Function at 0x401000
Capabilities:
Allocate thread local storage
Clear file content
Create directory
Create thread
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set current directory
Set environment variable
Set file attributes
Suspend thread
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x85c
push ebx
lea eax, [ebp + 0x14]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
xor ebx, ebx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
jne 0x402044
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x1fc]
push eax
call esi
test eax, eax
je 0x40104f
cmp byte [ebp - 0x1fb], 0x3a
jne 0x40104f
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1fc]
push eax
push 3
jne 0x40109e
call edi
test eax, eax
je 0x40107f
cmp byte [ebp - 0x1fb], 0x3a
jne 0x40107f
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], 0x42
push eax
mov byte [ebp - 0x403], 0x3a
mov byte [ebp - 0x402], bl
call esi
jmp 0x4010bb
call edi
test eax, eax
je 0x4010bb
cmp byte [ebp - 0x1fb], 0x3a
jne 0x4010bb
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xc]
push eax
call esi
test eax, eax
je 0x4010d6
cmp byte [ebp - 0xb], 0x3a
jne 0x4010d6
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc]
push eax
push 3
jne 0x40111c
call edi
test eax, eax
je 0x4010fd
cmp byte [ebp - 0xb], 0x3a
jne 0x4010fd
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3fc]
mov byte [ebp - 0x3fc], 0x42
push eax
mov byte [ebp - 0x3fb], 0x3a
mov byte [ebp - 0x3fa], bl
call esi
jmp 0x401133
call edi
test eax, eax
je 0x401133
cmp byte [ebp - 0xb], 0x3a
jne 0x401133
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x374]
push eax
call esi
test eax, eax
je 0x40116f
cmp byte [ebp - 0x373], 0x3a
jne 0x40116f
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x374]
push eax
push 3
jne 0x4011be
call edi
test eax, eax
je 0x40119f
cmp byte [ebp - 0x373], 0x3a
jne 0x40119f
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7d8]
mov byte [ebp - 0x7d8], 0x42
push eax
mov byte [ebp - 0x7d7], 0x3a
mov byte [ebp - 0x7d6], bl
call esi
jmp 0x4011db
call edi
test eax, eax
je 0x4011db
cmp byte [ebp - 0x373], 0x3a
jne 0x4011db
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x14]
push eax
call esi
test eax, eax
je 0x401202
cmp byte [ebp - 0x13], 0x3a
jne 0x401202
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14]
push eax
push 3
jne 0x401248
call edi
test eax, eax
je 0x401229
cmp byte [ebp - 0x13], 0x3a
jne 0x401229
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f4]
mov byte [ebp - 0x3f4], 0x42
push eax
mov byte [ebp - 0x3f3], 0x3a
mov byte [ebp - 0x3f2], bl
call esi
jmp 0x40125f
call edi
test eax, eax
je 0x40125f
cmp byte [ebp - 0x13], 0x3a
jne 0x40125f
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x204]
push eax
call esi
test eax, eax
je 0x40128a
cmp byte [ebp - 0x203], 0x3a
jne 0x40128a
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x204]
push eax
push 3
jne 0x4012d9
call edi
test eax, eax
je 0x4012ba
cmp byte [ebp - 0x203], 0x3a
jne 0x4012ba
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x604]
mov byte [ebp - 0x604], 0x42
push eax
mov byte [ebp - 0x603], 0x3a
mov byte [ebp - 0x602], bl
call esi
jmp 0x4012f6
call edi
test eax, eax
je 0x4012f6
cmp byte [ebp - 0x203], 0x3a
jne 0x4012f6
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0x1c]
push eax
call esi
test eax, eax
je 0x401318
cmp byte [ebp - 0x1b], 0x3a
jne 0x401318
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c]
push eax
push 3
jne 0x40135e
call edi
test eax, eax
je 0x40133f
cmp byte [ebp - 0x1b], 0x3a
jne 0x40133f
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x40c]
mov byte [ebp - 0x40c], 0x42
push eax
mov byte [ebp - 0x40b], 0x3a
mov byte [ebp - 0x40a], bl
call esi
jmp 0x401375
call edi
test eax, eax
je 0x401375
cmp byte [ebp - 0x1b], 0x3a
jne 0x401375
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x2fc]
push eax
call esi
test eax, eax
je 0x4013ac
cmp byte [ebp - 0x2fb], 0x3a
jne 0x4013ac
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2fc]
push eax
push 3
jne 0x4013fb
call edi
test eax, eax
je 0x4013dc
cmp byte [ebp - 0x2fb], 0x3a
jne 0x4013dc
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x704]
mov byte [ebp - 0x704], 0x42
push eax
mov byte [ebp - 0x703], 0x3a
mov byte [ebp - 0x702], bl
call esi
jmp 0x401418
call edi
test eax, eax
je 0x401418
cmp byte [ebp - 0x2fb], 0x3a
jne 0x401418
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x24]
push eax
call esi
test eax, eax
je 0x401454
cmp byte [ebp - 0x23], 0x3a
jne 0x401454
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24]
push eax
push 3
jne 0x40149a
call edi
test eax, eax
je 0x40147b
cmp byte [ebp - 0x23], 0x3a
jne 0x40147b
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x414]
mov byte [ebp - 0x414], 0x42
push eax
mov byte [ebp - 0x413], 0x3a
mov byte [ebp - 0x412], bl
call esi
jmp 0x4014b1
call edi
test eax, eax
je 0x4014b1
cmp byte [ebp - 0x23], 0x3a
jne 0x4014b1
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x20c]
push eax
call esi
test eax, eax
je 0x4014e5
cmp byte [ebp - 0x20b], 0x3a
jne 0x4014e5
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20c]
push eax
push 3
jne 0x401534
call edi
test eax, eax
je 0x401515
cmp byte [ebp - 0x20b], 0x3a
jne 0x401515
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x60c]
mov byte [ebp - 0x60c], 0x42
push eax
mov byte [ebp - 0x60b], 0x3a
mov byte [ebp - 0x60a], bl
call esi
jmp 0x401551
call edi
test eax, eax
je 0x401551
cmp byte [ebp - 0x20b], 0x3a
jne 0x401551
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x2c]
push eax
call esi
test eax, eax
je 0x40157b
cmp byte [ebp - 0x2b], 0x3a
jne 0x40157b
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c]
push eax
push 3
jne 0x4015c1
call edi
test eax, eax
je 0x4015a2
cmp byte [ebp - 0x2b], 0x3a
jne 0x4015a2
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x41c]
mov byte [ebp - 0x41c], 0x42
push eax
mov byte [ebp - 0x41b], 0x3a
mov byte [ebp - 0x41a], bl
call esi
jmp 0x4015d8
call edi
test eax, eax
je 0x4015d8
cmp byte [ebp - 0x2b], 0x3a
jne 0x4015d8
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x3b4]
push eax
call esi
test eax, eax
je 0x40160e
cmp byte [ebp - 0x3b3], 0x3a
jne 0x40160e
movzx eax, byte [ebp - 0x3b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3b4]
push eax
push 3
jne 0x40165d
call edi
test eax, eax
je 0x40163e
cmp byte [ebp - 0x3b3], 0x3a
jne 0x40163e
movzx eax, byte [ebp - 0x3b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x784]
mov byte [ebp - 0x784], 0x42
push eax
mov byte [ebp - 0x783], 0x3a
mov byte [ebp - 0x782], bl
call esi
jmp 0x40167a
call edi
test eax, eax
je 0x40167a
cmp byte [ebp - 0x3b3], 0x3a
jne 0x40167a
movzx eax, byte [ebp - 0x3b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x34]
push eax
call esi
test eax, eax
je 0x4016ad
cmp byte [ebp - 0x33], 0x3a
jne 0x4016ad
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34]
push eax
push 3
jne 0x4016f3
call edi
test eax, eax
je 0x4016d4
cmp byte [ebp - 0x33], 0x3a
jne 0x4016d4
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x424]
mov byte [ebp - 0x424], 0x42
push eax
mov byte [ebp - 0x423], 0x3a
mov byte [ebp - 0x422], bl
call esi
jmp 0x40170a
call edi
test eax, eax
je 0x40170a
cmp byte [ebp - 0x33], 0x3a
jne 0x40170a
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x214]
push eax
call esi
test eax, eax
je 0x401742
cmp byte [ebp - 0x213], 0x3a
jne 0x401742
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x214]
push eax
push 3
jne 0x401791
call edi
test eax, eax
je 0x401772
cmp byte [ebp - 0x213], 0x3a
jne 0x401772
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x614]
mov byte [ebp - 0x614], 0x42
push eax
mov byte [ebp - 0x613], 0x3a
mov byte [ebp - 0x612], bl
call esi
jmp 0x4017ae
call edi
test eax, eax
je 0x4017ae
cmp byte [ebp - 0x213], 0x3a
jne 0x4017ae
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x3c]
push eax
call esi
test eax, eax
je 0x4017d0
cmp byte [ebp - 0x3b], 0x3a
jne 0x4017d0
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c]
push eax
push 3
jne 0x401816
call edi
test eax, eax
je 0x4017f7
cmp byte [ebp - 0x3b], 0x3a
jne 0x4017f7
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x42c]
mov byte [ebp - 0x42c], 0x42
push eax
mov byte [ebp - 0x42b], 0x3a
mov byte [ebp - 0x42a], bl
call esi
jmp 0x40182d
call edi
test eax, eax
je 0x40182d
cmp byte [ebp - 0x3b], 0x3a
jne 0x40182d
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x304]
push eax
call esi
test eax, eax
je 0x401858
cmp byte [ebp - 0x303], 0x3a
jne 0x401858
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x304]
push eax
push 3
jne 0x4018a7
call edi
test eax, eax
je 0x401888
cmp byte [ebp - 0x303], 0x3a
jne 0x401888
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x70c]
mov byte [ebp - 0x70c], 0x42
push eax
mov byte [ebp - 0x70b], 0x3a
mov byte [ebp - 0x70a], bl
call esi
jmp 0x4018c4
call edi
test eax, eax
je 0x4018c4
cmp byte [ebp - 0x303], 0x3a
jne 0x4018c4
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x44]
push eax
call esi
test eax, eax
je 0x4018ee
cmp byte [ebp - 0x43], 0x3a
jne 0x4018ee
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x44]
push eax
push 3
jne 0x401934
call edi
test eax, eax
je 0x401915
cmp byte [ebp - 0x43], 0x3a
jne 0x401915
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x434]
mov byte [ebp - 0x434], 0x42
push eax
mov byte [ebp - 0x433], 0x3a
mov byte [ebp - 0x432], bl
call esi
jmp 0x40194b
call edi
test eax, eax
je 0x40194b
cmp byte [ebp - 0x43], 0x3a
jne 0x40194b
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x21c]
push eax
call esi
test eax, eax
je 0x40197f
cmp byte [ebp - 0x21b], 0x3a
jne 0x40197f
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x21c]
push eax
push 3
jne 0x4019ce
call edi
test eax, eax
je 0x4019af
cmp byte [ebp - 0x21b], 0x3a
jne 0x4019af
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x61c]
mov byte [ebp - 0x61c], 0x42
push eax
mov byte [ebp - 0x61b], 0x3a
mov byte [ebp - 0x61a], bl
call esi
jmp 0x4019eb
call edi
test eax, eax
je 0x4019eb
cmp byte [ebp - 0x21b], 0x3a
jne 0x4019eb
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x4c]
push eax
call esi
test eax, eax
je 0x401a16
cmp byte [ebp - 0x4b], 0x3a
jne 0x401a16
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x4c]
push eax
push 3
jne 0x401a5c
call edi
test eax, eax
je 0x401a3d
cmp byte [ebp - 0x4b], 0x3a
jne 0x401a3d
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x43c]
mov byte [ebp - 0x43c], 0x42
push eax
mov byte [ebp - 0x43b], 0x3a
mov byte [ebp - 0x43a], bl
call esi
jmp 0x401a73
call edi
test eax, eax
je 0x401a73
cmp byte [ebp - 0x4b], 0x3a
jne 0x401a73
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x37c]
push eax
call esi
test eax, eax
je 0x401aa6
cmp byte [ebp - 0x37b], 0x3a
jne 0x401aa6
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x37c]
push eax
push 3
jne 0x401af5
call edi
test eax, eax
je 0x401ad6
cmp byte [ebp - 0x37b], 0x3a
jne 0x401ad6
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7c4]
mov byte [ebp - 0x7c4], 0x42
push eax
mov byte [ebp - 0x7c3], 0x3a
mov byte [ebp - 0x7c2], bl
call esi
jmp 0x401b12
call edi
test eax, eax
je 0x401b12
cmp byte [ebp - 0x37b], 0x3a
jne 0x401b12
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x54]
push eax
call esi
test eax, eax
je 0x401b36
cmp byte [ebp - 0x53], 0x3a
jne 0x401b36
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x54]
push eax
push 3
jne 0x401b7c
call edi
test eax, eax
je 0x401b5d
cmp byte [ebp - 0x53], 0x3a
jne 0x401b5d
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x444]
mov byte [ebp - 0x444], 0x42
push eax
mov byte [ebp - 0x443], 0x3a
mov byte [ebp - 0x442], bl
call esi
jmp 0x401b93
call edi
test eax, eax
je 0x401b93
cmp byte [ebp - 0x53], 0x3a
jne 0x401b93
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x224]
push eax
call esi
test eax, eax
je 0x401bc5
cmp byte [ebp - 0x223], 0x3a
jne 0x401bc5
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x224]
push eax
push 3
jne 0x401c14
call edi
test eax, eax
je 0x401bf5
cmp byte [ebp - 0x223], 0x3a
jne 0x401bf5
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x624]
mov byte [ebp - 0x624], 0x42
push eax
mov byte [ebp - 0x623], 0x3a
mov byte [ebp - 0x622], bl
call esi
jmp 0x401c31
call edi
test eax, eax
je 0x401c31
cmp byte [ebp - 0x223], 0x3a
jne 0x401c31
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x5c]
push eax
call esi
test eax, eax
je 0x401c5a
cmp byte [ebp - 0x5b], 0x3a
jne 0x401c5a
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x5c]
push eax
push 3
jne 0x401ca0
call edi
test eax, eax
je 0x401c81
cmp byte [ebp - 0x5b], 0x3a
jne 0x401c81
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x44c]
mov byte [ebp - 0x44c], 0x42
push eax
mov byte [ebp - 0x44b], 0x3a
mov byte [ebp - 0x44a], bl
call esi
jmp 0x401cb7
call edi
test eax, eax
je 0x401cb7
cmp byte [ebp - 0x5b], 0x3a
jne 0x401cb7
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x30c]
push eax
call esi
test eax, eax
je 0x401cee
cmp byte [ebp - 0x30b], 0x3a
jne 0x401cee
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30c]
push eax
push 3
jne 0x401d3d
call edi
test eax, eax
je 0x401d1e
cmp byte [ebp - 0x30b], 0x3a
