
jne 0x406f1e
movzx eax, byte [ebp - 0xbc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x406f57
lea eax, [ebp - 0x68c]
push eax
push 3
call esi
test eax, eax
je 0x406f57
cmp byte [ebp - 0x68b], 0x3a
jne 0x406f57
movzx eax, byte [ebp - 0x68c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc4]
push eax
push 3
jne 0x406fa7
call esi
test eax, eax
je 0x406f88
cmp byte [ebp - 0xc3], 0x3a
jne 0x406f88
movzx eax, byte [ebp - 0xc4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3b8]
mov byte [ebp - 0x3b8], 0x42
push eax
mov byte [ebp - 0x3b7], 0x3a
mov byte [ebp - 0x3b6], bl
call edi
jmp 0x406fc5
call esi
test eax, eax
je 0x406fc5
cmp byte [ebp - 0xc3], 0x3a
jne 0x406fc5
movzx eax, byte [ebp - 0xc4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xc4]
push eax
push 3
call esi
test eax, eax
je 0x406fec
cmp byte [ebp - 0xc3], 0x3a
jne 0x406fec
movzx eax, byte [ebp - 0xc4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407024
lea eax, [ebp - 0x694]
push eax
push 3
call esi
test eax, eax
je 0x407024
cmp byte [ebp - 0x693], 0x3a
jne 0x407024
movzx eax, byte [ebp - 0x694]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xcc]
push eax
push 3
jne 0x407074
call esi
test eax, eax
je 0x407055
cmp byte [ebp - 0xcb], 0x3a
jne 0x407055
movzx eax, byte [ebp - 0xcc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3c0]
mov byte [ebp - 0x3c0], 0x42
push eax
mov byte [ebp - 0x3bf], 0x3a
mov byte [ebp - 0x3be], bl
call edi
jmp 0x407092
call esi
test eax, eax
je 0x407092
cmp byte [ebp - 0xcb], 0x3a
jne 0x407092
movzx eax, byte [ebp - 0xcc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xcc]
push eax
push 3
call esi
test eax, eax
je 0x4070b9
cmp byte [ebp - 0xcb], 0x3a
jne 0x4070b9
movzx eax, byte [ebp - 0xcc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4070f4
lea eax, [ebp - 0x69c]
push eax
push 3
call esi
test eax, eax
je 0x4070f4
cmp byte [ebp - 0x69b], 0x3a
jne 0x4070f4
movzx eax, byte [ebp - 0x69c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd4]
push eax
push 3
jne 0x407144
call esi
test eax, eax
je 0x407125
cmp byte [ebp - 0xd3], 0x3a
jne 0x407125
movzx eax, byte [ebp - 0xd4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3c8]
mov byte [ebp - 0x3c8], 0x42
push eax
mov byte [ebp - 0x3c7], 0x3a
mov byte [ebp - 0x3c6], bl
call edi
jmp 0x407162
call esi
test eax, eax
je 0x407162
cmp byte [ebp - 0xd3], 0x3a
jne 0x407162
movzx eax, byte [ebp - 0xd4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xd4]
push eax
push 3
call esi
test eax, eax
je 0x407189
cmp byte [ebp - 0xd3], 0x3a
jne 0x407189
movzx eax, byte [ebp - 0xd4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4071cb
lea eax, [ebp - 0x6a4]
push eax
push 3
call esi
test eax, eax
je 0x4071cb
cmp byte [ebp - 0x6a3], 0x3a
jne 0x4071cb
movzx eax, byte [ebp - 0x6a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xdc]
push eax
push 3
jne 0x40721b
call esi
test eax, eax
je 0x4071fc
cmp byte [ebp - 0xdb], 0x3a
jne 0x4071fc
movzx eax, byte [ebp - 0xdc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3d0]
mov byte [ebp - 0x3d0], 0x42
push eax
mov byte [ebp - 0x3cf], 0x3a
mov byte [ebp - 0x3ce], bl
call edi
jmp 0x407239
call esi
test eax, eax
je 0x407239
cmp byte [ebp - 0xdb], 0x3a
jne 0x407239
movzx eax, byte [ebp - 0xdc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xdc]
push eax
push 3
call esi
test eax, eax
je 0x407260
cmp byte [ebp - 0xdb], 0x3a
jne 0x407260
movzx eax, byte [ebp - 0xdc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40729a
lea eax, [ebp - 0x6ac]
push eax
push 3
call esi
test eax, eax
je 0x40729a
cmp byte [ebp - 0x6ab], 0x3a
jne 0x40729a
movzx eax, byte [ebp - 0x6ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe4]
push eax
push 3
jne 0x4072ea
call esi
test eax, eax
je 0x4072cb
cmp byte [ebp - 0xe3], 0x3a
jne 0x4072cb
movzx eax, byte [ebp - 0xe4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3d8]
mov byte [ebp - 0x3d8], 0x42
push eax
mov byte [ebp - 0x3d7], 0x3a
mov byte [ebp - 0x3d6], bl
call edi
jmp 0x407308
call esi
test eax, eax
je 0x407308
cmp byte [ebp - 0xe3], 0x3a
jne 0x407308
movzx eax, byte [ebp - 0xe4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xe4]
push eax
push 3
call esi
test eax, eax
je 0x40732f
cmp byte [ebp - 0xe3], 0x3a
jne 0x40732f
movzx eax, byte [ebp - 0xe4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407367
lea eax, [ebp - 0x6b4]
push eax
push 3
call esi
test eax, eax
je 0x407367
cmp byte [ebp - 0x6b3], 0x3a
jne 0x407367
movzx eax, byte [ebp - 0x6b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xec]
push eax
push 3
jne 0x4073b7
call esi
test eax, eax
je 0x407398
cmp byte [ebp - 0xeb], 0x3a
jne 0x407398
movzx eax, byte [ebp - 0xec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3e0]
mov byte [ebp - 0x3e0], 0x42
push eax
mov byte [ebp - 0x3df], 0x3a
mov byte [ebp - 0x3de], bl
call edi
jmp 0x4073d5
call esi
test eax, eax
je 0x4073d5
cmp byte [ebp - 0xeb], 0x3a
jne 0x4073d5
movzx eax, byte [ebp - 0xec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xec]
push eax
push 3
call esi
test eax, eax
je 0x4073fc
cmp byte [ebp - 0xeb], 0x3a
jne 0x4073fc
movzx eax, byte [ebp - 0xec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407437
lea eax, [ebp - 0x6bc]
push eax
push 3
call esi
test eax, eax
je 0x407437
cmp byte [ebp - 0x6bb], 0x3a
jne 0x407437
movzx eax, byte [ebp - 0x6bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf4]
push eax
push 3
jne 0x407487
call esi
test eax, eax
je 0x407468
cmp byte [ebp - 0xf3], 0x3a
jne 0x407468
movzx eax, byte [ebp - 0xf4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3e8]
mov byte [ebp - 0x3e8], 0x42
push eax
mov byte [ebp - 0x3e7], 0x3a
mov byte [ebp - 0x3e6], bl
call edi
jmp 0x4074a5
call esi
test eax, eax
je 0x4074a5
cmp byte [ebp - 0xf3], 0x3a
jne 0x4074a5
movzx eax, byte [ebp - 0xf4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xf4]
push eax
push 3
call esi
test eax, eax
je 0x4074cc
cmp byte [ebp - 0xf3], 0x3a
jne 0x4074cc
movzx eax, byte [ebp - 0xf4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407531
lea eax, [ebp - 0x6c4]
push eax
push 3
call esi
test eax, eax
je 0x407531
cmp byte [ebp - 0x6c3], 0x3a
jne 0x407531
movzx eax, byte [ebp - 0x6c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xfc]
push eax
push 3
jne 0x407581
call esi
test eax, eax
je 0x407562
cmp byte [ebp - 0xfb], 0x3a
jne 0x407562
movzx eax, byte [ebp - 0xfc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3f0]
mov byte [ebp - 0x3f0], 0x42
push eax
mov byte [ebp - 0x3ef], 0x3a
mov byte [ebp - 0x3ee], bl
call edi
jmp 0x40759f
call esi
test eax, eax
je 0x40759f
cmp byte [ebp - 0xfb], 0x3a
jne 0x40759f
movzx eax, byte [ebp - 0xfc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0xfc]
push eax
push 3
call esi
test eax, eax
je 0x4075c6
cmp byte [ebp - 0xfb], 0x3a
jne 0x4075c6
movzx eax, byte [ebp - 0xfc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea ecx, [ebp - 0x958]
call fcn.0042c571
lea ecx, [ebp - 0x958]
call fcn.0042e015
lea ecx, [ebp - 0x958]
call fcn.0042ecde
lea ecx, [ebp - 0x958]
jmp 0x4098d7
lea eax, [ebp + 0x14]
test eax, eax
jne 0x408738
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40763f
lea eax, [ebp - 0x6cc]
push eax
push 3
call esi
test eax, eax
je 0x40763f
cmp byte [ebp - 0x6cb], 0x3a
jne 0x40763f
movzx eax, byte [ebp - 0x6cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x104]
push eax
push 3
jne 0x40768f
call esi
test eax, eax
je 0x407670
cmp byte [ebp - 0x103], 0x3a
jne 0x407670
movzx eax, byte [ebp - 0x104]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x3f8]
mov byte [ebp - 0x3f8], 0x42
push eax
mov byte [ebp - 0x3f7], 0x3a
mov byte [ebp - 0x3f6], bl
call edi
jmp 0x4076ad
call esi
test eax, eax
je 0x4076ad
cmp byte [ebp - 0x103], 0x3a
jne 0x4076ad