jne 0x401d1e
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x714]
mov byte [ebp - 0x714], 0x42
push eax
mov byte [ebp - 0x713], 0x3a
mov byte [ebp - 0x712], bl
call esi
jmp 0x401d5a
call edi
test eax, eax
je 0x401d5a
cmp byte [ebp - 0x30b], 0x3a
jne 0x401d5a
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x64]
push eax
call esi
test eax, eax
je 0x401d83
cmp byte [ebp - 0x63], 0x3a
jne 0x401d83
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x64]
push eax
push 3
jne 0x401dc9
call edi
test eax, eax
je 0x401daa
cmp byte [ebp - 0x63], 0x3a
jne 0x401daa
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x454]
mov byte [ebp - 0x454], 0x42
push eax
mov byte [ebp - 0x453], 0x3a
mov byte [ebp - 0x452], bl
call esi
jmp 0x401de0
call edi
test eax, eax
je 0x401de0
cmp byte [ebp - 0x63], 0x3a
jne 0x401de0
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x22c]
push eax
call esi
test eax, eax
je 0x401e0b
cmp byte [ebp - 0x22b], 0x3a
jne 0x401e0b
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x22c]
push eax
push 3
jne 0x401e5a
call edi
test eax, eax
je 0x401e3b
cmp byte [ebp - 0x22b], 0x3a
jne 0x401e3b
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x62c]
mov byte [ebp - 0x62c], 0x42
push eax
mov byte [ebp - 0x62b], 0x3a
mov byte [ebp - 0x62a], bl
call esi
jmp 0x401e77
call edi
test eax, eax
je 0x401e77
cmp byte [ebp - 0x22b], 0x3a
jne 0x401e77
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x6c]
push eax
call esi
test eax, eax
je 0x401ea0
cmp byte [ebp - 0x6b], 0x3a
jne 0x401ea0
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x6c]
push eax
push 3
jne 0x401ee6
call edi
test eax, eax
je 0x401ec7
cmp byte [ebp - 0x6b], 0x3a
jne 0x401ec7
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x45c]
mov byte [ebp - 0x45c], 0x42
push eax
mov byte [ebp - 0x45b], 0x3a
mov byte [ebp - 0x45a], bl
call esi
jmp 0x401efd
call edi
test eax, eax
je 0x401efd
cmp byte [ebp - 0x6b], 0x3a
jne 0x401efd
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x3d4]
push eax
call esi
test eax, eax
je 0x401f30
cmp byte [ebp - 0x3d3], 0x3a
jne 0x401f30
movzx eax, byte [ebp - 0x3d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3d4]
push eax
push 3
jne 0x401f7f
call edi
test eax, eax
je 0x401f60
cmp byte [ebp - 0x3d3], 0x3a
jne 0x401f60
movzx eax, byte [ebp - 0x3d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x78c]
mov byte [ebp - 0x78c], 0x42
push eax
mov byte [ebp - 0x78b], 0x3a
mov byte [ebp - 0x78a], bl
call esi
jmp 0x401f9c
call edi
test eax, eax
je 0x401f9c
cmp byte [ebp - 0x3d3], 0x3a
jne 0x401f9c
movzx eax, byte [ebp - 0x3d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x74]
push eax
call esi
test eax, eax
je 0x401fc7
cmp byte [ebp - 0x73], 0x3a
jne 0x401fc7
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x74]
push eax
push 3
jne 0x40200d
call edi
test eax, eax
je 0x401fee
cmp byte [ebp - 0x73], 0x3a
jne 0x401fee
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x464]
mov byte [ebp - 0x464], 0x42
push eax
mov byte [ebp - 0x463], 0x3a
mov byte [ebp - 0x462], bl
call esi
jmp 0x402024
call edi
test eax, eax
je 0x402024
cmp byte [ebp - 0x73], 0x3a
jne 0x402024
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0x220
call sub.MFC42.DLL_operatornew
cmp eax, ebx
pop ecx
je 0x40205c
mov ecx, eax
call fcn.00418fb8
jmp 0x40205e
xor eax, eax
lea ecx, [ebp - 0x7fc]
mov dword [0x4543d0], eax
call fcn.0041cc00
lea ecx, [ebp - 0x7f0]
call fcn.00437e40
lea ecx, [ebp - 0x7f0]
call fcn.00437e75
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4031e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x234]
push eax
call esi
test eax, eax
je 0x4020b9
cmp byte [ebp - 0x233], 0x3a
jne 0x4020b9
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x234]
push eax
push 3
jne 0x402108
call edi
test eax, eax
je 0x4020e9
cmp byte [ebp - 0x233], 0x3a
jne 0x4020e9
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x634]
mov byte [ebp - 0x634], 0x42
push eax
mov byte [ebp - 0x633], 0x3a
mov byte [ebp - 0x632], bl
call esi
jmp 0x402125
call edi
test eax, eax
je 0x402125
cmp byte [ebp - 0x233], 0x3a
jne 0x402125
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7c]
push eax
call esi
test eax, eax
je 0x402140
cmp byte [ebp - 0x7b], 0x3a
jne 0x402140
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x7c]
push eax
push 3
jne 0x402186
call edi
test eax, eax
je 0x402167
cmp byte [ebp - 0x7b], 0x3a
jne 0x402167
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x46c]
mov byte [ebp - 0x46c], 0x42
push eax
mov byte [ebp - 0x46b], 0x3a
mov byte [ebp - 0x46a], bl
call esi
jmp 0x40219d
call edi
test eax, eax
je 0x40219d
cmp byte [ebp - 0x7b], 0x3a
jne 0x40219d
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x314]
push eax
call esi
test eax, eax
je 0x4021d9
cmp byte [ebp - 0x313], 0x3a
jne 0x4021d9
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x314]
push eax
push 3
jne 0x402228
call edi
test eax, eax
je 0x402209
cmp byte [ebp - 0x313], 0x3a
jne 0x402209
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x71c]
mov byte [ebp - 0x71c], 0x42
push eax
mov byte [ebp - 0x71b], 0x3a
mov byte [ebp - 0x71a], bl
call esi
jmp 0x402245
call edi
test eax, eax
je 0x402245
cmp byte [ebp - 0x313], 0x3a
jne 0x402245
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x84]
push eax
call esi
test eax, eax
je 0x402275
cmp byte [ebp - 0x83], 0x3a
jne 0x402275
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x84]
push eax
push 3
jne 0x4022c4
call edi
test eax, eax
je 0x4022a5
cmp byte [ebp - 0x83], 0x3a
jne 0x4022a5
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x474]
mov byte [ebp - 0x474], 0x42
push eax
mov byte [ebp - 0x473], 0x3a
mov byte [ebp - 0x472], bl
call esi
jmp 0x4022e1
call edi
test eax, eax
je 0x4022e1
cmp byte [ebp - 0x83], 0x3a
jne 0x4022e1
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x23c]
push eax
call esi
test eax, eax
je 0x40230c
cmp byte [ebp - 0x23b], 0x3a
jne 0x40230c
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x23c]
push eax
push 3
jne 0x40235b
call edi
test eax, eax
je 0x40233c
cmp byte [ebp - 0x23b], 0x3a
jne 0x40233c
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x63c]
mov byte [ebp - 0x63c], 0x42
push eax
mov byte [ebp - 0x63b], 0x3a
mov byte [ebp - 0x63a], bl
call esi
jmp 0x402378
call edi
test eax, eax
je 0x402378
cmp byte [ebp - 0x23b], 0x3a
jne 0x402378
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0x8c]
push eax
call esi
test eax, eax
je 0x4023a3
cmp byte [ebp - 0x8b], 0x3a
jne 0x4023a3
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x8c]
push eax
push 3
jne 0x4023f2
call edi
test eax, eax
je 0x4023d3
cmp byte [ebp - 0x8b], 0x3a
jne 0x4023d3
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x47c]
mov byte [ebp - 0x47c], 0x42
push eax
mov byte [ebp - 0x47b], 0x3a
mov byte [ebp - 0x47a], bl
call esi
jmp 0x40240f
call edi
test eax, eax
je 0x40240f
cmp byte [ebp - 0x8b], 0x3a
jne 0x40240f
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x384]
push eax
call esi
test eax, eax
je 0x402446
cmp byte [ebp - 0x383], 0x3a
jne 0x402446
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x384]
push eax
push 3
jne 0x402495
call edi
test eax, eax
je 0x402476
cmp byte [ebp - 0x383], 0x3a
jne 0x402476
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7e0]
mov byte [ebp - 0x7e0], 0x42
push eax
mov byte [ebp - 0x7df], 0x3a
mov byte [ebp - 0x7de], bl
call esi
jmp 0x4024b2
call edi
test eax, eax
je 0x4024b2
cmp byte [ebp - 0x383], 0x3a
jne 0x4024b2
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x94]
push eax
call esi
test eax, eax
je 0x4024f7
cmp byte [ebp - 0x93], 0x3a
jne 0x4024f7
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x94]
push eax
push 3
jne 0x402546
call edi
test eax, eax
je 0x402527
cmp byte [ebp - 0x93], 0x3a
jne 0x402527
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x484]
mov byte [ebp - 0x484], 0x42
push eax
mov byte [ebp - 0x483], 0x3a
mov byte [ebp - 0x482], bl
call esi
jmp 0x402563
call edi
test eax, eax
je 0x402563
cmp byte [ebp - 0x93], 0x3a
jne 0x402563
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x244]
push eax
call esi
test eax, eax
je 0x402597
cmp byte [ebp - 0x243], 0x3a
jne 0x402597
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x244]
push eax
push 3
jne 0x4025e6
call edi
test eax, eax
je 0x4025c7
cmp byte [ebp - 0x243], 0x3a
jne 0x4025c7
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x644]
mov byte [ebp - 0x644], 0x42
push eax
mov byte [ebp - 0x643], 0x3a
mov byte [ebp - 0x642], bl
call esi
jmp 0x402603
call edi
test eax, eax
je 0x402603
cmp byte [ebp - 0x243], 0x3a
jne 0x402603
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x9c]
push eax
call esi
test eax, eax
je 0x402636
cmp byte [ebp - 0x9b], 0x3a
jne 0x402636
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x9c]
push eax
push 3
jne 0x402685
call edi
test eax, eax
je 0x402666
cmp byte [ebp - 0x9b], 0x3a
jne 0x402666
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x48c]
mov byte [ebp - 0x48c], 0x42
push eax
mov byte [ebp - 0x48b], 0x3a
mov byte [ebp - 0x48a], bl
call esi
jmp 0x4026a2
call edi
test eax, eax
je 0x4026a2
cmp byte [ebp - 0x9b], 0x3a
jne 0x4026a2
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x31c]
push eax
call esi
test eax, eax
je 0x4026d8
cmp byte [ebp - 0x31b], 0x3a
jne 0x4026d8
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x31c]
push eax
push 3
jne 0x402727
call edi
test eax, eax
je 0x402708
cmp byte [ebp - 0x31b], 0x3a
jne 0x402708
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x724]
mov byte [ebp - 0x724], 0x42
push eax
mov byte [ebp - 0x723], 0x3a
mov byte [ebp - 0x722], bl
call esi
jmp 0x402744
call edi
test eax, eax
je 0x402744
cmp byte [ebp - 0x31b], 0x3a
jne 0x402744
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xa4]
push eax
call esi
test eax, eax
je 0x402780
cmp byte [ebp - 0xa3], 0x3a
jne 0x402780
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa4]
push eax
push 3
jne 0x4027cf
call edi
test eax, eax
je 0x4027b0
cmp byte [ebp - 0xa3], 0x3a
jne 0x4027b0
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x494]
mov byte [ebp - 0x494], 0x42
push eax
mov byte [ebp - 0x493], 0x3a
mov byte [ebp - 0x492], bl
call esi
jmp 0x4027ec
call edi
test eax, eax
je 0x4027ec
cmp byte [ebp - 0xa3], 0x3a
jne 0x4027ec
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x24c]
push eax
call esi
test eax, eax
je 0x402824
cmp byte [ebp - 0x24b], 0x3a
jne 0x402824
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24c]
push eax
push 3
jne 0x402873
call edi
test eax, eax
je 0x402854
cmp byte [ebp - 0x24b], 0x3a
jne 0x402854
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x64c]
mov byte [ebp - 0x64c], 0x42
push eax
mov byte [ebp - 0x64b], 0x3a
mov byte [ebp - 0x64a], bl
call esi
jmp 0x402890
call edi
test eax, eax
je 0x402890
cmp byte [ebp - 0x24b], 0x3a
jne 0x402890
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0xac]
push eax
call esi
test eax, eax
je 0x4028bb
cmp byte [ebp - 0xab], 0x3a
jne 0x4028bb
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xac]
push eax
push 3
jne 0x40290a
call edi
test eax, eax
je 0x4028eb
cmp byte [ebp - 0xab], 0x3a
jne 0x4028eb
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x49c]
mov byte [ebp - 0x49c], 0x42
push eax
mov byte [ebp - 0x49b], 0x3a
mov byte [ebp - 0x49a], bl
call esi
jmp 0x402927
call edi
test eax, eax
je 0x402927
cmp byte [ebp - 0xab], 0x3a
jne 0x402927
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x3bc]
push eax
call esi
test eax, eax
je 0x402952
cmp byte [ebp - 0x3bb], 0x3a
jne 0x402952
movzx eax, byte [ebp - 0x3bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3bc]
push eax
push 3
jne 0x4029a1
call edi
test eax, eax
je 0x402982
cmp byte [ebp - 0x3bb], 0x3a
jne 0x402982
movzx eax, byte [ebp - 0x3bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x794]
mov byte [ebp - 0x794], 0x42
push eax
mov byte [ebp - 0x793], 0x3a
mov byte [ebp - 0x792], bl
call esi
jmp 0x4029be
call edi
test eax, eax
je 0x4029be
cmp byte [ebp - 0x3bb], 0x3a
jne 0x4029be
movzx eax, byte [ebp - 0x3bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0xb4]
push eax
call esi
test eax, eax
je 0x4029f1
cmp byte [ebp - 0xb3], 0x3a
jne 0x4029f1
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb4]
push eax
push 3
jne 0x402a40
call edi
test eax, eax
je 0x402a21
cmp byte [ebp - 0xb3], 0x3a
jne 0x402a21
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a4]
mov byte [ebp - 0x4a4], 0x42
push eax
mov byte [ebp - 0x4a3], 0x3a
mov byte [ebp - 0x4a2], bl
call esi
jmp 0x402a5d
call edi
test eax, eax
je 0x402a5d
cmp byte [ebp - 0xb3], 0x3a
jne 0x402a5d
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x254]
push eax
call esi
test eax, eax
je 0x402a91
cmp byte [ebp - 0x253], 0x3a
jne 0x402a91
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x254]
push eax
push 3
jne 0x402ae0
call edi
test eax, eax
je 0x402ac1
cmp byte [ebp - 0x253], 0x3a
jne 0x402ac1
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x654]
mov byte [ebp - 0x654], 0x42
push eax
mov byte [ebp - 0x653], 0x3a
mov byte [ebp - 0x652], bl
call esi
jmp 0x402afd
call edi
test eax, eax
je 0x402afd
cmp byte [ebp - 0x253], 0x3a
jne 0x402afd
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0xbc]
push eax
call esi
test eax, eax
je 0x402b31
cmp byte [ebp - 0xbb], 0x3a
jne 0x402b31
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xbc]
push eax
push 3
jne 0x402b80
call edi
test eax, eax
je 0x402b61
cmp byte [ebp - 0xbb], 0x3a
jne 0x402b61
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4ac]
mov byte [ebp - 0x4ac], 0x42
push eax
mov byte [ebp - 0x4ab], 0x3a
mov byte [ebp - 0x4aa], bl
call esi
jmp 0x402b9d
call edi
test eax, eax
je 0x402b9d
cmp byte [ebp - 0xbb], 0x3a
jne 0x402b9d
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x324]
push eax
call esi
test eax, eax
je 0x402bd0
cmp byte [ebp - 0x323], 0x3a
jne 0x402bd0
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x324]
push eax
push 3
jne 0x402c1f
call edi
test eax, eax
je 0x402c00
cmp byte [ebp - 0x323], 0x3a
jne 0x402c00
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x72c]
mov byte [ebp - 0x72c], 0x42
push eax
mov byte [ebp - 0x72b], 0x3a
mov byte [ebp - 0x72a], bl
call esi
jmp 0x402c3c
call edi
test eax, eax
je 0x402c3c
cmp byte [ebp - 0x323], 0x3a
jne 0x402c3c
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0xc4]
push eax
call esi
test eax, eax
je 0x402c69
cmp byte [ebp - 0xc3], 0x3a
jne 0x402c69
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc4]
push eax
push 3
jne 0x402cb8
call edi
test eax, eax
je 0x402c99
cmp byte [ebp - 0xc3], 0x3a
jne 0x402c99
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b4]
mov byte [ebp - 0x4b4], 0x42
push eax
mov byte [ebp - 0x4b3], 0x3a
mov byte [ebp - 0x4b2], bl
call esi
jmp 0x402cd5
call edi
test eax, eax
je 0x402cd5
cmp byte [ebp - 0xc3], 0x3a
jne 0x402cd5
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x25c]
push eax
call esi
test eax, eax
je 0x402d07
cmp byte [ebp - 0x25b], 0x3a
jne 0x402d07
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x25c]
push eax
push 3
jne 0x402d56
call edi
test eax, eax
je 0x402d37
cmp byte [ebp - 0x25b], 0x3a
jne 0x402d37
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x65c]
mov byte [ebp - 0x65c], 0x42
push eax
mov byte [ebp - 0x65b], 0x3a
mov byte [ebp - 0x65a], bl
call esi
jmp 0x402d73
call edi
test eax, eax
je 0x402d73
cmp byte [ebp - 0x25b], 0x3a
jne 0x402d73
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0xcc]
push eax
call esi
test eax, eax
je 0x402da5
cmp byte [ebp - 0xcb], 0x3a
jne 0x402da5
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xcc]
push eax
push 3
jne 0x402df4
call edi
test eax, eax
je 0x402dd5
cmp byte [ebp - 0xcb], 0x3a
jne 0x402dd5
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4bc]
mov byte [ebp - 0x4bc], 0x42
push eax
mov byte [ebp - 0x4bb], 0x3a
mov byte [ebp - 0x4ba], bl
call esi
jmp 0x402e11
call edi
test eax, eax
je 0x402e11
cmp byte [ebp - 0xcb], 0x3a
jne 0x402e11
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x38c]
push eax
call esi
test eax, eax
je 0x402e48
cmp byte [ebp - 0x38b], 0x3a
jne 0x402e48
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38c]
push eax
push 3
jne 0x402e97
call edi
test eax, eax
je 0x402e78
cmp byte [ebp - 0x38b], 0x3a
jne 0x402e78
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7cc]
mov byte [ebp - 0x7cc], 0x42
push eax
mov byte [ebp - 0x7cb], 0x3a
mov byte [ebp - 0x7ca], bl
call esi
jmp 0x402eb4
call edi
test eax, eax
je 0x402eb4
cmp byte [ebp - 0x38b], 0x3a
jne 0x402eb4
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0xd4]
push eax
call esi
test eax, eax
je 0x402ee6
cmp byte [ebp - 0xd3], 0x3a
jne 0x402ee6
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd4]
push eax
push 3
jne 0x402f35
call edi
test eax, eax
je 0x402f16
cmp byte [ebp - 0xd3], 0x3a
jne 0x402f16
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c4]
mov byte [ebp - 0x4c4], 0x42
push eax
mov byte [ebp - 0x4c3], 0x3a
mov byte [ebp - 0x4c2], bl
call esi
jmp 0x402f52
call edi
test eax, eax
je 0x402f52
cmp byte [ebp - 0xd3], 0x3a
jne 0x402f52
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x264]
push eax
call esi
test eax, eax
je 0x402f7d
cmp byte [ebp - 0x263], 0x3a
jne 0x402f7d
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x264]
push eax
push 3
jne 0x402fcc
call edi
test eax, eax
je 0x402fad
cmp byte [ebp - 0x263], 0x3a
jne 0x402fad
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x664]
mov byte [ebp - 0x664], 0x42
push eax
mov byte [ebp - 0x663], 0x3a
mov byte [ebp - 0x662], bl
call esi
jmp 0x402fe9
call edi
test eax, eax
je 0x402fe9
cmp byte [ebp - 0x263], 0x3a
jne 0x402fe9
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0xdc]
push eax
call esi
test eax, eax
je 0x40301b
cmp byte [ebp - 0xdb], 0x3a
jne 0x40301b
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xdc]
push eax
push 3
jne 0x40306a
call edi
test eax, eax
je 0x40304b
cmp byte [ebp - 0xdb], 0x3a
jne 0x40304b
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4cc]
mov byte [ebp - 0x4cc], 0x42
push eax
mov byte [ebp - 0x4cb], 0x3a
mov byte [ebp - 0x4ca], bl
call esi
jmp 0x403087
call edi
test eax, eax
je 0x403087
cmp byte [ebp - 0xdb], 0x3a
jne 0x403087
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x32c]
push eax
call esi
test eax, eax
je 0x4030ba
cmp byte [ebp - 0x32b], 0x3a
jne 0x4030ba
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x32c]
push eax
push 3
jne 0x403109
call edi
test eax, eax
je 0x4030ea
cmp byte [ebp - 0x32b], 0x3a
jne 0x4030ea
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x734]
mov byte [ebp - 0x734], 0x42
push eax
mov byte [ebp - 0x733], 0x3a
mov byte [ebp - 0x732], bl
call esi
jmp 0x403126
call edi
test eax, eax
je 0x403126
cmp byte [ebp - 0x32b], 0x3a
jne 0x403126
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0xe4]
push eax
call esi
test eax, eax
je 0x40315a
cmp byte [ebp - 0xe3], 0x3a
jne 0x40315a
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe4]
push eax
push 3
jne 0x4031a9
call edi
test eax, eax
je 0x40318a
cmp byte [ebp - 0xe3], 0x3a
jne 0x40318a
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d4]
mov byte [ebp - 0x4d4], 0x42
push eax
mov byte [ebp - 0x4d3], 0x3a
mov byte [ebp - 0x4d2], bl
call esi
jmp 0x4031c6
call edi
test eax, eax
je 0x4031c6
cmp byte [ebp - 0xe3], 0x3a
jne 0x4031c6
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x7e8]
call fcn.0041ccdb
lea ecx, [ebp - 0x7e8]
call fcn.0041e854
test eax, eax
je 0x405571
lea eax, [ebp + 0x14]
test eax, eax
jne 0x40437e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x26c]
push eax
call esi
test eax, eax
je 0x403239
cmp byte [ebp - 0x26b], 0x3a
jne 0x403239
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x26c]
push eax
push 3
jne 0x403288
call edi
test eax, eax
je 0x403269
cmp byte [ebp - 0x26b], 0x3a
jne 0x403269
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x66c]
mov byte [ebp - 0x66c], 0x42
push eax
mov byte [ebp - 0x66b], 0x3a
mov byte [ebp - 0x66a], bl
call esi
jmp 0x4032a5
call edi
test eax, eax
je 0x4032a5
cmp byte [ebp - 0x26b], 0x3a
jne 0x4032a5
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xec]
push eax
call esi
test eax, eax
je 0x4032c9
cmp byte [ebp - 0xeb], 0x3a
jne 0x4032c9
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xec]
push eax
push 3
jne 0x403318
call edi
test eax, eax
je 0x4032f9
cmp byte [ebp - 0xeb], 0x3a
jne 0x4032f9
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x4dc], 0x42
push eax
mov byte [ebp - 0x4db], 0x3a
mov byte [ebp - 0x4da], bl
call esi
jmp 0x403335
call edi
test eax, eax
je 0x403335
cmp byte [ebp - 0xeb], 0x3a
jne 0x403335
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x3e4]
push eax
call esi
test eax, eax
je 0x403371
cmp byte [ebp - 0x3e3], 0x3a
jne 0x403371
movzx eax, byte [ebp - 0x3e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3e4]
push eax
push 3
jne 0x4033c0
call edi
test eax, eax
je 0x4033a1
cmp byte [ebp - 0x3e3], 0x3a
jne 0x4033a1
movzx eax, byte [ebp - 0x3e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x79c]
mov byte [ebp - 0x79c], 0x42
push eax
mov byte [ebp - 0x79b], 0x3a
mov byte [ebp - 0x79a], bl
call esi
jmp 0x4033dd
call edi
test eax, eax
je 0x4033dd
cmp byte [ebp - 0x3e3], 0x3a
jne 0x4033dd
movzx eax, byte [ebp - 0x3e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0xf4]
push eax
call esi
test eax, eax
je 0x40340d
cmp byte [ebp - 0xf3], 0x3a
jne 0x40340d
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf4]
push eax
push 3
jne 0x40345c
call edi
test eax, eax
je 0x40343d
cmp byte [ebp - 0xf3], 0x3a
jne 0x40343d
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e4]
mov byte [ebp - 0x4e4], 0x42
push eax
mov byte [ebp - 0x4e3], 0x3a
mov byte [ebp - 0x4e2], bl
call esi
jmp 0x403479
call edi
test eax, eax
je 0x403479
cmp byte [ebp - 0xf3], 0x3a
jne 0x403479
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x274]
push eax
call esi
test eax, eax
je 0x4034a4
cmp byte [ebp - 0x273], 0x3a
jne 0x4034a4
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x274]
push eax
push 3
jne 0x4034f3
call edi
test eax, eax
je 0x4034d4
cmp byte [ebp - 0x273], 0x3a
jne 0x4034d4
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x674]
mov byte [ebp - 0x674], 0x42
push eax
mov byte [ebp - 0x673], 0x3a
mov byte [ebp - 0x672], bl
call esi
jmp 0x403510
call edi
test eax, eax
je 0x403510
cmp byte [ebp - 0x273], 0x3a
jne 0x403510
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0xfc]
push eax
call esi
test eax, eax
je 0x40353b
cmp byte [ebp - 0xfb], 0x3a
jne 0x40353b
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xfc]
push eax
push 3
jne 0x40358a
call edi
test eax, eax
je 0x40356b
cmp byte [ebp - 0xfb], 0x3a
jne 0x40356b
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4ec], 0x42
push eax
mov byte [ebp - 0x4eb], 0x3a
mov byte [ebp - 0x4ea], bl
call esi
jmp 0x4035a7
call edi
test eax, eax
je 0x4035a7
cmp byte [ebp - 0xfb], 0x3a
jne 0x4035a7
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x334]
push eax
call esi
test eax, eax
je 0x4035de
cmp byte [ebp - 0x333], 0x3a
jne 0x4035de
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x334]
push eax
push 3
jne 0x40362d
call edi
test eax, eax
je 0x40360e
cmp byte [ebp - 0x333], 0x3a
jne 0x40360e
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x73c]
mov byte [ebp - 0x73c], 0x42
push eax
mov byte [ebp - 0x73b], 0x3a
mov byte [ebp - 0x73a], bl
call esi
jmp 0x40364a
call edi
test eax, eax
je 0x40364a
cmp byte [ebp - 0x333], 0x3a
jne 0x40364a
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x104]
push eax
call esi
test eax, eax
je 0x40368f
cmp byte [ebp - 0x103], 0x3a
jne 0x40368f
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x104]
push eax
push 3
jne 0x4036de
call edi
test eax, eax
je 0x4036bf
cmp byte [ebp - 0x103], 0x3a
jne 0x4036bf
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f4]
mov byte [ebp - 0x4f4], 0x42
push eax
mov byte [ebp - 0x4f3], 0x3a
mov byte [ebp - 0x4f2], bl
call esi
jmp 0x4036fb
call edi
test eax, eax
je 0x4036fb
cmp byte [ebp - 0x103], 0x3a
jne 0x4036fb
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x27c]
push eax
call esi
test eax, eax
je 0x40372f
cmp byte [ebp - 0x27b], 0x3a
jne 0x40372f
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x27c]
push eax
push 3
jne 0x40377e
call edi
test eax, eax
je 0x40375f
cmp byte [ebp - 0x27b], 0x3a
jne 0x40375f
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x67c]
mov byte [ebp - 0x67c], 0x42
push eax
mov byte [ebp - 0x67b], 0x3a
mov byte [ebp - 0x67a], bl
call esi
jmp 0x40379b
call edi
test eax, eax
je 0x40379b
cmp byte [ebp - 0x27b], 0x3a
jne 0x40379b
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x10c]
push eax
call esi
test eax, eax
je 0x4037ce
cmp byte [ebp - 0x10b], 0x3a
jne 0x4037ce
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10c]
push eax
push 3
jne 0x40381d
call edi
test eax, eax
je 0x4037fe
cmp byte [ebp - 0x10b], 0x3a
jne 0x4037fe
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4fc]
mov byte [ebp - 0x4fc], 0x42
push eax
mov byte [ebp - 0x4fb], 0x3a
mov byte [ebp - 0x4fa], bl
call esi
jmp 0x40383a
call edi
test eax, eax
je 0x40383a
cmp byte [ebp - 0x10b], 0x3a
jne 0x40383a
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x394]
push eax
call esi
test eax, eax
je 0x403870
cmp byte [ebp - 0x393], 0x3a
jne 0x403870
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x394]
push eax
push 3
jne 0x4038bf
call edi
test eax, eax
je 0x4038a0
cmp byte [ebp - 0x393], 0x3a
jne 0x4038a0
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7dc]
mov byte [ebp - 0x7dc], 0x42
push eax
mov byte [ebp - 0x7db], 0x3a
mov byte [ebp - 0x7da], bl
call esi
jmp 0x4038dc
call edi
test eax, eax
je 0x4038dc
cmp byte [ebp - 0x393], 0x3a
jne 0x4038dc
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x114]
push eax
call esi
test eax, eax
je 0x403918
cmp byte [ebp - 0x113], 0x3a
jne 0x403918
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x114]
push eax
push 3
jne 0x403967
call edi
test eax, eax
je 0x403948
cmp byte [ebp - 0x113], 0x3a
jne 0x403948
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x504]
mov byte [ebp - 0x504], 0x42
push eax
mov byte [ebp - 0x503], 0x3a
mov byte [ebp - 0x502], bl
call esi
jmp 0x403984
call edi
test eax, eax
je 0x403984
cmp byte [ebp - 0x113], 0x3a
jne 0x403984