movzx eax, byte [ebp - 0x104]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x104]
push eax
push 3
call esi
test eax, eax
je 0x4076d4
cmp byte [ebp - 0x103], 0x3a
jne 0x4076d4
movzx eax, byte [ebp - 0x104]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40770c
lea eax, [ebp - 0x6d4]
push eax
push 3
call esi
test eax, eax
je 0x40770c
cmp byte [ebp - 0x6d3], 0x3a
jne 0x40770c
movzx eax, byte [ebp - 0x6d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10c]
push eax
push 3
jne 0x40775c
call esi
test eax, eax
je 0x40773d
cmp byte [ebp - 0x10b], 0x3a
jne 0x40773d
movzx eax, byte [ebp - 0x10c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x400]
mov byte [ebp - 0x400], 0x42
push eax
mov byte [ebp - 0x3ff], 0x3a
mov byte [ebp - 0x3fe], bl
call edi
jmp 0x40777a
call esi
test eax, eax
je 0x40777a
cmp byte [ebp - 0x10b], 0x3a
jne 0x40777a
movzx eax, byte [ebp - 0x10c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x10c]
push eax
push 3
call esi
test eax, eax
je 0x4077a1
cmp byte [ebp - 0x10b], 0x3a
jne 0x4077a1
movzx eax, byte [ebp - 0x10c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4077d9
lea eax, [ebp - 0x6dc]
push eax
push 3
call esi
test eax, eax
je 0x4077d9
cmp byte [ebp - 0x6db], 0x3a
jne 0x4077d9
movzx eax, byte [ebp - 0x6dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x114]
push eax
push 3
jne 0x407829
call esi
test eax, eax
je 0x40780a
cmp byte [ebp - 0x113], 0x3a
jne 0x40780a
movzx eax, byte [ebp - 0x114]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x408]
mov byte [ebp - 0x408], 0x42
push eax
mov byte [ebp - 0x407], 0x3a
mov byte [ebp - 0x406], bl
call edi
jmp 0x407847
call esi
test eax, eax
je 0x407847
cmp byte [ebp - 0x113], 0x3a
jne 0x407847
movzx eax, byte [ebp - 0x114]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x114]
push eax
push 3
call esi
test eax, eax
je 0x40786e
cmp byte [ebp - 0x113], 0x3a
jne 0x40786e
movzx eax, byte [ebp - 0x114]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4078b1
lea eax, [ebp - 0x6e4]
push eax
push 3
call esi
test eax, eax
je 0x4078b1
cmp byte [ebp - 0x6e3], 0x3a
jne 0x4078b1
movzx eax, byte [ebp - 0x6e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x11c]
push eax
push 3
jne 0x407901
call esi
test eax, eax
je 0x4078e2
cmp byte [ebp - 0x11b], 0x3a
jne 0x4078e2
movzx eax, byte [ebp - 0x11c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x410]
mov byte [ebp - 0x410], 0x42
push eax
mov byte [ebp - 0x40f], 0x3a
mov byte [ebp - 0x40e], bl
call edi
jmp 0x40791f
call esi
test eax, eax
je 0x40791f
cmp byte [ebp - 0x11b], 0x3a
jne 0x40791f
movzx eax, byte [ebp - 0x11c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x11c]
push eax
push 3
call esi
test eax, eax
je 0x407946
cmp byte [ebp - 0x11b], 0x3a
jne 0x407946
movzx eax, byte [ebp - 0x11c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407987
lea eax, [ebp - 0x6ec]
push eax
push 3
call esi
test eax, eax
je 0x407987
cmp byte [ebp - 0x6eb], 0x3a
jne 0x407987
movzx eax, byte [ebp - 0x6ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x124]
push eax
push 3
jne 0x4079d7
call esi
test eax, eax
je 0x4079b8
cmp byte [ebp - 0x123], 0x3a
jne 0x4079b8
movzx eax, byte [ebp - 0x124]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x418]
mov byte [ebp - 0x418], 0x42
push eax
mov byte [ebp - 0x417], 0x3a
mov byte [ebp - 0x416], bl
call edi
jmp 0x4079f5
call esi
test eax, eax
je 0x4079f5
cmp byte [ebp - 0x123], 0x3a
jne 0x4079f5
movzx eax, byte [ebp - 0x124]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x124]
push eax
push 3
call esi
test eax, eax
je 0x407a1c
cmp byte [ebp - 0x123], 0x3a
jne 0x407a1c
movzx eax, byte [ebp - 0x124]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407a55
lea eax, [ebp - 0x6f4]
push eax
push 3
call esi
test eax, eax
je 0x407a55
cmp byte [ebp - 0x6f3], 0x3a
jne 0x407a55
movzx eax, byte [ebp - 0x6f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x12c]
push eax
push 3
jne 0x407aa5
call esi
test eax, eax
je 0x407a86
cmp byte [ebp - 0x12b], 0x3a
jne 0x407a86
movzx eax, byte [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x420]
mov byte [ebp - 0x420], 0x42
push eax
mov byte [ebp - 0x41f], 0x3a
mov byte [ebp - 0x41e], bl
call edi
jmp 0x407ac3
call esi
test eax, eax
je 0x407ac3
cmp byte [ebp - 0x12b], 0x3a
jne 0x407ac3
movzx eax, byte [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x12c]
push eax
push 3
call esi
test eax, eax
je 0x407aea
cmp byte [ebp - 0x12b], 0x3a
jne 0x407aea
movzx eax, byte [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407b29
lea eax, [ebp - 0x6fc]
push eax
push 3
call esi
test eax, eax
je 0x407b29
cmp byte [ebp - 0x6fb], 0x3a
jne 0x407b29
movzx eax, byte [ebp - 0x6fc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x134]
push eax
push 3
jne 0x407b79
call esi
test eax, eax
je 0x407b5a
cmp byte [ebp - 0x133], 0x3a
jne 0x407b5a
movzx eax, byte [ebp - 0x134]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x428]
mov byte [ebp - 0x428], 0x42
push eax
mov byte [ebp - 0x427], 0x3a
mov byte [ebp - 0x426], bl
call edi
jmp 0x407b97
call esi
test eax, eax
je 0x407b97
cmp byte [ebp - 0x133], 0x3a
jne 0x407b97
movzx eax, byte [ebp - 0x134]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x134]
push eax
push 3
call esi
test eax, eax
je 0x407bbe
cmp byte [ebp - 0x133], 0x3a
jne 0x407bbe
movzx eax, byte [ebp - 0x134]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407bf7
lea eax, [ebp - 0x704]
push eax
push 3
call esi
test eax, eax
je 0x407bf7
cmp byte [ebp - 0x703], 0x3a
jne 0x407bf7
movzx eax, byte [ebp - 0x704]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x13c]
push eax
push 3
jne 0x407c47
call esi
test eax, eax
je 0x407c28
cmp byte [ebp - 0x13b], 0x3a
jne 0x407c28
movzx eax, byte [ebp - 0x13c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x430]
mov byte [ebp - 0x430], 0x42
push eax
mov byte [ebp - 0x42f], 0x3a
mov byte [ebp - 0x42e], bl
call edi
jmp 0x407c65
call esi
test eax, eax
je 0x407c65
cmp byte [ebp - 0x13b], 0x3a
jne 0x407c65
movzx eax, byte [ebp - 0x13c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x13c]
push eax
push 3
call esi
test eax, eax
je 0x407c8c
cmp byte [ebp - 0x13b], 0x3a
jne 0x407c8c
movzx eax, byte [ebp - 0x13c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407cc4
lea eax, [ebp - 0x70c]
push eax
push 3
call esi
test eax, eax
je 0x407cc4
cmp byte [ebp - 0x70b], 0x3a
jne 0x407cc4
movzx eax, byte [ebp - 0x70c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x144]
push eax
push 3
jne 0x407d14
call esi
test eax, eax
je 0x407cf5
cmp byte [ebp - 0x143], 0x3a
jne 0x407cf5
movzx eax, byte [ebp - 0x144]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x438]
mov byte [ebp - 0x438], 0x42
push eax
mov byte [ebp - 0x437], 0x3a
mov byte [ebp - 0x436], bl
call edi
jmp 0x407d32
call esi
test eax, eax
je 0x407d32
cmp byte [ebp - 0x143], 0x3a
jne 0x407d32
movzx eax, byte [ebp - 0x144]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x144]
push eax
push 3
call esi
test eax, eax
je 0x407d59
cmp byte [ebp - 0x143], 0x3a
jne 0x407d59
movzx eax, byte [ebp - 0x144]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407d92
lea eax, [ebp - 0x714]
push eax
push 3
call esi
test eax, eax
je 0x407d92
cmp byte [ebp - 0x713], 0x3a
jne 0x407d92
movzx eax, byte [ebp - 0x714]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14c]
push eax
push 3
jne 0x407de2
call esi
test eax, eax
je 0x407dc3
cmp byte [ebp - 0x14b], 0x3a
jne 0x407dc3
movzx eax, byte [ebp - 0x14c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x440]
mov byte [ebp - 0x440], 0x42
push eax
mov byte [ebp - 0x43f], 0x3a
mov byte [ebp - 0x43e], bl
call edi
jmp 0x407e00
call esi
test eax, eax
je 0x407e00
cmp byte [ebp - 0x14b], 0x3a
jne 0x407e00
movzx eax, byte [ebp - 0x14c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x14c]
push eax
push 3
call esi
test eax, eax
je 0x407e27
cmp byte [ebp - 0x14b], 0x3a
jne 0x407e27
movzx eax, byte [ebp - 0x14c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407e5e
lea eax, [ebp - 0x71c]
push eax
push 3
call esi
test eax, eax
je 0x407e5e
cmp byte [ebp - 0x71b], 0x3a
jne 0x407e5e
movzx eax, byte [ebp - 0x71c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x154]
push eax
push 3
jne 0x407eae
call esi
test eax, eax
je 0x407e8f
cmp byte [ebp - 0x153], 0x3a
jne 0x407e8f
movzx eax, byte [ebp - 0x154]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x448]
mov byte [ebp - 0x448], 0x42
push eax
mov byte [ebp - 0x447], 0x3a
mov byte [ebp - 0x446], bl
call edi
jmp 0x407ecc
call esi
test eax, eax
je 0x407ecc
cmp byte [ebp - 0x153], 0x3a
jne 0x407ecc
movzx eax, byte [ebp - 0x154]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x154]
push eax
push 3
call esi
test eax, eax
je 0x407ef3
cmp byte [ebp - 0x153], 0x3a
jne 0x407ef3
movzx eax, byte [ebp - 0x154]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407f2d
lea eax, [ebp - 0x724]
push eax
push 3
call esi
test eax, eax
je 0x407f2d
cmp byte [ebp - 0x723], 0x3a
jne 0x407f2d
movzx eax, byte [ebp - 0x724]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x15c]
push eax
push 3
jne 0x407f7d
call esi
test eax, eax
je 0x407f5e
cmp byte [ebp - 0x15b], 0x3a
jne 0x407f5e
movzx eax, byte [ebp - 0x15c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x450]
mov byte [ebp - 0x450], 0x42
push eax
mov byte [ebp - 0x44f], 0x3a
mov byte [ebp - 0x44e], bl
call edi
jmp 0x407f9b
call esi
test eax, eax
je 0x407f9b
cmp byte [ebp - 0x15b], 0x3a
jne 0x407f9b
movzx eax, byte [ebp - 0x15c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x15c]
push eax
push 3
call esi
test eax, eax
je 0x407fc2
cmp byte [ebp - 0x15b], 0x3a
jne 0x407fc2
movzx eax, byte [ebp - 0x15c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x407ffb
lea eax, [ebp - 0x72c]
push eax
push 3
call esi
test eax, eax
je 0x407ffb
cmp byte [ebp - 0x72b], 0x3a
jne 0x407ffb
movzx eax, byte [ebp - 0x72c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x164]
push eax
push 3
jne 0x40804b
call esi
test eax, eax
je 0x40802c
cmp byte [ebp - 0x163], 0x3a
jne 0x40802c
movzx eax, byte [ebp - 0x164]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x458]
mov byte [ebp - 0x458], 0x42
push eax
mov byte [ebp - 0x457], 0x3a
mov byte [ebp - 0x456], bl
call edi
jmp 0x408069
call esi
test eax, eax
je 0x408069
cmp byte [ebp - 0x163], 0x3a
jne 0x408069
movzx eax, byte [ebp - 0x164]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x164]
push eax
push 3
call esi
test eax, eax
je 0x408090
cmp byte [ebp - 0x163], 0x3a
jne 0x408090
movzx eax, byte [ebp - 0x164]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4080c9
lea eax, [ebp - 0x734]
push eax
push 3
call esi
test eax, eax
je 0x4080c9
cmp byte [ebp - 0x733], 0x3a
jne 0x4080c9
movzx eax, byte [ebp - 0x734]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x16c]
push eax
push 3
jne 0x408119
call esi
test eax, eax
je 0x4080fa
cmp byte [ebp - 0x16b], 0x3a
jne 0x4080fa
movzx eax, byte [ebp - 0x16c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x460]
mov byte [ebp - 0x460], 0x42
push eax
mov byte [ebp - 0x45f], 0x3a
mov byte [ebp - 0x45e], bl
call edi
jmp 0x408137
call esi
test eax, eax
je 0x408137
cmp byte [ebp - 0x16b], 0x3a
jne 0x408137
movzx eax, byte [ebp - 0x16c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x16c]
push eax
push 3
call esi
test eax, eax
je 0x40815e
cmp byte [ebp - 0x16b], 0x3a
jne 0x40815e
movzx eax, byte [ebp - 0x16c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408196
lea eax, [ebp - 0x73c]
push eax
push 3
call esi
test eax, eax
je 0x408196
cmp byte [ebp - 0x73b], 0x3a
jne 0x408196
movzx eax, byte [ebp - 0x73c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x174]
push eax
push 3
jne 0x4081e6
call esi
test eax, eax
je 0x4081c7
cmp byte [ebp - 0x173], 0x3a
jne 0x4081c7
movzx eax, byte [ebp - 0x174]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x468]
mov byte [ebp - 0x468], 0x42
push eax
mov byte [ebp - 0x467], 0x3a
mov byte [ebp - 0x466], bl
call edi
jmp 0x408204
call esi
test eax, eax
je 0x408204
cmp byte [ebp - 0x173], 0x3a
jne 0x408204
movzx eax, byte [ebp - 0x174]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x174]
push eax
push 3
call esi
test eax, eax
je 0x40822b
cmp byte [ebp - 0x173], 0x3a
jne 0x40822b
movzx eax, byte [ebp - 0x174]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408266
lea eax, [ebp - 0x744]
push eax
push 3
call esi
test eax, eax
je 0x408266
cmp byte [ebp - 0x743], 0x3a
jne 0x408266
movzx eax, byte [ebp - 0x744]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x17c]
push eax
push 3
jne 0x4082b6
call esi
test eax, eax
je 0x408297
cmp byte [ebp - 0x17b], 0x3a
jne 0x408297
movzx eax, byte [ebp - 0x17c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x470]
mov byte [ebp - 0x470], 0x42
push eax
mov byte [ebp - 0x46f], 0x3a
mov byte [ebp - 0x46e], bl
call edi
jmp 0x4082d4
call esi
test eax, eax
je 0x4082d4
cmp byte [ebp - 0x17b], 0x3a
jne 0x4082d4
movzx eax, byte [ebp - 0x17c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x17c]
push eax
push 3
call esi
test eax, eax
je 0x4082fb
cmp byte [ebp - 0x17b], 0x3a
jne 0x4082fb
movzx eax, byte [ebp - 0x17c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40833d
lea eax, [ebp - 0x74c]
push eax
push 3
call esi
test eax, eax
je 0x40833d
cmp byte [ebp - 0x74b], 0x3a
jne 0x40833d
movzx eax, byte [ebp - 0x74c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x184]
push eax
push 3
jne 0x40838d
call esi
test eax, eax
je 0x40836e
cmp byte [ebp - 0x183], 0x3a
jne 0x40836e
movzx eax, byte [ebp - 0x184]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x478]
mov byte [ebp - 0x478], 0x42
push eax
mov byte [ebp - 0x477], 0x3a
mov byte [ebp - 0x476], bl
call edi
jmp 0x4083ab
call esi
test eax, eax
je 0x4083ab
cmp byte [ebp - 0x183], 0x3a
jne 0x4083ab
movzx eax, byte [ebp - 0x184]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x184]
push eax
push 3
call esi
test eax, eax
je 0x4083d2
cmp byte [ebp - 0x183], 0x3a
jne 0x4083d2
movzx eax, byte [ebp - 0x184]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40840c
lea eax, [ebp - 0x754]
push eax
push 3
call esi
test eax, eax
je 0x40840c
cmp byte [ebp - 0x753], 0x3a
jne 0x40840c
movzx eax, byte [ebp - 0x754]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18c]
push eax
push 3
jne 0x40845c
call esi
test eax, eax
je 0x40843d
cmp byte [ebp - 0x18b], 0x3a
jne 0x40843d
movzx eax, byte [ebp - 0x18c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x480]
mov byte [ebp - 0x480], 0x42
push eax
mov byte [ebp - 0x47f], 0x3a
mov byte [ebp - 0x47e], bl
call edi
jmp 0x40847a
call esi
test eax, eax
je 0x40847a
cmp byte [ebp - 0x18b], 0x3a
jne 0x40847a
movzx eax, byte [ebp - 0x18c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x18c]
push eax
push 3
call esi
test eax, eax
je 0x4084a1
cmp byte [ebp - 0x18b], 0x3a
jne 0x4084a1
movzx eax, byte [ebp - 0x18c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4084d9
lea eax, [ebp - 0x75c]
push eax
push 3
call esi
test eax, eax
je 0x4084d9
cmp byte [ebp - 0x75b], 0x3a
jne 0x4084d9
movzx eax, byte [ebp - 0x75c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x194]
push eax
push 3
jne 0x408529
call esi
test eax, eax
je 0x40850a
cmp byte [ebp - 0x193], 0x3a
jne 0x40850a
movzx eax, byte [ebp - 0x194]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x488]
mov byte [ebp - 0x488], 0x42
push eax
mov byte [ebp - 0x487], 0x3a
mov byte [ebp - 0x486], bl
call edi
jmp 0x408547
call esi
test eax, eax
je 0x408547
cmp byte [ebp - 0x193], 0x3a
jne 0x408547