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x284]
push eax
call esi
test eax, eax
je 0x4039bc
cmp byte [ebp - 0x283], 0x3a
jne 0x4039bc
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x284]
push eax
push 3
jne 0x403a0b
call edi
test eax, eax
je 0x4039ec
cmp byte [ebp - 0x283], 0x3a
jne 0x4039ec
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x684]
mov byte [ebp - 0x684], 0x42
push eax
mov byte [ebp - 0x683], 0x3a
mov byte [ebp - 0x682], bl
call esi
jmp 0x403a28
call edi
test eax, eax
je 0x403a28
cmp byte [ebp - 0x283], 0x3a
jne 0x403a28
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x11c]
push eax
call esi
test eax, eax
je 0x403a53
cmp byte [ebp - 0x11b], 0x3a
jne 0x403a53
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x11c]
push eax
push 3
jne 0x403aa2
call edi
test eax, eax
je 0x403a83
cmp byte [ebp - 0x11b], 0x3a
jne 0x403a83
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x50c]
mov byte [ebp - 0x50c], 0x42
push eax
mov byte [ebp - 0x50b], 0x3a
mov byte [ebp - 0x50a], bl
call esi
jmp 0x403abf
call edi
test eax, eax
je 0x403abf
cmp byte [ebp - 0x11b], 0x3a
jne 0x403abf
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x33c]
push eax
call esi
test eax, eax
je 0x403aea
cmp byte [ebp - 0x33b], 0x3a
jne 0x403aea
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x33c]
push eax
push 3
jne 0x403b39
call edi
test eax, eax
je 0x403b1a
cmp byte [ebp - 0x33b], 0x3a
jne 0x403b1a
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x744]
mov byte [ebp - 0x744], 0x42
push eax
mov byte [ebp - 0x743], 0x3a
mov byte [ebp - 0x742], bl
call esi
jmp 0x403b56
call edi
test eax, eax
je 0x403b56
cmp byte [ebp - 0x33b], 0x3a
jne 0x403b56
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x124]
push eax
call esi
test eax, eax
je 0x403b89
cmp byte [ebp - 0x123], 0x3a
jne 0x403b89
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x124]
push eax
push 3
jne 0x403bd8
call edi
test eax, eax
je 0x403bb9
cmp byte [ebp - 0x123], 0x3a
jne 0x403bb9
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x514]
mov byte [ebp - 0x514], 0x42
push eax
mov byte [ebp - 0x513], 0x3a
mov byte [ebp - 0x512], bl
call esi
jmp 0x403bf5
call edi
test eax, eax
je 0x403bf5
cmp byte [ebp - 0x123], 0x3a
jne 0x403bf5
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x28c]
push eax
call esi
test eax, eax
je 0x403c29
cmp byte [ebp - 0x28b], 0x3a
jne 0x403c29
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28c]
push eax
push 3
jne 0x403c78
call edi
test eax, eax
je 0x403c59
cmp byte [ebp - 0x28b], 0x3a
jne 0x403c59
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x68c]
mov byte [ebp - 0x68c], 0x42
push eax
mov byte [ebp - 0x68b], 0x3a
mov byte [ebp - 0x68a], bl
call esi
jmp 0x403c95
call edi
test eax, eax
je 0x403c95
cmp byte [ebp - 0x28b], 0x3a
jne 0x403c95
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x12c]
push eax
call esi
test eax, eax
je 0x403cc9
cmp byte [ebp - 0x12b], 0x3a
jne 0x403cc9
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x12c]
push eax
push 3
jne 0x403d18
call edi
test eax, eax
je 0x403cf9
cmp byte [ebp - 0x12b], 0x3a
jne 0x403cf9
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x51c], 0x42
push eax
mov byte [ebp - 0x51b], 0x3a
mov byte [ebp - 0x51a], bl
call esi
jmp 0x403d35
call edi
test eax, eax
je 0x403d35
cmp byte [ebp - 0x12b], 0x3a
jne 0x403d35
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x3c4]
push eax
call esi
test eax, eax
je 0x403d68
cmp byte [ebp - 0x3c3], 0x3a
jne 0x403d68
movzx eax, byte [ebp - 0x3c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c4]
push eax
push 3
jne 0x403db7
call edi
test eax, eax
je 0x403d98
cmp byte [ebp - 0x3c3], 0x3a
jne 0x403d98
movzx eax, byte [ebp - 0x3c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7a4]
mov byte [ebp - 0x7a4], 0x42
push eax
mov byte [ebp - 0x7a3], 0x3a
mov byte [ebp - 0x7a2], bl
call esi
jmp 0x403dd4
call edi
test eax, eax
je 0x403dd4
cmp byte [ebp - 0x3c3], 0x3a
jne 0x403dd4
movzx eax, byte [ebp - 0x3c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x134]
push eax
call esi
test eax, eax
je 0x403e01
cmp byte [ebp - 0x133], 0x3a
jne 0x403e01
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x134]
push eax
push 3
jne 0x403e50
call edi
test eax, eax
je 0x403e31
cmp byte [ebp - 0x133], 0x3a
jne 0x403e31
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x524]
mov byte [ebp - 0x524], 0x42
push eax
mov byte [ebp - 0x523], 0x3a
mov byte [ebp - 0x522], bl
call esi
jmp 0x403e6d
call edi
test eax, eax
je 0x403e6d
cmp byte [ebp - 0x133], 0x3a
jne 0x403e6d
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x294]
push eax
call esi
test eax, eax
je 0x403e9f
cmp byte [ebp - 0x293], 0x3a
jne 0x403e9f
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x294]
push eax
push 3
jne 0x403eee
call edi
test eax, eax
je 0x403ecf
cmp byte [ebp - 0x293], 0x3a
jne 0x403ecf
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x694]
mov byte [ebp - 0x694], 0x42
push eax
mov byte [ebp - 0x693], 0x3a
mov byte [ebp - 0x692], bl
call esi
jmp 0x403f0b
call edi
test eax, eax
je 0x403f0b
cmp byte [ebp - 0x293], 0x3a
jne 0x403f0b
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x13c]
push eax
call esi
test eax, eax
je 0x403f3d
cmp byte [ebp - 0x13b], 0x3a
jne 0x403f3d
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x13c]
push eax
push 3
jne 0x403f8c
call edi
test eax, eax
je 0x403f6d
cmp byte [ebp - 0x13b], 0x3a
jne 0x403f6d
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x52c]
mov byte [ebp - 0x52c], 0x42
push eax
mov byte [ebp - 0x52b], 0x3a
mov byte [ebp - 0x52a], bl
call esi
jmp 0x403fa9
call edi
test eax, eax
je 0x403fa9
cmp byte [ebp - 0x13b], 0x3a
jne 0x403fa9
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x344]
push eax
call esi
test eax, eax
je 0x403fe0
cmp byte [ebp - 0x343], 0x3a
jne 0x403fe0
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x344]
push eax
push 3
jne 0x40402f
call edi
test eax, eax
je 0x404010
cmp byte [ebp - 0x343], 0x3a
jne 0x404010
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x74c]
mov byte [ebp - 0x74c], 0x42
push eax
mov byte [ebp - 0x74b], 0x3a
mov byte [ebp - 0x74a], bl
call esi
jmp 0x40404c
call edi
test eax, eax
je 0x40404c
cmp byte [ebp - 0x343], 0x3a
jne 0x40404c
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x144]
push eax
call esi
test eax, eax
je 0x40407e
cmp byte [ebp - 0x143], 0x3a
jne 0x40407e
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x144]
push eax
push 3
jne 0x4040cd
call edi
test eax, eax
je 0x4040ae
cmp byte [ebp - 0x143], 0x3a
jne 0x4040ae
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x534]
mov byte [ebp - 0x534], 0x42
push eax
mov byte [ebp - 0x533], 0x3a
mov byte [ebp - 0x532], bl
call esi
jmp 0x4040ea
call edi
test eax, eax
je 0x4040ea
cmp byte [ebp - 0x143], 0x3a
jne 0x4040ea
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x29c]
push eax
call esi
test eax, eax
je 0x404115
cmp byte [ebp - 0x29b], 0x3a
jne 0x404115
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x29c]
push eax
push 3
jne 0x404164
call edi
test eax, eax
je 0x404145
cmp byte [ebp - 0x29b], 0x3a
jne 0x404145
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x69c]
mov byte [ebp - 0x69c], 0x42
push eax
mov byte [ebp - 0x69b], 0x3a
mov byte [ebp - 0x69a], bl
call esi
jmp 0x404181
call edi
test eax, eax
je 0x404181
cmp byte [ebp - 0x29b], 0x3a
jne 0x404181
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x14c]
push eax
call esi
test eax, eax
je 0x4041b3
cmp byte [ebp - 0x14b], 0x3a
jne 0x4041b3
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14c]
push eax
push 3
jne 0x404202
call edi
test eax, eax
je 0x4041e3
cmp byte [ebp - 0x14b], 0x3a
jne 0x4041e3
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x53c]
mov byte [ebp - 0x53c], 0x42
push eax
mov byte [ebp - 0x53b], 0x3a
mov byte [ebp - 0x53a], bl
call esi
jmp 0x40421f
call edi
test eax, eax
je 0x40421f
cmp byte [ebp - 0x14b], 0x3a
jne 0x40421f
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x39c]
push eax
call esi
test eax, eax
je 0x404252
cmp byte [ebp - 0x39b], 0x3a
jne 0x404252
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x39c]
push eax
push 3
jne 0x4042a1
call edi
test eax, eax
je 0x404282
cmp byte [ebp - 0x39b], 0x3a
jne 0x404282
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7d4]
mov byte [ebp - 0x7d4], 0x42
push eax
mov byte [ebp - 0x7d3], 0x3a
mov byte [ebp - 0x7d2], bl
call esi
jmp 0x4042be
call edi
test eax, eax
je 0x4042be
cmp byte [ebp - 0x39b], 0x3a
jne 0x4042be
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x154]
push eax
call esi
test eax, eax
je 0x4042f2
cmp byte [ebp - 0x153], 0x3a
jne 0x4042f2
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x154]
push eax
push 3
jne 0x404341
call edi
test eax, eax
je 0x404322
cmp byte [ebp - 0x153], 0x3a
jne 0x404322
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x544]
mov byte [ebp - 0x544], 0x42
push eax
mov byte [ebp - 0x543], 0x3a
mov byte [ebp - 0x542], bl
call esi
jmp 0x40435e
call edi
test eax, eax
je 0x40435e
cmp byte [ebp - 0x153], 0x3a
jne 0x40435e
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push dword [ebp + 0x14]
lea ecx, [ebp - 0x7e8]
push dword [ebp + 0x10]
call fcn.0041f649
lea ecx, [ebp - 0x7ec]
call fcn.00414851
lea ecx, [ebp - 0x7ec]
call fcn.004163ca
test eax, eax
jne 0x405566
lea ecx, [ebp - 0x7fc]
call fcn.0043eb36
test eax, eax
jne 0x405566
lea eax, [ebp + 0x14]
test eax, eax
jne 0x40553a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x2a4]
push eax
call esi
test eax, eax
je 0x4043f5
cmp byte [ebp - 0x2a3], 0x3a
jne 0x4043f5
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a4]
push eax
push 3
jne 0x404444
call edi
test eax, eax
je 0x404425
cmp byte [ebp - 0x2a3], 0x3a
jne 0x404425
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a4]
mov byte [ebp - 0x6a4], 0x42
push eax
mov byte [ebp - 0x6a3], 0x3a
mov byte [ebp - 0x6a2], bl
call esi
jmp 0x404461
call edi
test eax, eax
je 0x404461
cmp byte [ebp - 0x2a3], 0x3a
jne 0x404461
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x15c]
push eax
call esi
test eax, eax
je 0x404485
cmp byte [ebp - 0x15b], 0x3a
jne 0x404485
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x15c]
push eax
push 3
jne 0x4044d4
call edi
test eax, eax
je 0x4044b5
cmp byte [ebp - 0x15b], 0x3a
jne 0x4044b5
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x54c]
mov byte [ebp - 0x54c], 0x42
push eax
mov byte [ebp - 0x54b], 0x3a
mov byte [ebp - 0x54a], bl
call esi
jmp 0x4044f1
call edi
test eax, eax
je 0x4044f1
cmp byte [ebp - 0x15b], 0x3a
jne 0x4044f1
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x34c]
push eax
call esi
test eax, eax
je 0x40452d
cmp byte [ebp - 0x34b], 0x3a
jne 0x40452d
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34c]
push eax
push 3
jne 0x40457c
call edi
test eax, eax
je 0x40455d
cmp byte [ebp - 0x34b], 0x3a
jne 0x40455d
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x754]
mov byte [ebp - 0x754], 0x42
push eax
mov byte [ebp - 0x753], 0x3a
mov byte [ebp - 0x752], bl
call esi
jmp 0x404599
call edi
test eax, eax
je 0x404599
cmp byte [ebp - 0x34b], 0x3a
jne 0x404599
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x164]
push eax
call esi
test eax, eax
je 0x4045c9
cmp byte [ebp - 0x163], 0x3a
jne 0x4045c9
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x164]
push eax
push 3
jne 0x404618
call edi
test eax, eax
je 0x4045f9
cmp byte [ebp - 0x163], 0x3a
jne 0x4045f9
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x554]
mov byte [ebp - 0x554], 0x42
push eax
mov byte [ebp - 0x553], 0x3a
mov byte [ebp - 0x552], bl
call esi
jmp 0x404635
call edi
test eax, eax
je 0x404635
cmp byte [ebp - 0x163], 0x3a
jne 0x404635
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x2ac]
push eax
call esi
test eax, eax
je 0x404660
cmp byte [ebp - 0x2ab], 0x3a
jne 0x404660
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ac]
push eax
push 3
jne 0x4046af
call edi
test eax, eax
je 0x404690
cmp byte [ebp - 0x2ab], 0x3a
jne 0x404690
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6ac]
mov byte [ebp - 0x6ac], 0x42
push eax
mov byte [ebp - 0x6ab], 0x3a
mov byte [ebp - 0x6aa], bl
call esi
jmp 0x4046cc
call edi
test eax, eax
je 0x4046cc
cmp byte [ebp - 0x2ab], 0x3a
jne 0x4046cc
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0x16c]
push eax
call esi
test eax, eax
je 0x4046f7
cmp byte [ebp - 0x16b], 0x3a
jne 0x4046f7
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x16c]
push eax
push 3
jne 0x404746
call edi
test eax, eax
je 0x404727
cmp byte [ebp - 0x16b], 0x3a
jne 0x404727
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x55c]
mov byte [ebp - 0x55c], 0x42
push eax
mov byte [ebp - 0x55b], 0x3a
mov byte [ebp - 0x55a], bl
call esi
jmp 0x404763
call edi
test eax, eax
je 0x404763
cmp byte [ebp - 0x16b], 0x3a
jne 0x404763
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x3dc]
push eax
call esi
test eax, eax
je 0x40479a
cmp byte [ebp - 0x3db], 0x3a
jne 0x40479a
movzx eax, byte [ebp - 0x3dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3dc]
push eax
push 3
jne 0x4047e9
call edi
test eax, eax
je 0x4047ca
cmp byte [ebp - 0x3db], 0x3a
jne 0x4047ca
movzx eax, byte [ebp - 0x3dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7ac]
mov byte [ebp - 0x7ac], 0x42
push eax
mov byte [ebp - 0x7ab], 0x3a
mov byte [ebp - 0x7aa], bl
call esi
jmp 0x404806
call edi
test eax, eax
je 0x404806
cmp byte [ebp - 0x3db], 0x3a
jne 0x404806
movzx eax, byte [ebp - 0x3dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x174]
push eax
call esi
test eax, eax
je 0x40484b
cmp byte [ebp - 0x173], 0x3a
jne 0x40484b
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x174]
push eax
push 3
jne 0x40489a
call edi
test eax, eax
je 0x40487b
cmp byte [ebp - 0x173], 0x3a
jne 0x40487b
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x564]
mov byte [ebp - 0x564], 0x42
push eax
mov byte [ebp - 0x563], 0x3a
mov byte [ebp - 0x562], bl
call esi
jmp 0x4048b7
call edi
test eax, eax
je 0x4048b7
cmp byte [ebp - 0x173], 0x3a
jne 0x4048b7
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x2b4]
push eax
call esi
test eax, eax
je 0x4048eb
cmp byte [ebp - 0x2b3], 0x3a
jne 0x4048eb
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b4]
push eax
push 3
jne 0x40493a
call edi
test eax, eax
je 0x40491b
cmp byte [ebp - 0x2b3], 0x3a
jne 0x40491b
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b4]
mov byte [ebp - 0x6b4], 0x42
push eax
mov byte [ebp - 0x6b3], 0x3a
mov byte [ebp - 0x6b2], bl
call esi
jmp 0x404957
call edi
test eax, eax
je 0x404957
cmp byte [ebp - 0x2b3], 0x3a
jne 0x404957
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x17c]
push eax
call esi
test eax, eax
je 0x40498a
cmp byte [ebp - 0x17b], 0x3a
jne 0x40498a
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x17c]
push eax
push 3
jne 0x4049d9
call edi
test eax, eax
je 0x4049ba
cmp byte [ebp - 0x17b], 0x3a
jne 0x4049ba
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x56c]
mov byte [ebp - 0x56c], 0x42
push eax
mov byte [ebp - 0x56b], 0x3a
mov byte [ebp - 0x56a], bl
call esi
jmp 0x4049f6
call edi
test eax, eax
je 0x4049f6
cmp byte [ebp - 0x17b], 0x3a
jne 0x4049f6
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x354]
push eax
call esi
test eax, eax
je 0x404a2c
cmp byte [ebp - 0x353], 0x3a
jne 0x404a2c
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x354]
push eax
push 3
jne 0x404a7b
call edi
test eax, eax
je 0x404a5c
cmp byte [ebp - 0x353], 0x3a
jne 0x404a5c
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x75c]
mov byte [ebp - 0x75c], 0x42
push eax
mov byte [ebp - 0x75b], 0x3a
mov byte [ebp - 0x75a], bl
call esi
jmp 0x404a98
call edi
test eax, eax
je 0x404a98
cmp byte [ebp - 0x353], 0x3a
jne 0x404a98
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x184]
push eax
call esi
test eax, eax
je 0x404ad4
cmp byte [ebp - 0x183], 0x3a
jne 0x404ad4
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x184]
push eax
push 3
jne 0x404b23
call edi
test eax, eax
je 0x404b04
cmp byte [ebp - 0x183], 0x3a
jne 0x404b04
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x574]
mov byte [ebp - 0x574], 0x42
push eax
mov byte [ebp - 0x573], 0x3a
mov byte [ebp - 0x572], bl
call esi
jmp 0x404b40
call edi
test eax, eax
je 0x404b40
cmp byte [ebp - 0x183], 0x3a
jne 0x404b40
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x2bc]
push eax
call esi
test eax, eax
je 0x404b78
cmp byte [ebp - 0x2bb], 0x3a
jne 0x404b78
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2bc]
push eax
push 3
jne 0x404bc7
call edi
test eax, eax
je 0x404ba8
cmp byte [ebp - 0x2bb], 0x3a
jne 0x404ba8
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6bc]
mov byte [ebp - 0x6bc], 0x42
push eax
mov byte [ebp - 0x6bb], 0x3a
mov byte [ebp - 0x6ba], bl
call esi
jmp 0x404be4
call edi
test eax, eax
je 0x404be4
cmp byte [ebp - 0x2bb], 0x3a
jne 0x404be4
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x18c]
push eax
call esi
test eax, eax
je 0x404c0f
cmp byte [ebp - 0x18b], 0x3a
jne 0x404c0f
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18c]
push eax
push 3
jne 0x404c5e
call edi
test eax, eax
je 0x404c3f
cmp byte [ebp - 0x18b], 0x3a
jne 0x404c3f
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x57c]
mov byte [ebp - 0x57c], 0x42
push eax
mov byte [ebp - 0x57b], 0x3a
mov byte [ebp - 0x57a], bl
call esi
jmp 0x404c7b
call edi
test eax, eax
je 0x404c7b
cmp byte [ebp - 0x18b], 0x3a
jne 0x404c7b
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x3a4]
push eax
call esi
test eax, eax
je 0x404ca6
cmp byte [ebp - 0x3a3], 0x3a
jne 0x404ca6
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a4]
push eax
push 3
jne 0x404cf5
call edi
test eax, eax
je 0x404cd6
cmp byte [ebp - 0x3a3], 0x3a
jne 0x404cd6
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7c8]
mov byte [ebp - 0x7c8], 0x42
push eax
mov byte [ebp - 0x7c7], 0x3a
mov byte [ebp - 0x7c6], bl
call esi
jmp 0x404d12
call edi
test eax, eax
je 0x404d12
cmp byte [ebp - 0x3a3], 0x3a
jne 0x404d12
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x194]
push eax
call esi
test eax, eax
je 0x404d45
cmp byte [ebp - 0x193], 0x3a
jne 0x404d45
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x194]
push eax
push 3
jne 0x404d94
call edi
test eax, eax
je 0x404d75
cmp byte [ebp - 0x193], 0x3a
jne 0x404d75
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x584]
mov byte [ebp - 0x584], 0x42
push eax
mov byte [ebp - 0x583], 0x3a
mov byte [ebp - 0x582], bl
call esi
jmp 0x404db1
call edi
test eax, eax
je 0x404db1
cmp byte [ebp - 0x193], 0x3a
jne 0x404db1
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x2c4]
push eax
call esi
test eax, eax
je 0x404de5
cmp byte [ebp - 0x2c3], 0x3a
jne 0x404de5
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c4]
push eax
push 3
jne 0x404e34
call edi
test eax, eax
je 0x404e15
cmp byte [ebp - 0x2c3], 0x3a
jne 0x404e15
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c4]
mov byte [ebp - 0x6c4], 0x42
push eax
mov byte [ebp - 0x6c3], 0x3a
mov byte [ebp - 0x6c2], bl
call esi
jmp 0x404e51
call edi
test eax, eax
je 0x404e51
cmp byte [ebp - 0x2c3], 0x3a
jne 0x404e51
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x19c]
push eax
call esi
test eax, eax
je 0x404e85
cmp byte [ebp - 0x19b], 0x3a
jne 0x404e85
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x19c]
push eax
push 3
jne 0x404ed4
call edi
test eax, eax
je 0x404eb5
cmp byte [ebp - 0x19b], 0x3a
jne 0x404eb5
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x58c]
mov byte [ebp - 0x58c], 0x42
push eax
mov byte [ebp - 0x58b], 0x3a
mov byte [ebp - 0x58a], bl
call esi
jmp 0x404ef1
call edi
test eax, eax
je 0x404ef1
cmp byte [ebp - 0x19b], 0x3a
jne 0x404ef1
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x35c]
push eax
call esi
test eax, eax
je 0x404f24
cmp byte [ebp - 0x35b], 0x3a
jne 0x404f24
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x35c]
push eax
push 3
jne 0x404f73
call edi
test eax, eax
je 0x404f54
cmp byte [ebp - 0x35b], 0x3a
jne 0x404f54
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x764]
mov byte [ebp - 0x764], 0x42
push eax
mov byte [ebp - 0x763], 0x3a
mov byte [ebp - 0x762], bl
call esi
jmp 0x404f90
call edi
test eax, eax
je 0x404f90
cmp byte [ebp - 0x35b], 0x3a
jne 0x404f90
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x1a4]
push eax
call esi
test eax, eax
je 0x404fbd
cmp byte [ebp - 0x1a3], 0x3a
jne 0x404fbd
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a4]
push eax
push 3
jne 0x40500c
call edi
test eax, eax
je 0x404fed
cmp byte [ebp - 0x1a3], 0x3a
jne 0x404fed
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x594]
mov byte [ebp - 0x594], 0x42
push eax
mov byte [ebp - 0x593], 0x3a
mov byte [ebp - 0x592], bl
call esi
jmp 0x405029
call edi
test eax, eax
je 0x405029
cmp byte [ebp - 0x1a3], 0x3a
jne 0x405029
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x2cc]
push eax
call esi
test eax, eax
je 0x40505b
cmp byte [ebp - 0x2cb], 0x3a
jne 0x40505b
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2cc]
push eax
push 3
jne 0x4050aa
call edi
test eax, eax
je 0x40508b
cmp byte [ebp - 0x2cb], 0x3a
jne 0x40508b
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6cc]
mov byte [ebp - 0x6cc], 0x42
push eax
mov byte [ebp - 0x6cb], 0x3a
mov byte [ebp - 0x6ca], bl
call esi
jmp 0x4050c7
call edi
test eax, eax
je 0x4050c7
cmp byte [ebp - 0x2cb], 0x3a
jne 0x4050c7
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x1ac]
push eax
call esi
test eax, eax
je 0x4050f9
cmp byte [ebp - 0x1ab], 0x3a
jne 0x4050f9
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ac]
push eax
push 3
jne 0x405148
call edi
test eax, eax
je 0x405129
cmp byte [ebp - 0x1ab], 0x3a
jne 0x405129
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x59c]
mov byte [ebp - 0x59c], 0x42
push eax
mov byte [ebp - 0x59b], 0x3a
mov byte [ebp - 0x59a], bl
call esi
jmp 0x405165
call edi
test eax, eax
je 0x405165
cmp byte [ebp - 0x1ab], 0x3a
jne 0x405165
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x3cc]
push eax
call esi
test eax, eax
je 0x40519c
cmp byte [ebp - 0x3cb], 0x3a
jne 0x40519c
movzx eax, byte [ebp - 0x3cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3cc]
push eax
push 3
jne 0x4051eb
call edi
test eax, eax
je 0x4051cc
cmp byte [ebp - 0x3cb], 0x3a
jne 0x4051cc
movzx eax, byte [ebp - 0x3cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7b4]
mov byte [ebp - 0x7b4], 0x42
push eax
mov byte [ebp - 0x7b3], 0x3a
mov byte [ebp - 0x7b2], bl
call esi
jmp 0x405208
call edi
test eax, eax
je 0x405208
cmp byte [ebp - 0x3cb], 0x3a
jne 0x405208
movzx eax, byte [ebp - 0x3cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x1b4]
push eax
call esi
test eax, eax
je 0x40523a
cmp byte [ebp - 0x1b3], 0x3a
jne 0x40523a
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b4]
push eax
push 3
jne 0x405289
call edi
test eax, eax
je 0x40526a
cmp byte [ebp - 0x1b3], 0x3a
jne 0x40526a
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a4]
mov byte [ebp - 0x5a4], 0x42
push eax
mov byte [ebp - 0x5a3], 0x3a
mov byte [ebp - 0x5a2], bl
call esi
jmp 0x4052a6
call edi
test eax, eax
je 0x4052a6
cmp byte [ebp - 0x1b3], 0x3a
jne 0x4052a6
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x2d4]
push eax
call esi
test eax, eax
je 0x4052d1
cmp byte [ebp - 0x2d3], 0x3a
jne 0x4052d1
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d4]
push eax
push 3
jne 0x405320
call edi
test eax, eax
je 0x405301
cmp byte [ebp - 0x2d3], 0x3a
jne 0x405301
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d4]
mov byte [ebp - 0x6d4], 0x42
push eax
mov byte [ebp - 0x6d3], 0x3a
mov byte [ebp - 0x6d2], bl
call esi
jmp 0x40533d
call edi
test eax, eax
je 0x40533d
cmp byte [ebp - 0x2d3], 0x3a
jne 0x40533d
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x1bc]
push eax
call esi
test eax, eax
je 0x40536f
cmp byte [ebp - 0x1bb], 0x3a
jne 0x40536f
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1bc]
push eax
push 3
jne 0x4053be
call edi
test eax, eax
je 0x40539f
cmp byte [ebp - 0x1bb], 0x3a
jne 0x40539f
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5ac]
mov byte [ebp - 0x5ac], 0x42
push eax
mov byte [ebp - 0x5ab], 0x3a
mov byte [ebp - 0x5aa], bl
call esi
jmp 0x4053db
call edi
test eax, eax
je 0x4053db
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4053db
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x364]
push eax
call esi
test eax, eax
je 0x40540e
cmp byte [ebp - 0x363], 0x3a
jne 0x40540e
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x364]
push eax
push 3
jne 0x40545d
call edi
test eax, eax
je 0x40543e
cmp byte [ebp - 0x363], 0x3a
jne 0x40543e
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x76c]
mov byte [ebp - 0x76c], 0x42
push eax
mov byte [ebp - 0x76b], 0x3a
mov byte [ebp - 0x76a], bl
call esi
jmp 0x40547a
call edi
test eax, eax
je 0x40547a
cmp byte [ebp - 0x363], 0x3a
jne 0x40547a
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x1c4]
push eax
call esi
test eax, eax
je 0x4054ae
cmp byte [ebp - 0x1c3], 0x3a
jne 0x4054ae
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c4]
push eax
push 3
jne 0x4054fd
call edi
test eax, eax
je 0x4054de
cmp byte [ebp - 0x1c3], 0x3a
jne 0x4054de
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b4]
mov byte [ebp - 0x5b4], 0x42
push eax
mov byte [ebp - 0x5b3], 0x3a
mov byte [ebp - 0x5b2], bl
call esi
jmp 0x40551a
call edi
test eax, eax
je 0x40551a
cmp byte [ebp - 0x1c3], 0x3a
jne 0x40551a
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x83c]
call fcn.0042edc3
lea ecx, [ebp - 0x83c]
call fcn.00430a62
lea ecx, [ebp - 0x83c]
call fcn.00431826
lea ecx, [ebp - 0x83c]
call fcn.0042fc27
lea ecx, [ebp - 0x7ec]
jmp 0x409a82
lea eax, [ebp + 0x14]
test eax, eax
jne 0x406583
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x2dc]
push eax
call esi
test eax, eax
je 0x4055a6
cmp byte [ebp - 0x2db], 0x3a
jne 0x4055a6
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2dc]
push eax
push 3
jne 0x4055f5
call edi
test eax, eax
je 0x4055d6
cmp byte [ebp - 0x2db], 0x3a
jne 0x4055d6
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6dc]
mov byte [ebp - 0x6dc], 0x42
push eax
mov byte [ebp - 0x6db], 0x3a
mov byte [ebp - 0x6da], bl
call esi
jmp 0x405612
call edi
test eax, eax
je 0x405612
cmp byte [ebp - 0x2db], 0x3a
jne 0x405612
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x1cc]
push eax
call esi
test eax, eax
je 0x405636