movzx eax, byte [ebp - 0x194]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x194]
push eax
push 3
call esi
test eax, eax
je 0x40856e
cmp byte [ebp - 0x193], 0x3a
jne 0x40856e
movzx eax, byte [ebp - 0x194]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4085a9
lea eax, [ebp - 0x764]
push eax
push 3
call esi
test eax, eax
je 0x4085a9
cmp byte [ebp - 0x763], 0x3a
jne 0x4085a9
movzx eax, byte [ebp - 0x764]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x19c]
push eax
push 3
jne 0x4085f9
call esi
test eax, eax
je 0x4085da
cmp byte [ebp - 0x19b], 0x3a
jne 0x4085da
movzx eax, byte [ebp - 0x19c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x490]
mov byte [ebp - 0x490], 0x42
push eax
mov byte [ebp - 0x48f], 0x3a
mov byte [ebp - 0x48e], bl
call edi
jmp 0x408617
call esi
test eax, eax
je 0x408617
cmp byte [ebp - 0x19b], 0x3a
jne 0x408617
movzx eax, byte [ebp - 0x19c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x19c]
push eax
push 3
call esi
test eax, eax
je 0x40863e
cmp byte [ebp - 0x19b], 0x3a
jne 0x40863e
movzx eax, byte [ebp - 0x19c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4086a3
lea eax, [ebp - 0x76c]
push eax
push 3
call esi
test eax, eax
je 0x4086a3
cmp byte [ebp - 0x76b], 0x3a
jne 0x4086a3
movzx eax, byte [ebp - 0x76c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a4]
push eax
push 3
jne 0x4086f3
call esi
test eax, eax
je 0x4086d4
cmp byte [ebp - 0x1a3], 0x3a
jne 0x4086d4
movzx eax, byte [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x498]
mov byte [ebp - 0x498], 0x42
push eax
mov byte [ebp - 0x497], 0x3a
mov byte [ebp - 0x496], bl
call edi
jmp 0x408711
call esi
test eax, eax
je 0x408711
cmp byte [ebp - 0x1a3], 0x3a
jne 0x408711
movzx eax, byte [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1a4]
push eax
push 3
call esi
test eax, eax
je 0x408738
cmp byte [ebp - 0x1a3], 0x3a
jne 0x408738
movzx eax, byte [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea ecx, [ebp - 0x918]
call fcn.0042c571
lea eax, [ebp - 0x5ec]
lea ecx, [ebp - 0x918]
push eax
call fcn.0042fe7c
test eax, eax
je 0x4098d1
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4098a3
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4087aa
lea eax, [ebp - 0x774]
push eax
push 3
call esi
test eax, eax
je 0x4087aa
cmp byte [ebp - 0x773], 0x3a
jne 0x4087aa
movzx eax, byte [ebp - 0x774]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ac]
push eax
push 3
jne 0x4087fa
call esi
test eax, eax
je 0x4087db
cmp byte [ebp - 0x1ab], 0x3a
jne 0x4087db
movzx eax, byte [ebp - 0x1ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4a0]
mov byte [ebp - 0x4a0], 0x42
push eax
mov byte [ebp - 0x49f], 0x3a
mov byte [ebp - 0x49e], bl
call edi
jmp 0x408818
call esi
test eax, eax
je 0x408818
cmp byte [ebp - 0x1ab], 0x3a
jne 0x408818
movzx eax, byte [ebp - 0x1ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1ac]
push eax
push 3
call esi
test eax, eax
je 0x40883f
cmp byte [ebp - 0x1ab], 0x3a
jne 0x40883f
movzx eax, byte [ebp - 0x1ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408877
lea eax, [ebp - 0x77c]
push eax
push 3
call esi
test eax, eax
je 0x408877
cmp byte [ebp - 0x77b], 0x3a
jne 0x408877
movzx eax, byte [ebp - 0x77c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b4]
push eax
push 3
jne 0x4088c7
call esi
test eax, eax
je 0x4088a8
cmp byte [ebp - 0x1b3], 0x3a
jne 0x4088a8
movzx eax, byte [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4a8]
mov byte [ebp - 0x4a8], 0x42
push eax
mov byte [ebp - 0x4a7], 0x3a
mov byte [ebp - 0x4a6], bl
call edi
jmp 0x4088e5
call esi
test eax, eax
je 0x4088e5
cmp byte [ebp - 0x1b3], 0x3a
jne 0x4088e5
movzx eax, byte [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1b4]
push eax
push 3
call esi
test eax, eax
je 0x40890c
cmp byte [ebp - 0x1b3], 0x3a
jne 0x40890c
movzx eax, byte [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408944
lea eax, [ebp - 0x784]
push eax
push 3
call esi
test eax, eax
je 0x408944
cmp byte [ebp - 0x783], 0x3a
jne 0x408944
movzx eax, byte [ebp - 0x784]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1bc]
push eax
push 3
jne 0x408994
call esi
test eax, eax
je 0x408975
cmp byte [ebp - 0x1bb], 0x3a
jne 0x408975
movzx eax, byte [ebp - 0x1bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4b0]
mov byte [ebp - 0x4b0], 0x42
push eax
mov byte [ebp - 0x4af], 0x3a
mov byte [ebp - 0x4ae], bl
call edi
jmp 0x4089b2
call esi
test eax, eax
je 0x4089b2
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4089b2
movzx eax, byte [ebp - 0x1bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1bc]
push eax
push 3
call esi
test eax, eax
je 0x4089d9
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4089d9
movzx eax, byte [ebp - 0x1bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408a1c
lea eax, [ebp - 0x78c]
push eax
push 3
call esi
test eax, eax
je 0x408a1c
cmp byte [ebp - 0x78b], 0x3a
jne 0x408a1c
movzx eax, byte [ebp - 0x78c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c4]
push eax
push 3
jne 0x408a6c
call esi
test eax, eax
je 0x408a4d
cmp byte [ebp - 0x1c3], 0x3a
jne 0x408a4d
movzx eax, byte [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4b8]
mov byte [ebp - 0x4b8], 0x42
push eax
mov byte [ebp - 0x4b7], 0x3a
mov byte [ebp - 0x4b6], bl
call edi
jmp 0x408a8a
call esi
test eax, eax
je 0x408a8a
cmp byte [ebp - 0x1c3], 0x3a
jne 0x408a8a
movzx eax, byte [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1c4]
push eax
push 3
call esi
test eax, eax
je 0x408ab1
cmp byte [ebp - 0x1c3], 0x3a
jne 0x408ab1
movzx eax, byte [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408af2
lea eax, [ebp - 0x794]
push eax
push 3
call esi
test eax, eax
je 0x408af2
cmp byte [ebp - 0x793], 0x3a
jne 0x408af2
movzx eax, byte [ebp - 0x794]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1cc]
push eax
push 3
jne 0x408b42
call esi
test eax, eax
je 0x408b23
cmp byte [ebp - 0x1cb], 0x3a
jne 0x408b23
movzx eax, byte [ebp - 0x1cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4c0]
mov byte [ebp - 0x4c0], 0x42
push eax
mov byte [ebp - 0x4bf], 0x3a
mov byte [ebp - 0x4be], bl
call edi
jmp 0x408b60
call esi
test eax, eax
je 0x408b60
cmp byte [ebp - 0x1cb], 0x3a
jne 0x408b60
movzx eax, byte [ebp - 0x1cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1cc]
push eax
push 3
call esi
test eax, eax
je 0x408b87
cmp byte [ebp - 0x1cb], 0x3a
jne 0x408b87
movzx eax, byte [ebp - 0x1cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408bc0
lea eax, [ebp - 0x79c]
push eax
push 3
call esi
test eax, eax
je 0x408bc0
cmp byte [ebp - 0x79b], 0x3a
jne 0x408bc0
movzx eax, byte [ebp - 0x79c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d4]
push eax
push 3
jne 0x408c10
call esi
test eax, eax
je 0x408bf1
cmp byte [ebp - 0x1d3], 0x3a
jne 0x408bf1
movzx eax, byte [ebp - 0x1d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4c8]
mov byte [ebp - 0x4c8], 0x42
push eax
mov byte [ebp - 0x4c7], 0x3a
mov byte [ebp - 0x4c6], bl
call edi
jmp 0x408c2e
call esi
test eax, eax
je 0x408c2e
cmp byte [ebp - 0x1d3], 0x3a
jne 0x408c2e
movzx eax, byte [ebp - 0x1d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1d4]
push eax
push 3
call esi
test eax, eax
je 0x408c55
cmp byte [ebp - 0x1d3], 0x3a
jne 0x408c55
movzx eax, byte [ebp - 0x1d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408c94
lea eax, [ebp - 0x7a4]
push eax
push 3
call esi
test eax, eax
je 0x408c94
cmp byte [ebp - 0x7a3], 0x3a
jne 0x408c94
movzx eax, byte [ebp - 0x7a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1dc]
push eax
push 3
jne 0x408ce4
call esi
test eax, eax
je 0x408cc5
cmp byte [ebp - 0x1db], 0x3a
jne 0x408cc5
movzx eax, byte [ebp - 0x1dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4d0]
mov byte [ebp - 0x4d0], 0x42
push eax
mov byte [ebp - 0x4cf], 0x3a
mov byte [ebp - 0x4ce], bl