cmp byte [ebp - 0x1cb], 0x3a
jne 0x405636
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1cc]
push eax
push 3
jne 0x405685
call edi
test eax, eax
je 0x405666
cmp byte [ebp - 0x1cb], 0x3a
jne 0x405666
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5bc]
mov byte [ebp - 0x5bc], 0x42
push eax
mov byte [ebp - 0x5bb], 0x3a
mov byte [ebp - 0x5ba], bl
call esi
jmp 0x4056a2
call edi
test eax, eax
je 0x4056a2
cmp byte [ebp - 0x1cb], 0x3a
jne 0x4056a2
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x3ac]
push eax
call esi
test eax, eax
je 0x4056de
cmp byte [ebp - 0x3ab], 0x3a
jne 0x4056de
movzx eax, byte [ebp - 0x3ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3ac]
push eax
push 3
jne 0x40572d
call edi
test eax, eax
je 0x40570e
cmp byte [ebp - 0x3ab], 0x3a
jne 0x40570e
movzx eax, byte [ebp - 0x3ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7d0]
mov byte [ebp - 0x7d0], 0x42
push eax
mov byte [ebp - 0x7cf], 0x3a
mov byte [ebp - 0x7ce], bl
call esi
jmp 0x40574a
call edi
test eax, eax
je 0x40574a
cmp byte [ebp - 0x3ab], 0x3a
jne 0x40574a
movzx eax, byte [ebp - 0x3ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x1d4]
push eax
call esi
test eax, eax
je 0x40577a
cmp byte [ebp - 0x1d3], 0x3a
jne 0x40577a
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d4]
push eax
push 3
jne 0x4057c9
call edi
test eax, eax
je 0x4057aa
cmp byte [ebp - 0x1d3], 0x3a
jne 0x4057aa
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c4]
mov byte [ebp - 0x5c4], 0x42
push eax
mov byte [ebp - 0x5c3], 0x3a
mov byte [ebp - 0x5c2], bl
call esi
jmp 0x4057e6
call edi
test eax, eax
je 0x4057e6
cmp byte [ebp - 0x1d3], 0x3a
jne 0x4057e6
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x2e4]
push eax
call esi
test eax, eax
je 0x405811
cmp byte [ebp - 0x2e3], 0x3a
jne 0x405811
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e4]
push eax
push 3
jne 0x405860
call edi
test eax, eax
je 0x405841
cmp byte [ebp - 0x2e3], 0x3a
jne 0x405841
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e4]
mov byte [ebp - 0x6e4], 0x42
push eax
mov byte [ebp - 0x6e3], 0x3a
mov byte [ebp - 0x6e2], bl
call esi
jmp 0x40587d
call edi
test eax, eax
je 0x40587d
cmp byte [ebp - 0x2e3], 0x3a
jne 0x40587d
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0x1dc]
push eax
call esi
test eax, eax
je 0x4058a8
cmp byte [ebp - 0x1db], 0x3a
jne 0x4058a8
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1dc]
push eax
push 3
jne 0x4058f7
call edi
test eax, eax
je 0x4058d8
cmp byte [ebp - 0x1db], 0x3a
jne 0x4058d8
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5cc]
mov byte [ebp - 0x5cc], 0x42
push eax
mov byte [ebp - 0x5cb], 0x3a
mov byte [ebp - 0x5ca], bl
call esi
jmp 0x405914
call edi
test eax, eax
je 0x405914
cmp byte [ebp - 0x1db], 0x3a
jne 0x405914
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x36c]
push eax
call esi
test eax, eax
je 0x40594b
cmp byte [ebp - 0x36b], 0x3a
jne 0x40594b
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x36c]
push eax
push 3
jne 0x40599a
call edi
test eax, eax
je 0x40597b
cmp byte [ebp - 0x36b], 0x3a
jne 0x40597b
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x774]
mov byte [ebp - 0x774], 0x42
push eax
mov byte [ebp - 0x773], 0x3a
mov byte [ebp - 0x772], bl
call esi
jmp 0x4059b7
call edi
test eax, eax
je 0x4059b7
cmp byte [ebp - 0x36b], 0x3a
jne 0x4059b7
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x1e4]
push eax
call esi
test eax, eax
je 0x4059fc
cmp byte [ebp - 0x1e3], 0x3a
jne 0x4059fc
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e4]
push eax
push 3
jne 0x405a4b
call edi
test eax, eax
je 0x405a2c
cmp byte [ebp - 0x1e3], 0x3a
jne 0x405a2c
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d4]
mov byte [ebp - 0x5d4], 0x42
push eax
mov byte [ebp - 0x5d3], 0x3a
mov byte [ebp - 0x5d2], bl
call esi
jmp 0x405a68
call edi
test eax, eax
je 0x405a68
cmp byte [ebp - 0x1e3], 0x3a
jne 0x405a68
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x2ec]
push eax
call esi
test eax, eax
je 0x405a9c
cmp byte [ebp - 0x2eb], 0x3a
jne 0x405a9c
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ec]
push eax
push 3
jne 0x405aeb
call edi
test eax, eax
je 0x405acc
cmp byte [ebp - 0x2eb], 0x3a
jne 0x405acc
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6ec]
mov byte [ebp - 0x6ec], 0x42
push eax
mov byte [ebp - 0x6eb], 0x3a
mov byte [ebp - 0x6ea], bl
call esi
jmp 0x405b08
call edi
test eax, eax
je 0x405b08
cmp byte [ebp - 0x2eb], 0x3a
jne 0x405b08
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x1ec]
push eax
call esi
test eax, eax
je 0x405b3b
cmp byte [ebp - 0x1eb], 0x3a
jne 0x405b3b
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ec]
push eax
push 3
jne 0x405b8a
call edi
test eax, eax
je 0x405b6b
cmp byte [ebp - 0x1eb], 0x3a
jne 0x405b6b
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5dc]
mov byte [ebp - 0x5dc], 0x42
push eax
mov byte [ebp - 0x5db], 0x3a
mov byte [ebp - 0x5da], bl
call esi
jmp 0x405ba7
call edi
test eax, eax
je 0x405ba7
cmp byte [ebp - 0x1eb], 0x3a
jne 0x405ba7
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x3ec]
push eax
call esi
test eax, eax
je 0x405bdd
cmp byte [ebp - 0x3eb], 0x3a
jne 0x405bdd
movzx eax, byte [ebp - 0x3ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3ec]
push eax
push 3
jne 0x405c2c
call edi
test eax, eax
je 0x405c0d
cmp byte [ebp - 0x3eb], 0x3a
jne 0x405c0d
movzx eax, byte [ebp - 0x3ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7bc]
mov byte [ebp - 0x7bc], 0x42
push eax
mov byte [ebp - 0x7bb], 0x3a
mov byte [ebp - 0x7ba], bl
call esi
jmp 0x405c49
call edi
test eax, eax
je 0x405c49
cmp byte [ebp - 0x3eb], 0x3a
jne 0x405c49
movzx eax, byte [ebp - 0x3ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x1f4]
push eax
call esi
test eax, eax
je 0x405c85
cmp byte [ebp - 0x1f3], 0x3a
jne 0x405c85
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f4]
push eax
push 3
jne 0x405cd4
call edi
test eax, eax
je 0x405cb5
cmp byte [ebp - 0x1f3], 0x3a
jne 0x405cb5
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e4]
mov byte [ebp - 0x5e4], 0x42
push eax
mov byte [ebp - 0x5e3], 0x3a
mov byte [ebp - 0x5e2], bl
call esi
jmp 0x405cf1
call edi
test eax, eax
je 0x405cf1
cmp byte [ebp - 0x1f3], 0x3a
jne 0x405cf1
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x2f4]
push eax
call esi
test eax, eax
je 0x405d29
cmp byte [ebp - 0x2f3], 0x3a
jne 0x405d29
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f4]
push eax
push 3
jne 0x405d78
call edi
test eax, eax
je 0x405d59
cmp byte [ebp - 0x2f3], 0x3a
jne 0x405d59
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f4]
mov byte [ebp - 0x6f4], 0x42
push eax
mov byte [ebp - 0x6f3], 0x3a
mov byte [ebp - 0x6f2], bl
call esi
jmp 0x405d95
call edi
test eax, eax
je 0x405d95
cmp byte [ebp - 0x2f3], 0x3a
jne 0x405d95
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 4]
push eax
call esi
test eax, eax
je 0x405db7
cmp byte [ebp - 3], 0x3a
jne 0x405db7
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x405dfd
call edi
test eax, eax
je 0x405dde
cmp byte [ebp - 3], 0x3a
jne 0x405dde
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5ec]
mov byte [ebp - 0x5ec], 0x42
push eax
mov byte [ebp - 0x5eb], 0x3a
mov byte [ebp - 0x5ea], bl
call esi
jmp 0x405e14
call edi
test eax, eax
je 0x405e14
cmp byte [ebp - 3], 0x3a
jne 0x405e14
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 8]
push eax
call esi
test eax, eax
je 0x405e36
cmp byte [ebp - 7], 0x3a
jne 0x405e36
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 8]
push eax
push 3
jne 0x405e7c
call edi
test eax, eax
je 0x405e5d
cmp byte [ebp - 7], 0x3a
jne 0x405e5d
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x77c]
mov byte [ebp - 0x77c], 0x42
push eax
mov byte [ebp - 0x77b], 0x3a
mov byte [ebp - 0x77a], bl
call esi
jmp 0x405e93
call edi
test eax, eax
je 0x405e93
cmp byte [ebp - 7], 0x3a
jne 0x405e93
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x405ebd
cmp byte [ebp - 0xf], 0x3a
jne 0x405ebd
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x405f03
call edi
test eax, eax
je 0x405ee4
cmp byte [ebp - 0xf], 0x3a
jne 0x405ee4
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f4]
mov byte [ebp - 0x5f4], 0x42
push eax
mov byte [ebp - 0x5f3], 0x3a
mov byte [ebp - 0x5f2], bl
call esi
jmp 0x405f1a
call edi
test eax, eax
je 0x405f1a
cmp byte [ebp - 0xf], 0x3a
jne 0x405f1a
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x18]
push eax
call esi
test eax, eax
je 0x405f45
cmp byte [ebp - 0x17], 0x3a
jne 0x405f45
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18]
push eax
push 3
jne 0x405f8b
call edi
test eax, eax
je 0x405f6c
cmp byte [ebp - 0x17], 0x3a
jne 0x405f6c
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6fc]
mov byte [ebp - 0x6fc], 0x42
push eax
mov byte [ebp - 0x6fb], 0x3a
mov byte [ebp - 0x6fa], bl
call esi
jmp 0x405fa2
call edi
test eax, eax
je 0x405fa2
cmp byte [ebp - 0x17], 0x3a
jne 0x405fa2
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x20]
push eax
call esi
test eax, eax
je 0x405fcd
cmp byte [ebp - 0x1f], 0x3a
jne 0x405fcd
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20]
push eax
push 3
jne 0x406013
call edi
test eax, eax
je 0x405ff4
cmp byte [ebp - 0x1f], 0x3a
jne 0x405ff4
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5fc]
mov byte [ebp - 0x5fc], 0x42
push eax
mov byte [ebp - 0x5fb], 0x3a
mov byte [ebp - 0x5fa], bl
call esi
jmp 0x40602a
call edi
test eax, eax
je 0x40602a
cmp byte [ebp - 0x1f], 0x3a
jne 0x40602a
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x28]
push eax
call esi
test eax, eax
je 0x406054
cmp byte [ebp - 0x27], 0x3a
jne 0x406054
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28]
push eax
push 3
jne 0x40609a
call edi
test eax, eax
je 0x40607b
cmp byte [ebp - 0x27], 0x3a
jne 0x40607b
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f8]
mov byte [ebp - 0x3f8], 0x42
push eax
mov byte [ebp - 0x3f7], 0x3a
mov byte [ebp - 0x3f6], bl
call esi
jmp 0x4060b1
call edi
test eax, eax
je 0x4060b1
cmp byte [ebp - 0x27], 0x3a
jne 0x4060b1
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x30]
push eax
call esi
test eax, eax
je 0x4060d5
cmp byte [ebp - 0x2f], 0x3a
jne 0x4060d5
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30]
push eax
push 3
jne 0x40611b
call edi
test eax, eax
je 0x4060fc
cmp byte [ebp - 0x2f], 0x3a
jne 0x4060fc
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x400]
mov byte [ebp - 0x400], 0x42
push eax
mov byte [ebp - 0x3ff], 0x3a
mov byte [ebp - 0x3fe], bl
call esi
jmp 0x406132
call edi
test eax, eax
je 0x406132
cmp byte [ebp - 0x2f], 0x3a
jne 0x406132
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x38]
push eax
call esi
test eax, eax
je 0x40615b
cmp byte [ebp - 0x37], 0x3a
jne 0x40615b
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38]
push eax
push 3
jne 0x4061a1
call edi
test eax, eax
je 0x406182
cmp byte [ebp - 0x37], 0x3a
jne 0x406182
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x408]
mov byte [ebp - 0x408], 0x42
push eax
mov byte [ebp - 0x407], 0x3a
mov byte [ebp - 0x406], bl
call esi
jmp 0x4061b8
call edi
test eax, eax
je 0x4061b8
cmp byte [ebp - 0x37], 0x3a
jne 0x4061b8
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x40]
push eax
call esi
test eax, eax
je 0x4061e1
cmp byte [ebp - 0x3f], 0x3a
jne 0x4061e1
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x40]
push eax
push 3
jne 0x406227
call edi
test eax, eax
je 0x406208
cmp byte [ebp - 0x3f], 0x3a
jne 0x406208
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x410]
mov byte [ebp - 0x410], 0x42
push eax
mov byte [ebp - 0x40f], 0x3a
mov byte [ebp - 0x40e], bl
call esi
jmp 0x40623e
call edi
test eax, eax
je 0x40623e
cmp byte [ebp - 0x3f], 0x3a
jne 0x40623e
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x48]
push eax
call esi
test eax, eax
je 0x40626c
cmp byte [ebp - 0x47], 0x3a
jne 0x40626c
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x48]
push eax
push 3
jne 0x4062b2
call edi
test eax, eax
je 0x406293
cmp byte [ebp - 0x47], 0x3a
jne 0x406293
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x418]
mov byte [ebp - 0x418], 0x42
push eax
mov byte [ebp - 0x417], 0x3a
mov byte [ebp - 0x416], bl
call esi
jmp 0x4062c9
call edi
test eax, eax
je 0x4062c9
cmp byte [ebp - 0x47], 0x3a
jne 0x4062c9
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x50]
push eax
call esi
test eax, eax
je 0x4062f2
cmp byte [ebp - 0x4f], 0x3a
jne 0x4062f2
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x50]
push eax
push 3
jne 0x406338
call edi
test eax, eax
je 0x406319
cmp byte [ebp - 0x4f], 0x3a
jne 0x406319
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x420]
mov byte [ebp - 0x420], 0x42
push eax
mov byte [ebp - 0x41f], 0x3a
mov byte [ebp - 0x41e], bl
call esi
jmp 0x40634f
call edi
test eax, eax
je 0x40634f
cmp byte [ebp - 0x4f], 0x3a
jne 0x40634f
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x58]
push eax
call esi
test eax, eax
je 0x406371
cmp byte [ebp - 0x57], 0x3a
jne 0x406371
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x58]
push eax
push 3
jne 0x4063b7
call edi
test eax, eax
je 0x406398
cmp byte [ebp - 0x57], 0x3a
jne 0x406398
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x428]