call edi
jmp 0x408d02
call esi
test eax, eax
je 0x408d02
cmp byte [ebp - 0x1db], 0x3a
jne 0x408d02
movzx eax, byte [ebp - 0x1dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1dc]
push eax
push 3
call esi
test eax, eax
je 0x408d29
cmp byte [ebp - 0x1db], 0x3a
jne 0x408d29
movzx eax, byte [ebp - 0x1dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408d62
lea eax, [ebp - 0x7ac]
push eax
push 3
call esi
test eax, eax
je 0x408d62
cmp byte [ebp - 0x7ab], 0x3a
jne 0x408d62
movzx eax, byte [ebp - 0x7ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e4]
push eax
push 3
jne 0x408db2
call esi
test eax, eax
je 0x408d93
cmp byte [ebp - 0x1e3], 0x3a
jne 0x408d93
movzx eax, byte [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4d8]
mov byte [ebp - 0x4d8], 0x42
push eax
mov byte [ebp - 0x4d7], 0x3a
mov byte [ebp - 0x4d6], bl
call edi
jmp 0x408dd0
call esi
test eax, eax
je 0x408dd0
cmp byte [ebp - 0x1e3], 0x3a
jne 0x408dd0
movzx eax, byte [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1e4]
push eax
push 3
call esi
test eax, eax
je 0x408df7
cmp byte [ebp - 0x1e3], 0x3a
jne 0x408df7
movzx eax, byte [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408e2f
lea eax, [ebp - 0x7b4]
push eax
push 3
call esi
test eax, eax
je 0x408e2f
cmp byte [ebp - 0x7b3], 0x3a
jne 0x408e2f
movzx eax, byte [ebp - 0x7b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ec]
push eax
push 3
jne 0x408e7f
call esi
test eax, eax
je 0x408e60
cmp byte [ebp - 0x1eb], 0x3a
jne 0x408e60
movzx eax, byte [ebp - 0x1ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x4e0], 0x42
push eax
mov byte [ebp - 0x4df], 0x3a
mov byte [ebp - 0x4de], bl
call edi
jmp 0x408e9d
call esi
test eax, eax
je 0x408e9d
cmp byte [ebp - 0x1eb], 0x3a
jne 0x408e9d
movzx eax, byte [ebp - 0x1ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1ec]
push eax
push 3
call esi
test eax, eax
je 0x408ec4
cmp byte [ebp - 0x1eb], 0x3a
jne 0x408ec4
movzx eax, byte [ebp - 0x1ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408efd
lea eax, [ebp - 0x7bc]
push eax
push 3
call esi
test eax, eax
je 0x408efd
cmp byte [ebp - 0x7bb], 0x3a
jne 0x408efd
movzx eax, byte [ebp - 0x7bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f4]
push eax
push 3
jne 0x408f4d
call esi
test eax, eax
je 0x408f2e
cmp byte [ebp - 0x1f3], 0x3a
jne 0x408f2e
movzx eax, byte [ebp - 0x1f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4e8]
mov byte [ebp - 0x4e8], 0x42
push eax
mov byte [ebp - 0x4e7], 0x3a
mov byte [ebp - 0x4e6], bl
call edi
jmp 0x408f6b
call esi
test eax, eax
je 0x408f6b
cmp byte [ebp - 0x1f3], 0x3a
jne 0x408f6b
movzx eax, byte [ebp - 0x1f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1f4]
push eax
push 3
call esi
test eax, eax
je 0x408f92
cmp byte [ebp - 0x1f3], 0x3a
jne 0x408f92
movzx eax, byte [ebp - 0x1f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x408fc9
lea eax, [ebp - 0x7c4]
push eax
push 3
call esi
test eax, eax
je 0x408fc9
cmp byte [ebp - 0x7c3], 0x3a
jne 0x408fc9
movzx eax, byte [ebp - 0x7c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1fc]
push eax
push 3
jne 0x409019
call esi
test eax, eax
je 0x408ffa
cmp byte [ebp - 0x1fb], 0x3a
jne 0x408ffa
movzx eax, byte [ebp - 0x1fc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4f0]
mov byte [ebp - 0x4f0], 0x42
push eax
mov byte [ebp - 0x4ef], 0x3a
mov byte [ebp - 0x4ee], bl
call edi
jmp 0x409037
call esi
test eax, eax
je 0x409037
cmp byte [ebp - 0x1fb], 0x3a
jne 0x409037
movzx eax, byte [ebp - 0x1fc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x1fc]
push eax
push 3
call esi
test eax, eax
je 0x40905e
cmp byte [ebp - 0x1fb], 0x3a
jne 0x40905e
movzx eax, byte [ebp - 0x1fc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409098
lea eax, [ebp - 0x7cc]
push eax
push 3
call esi
test eax, eax
je 0x409098
cmp byte [ebp - 0x7cb], 0x3a
jne 0x409098
movzx eax, byte [ebp - 0x7cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x204]
push eax
push 3
jne 0x4090e8
call esi
test eax, eax
je 0x4090c9
cmp byte [ebp - 0x203], 0x3a
jne 0x4090c9
movzx eax, byte [ebp - 0x204]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x4f8]
mov byte [ebp - 0x4f8], 0x42
push eax
mov byte [ebp - 0x4f7], 0x3a
mov byte [ebp - 0x4f6], bl
call edi
jmp 0x409106
call esi
test eax, eax
je 0x409106
cmp byte [ebp - 0x203], 0x3a
jne 0x409106
movzx eax, byte [ebp - 0x204]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x204]
push eax
push 3
call esi
test eax, eax
je 0x40912d
cmp byte [ebp - 0x203], 0x3a
jne 0x40912d
movzx eax, byte [ebp - 0x204]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409166
lea eax, [ebp - 0x7d4]
push eax
push 3
call esi
test eax, eax
je 0x409166
cmp byte [ebp - 0x7d3], 0x3a
jne 0x409166
movzx eax, byte [ebp - 0x7d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20c]
push eax
push 3
jne 0x4091b6
call esi
test eax, eax
je 0x409197
cmp byte [ebp - 0x20b], 0x3a
jne 0x409197
movzx eax, byte [ebp - 0x20c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x500]
mov byte [ebp - 0x500], 0x42
push eax
mov byte [ebp - 0x4ff], 0x3a
mov byte [ebp - 0x4fe], bl
call edi
jmp 0x4091d4
call esi
test eax, eax
je 0x4091d4
cmp byte [ebp - 0x20b], 0x3a
jne 0x4091d4
movzx eax, byte [ebp - 0x20c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x20c]
push eax
push 3
call esi
test eax, eax
je 0x4091fb
cmp byte [ebp - 0x20b], 0x3a
jne 0x4091fb
movzx eax, byte [ebp - 0x20c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409234
lea eax, [ebp - 0x7dc]
push eax
push 3
call esi
test eax, eax
je 0x409234
cmp byte [ebp - 0x7db], 0x3a
jne 0x409234
movzx eax, byte [ebp - 0x7dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x214]
push eax
push 3
jne 0x409284
call esi
test eax, eax
je 0x409265
cmp byte [ebp - 0x213], 0x3a
jne 0x409265
movzx eax, byte [ebp - 0x214]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x508]
mov byte [ebp - 0x508], 0x42
push eax
mov byte [ebp - 0x507], 0x3a
mov byte [ebp - 0x506], bl
call edi
jmp 0x4092a2
call esi
test eax, eax
je 0x4092a2
cmp byte [ebp - 0x213], 0x3a
jne 0x4092a2
movzx eax, byte [ebp - 0x214]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x214]
push eax
push 3
call esi
test eax, eax
je 0x4092c9
cmp byte [ebp - 0x213], 0x3a
jne 0x4092c9
movzx eax, byte [ebp - 0x214]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409301
lea eax, [ebp - 0x7e4]
push eax
push 3
call esi
test eax, eax
je 0x409301
cmp byte [ebp - 0x7e3], 0x3a
jne 0x409301
movzx eax, byte [ebp - 0x7e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x21c]
push eax
push 3
jne 0x409351
call esi
test eax, eax
je 0x409332
cmp byte [ebp - 0x21b], 0x3a
jne 0x409332
movzx eax, byte [ebp - 0x21c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x510]
mov byte [ebp - 0x510], 0x42
push eax
mov byte [ebp - 0x50f], 0x3a
mov byte [ebp - 0x50e], bl
call edi
jmp 0x40936f
call esi
test eax, eax
je 0x40936f
cmp byte [ebp - 0x21b], 0x3a
jne 0x40936f
movzx eax, byte [ebp - 0x21c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x21c]
push eax
push 3
call esi
test eax, eax
je 0x409396
cmp byte [ebp - 0x21b], 0x3a
jne 0x409396
movzx eax, byte [ebp - 0x21c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4093d1
lea eax, [ebp - 0x7ec]
push eax
push 3
call esi
test eax, eax
je 0x4093d1
cmp byte [ebp - 0x7eb], 0x3a
jne 0x4093d1
movzx eax, byte [ebp - 0x7ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x224]
push eax
push 3
jne 0x409421
call esi
test eax, eax
je 0x409402
cmp byte [ebp - 0x223], 0x3a
jne 0x409402
movzx eax, byte [ebp - 0x224]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x518]
mov byte [ebp - 0x518], 0x42
push eax
mov byte [ebp - 0x517], 0x3a
mov byte [ebp - 0x516], bl
call edi
jmp 0x40943f
call esi
test eax, eax
je 0x40943f
cmp byte [ebp - 0x223], 0x3a
jne 0x40943f
movzx eax, byte [ebp - 0x224]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x224]
push eax
push 3
call esi
test eax, eax
je 0x409466
cmp byte [ebp - 0x223], 0x3a
jne 0x409466
movzx eax, byte [ebp - 0x224]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x4094a8
lea eax, [ebp - 0x7f4]
push eax
push 3
call esi
test eax, eax
je 0x4094a8
cmp byte [ebp - 0x7f3], 0x3a
jne 0x4094a8
movzx eax, byte [ebp - 0x7f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x22c]
push eax
push 3
jne 0x4094f8
call esi
test eax, eax
je 0x4094d9
cmp byte [ebp - 0x22b], 0x3a
jne 0x4094d9
movzx eax, byte [ebp - 0x22c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x520]
mov byte [ebp - 0x520], 0x42
push eax
mov byte [ebp - 0x51f], 0x3a
mov byte [ebp - 0x51e], bl
call edi
jmp 0x409516
call esi
test eax, eax
je 0x409516
cmp byte [ebp - 0x22b], 0x3a
jne 0x409516
movzx eax, byte [ebp - 0x22c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x22c]
push eax
push 3
call esi
test eax, eax
je 0x40953d
cmp byte [ebp - 0x22b], 0x3a
jne 0x40953d
movzx eax, byte [ebp - 0x22c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409577
lea eax, [ebp - 0x7fc]
push eax
push 3
call esi
test eax, eax
je 0x409577
cmp byte [ebp - 0x7fb], 0x3a
jne 0x409577
movzx eax, byte [ebp - 0x7fc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x234]
push eax
push 3
jne 0x4095c7
call esi
test eax, eax
je 0x4095a8
cmp byte [ebp - 0x233], 0x3a
jne 0x4095a8
movzx eax, byte [ebp - 0x234]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x528]
mov byte [ebp - 0x528], 0x42
push eax
mov byte [ebp - 0x527], 0x3a
mov byte [ebp - 0x526], bl
call edi
jmp 0x4095e5
call esi
test eax, eax
je 0x4095e5
cmp byte [ebp - 0x233], 0x3a
jne 0x4095e5
movzx eax, byte [ebp - 0x234]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x234]
push eax
push 3
call esi
test eax, eax
je 0x40960c
cmp byte [ebp - 0x233], 0x3a
jne 0x40960c
movzx eax, byte [ebp - 0x234]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409644
lea eax, [ebp - 0x804]
push eax
push 3
call esi
test eax, eax
je 0x409644
cmp byte [ebp - 0x803], 0x3a
jne 0x409644
movzx eax, byte [ebp - 0x804]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x23c]
push eax
push 3
jne 0x409694
call esi
test eax, eax
je 0x409675
cmp byte [ebp - 0x23b], 0x3a
jne 0x409675
movzx eax, byte [ebp - 0x23c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x530]
mov byte [ebp - 0x530], 0x42
push eax
mov byte [ebp - 0x52f], 0x3a
mov byte [ebp - 0x52e], bl
call edi
jmp 0x4096b2
call esi
test eax, eax
je 0x4096b2
cmp byte [ebp - 0x23b], 0x3a
jne 0x4096b2
movzx eax, byte [ebp - 0x23c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x23c]
push eax
push 3
call esi
test eax, eax
je 0x4096d9
cmp byte [ebp - 0x23b], 0x3a
jne 0x4096d9
movzx eax, byte [ebp - 0x23c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409714
lea eax, [ebp - 0x80c]
push eax
push 3
call esi
test eax, eax
je 0x409714
cmp byte [ebp - 0x80b], 0x3a
jne 0x409714
movzx eax, byte [ebp - 0x80c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x244]
push eax
push 3
jne 0x409764
call esi
test eax, eax
je 0x409745
cmp byte [ebp - 0x243], 0x3a
jne 0x409745
movzx eax, byte [ebp - 0x244]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x538]
mov byte [ebp - 0x538], 0x42
push eax
mov byte [ebp - 0x537], 0x3a
mov byte [ebp - 0x536], bl
call edi
jmp 0x409782
call esi
test eax, eax
je 0x409782
cmp byte [ebp - 0x243], 0x3a
jne 0x409782
movzx eax, byte [ebp - 0x244]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x244]
push eax
push 3
call esi
test eax, eax
je 0x4097a9
cmp byte [ebp - 0x243], 0x3a
jne 0x4097a9
movzx eax, byte [ebp - 0x244]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40980e
lea eax, [ebp - 0x814]
push eax
push 3
call esi
test eax, eax
je 0x40980e
cmp byte [ebp - 0x813], 0x3a
jne 0x40980e
movzx eax, byte [ebp - 0x814]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24c]
push eax
push 3
jne 0x40985e
call esi
test eax, eax
je 0x40983f
cmp byte [ebp - 0x24b], 0x3a
jne 0x40983f
movzx eax, byte [ebp - 0x24c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x540]
mov byte [ebp - 0x540], 0x42
push eax
mov byte [ebp - 0x53f], 0x3a
mov byte [ebp - 0x53e], bl
call edi
jmp 0x40987c
call esi
test eax, eax
je 0x40987c
cmp byte [ebp - 0x24b], 0x3a
jne 0x40987c
movzx eax, byte [ebp - 0x24c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x24c]
push eax
push 3
call esi
test eax, eax
je 0x4098a3
cmp byte [ebp - 0x24b], 0x3a
jne 0x4098a3
movzx eax, byte [ebp - 0x24c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea ecx, [ebp - 0x5ec]
call fcn.00416f4f
mov eax, dword [0x4513d0]
push 0xbb8
call dword [eax + 0x3c]
lea ecx, [ebp - 0x918]
call fcn.0042e015
lea ecx, [ebp - 0x918]
call fcn.0042ecde
lea ecx, [ebp - 0x918]
call fcn.0042d2d8
lea ecx, [ebp - 0x5ec]
call fcn.00415578
lea ecx, [ebp - 0x8cc]
call fcn.0041d2c5
lea ecx, [ebp - 0x8ec]
call fcn.00434d12
lea ecx, [ebp - 0x8f8]
call fcn.0041c5d9
mov ecx, dword [0x4513d0]
cmp ecx, ebx
je 0x409918
mov eax, dword [ecx]
push 1
call dword [eax]
lea eax, [ebp + 0x14]
test eax, eax
jne 0x40aa5e
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409965
lea eax, [ebp - 0x81c]
push eax
push 3
call esi
test eax, eax
je 0x409965
cmp byte [ebp - 0x81b], 0x3a
jne 0x409965
movzx eax, byte [ebp - 0x81c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x254]
push eax
push 3
jne 0x4099b5
call esi
test eax, eax
je 0x409996
cmp byte [ebp - 0x253], 0x3a
jne 0x409996
movzx eax, byte [ebp - 0x254]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x548]
mov byte [ebp - 0x548], 0x42
push eax
mov byte [ebp - 0x547], 0x3a
mov byte [ebp - 0x546], bl
call edi
jmp 0x4099d3
call esi
test eax, eax
je 0x4099d3
cmp byte [ebp - 0x253], 0x3a
jne 0x4099d3
movzx eax, byte [ebp - 0x254]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x254]
push eax
push 3
call esi
test eax, eax
je 0x4099fa
cmp byte [ebp - 0x253], 0x3a
jne 0x4099fa
movzx eax, byte [ebp - 0x254]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409a32
lea eax, [ebp - 0x824]
push eax
push 3
call esi
test eax, eax
je 0x409a32
cmp byte [ebp - 0x823], 0x3a
jne 0x409a32
movzx eax, byte [ebp - 0x824]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x25c]
push eax
push 3
jne 0x409a82
call esi
test eax, eax
je 0x409a63
cmp byte [ebp - 0x25b], 0x3a
jne 0x409a63
movzx eax, byte [ebp - 0x25c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x550]
mov byte [ebp - 0x550], 0x42
push eax
mov byte [ebp - 0x54f], 0x3a
mov byte [ebp - 0x54e], bl
call edi
jmp 0x409aa0
call esi
test eax, eax
je 0x409aa0
cmp byte [ebp - 0x25b], 0x3a
jne 0x409aa0
movzx eax, byte [ebp - 0x25c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x25c]
push eax
push 3
call esi
test eax, eax
je 0x409ac7
cmp byte [ebp - 0x25b], 0x3a
jne 0x409ac7
movzx eax, byte [ebp - 0x25c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409aff
lea eax, [ebp - 0x82c]
push eax
push 3
call esi
test eax, eax
je 0x409aff
cmp byte [ebp - 0x82b], 0x3a
jne 0x409aff
movzx eax, byte [ebp - 0x82c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x264]
push eax
push 3
jne 0x409b4f
call esi
test eax, eax
je 0x409b30
cmp byte [ebp - 0x263], 0x3a
jne 0x409b30
movzx eax, byte [ebp - 0x264]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x558]
mov byte [ebp - 0x558], 0x42
push eax
mov byte [ebp - 0x557], 0x3a
mov byte [ebp - 0x556], bl
call edi
jmp 0x409b6d
call esi
test eax, eax
je 0x409b6d
cmp byte [ebp - 0x263], 0x3a
jne 0x409b6d
movzx eax, byte [ebp - 0x264]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x264]
push eax
push 3
call esi
test eax, eax
je 0x409b94
cmp byte [ebp - 0x263], 0x3a
jne 0x409b94
movzx eax, byte [ebp - 0x264]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409bd7