mov byte [ebp - 0x428], 0x42
push eax
mov byte [ebp - 0x427], 0x3a
mov byte [ebp - 0x426], bl
call esi
jmp 0x4063ce
call edi
test eax, eax
je 0x4063ce
cmp byte [ebp - 0x57], 0x3a
jne 0x4063ce
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x60]
push eax
call esi
test eax, eax
je 0x4063f7
cmp byte [ebp - 0x5f], 0x3a
jne 0x4063f7
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x60]
push eax
push 3
jne 0x40643d
call edi
test eax, eax
je 0x40641e
cmp byte [ebp - 0x5f], 0x3a
jne 0x40641e
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x430]
mov byte [ebp - 0x430], 0x42
push eax
mov byte [ebp - 0x42f], 0x3a
mov byte [ebp - 0x42e], bl
call esi
jmp 0x406454
call edi
test eax, eax
je 0x406454
cmp byte [ebp - 0x5f], 0x3a
jne 0x406454
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x68]
push eax
call esi
test eax, eax
je 0x40647e
cmp byte [ebp - 0x67], 0x3a
jne 0x40647e
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x68]
push eax
push 3
jne 0x4064c4
call edi
test eax, eax
je 0x4064a5
cmp byte [ebp - 0x67], 0x3a
jne 0x4064a5
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x438]
mov byte [ebp - 0x438], 0x42
push eax
mov byte [ebp - 0x437], 0x3a
mov byte [ebp - 0x436], bl
call esi
jmp 0x4064db
call edi
test eax, eax
je 0x4064db
cmp byte [ebp - 0x67], 0x3a
jne 0x4064db
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x70]
push eax
call esi
test eax, eax
je 0x406506
cmp byte [ebp - 0x6f], 0x3a
jne 0x406506
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x70]
push eax
push 3
jne 0x40654c
call edi
test eax, eax
je 0x40652d
cmp byte [ebp - 0x6f], 0x3a
jne 0x40652d
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x440]
mov byte [ebp - 0x440], 0x42
push eax
mov byte [ebp - 0x43f], 0x3a
mov byte [ebp - 0x43e], bl
call esi
jmp 0x406563
call edi
test eax, eax
je 0x406563
cmp byte [ebp - 0x6f], 0x3a
jne 0x406563
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x7e4]
call fcn.00414851
lea ecx, [ebp - 0x7e4]
call fcn.004163ca
test eax, eax
jne 0x40772a
lea ecx, [ebp - 0x7fc]
call fcn.0043eb36
test eax, eax
jne 0x40772a
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4076fe
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x78]
push eax
call esi
test eax, eax
je 0x4065e0
cmp byte [ebp - 0x77], 0x3a
jne 0x4065e0
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x78]
push eax
push 3
jne 0x406626
call edi
test eax, eax
je 0x406607
cmp byte [ebp - 0x77], 0x3a
jne 0x406607
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x448]
mov byte [ebp - 0x448], 0x42
push eax
mov byte [ebp - 0x447], 0x3a
mov byte [ebp - 0x446], bl
call esi
jmp 0x40663d
call edi
test eax, eax
je 0x40663d
cmp byte [ebp - 0x77], 0x3a
jne 0x40663d
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x80]
push eax
call esi
test eax, eax
je 0x406658
cmp byte [ebp - 0x7f], 0x3a
jne 0x406658
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x80]
push eax
push 3
jne 0x40669e
call edi
test eax, eax
je 0x40667f
cmp byte [ebp - 0x7f], 0x3a
jne 0x40667f
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x450]
mov byte [ebp - 0x450], 0x42
push eax
mov byte [ebp - 0x44f], 0x3a
mov byte [ebp - 0x44e], bl
call esi
jmp 0x4066b5
call edi
test eax, eax
je 0x4066b5
cmp byte [ebp - 0x7f], 0x3a
jne 0x4066b5
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x88]
push eax
call esi
test eax, eax
je 0x4066f1
cmp byte [ebp - 0x87], 0x3a
jne 0x4066f1
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x88]
push eax
push 3
jne 0x406740
call edi
test eax, eax
je 0x406721
cmp byte [ebp - 0x87], 0x3a
jne 0x406721
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x458]
mov byte [ebp - 0x458], 0x42
push eax
mov byte [ebp - 0x457], 0x3a
mov byte [ebp - 0x456], bl
call esi
jmp 0x40675d
call edi
test eax, eax
je 0x40675d
cmp byte [ebp - 0x87], 0x3a
jne 0x40675d
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x90]
push eax
call esi
test eax, eax
je 0x40678d
cmp byte [ebp - 0x8f], 0x3a
jne 0x40678d
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x90]
push eax
push 3
jne 0x4067dc
call edi
test eax, eax
je 0x4067bd
cmp byte [ebp - 0x8f], 0x3a
jne 0x4067bd
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x460]
mov byte [ebp - 0x460], 0x42
push eax
mov byte [ebp - 0x45f], 0x3a
mov byte [ebp - 0x45e], bl
call esi
jmp 0x4067f9
call edi
test eax, eax
je 0x4067f9
cmp byte [ebp - 0x8f], 0x3a
jne 0x4067f9
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x98]
push eax
call esi
test eax, eax
je 0x406824
cmp byte [ebp - 0x97], 0x3a
jne 0x406824
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x98]
push eax
push 3
jne 0x406873
call edi
test eax, eax
je 0x406854
cmp byte [ebp - 0x97], 0x3a
jne 0x406854
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x468]
mov byte [ebp - 0x468], 0x42
push eax
mov byte [ebp - 0x467], 0x3a
mov byte [ebp - 0x466], bl
call esi
jmp 0x406890
call edi
test eax, eax
je 0x406890
cmp byte [ebp - 0x97], 0x3a
jne 0x406890
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0xa0]
push eax
call esi
test eax, eax
je 0x4068bb
cmp byte [ebp - 0x9f], 0x3a
jne 0x4068bb
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa0]
push eax
push 3
jne 0x40690a
call edi
test eax, eax
je 0x4068eb
cmp byte [ebp - 0x9f], 0x3a
jne 0x4068eb
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x470]
mov byte [ebp - 0x470], 0x42
push eax
mov byte [ebp - 0x46f], 0x3a
mov byte [ebp - 0x46e], bl
call esi
jmp 0x406927
call edi
test eax, eax
je 0x406927
cmp byte [ebp - 0x9f], 0x3a
jne 0x406927
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0xa8]
push eax
call esi
test eax, eax
je 0x40695e
cmp byte [ebp - 0xa7], 0x3a
jne 0x40695e
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa8]
push eax
push 3
jne 0x4069ad
call edi
test eax, eax
je 0x40698e
cmp byte [ebp - 0xa7], 0x3a
jne 0x40698e
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x478]
mov byte [ebp - 0x478], 0x42
push eax
mov byte [ebp - 0x477], 0x3a
mov byte [ebp - 0x476], bl
call esi
jmp 0x4069ca
call edi
test eax, eax
je 0x4069ca
cmp byte [ebp - 0xa7], 0x3a
jne 0x4069ca
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0xb0]
push eax
call esi
test eax, eax
je 0x406a0f
cmp byte [ebp - 0xaf], 0x3a
jne 0x406a0f
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb0]
push eax
push 3
jne 0x406a5e
call edi
test eax, eax
je 0x406a3f
cmp byte [ebp - 0xaf], 0x3a
jne 0x406a3f
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x480]
mov byte [ebp - 0x480], 0x42
push eax
mov byte [ebp - 0x47f], 0x3a
mov byte [ebp - 0x47e], bl
call esi
jmp 0x406a7b
call edi
test eax, eax
je 0x406a7b
cmp byte [ebp - 0xaf], 0x3a
jne 0x406a7b
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0xb8]
push eax
call esi
test eax, eax
je 0x406aaf
cmp byte [ebp - 0xb7], 0x3a
jne 0x406aaf
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb8]
push eax
push 3
jne 0x406afe
call edi
test eax, eax
je 0x406adf
cmp byte [ebp - 0xb7], 0x3a
jne 0x406adf
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x488]
mov byte [ebp - 0x488], 0x42
push eax
mov byte [ebp - 0x487], 0x3a
mov byte [ebp - 0x486], bl
call esi
jmp 0x406b1b
call edi
test eax, eax
je 0x406b1b
cmp byte [ebp - 0xb7], 0x3a
jne 0x406b1b
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0xc0]
push eax
call esi
test eax, eax
je 0x406b4e
cmp byte [ebp - 0xbf], 0x3a
jne 0x406b4e
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc0]
push eax
push 3
jne 0x406b9d
call edi
test eax, eax
je 0x406b7e
cmp byte [ebp - 0xbf], 0x3a
jne 0x406b7e
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x490]
mov byte [ebp - 0x490], 0x42
push eax
mov byte [ebp - 0x48f], 0x3a
mov byte [ebp - 0x48e], bl
call esi
jmp 0x406bba
call edi
test eax, eax
je 0x406bba
cmp byte [ebp - 0xbf], 0x3a
jne 0x406bba
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0xc8]
push eax
call esi
test eax, eax
je 0x406bf0
cmp byte [ebp - 0xc7], 0x3a
jne 0x406bf0
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc8]
push eax
push 3
jne 0x406c3f
call edi
test eax, eax
je 0x406c20
cmp byte [ebp - 0xc7], 0x3a
jne 0x406c20
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x498]
mov byte [ebp - 0x498], 0x42
push eax
mov byte [ebp - 0x497], 0x3a
mov byte [ebp - 0x496], bl
call esi
jmp 0x406c5c
call edi
test eax, eax
je 0x406c5c
cmp byte [ebp - 0xc7], 0x3a
jne 0x406c5c
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0xd0]
push eax
call esi
test eax, eax
je 0x406c98
cmp byte [ebp - 0xcf], 0x3a
jne 0x406c98
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd0]
push eax
push 3
jne 0x406ce7
call edi
test eax, eax
je 0x406cc8
cmp byte [ebp - 0xcf], 0x3a
jne 0x406cc8
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a0]
mov byte [ebp - 0x4a0], 0x42
push eax
mov byte [ebp - 0x49f], 0x3a
mov byte [ebp - 0x49e], bl
call esi
jmp 0x406d04
call edi
test eax, eax
je 0x406d04
cmp byte [ebp - 0xcf], 0x3a
jne 0x406d04
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0xd8]
push eax
call esi
test eax, eax
je 0x406d3c
cmp byte [ebp - 0xd7], 0x3a
jne 0x406d3c
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd8]
push eax
push 3
jne 0x406d8b
call edi
test eax, eax
je 0x406d6c
cmp byte [ebp - 0xd7], 0x3a
jne 0x406d6c
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a8]
mov byte [ebp - 0x4a8], 0x42
push eax
mov byte [ebp - 0x4a7], 0x3a
mov byte [ebp - 0x4a6], bl
call esi
jmp 0x406da8
call edi
test eax, eax
je 0x406da8
cmp byte [ebp - 0xd7], 0x3a
jne 0x406da8
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0xe0]
push eax
call esi
test eax, eax
je 0x406dd3
cmp byte [ebp - 0xdf], 0x3a
jne 0x406dd3
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe0]
push eax
push 3
jne 0x406e22
call edi
test eax, eax
je 0x406e03
cmp byte [ebp - 0xdf], 0x3a
jne 0x406e03
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b0]
mov byte [ebp - 0x4b0], 0x42
push eax
mov byte [ebp - 0x4af], 0x3a
mov byte [ebp - 0x4ae], bl
call esi
jmp 0x406e3f
call edi
test eax, eax
je 0x406e3f
cmp byte [ebp - 0xdf], 0x3a
jne 0x406e3f
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0xe8]
push eax
call esi
test eax, eax
je 0x406e6a
cmp byte [ebp - 0xe7], 0x3a
jne 0x406e6a
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe8]
push eax
push 3
jne 0x406eb9
call edi
test eax, eax
je 0x406e9a
cmp byte [ebp - 0xe7], 0x3a
jne 0x406e9a
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b8]
mov byte [ebp - 0x4b8], 0x42
push eax
mov byte [ebp - 0x4b7], 0x3a
mov byte [ebp - 0x4b6], bl
call esi
jmp 0x406ed6
call edi
test eax, eax
je 0x406ed6
cmp byte [ebp - 0xe7], 0x3a
jne 0x406ed6
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0xf0]
push eax
call esi
test eax, eax
je 0x406f09
cmp byte [ebp - 0xef], 0x3a
jne 0x406f09
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf0]
push eax
push 3
jne 0x406f58
call edi
test eax, eax
je 0x406f39
cmp byte [ebp - 0xef], 0x3a
jne 0x406f39
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c0]
mov byte [ebp - 0x4c0], 0x42
push eax
mov byte [ebp - 0x4bf], 0x3a
mov byte [ebp - 0x4be], bl
call esi
jmp 0x406f75
call edi
test eax, eax
je 0x406f75
cmp byte [ebp - 0xef], 0x3a
jne 0x406f75
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0xf8]
push eax
call esi
test eax, eax
je 0x406fa9
cmp byte [ebp - 0xf7], 0x3a
jne 0x406fa9
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf8]
push eax
push 3
jne 0x406ff8
call edi
test eax, eax
je 0x406fd9
cmp byte [ebp - 0xf7], 0x3a
jne 0x406fd9
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c8]
mov byte [ebp - 0x4c8], 0x42
push eax
mov byte [ebp - 0x4c7], 0x3a
mov byte [ebp - 0x4c6], bl
call esi
jmp 0x407015
call edi
test eax, eax
je 0x407015
cmp byte [ebp - 0xf7], 0x3a
jne 0x407015
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x100]
push eax
call esi
test eax, eax
je 0x407049
cmp byte [ebp - 0xff], 0x3a
jne 0x407049
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x100]
push eax
push 3
jne 0x407098
call edi
test eax, eax
je 0x407079
cmp byte [ebp - 0xff], 0x3a
jne 0x407079
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d0]
mov byte [ebp - 0x4d0], 0x42
push eax
mov byte [ebp - 0x4cf], 0x3a
mov byte [ebp - 0x4ce], bl
call esi
jmp 0x4070b5
call edi
test eax, eax
je 0x4070b5
cmp byte [ebp - 0xff], 0x3a
jne 0x4070b5
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x108]
push eax
call esi
test eax, eax
je 0x4070e8
cmp byte [ebp - 0x107], 0x3a
jne 0x4070e8
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x108]
push eax
push 3
jne 0x407137
call edi
test eax, eax
je 0x407118
cmp byte [ebp - 0x107], 0x3a
jne 0x407118
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d8]
mov byte [ebp - 0x4d8], 0x42
push eax
mov byte [ebp - 0x4d7], 0x3a
mov byte [ebp - 0x4d6], bl
call esi
jmp 0x407154
call edi
test eax, eax
je 0x407154
cmp byte [ebp - 0x107], 0x3a
jne 0x407154
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x110]
push eax
call esi
test eax, eax
je 0x407181
cmp byte [ebp - 0x10f], 0x3a
jne 0x407181
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x110]
push eax
push 3
jne 0x4071d0
call edi
test eax, eax
je 0x4071b1
cmp byte [ebp - 0x10f], 0x3a
jne 0x4071b1
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x4e0], 0x42
push eax