lea eax, [ebp - 0x834]
push eax
push 3
call esi
test eax, eax
je 0x409bd7
cmp byte [ebp - 0x833], 0x3a
jne 0x409bd7
movzx eax, byte [ebp - 0x834]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x26c]
push eax
push 3
jne 0x409c27
call esi
test eax, eax
je 0x409c08
cmp byte [ebp - 0x26b], 0x3a
jne 0x409c08
movzx eax, byte [ebp - 0x26c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x560]
mov byte [ebp - 0x560], 0x42
push eax
mov byte [ebp - 0x55f], 0x3a
mov byte [ebp - 0x55e], bl
call edi
jmp 0x409c45
call esi
test eax, eax
je 0x409c45
cmp byte [ebp - 0x26b], 0x3a
jne 0x409c45
movzx eax, byte [ebp - 0x26c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x26c]
push eax
push 3
call esi
test eax, eax
je 0x409c6c
cmp byte [ebp - 0x26b], 0x3a
jne 0x409c6c
movzx eax, byte [ebp - 0x26c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409cad
lea eax, [ebp - 0x83c]
push eax
push 3
call esi
test eax, eax
je 0x409cad
cmp byte [ebp - 0x83b], 0x3a
jne 0x409cad
movzx eax, byte [ebp - 0x83c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x274]
push eax
push 3
jne 0x409cfd
call esi
test eax, eax
je 0x409cde
cmp byte [ebp - 0x273], 0x3a
jne 0x409cde
movzx eax, byte [ebp - 0x274]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x568]
mov byte [ebp - 0x568], 0x42
push eax
mov byte [ebp - 0x567], 0x3a
mov byte [ebp - 0x566], bl
call edi
jmp 0x409d1b
call esi
test eax, eax
je 0x409d1b
cmp byte [ebp - 0x273], 0x3a
jne 0x409d1b
movzx eax, byte [ebp - 0x274]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x274]
push eax
push 3
call esi
test eax, eax
je 0x409d42
cmp byte [ebp - 0x273], 0x3a
jne 0x409d42
movzx eax, byte [ebp - 0x274]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409d7b
lea eax, [ebp - 0x844]
push eax
push 3
call esi
test eax, eax
je 0x409d7b
cmp byte [ebp - 0x843], 0x3a
jne 0x409d7b
movzx eax, byte [ebp - 0x844]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x27c]
push eax
push 3
jne 0x409dcb
call esi
test eax, eax
je 0x409dac
cmp byte [ebp - 0x27b], 0x3a
jne 0x409dac
movzx eax, byte [ebp - 0x27c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x570]
mov byte [ebp - 0x570], 0x42
push eax
mov byte [ebp - 0x56f], 0x3a
mov byte [ebp - 0x56e], bl
call edi
jmp 0x409de9
call esi
test eax, eax
je 0x409de9
cmp byte [ebp - 0x27b], 0x3a
jne 0x409de9
movzx eax, byte [ebp - 0x27c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x27c]
push eax
push 3
call esi
test eax, eax
je 0x409e10
cmp byte [ebp - 0x27b], 0x3a
jne 0x409e10
movzx eax, byte [ebp - 0x27c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409e4f
lea eax, [ebp - 0x84c]
push eax
push 3
call esi
test eax, eax
je 0x409e4f
cmp byte [ebp - 0x84b], 0x3a
jne 0x409e4f
movzx eax, byte [ebp - 0x84c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x284]
push eax
push 3
jne 0x409e9f
call esi
test eax, eax
je 0x409e80
cmp byte [ebp - 0x283], 0x3a
jne 0x409e80
movzx eax, byte [ebp - 0x284]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x578]
mov byte [ebp - 0x578], 0x42
push eax
mov byte [ebp - 0x577], 0x3a
mov byte [ebp - 0x576], bl
call edi
jmp 0x409ebd
call esi
test eax, eax
je 0x409ebd
cmp byte [ebp - 0x283], 0x3a
jne 0x409ebd
movzx eax, byte [ebp - 0x284]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x284]
push eax
push 3
call esi
test eax, eax
je 0x409ee4
cmp byte [ebp - 0x283], 0x3a
jne 0x409ee4
movzx eax, byte [ebp - 0x284]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409f1d
lea eax, [ebp - 0x854]
push eax
push 3
call esi
test eax, eax
je 0x409f1d
cmp byte [ebp - 0x853], 0x3a
jne 0x409f1d
movzx eax, byte [ebp - 0x854]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28c]
push eax
push 3
jne 0x409f6d
call esi
test eax, eax
je 0x409f4e
cmp byte [ebp - 0x28b], 0x3a
jne 0x409f4e
movzx eax, byte [ebp - 0x28c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x580]
mov byte [ebp - 0x580], 0x42
push eax
mov byte [ebp - 0x57f], 0x3a
mov byte [ebp - 0x57e], bl
call edi
jmp 0x409f8b
call esi
test eax, eax
je 0x409f8b
cmp byte [ebp - 0x28b], 0x3a
jne 0x409f8b
movzx eax, byte [ebp - 0x28c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x28c]
push eax
push 3
call esi
test eax, eax
je 0x409fb2
cmp byte [ebp - 0x28b], 0x3a
jne 0x409fb2
movzx eax, byte [ebp - 0x28c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x409fea
lea eax, [ebp - 0x85c]
push eax
push 3
call esi
test eax, eax
je 0x409fea
cmp byte [ebp - 0x85b], 0x3a
jne 0x409fea
movzx eax, byte [ebp - 0x85c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x294]
push eax
push 3
jne 0x40a03a
call esi
test eax, eax
je 0x40a01b
cmp byte [ebp - 0x293], 0x3a
jne 0x40a01b
movzx eax, byte [ebp - 0x294]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x588]
mov byte [ebp - 0x588], 0x42
push eax
mov byte [ebp - 0x587], 0x3a
mov byte [ebp - 0x586], bl
call edi
jmp 0x40a058
call esi
test eax, eax
je 0x40a058
cmp byte [ebp - 0x293], 0x3a
jne 0x40a058
movzx eax, byte [ebp - 0x294]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x294]
push eax
push 3
call esi
test eax, eax
je 0x40a07f
cmp byte [ebp - 0x293], 0x3a
jne 0x40a07f
movzx eax, byte [ebp - 0x294]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a0b8
lea eax, [ebp - 0x864]
push eax
push 3
call esi
test eax, eax
je 0x40a0b8
cmp byte [ebp - 0x863], 0x3a
jne 0x40a0b8
movzx eax, byte [ebp - 0x864]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x29c]
push eax
push 3
jne 0x40a108
call esi
test eax, eax
je 0x40a0e9
cmp byte [ebp - 0x29b], 0x3a
jne 0x40a0e9
movzx eax, byte [ebp - 0x29c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x590]
mov byte [ebp - 0x590], 0x42
push eax
mov byte [ebp - 0x58f], 0x3a
mov byte [ebp - 0x58e], bl
call edi
jmp 0x40a126
call esi
test eax, eax
je 0x40a126
cmp byte [ebp - 0x29b], 0x3a
jne 0x40a126
movzx eax, byte [ebp - 0x29c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x29c]
push eax
push 3
call esi
test eax, eax
je 0x40a14d
cmp byte [ebp - 0x29b], 0x3a
jne 0x40a14d
movzx eax, byte [ebp - 0x29c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a184
lea eax, [ebp - 0x86c]
push eax
push 3
call esi
test eax, eax
je 0x40a184
cmp byte [ebp - 0x86b], 0x3a
jne 0x40a184
movzx eax, byte [ebp - 0x86c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a4]
push eax
push 3
jne 0x40a1d4
call esi
test eax, eax
je 0x40a1b5
cmp byte [ebp - 0x2a3], 0x3a
jne 0x40a1b5
movzx eax, byte [ebp - 0x2a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x598]
mov byte [ebp - 0x598], 0x42
push eax
mov byte [ebp - 0x597], 0x3a
mov byte [ebp - 0x596], bl
call edi
jmp 0x40a1f2
call esi
test eax, eax
je 0x40a1f2
cmp byte [ebp - 0x2a3], 0x3a
jne 0x40a1f2
movzx eax, byte [ebp - 0x2a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2a4]
push eax
push 3
call esi
test eax, eax
je 0x40a219
cmp byte [ebp - 0x2a3], 0x3a
jne 0x40a219
movzx eax, byte [ebp - 0x2a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a253
lea eax, [ebp - 0x874]
push eax
push 3
call esi
test eax, eax
je 0x40a253
cmp byte [ebp - 0x873], 0x3a
jne 0x40a253
movzx eax, byte [ebp - 0x874]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ac]
push eax
push 3
jne 0x40a2a3
call esi
test eax, eax
je 0x40a284
cmp byte [ebp - 0x2ab], 0x3a
jne 0x40a284
movzx eax, byte [ebp - 0x2ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5a0]
mov byte [ebp - 0x5a0], 0x42
push eax
mov byte [ebp - 0x59f], 0x3a
mov byte [ebp - 0x59e], bl
call edi
jmp 0x40a2c1
call esi
test eax, eax
je 0x40a2c1
cmp byte [ebp - 0x2ab], 0x3a
jne 0x40a2c1
movzx eax, byte [ebp - 0x2ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2ac]
push eax
push 3
call esi
test eax, eax
je 0x40a2e8
cmp byte [ebp - 0x2ab], 0x3a
jne 0x40a2e8
movzx eax, byte [ebp - 0x2ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a321
lea eax, [ebp - 0x87c]
push eax
push 3
call esi
test eax, eax
je 0x40a321
cmp byte [ebp - 0x87b], 0x3a
jne 0x40a321
movzx eax, byte [ebp - 0x87c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b4]
push eax
push 3
jne 0x40a371
call esi
test eax, eax
je 0x40a352
cmp byte [ebp - 0x2b3], 0x3a
jne 0x40a352
movzx eax, byte [ebp - 0x2b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5a8]
mov byte [ebp - 0x5a8], 0x42
push eax
mov byte [ebp - 0x5a7], 0x3a
mov byte [ebp - 0x5a6], bl
call edi
jmp 0x40a38f
call esi
test eax, eax
je 0x40a38f
cmp byte [ebp - 0x2b3], 0x3a
jne 0x40a38f
movzx eax, byte [ebp - 0x2b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2b4]
push eax
push 3
call esi
test eax, eax
je 0x40a3b6
cmp byte [ebp - 0x2b3], 0x3a
jne 0x40a3b6
movzx eax, byte [ebp - 0x2b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a3ef
lea eax, [ebp - 0x884]
push eax
push 3
call esi
test eax, eax
je 0x40a3ef
cmp byte [ebp - 0x883], 0x3a
jne 0x40a3ef
movzx eax, byte [ebp - 0x884]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2bc]
push eax
push 3
jne 0x40a43f
call esi
test eax, eax
je 0x40a420
cmp byte [ebp - 0x2bb], 0x3a
jne 0x40a420
movzx eax, byte [ebp - 0x2bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5b0]
mov byte [ebp - 0x5b0], 0x42
push eax
mov byte [ebp - 0x5af], 0x3a
mov byte [ebp - 0x5ae], bl
call edi
jmp 0x40a45d
call esi
test eax, eax
je 0x40a45d
cmp byte [ebp - 0x2bb], 0x3a
jne 0x40a45d
movzx eax, byte [ebp - 0x2bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2bc]
push eax
push 3
call esi
test eax, eax
je 0x40a484
cmp byte [ebp - 0x2bb], 0x3a
jne 0x40a484
movzx eax, byte [ebp - 0x2bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a4bc
lea eax, [ebp - 0x88c]
push eax
push 3
call esi
test eax, eax
je 0x40a4bc
cmp byte [ebp - 0x88b], 0x3a
jne 0x40a4bc
movzx eax, byte [ebp - 0x88c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c4]
push eax
push 3
jne 0x40a50c
call esi
test eax, eax
je 0x40a4ed
cmp byte [ebp - 0x2c3], 0x3a
jne 0x40a4ed
movzx eax, byte [ebp - 0x2c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5b8]
mov byte [ebp - 0x5b8], 0x42
push eax
mov byte [ebp - 0x5b7], 0x3a
mov byte [ebp - 0x5b6], bl
call edi
jmp 0x40a52a
call esi
test eax, eax
je 0x40a52a
cmp byte [ebp - 0x2c3], 0x3a
jne 0x40a52a
movzx eax, byte [ebp - 0x2c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2c4]
push eax
push 3
call esi
test eax, eax
je 0x40a551
cmp byte [ebp - 0x2c3], 0x3a
jne 0x40a551
movzx eax, byte [ebp - 0x2c4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a58c
lea eax, [ebp - 0x894]
push eax
push 3
call esi
test eax, eax
je 0x40a58c
cmp byte [ebp - 0x893], 0x3a
jne 0x40a58c
movzx eax, byte [ebp - 0x894]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2cc]
push eax
push 3
jne 0x40a5dc
call esi
test eax, eax
je 0x40a5bd
cmp byte [ebp - 0x2cb], 0x3a
jne 0x40a5bd
movzx eax, byte [ebp - 0x2cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5c0]
mov byte [ebp - 0x5c0], 0x42
push eax
mov byte [ebp - 0x5bf], 0x3a
mov byte [ebp - 0x5be], bl
call edi
jmp 0x40a5fa
call esi
test eax, eax
je 0x40a5fa
cmp byte [ebp - 0x2cb], 0x3a
jne 0x40a5fa
movzx eax, byte [ebp - 0x2cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2cc]
push eax
push 3
call esi
test eax, eax
je 0x40a621
cmp byte [ebp - 0x2cb], 0x3a
jne 0x40a621
movzx eax, byte [ebp - 0x2cc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a663
lea eax, [ebp - 0x89c]
push eax
push 3
call esi
test eax, eax
je 0x40a663
cmp byte [ebp - 0x89b], 0x3a
jne 0x40a663
movzx eax, byte [ebp - 0x89c]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d4]
push eax
push 3
jne 0x40a6b3
call esi
test eax, eax
je 0x40a694
cmp byte [ebp - 0x2d3], 0x3a
jne 0x40a694
movzx eax, byte [ebp - 0x2d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5c8]
mov byte [ebp - 0x5c8], 0x42
push eax
mov byte [ebp - 0x5c7], 0x3a
mov byte [ebp - 0x5c6], bl
call edi
jmp 0x40a6d1
call esi
test eax, eax
je 0x40a6d1
cmp byte [ebp - 0x2d3], 0x3a
jne 0x40a6d1
movzx eax, byte [ebp - 0x2d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2d4]
push eax
push 3
call esi
test eax, eax
je 0x40a6f8
cmp byte [ebp - 0x2d3], 0x3a
jne 0x40a6f8
movzx eax, byte [ebp - 0x2d4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a732
lea eax, [ebp - 0x8a4]
push eax
push 3
call esi
test eax, eax
je 0x40a732
cmp byte [ebp - 0x8a3], 0x3a
jne 0x40a732
movzx eax, byte [ebp - 0x8a4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2dc]
push eax
push 3
jne 0x40a782
call esi
test eax, eax
je 0x40a763
cmp byte [ebp - 0x2db], 0x3a
jne 0x40a763
movzx eax, byte [ebp - 0x2dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5d0]
mov byte [ebp - 0x5d0], 0x42
push eax
mov byte [ebp - 0x5cf], 0x3a
mov byte [ebp - 0x5ce], bl
call edi
jmp 0x40a7a0
call esi
test eax, eax
je 0x40a7a0
cmp byte [ebp - 0x2db], 0x3a
jne 0x40a7a0
movzx eax, byte [ebp - 0x2dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2dc]
push eax
push 3
call esi
test eax, eax
je 0x40a7c7
cmp byte [ebp - 0x2db], 0x3a
jne 0x40a7c7
movzx eax, byte [ebp - 0x2dc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a7ff
lea eax, [ebp - 0x8ac]
push eax
push 3
call esi
test eax, eax
je 0x40a7ff
cmp byte [ebp - 0x8ab], 0x3a
jne 0x40a7ff
movzx eax, byte [ebp - 0x8ac]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e4]
push eax
push 3
jne 0x40a84f
call esi
test eax, eax
je 0x40a830
cmp byte [ebp - 0x2e3], 0x3a
jne 0x40a830
movzx eax, byte [ebp - 0x2e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5d8]
mov byte [ebp - 0x5d8], 0x42
push eax
mov byte [ebp - 0x5d7], 0x3a
mov byte [ebp - 0x5d6], bl
call edi
jmp 0x40a86d
call esi
test eax, eax
je 0x40a86d
cmp byte [ebp - 0x2e3], 0x3a
jne 0x40a86d
movzx eax, byte [ebp - 0x2e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2e4]
push eax
push 3
call esi
test eax, eax
je 0x40a894
cmp byte [ebp - 0x2e3], 0x3a
jne 0x40a894
movzx eax, byte [ebp - 0x2e4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a8cf
lea eax, [ebp - 0x8b4]
push eax
push 3
call esi
test eax, eax
je 0x40a8cf
cmp byte [ebp - 0x8b3], 0x3a
jne 0x40a8cf
movzx eax, byte [ebp - 0x8b4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ec]
push eax
push 3
jne 0x40a91f
call esi
test eax, eax
je 0x40a900
cmp byte [ebp - 0x2eb], 0x3a
jne 0x40a900
movzx eax, byte [ebp - 0x2ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5e0]
mov byte [ebp - 0x5e0], 0x42
push eax
mov byte [ebp - 0x5df], 0x3a
mov byte [ebp - 0x5de], bl
call edi
jmp 0x40a93d
call esi
test eax, eax
je 0x40a93d
cmp byte [ebp - 0x2eb], 0x3a
jne 0x40a93d
movzx eax, byte [ebp - 0x2ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2ec]
push eax
push 3
call esi
test eax, eax
je 0x40a964
cmp byte [ebp - 0x2eb], 0x3a
jne 0x40a964
movzx eax, byte [ebp - 0x2ec]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0xd5
jne 0x40a9c9
lea eax, [ebp - 0x8bc]
push eax
push 3
call esi
test eax, eax
je 0x40a9c9
cmp byte [ebp - 0x8bb], 0x3a
jne 0x40a9c9
movzx eax, byte [ebp - 0x8bc]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f4]
push eax
push 3
jne 0x40aa19
call esi
test eax, eax
je 0x40a9fa
cmp byte [ebp - 0x2f3], 0x3a
jne 0x40a9fa
movzx eax, byte [ebp - 0x2f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x5e8]
mov byte [ebp - 0x5e8], 0x42
push eax
mov byte [ebp - 0x5e7], 0x3a
mov byte [ebp - 0x5e6], bl
call edi
jmp 0x40aa37
call esi
test eax, eax
je 0x40aa37
cmp byte [ebp - 0x2f3], 0x3a
jne 0x40aa37
movzx eax, byte [ebp - 0x2f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
lea eax, [ebp - 0x2f4]
push eax
push 3
call esi
test eax, eax
je 0x40aa5e
cmp byte [ebp - 0x2f3], 0x3a
jne 0x40aa5e
movzx eax, byte [ebp - 0x2f4]
push eax
call dword [sym.imp.MSVCRT.dll_toupper]
pop ecx
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10