mov byte [ebp - 0x4df], 0x3a
mov byte [ebp - 0x4de], bl
call esi
jmp 0x4071ed
call edi
test eax, eax
je 0x4071ed
cmp byte [ebp - 0x10f], 0x3a
jne 0x4071ed
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x118]
push eax
call esi
test eax, eax
je 0x40721f
cmp byte [ebp - 0x117], 0x3a
jne 0x40721f
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x118]
push eax
push 3
jne 0x40726e
call edi
test eax, eax
je 0x40724f
cmp byte [ebp - 0x117], 0x3a
jne 0x40724f
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e8]
mov byte [ebp - 0x4e8], 0x42
push eax
mov byte [ebp - 0x4e7], 0x3a
mov byte [ebp - 0x4e6], bl
call esi
jmp 0x40728b
call edi
test eax, eax
je 0x40728b
cmp byte [ebp - 0x117], 0x3a
jne 0x40728b
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x120]
push eax
call esi
test eax, eax
je 0x4072bd
cmp byte [ebp - 0x11f], 0x3a
jne 0x4072bd
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x120]
push eax
push 3
jne 0x40730c
call edi
test eax, eax
je 0x4072ed
cmp byte [ebp - 0x11f], 0x3a
jne 0x4072ed
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f0]
mov byte [ebp - 0x4f0], 0x42
push eax
mov byte [ebp - 0x4ef], 0x3a
mov byte [ebp - 0x4ee], bl
call esi
jmp 0x407329
call edi
test eax, eax
je 0x407329
cmp byte [ebp - 0x11f], 0x3a
jne 0x407329
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x128]
push eax
call esi
test eax, eax
je 0x407360
cmp byte [ebp - 0x127], 0x3a
jne 0x407360
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x128]
push eax
push 3
jne 0x4073af
call edi
test eax, eax
je 0x407390
cmp byte [ebp - 0x127], 0x3a
jne 0x407390
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f8]
mov byte [ebp - 0x4f8], 0x42
push eax
mov byte [ebp - 0x4f7], 0x3a
mov byte [ebp - 0x4f6], bl
call esi
jmp 0x4073cc
call edi
test eax, eax
je 0x4073cc
cmp byte [ebp - 0x127], 0x3a
jne 0x4073cc
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x130]
push eax
call esi
test eax, eax
je 0x4073fe
cmp byte [ebp - 0x12f], 0x3a
jne 0x4073fe
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x130]
push eax
push 3
jne 0x40744d
call edi
test eax, eax
je 0x40742e
cmp byte [ebp - 0x12f], 0x3a
jne 0x40742e
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x500]
mov byte [ebp - 0x500], 0x42
push eax
mov byte [ebp - 0x4ff], 0x3a
mov byte [ebp - 0x4fe], bl
call esi
jmp 0x40746a
call edi
test eax, eax
je 0x40746a
cmp byte [ebp - 0x12f], 0x3a
jne 0x40746a
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x138]
push eax
call esi
test eax, eax
je 0x407495
cmp byte [ebp - 0x137], 0x3a
jne 0x407495
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x138]
push eax
push 3
jne 0x4074e4
call edi
test eax, eax
je 0x4074c5
cmp byte [ebp - 0x137], 0x3a
jne 0x4074c5
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x508]
mov byte [ebp - 0x508], 0x42
push eax
mov byte [ebp - 0x507], 0x3a
mov byte [ebp - 0x506], bl
call esi
jmp 0x407501
call edi
test eax, eax
je 0x407501
cmp byte [ebp - 0x137], 0x3a
jne 0x407501
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x140]
push eax
call esi
test eax, eax
je 0x407533
cmp byte [ebp - 0x13f], 0x3a
jne 0x407533
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x140]
push eax
push 3
jne 0x407582
call edi
test eax, eax
je 0x407563
cmp byte [ebp - 0x13f], 0x3a
jne 0x407563
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x510]
mov byte [ebp - 0x510], 0x42
push eax
mov byte [ebp - 0x50f], 0x3a
mov byte [ebp - 0x50e], bl
call esi
jmp 0x40759f
call edi
test eax, eax
je 0x40759f
cmp byte [ebp - 0x13f], 0x3a
jne 0x40759f
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x148]
push eax
call esi
test eax, eax
je 0x4075d2
cmp byte [ebp - 0x147], 0x3a
jne 0x4075d2
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x148]
push eax
push 3
jne 0x407621
call edi
test eax, eax
je 0x407602
cmp byte [ebp - 0x147], 0x3a
jne 0x407602
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x518]
mov byte [ebp - 0x518], 0x42
push eax
mov byte [ebp - 0x517], 0x3a
mov byte [ebp - 0x516], bl
call esi
jmp 0x40763e
call edi
test eax, eax
je 0x40763e
cmp byte [ebp - 0x147], 0x3a
jne 0x40763e
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x150]
push eax
call esi
test eax, eax
je 0x407672
cmp byte [ebp - 0x14f], 0x3a
jne 0x407672
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x150]
push eax
push 3
jne 0x4076c1
call edi
test eax, eax
je 0x4076a2
cmp byte [ebp - 0x14f], 0x3a
jne 0x4076a2
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x520]
mov byte [ebp - 0x520], 0x42
push eax
mov byte [ebp - 0x51f], 0x3a
mov byte [ebp - 0x51e], bl
call esi
jmp 0x4076de
call edi
test eax, eax
je 0x4076de
cmp byte [ebp - 0x14f], 0x3a
jne 0x4076de
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x85c]
call fcn.0042edc3
lea ecx, [ebp - 0x85c]
call fcn.00430a62
lea ecx, [ebp - 0x85c]
call fcn.00431826
lea ecx, [ebp - 0x85c]
jmp 0x409a77
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4088a4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x158]
push eax
call esi
test eax, eax
je 0x40775f
cmp byte [ebp - 0x157], 0x3a
jne 0x40775f
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x158]
push eax
push 3
jne 0x4077ae
call edi
test eax, eax
je 0x40778f
cmp byte [ebp - 0x157], 0x3a
jne 0x40778f
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x528]
mov byte [ebp - 0x528], 0x42
push eax
mov byte [ebp - 0x527], 0x3a
mov byte [ebp - 0x526], bl
call esi
jmp 0x4077cb
call edi
test eax, eax
je 0x4077cb
cmp byte [ebp - 0x157], 0x3a
jne 0x4077cb
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x160]
push eax
call esi
test eax, eax
je 0x4077ef
cmp byte [ebp - 0x15f], 0x3a
jne 0x4077ef
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x160]
push eax
push 3
jne 0x40783e
call edi
test eax, eax
je 0x40781f
cmp byte [ebp - 0x15f], 0x3a
jne 0x40781f
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x530]
mov byte [ebp - 0x530], 0x42
push eax
mov byte [ebp - 0x52f], 0x3a
mov byte [ebp - 0x52e], bl
call esi
jmp 0x40785b
call edi
test eax, eax
je 0x40785b
cmp byte [ebp - 0x15f], 0x3a
jne 0x40785b
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x168]
push eax
call esi
test eax, eax
je 0x407897
cmp byte [ebp - 0x167], 0x3a
jne 0x407897
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x168]
push eax
push 3
jne 0x4078e6
call edi
test eax, eax
je 0x4078c7
cmp byte [ebp - 0x167], 0x3a
jne 0x4078c7
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x538]
mov byte [ebp - 0x538], 0x42
push eax
mov byte [ebp - 0x537], 0x3a
mov byte [ebp - 0x536], bl
call esi
jmp 0x407903
call edi
test eax, eax
je 0x407903
cmp byte [ebp - 0x167], 0x3a
jne 0x407903
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x170]
push eax
call esi
test eax, eax
je 0x407933
cmp byte [ebp - 0x16f], 0x3a
jne 0x407933
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x170]
push eax
push 3
jne 0x407982
call edi
test eax, eax
je 0x407963
cmp byte [ebp - 0x16f], 0x3a
jne 0x407963
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x540]
mov byte [ebp - 0x540], 0x42
push eax
mov byte [ebp - 0x53f], 0x3a
mov byte [ebp - 0x53e], bl
call esi
jmp 0x40799f
call edi
test eax, eax
je 0x40799f
cmp byte [ebp - 0x16f], 0x3a
jne 0x40799f
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x178]
push eax
call esi
test eax, eax
je 0x4079ca
cmp byte [ebp - 0x177], 0x3a
jne 0x4079ca
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x178]
push eax
push 3
jne 0x407a19
call edi
test eax, eax
je 0x4079fa
cmp byte [ebp - 0x177], 0x3a
jne 0x4079fa
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x548]
mov byte [ebp - 0x548], 0x42
push eax
mov byte [ebp - 0x547], 0x3a
mov byte [ebp - 0x546], bl
call esi
jmp 0x407a36
call edi
test eax, eax
je 0x407a36
cmp byte [ebp - 0x177], 0x3a
jne 0x407a36
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0x180]
push eax
call esi
test eax, eax
je 0x407a61
cmp byte [ebp - 0x17f], 0x3a
jne 0x407a61
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x180]
push eax
push 3
jne 0x407ab0
call edi
test eax, eax
je 0x407a91
cmp byte [ebp - 0x17f], 0x3a
jne 0x407a91
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x550]
mov byte [ebp - 0x550], 0x42
push eax
mov byte [ebp - 0x54f], 0x3a
mov byte [ebp - 0x54e], bl
call esi
jmp 0x407acd
call edi
test eax, eax
je 0x407acd
cmp byte [ebp - 0x17f], 0x3a
jne 0x407acd
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x188]
push eax
call esi
test eax, eax
je 0x407b04
cmp byte [ebp - 0x187], 0x3a
jne 0x407b04
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x188]
push eax
push 3
jne 0x407b53
call edi
test eax, eax
je 0x407b34
cmp byte [ebp - 0x187], 0x3a
jne 0x407b34
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x558]
mov byte [ebp - 0x558], 0x42
push eax
mov byte [ebp - 0x557], 0x3a
mov byte [ebp - 0x556], bl
call esi
jmp 0x407b70
call edi
test eax, eax
je 0x407b70
cmp byte [ebp - 0x187], 0x3a
jne 0x407b70
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x190]
push eax
call esi
test eax, eax
je 0x407bb5
cmp byte [ebp - 0x18f], 0x3a
jne 0x407bb5
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x190]
push eax
push 3
jne 0x407c04
call edi
test eax, eax
je 0x407be5
cmp byte [ebp - 0x18f], 0x3a
jne 0x407be5
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x560]
mov byte [ebp - 0x560], 0x42
push eax
mov byte [ebp - 0x55f], 0x3a
mov byte [ebp - 0x55e], bl
call esi
jmp 0x407c21
call edi
test eax, eax
je 0x407c21
cmp byte [ebp - 0x18f], 0x3a
jne 0x407c21
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x198]
push eax
call esi
test eax, eax
je 0x407c55
cmp byte [ebp - 0x197], 0x3a
jne 0x407c55
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x198]
push eax
push 3
jne 0x407ca4
call edi
test eax, eax
je 0x407c85
cmp byte [ebp - 0x197], 0x3a
jne 0x407c85
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x568]
mov byte [ebp - 0x568], 0x42
push eax
mov byte [ebp - 0x567], 0x3a
mov byte [ebp - 0x566], bl
call esi
jmp 0x407cc1
call edi
test eax, eax
je 0x407cc1
cmp byte [ebp - 0x197], 0x3a
jne 0x407cc1
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x1a0]
push eax
call esi
test eax, eax
je 0x407cf4
cmp byte [ebp - 0x19f], 0x3a
jne 0x407cf4
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a0]
push eax
push 3
jne 0x407d43
call edi
test eax, eax
je 0x407d24
cmp byte [ebp - 0x19f], 0x3a
jne 0x407d24
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x570]
mov byte [ebp - 0x570], 0x42
push eax
mov byte [ebp - 0x56f], 0x3a
mov byte [ebp - 0x56e], bl
call esi
jmp 0x407d60
call edi
test eax, eax
je 0x407d60
cmp byte [ebp - 0x19f], 0x3a
jne 0x407d60
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x1a8]
push eax
call esi
test eax, eax
je 0x407d96
cmp byte [ebp - 0x1a7], 0x3a
jne 0x407d96
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a8]
push eax
push 3
jne 0x407de5
call edi
test eax, eax
je 0x407dc6
cmp byte [ebp - 0x1a7], 0x3a
jne 0x407dc6
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x578]
mov byte [ebp - 0x578], 0x42
push eax
mov byte [ebp - 0x577], 0x3a
mov byte [ebp - 0x576], bl
call esi
jmp 0x407e02
call edi
test eax, eax
je 0x407e02
cmp byte [ebp - 0x1a7], 0x3a
jne 0x407e02
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x1b0]
push eax
call esi
test eax, eax
je 0x407e3e
cmp byte [ebp - 0x1af], 0x3a
jne 0x407e3e
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b0]
push eax
push 3
jne 0x407e8d
call edi
test eax, eax
je 0x407e6e
cmp byte [ebp - 0x1af], 0x3a
jne 0x407e6e
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x580]
mov byte [ebp - 0x580], 0x42
push eax
mov byte [ebp - 0x57f], 0x3a
mov byte [ebp - 0x57e], bl
call esi
jmp 0x407eaa
call edi
test eax, eax
je 0x407eaa
cmp byte [ebp - 0x1af], 0x3a
jne 0x407eaa
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x1b8]
push eax
call esi
test eax, eax
je 0x407ee2
cmp byte [ebp - 0x1b7], 0x3a
jne 0x407ee2
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b8]
push eax
push 3
jne 0x407f31
call edi
test eax, eax
je 0x407f12
cmp byte [ebp - 0x1b7], 0x3a
jne 0x407f12
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x588]
mov byte [ebp - 0x588], 0x42
push eax
mov byte [ebp - 0x587], 0x3a
mov byte [ebp - 0x586], bl
call esi
jmp 0x407f4e
call edi
test eax, eax
je 0x407f4e
cmp byte [ebp - 0x1b7], 0x3a
jne 0x407f4e
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x1c0]
push eax
call esi
test eax, eax
je 0x407f79
cmp byte [ebp - 0x1bf], 0x3a
jne 0x407f79
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c0]
push eax
push 3
jne 0x407fc8
call edi
test eax, eax
je 0x407fa9
cmp byte [ebp - 0x1bf], 0x3a
jne 0x407fa9
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x590]
mov byte [ebp - 0x590], 0x42
push eax
mov byte [ebp - 0x58f], 0x3a
mov byte [ebp - 0x58e], bl
call esi
jmp 0x407fe5
call edi
test eax, eax
je 0x407fe5
cmp byte [ebp - 0x1bf], 0x3a
jne 0x407fe5
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x1c8]
push eax
call esi
test eax, eax
je 0x408010
cmp byte [ebp - 0x1c7], 0x3a
jne 0x408010
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c8]
push eax
push 3
jne 0x40805f
call edi
test eax, eax
je 0x408040
cmp byte [ebp - 0x1c7], 0x3a
jne 0x408040
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x598]
mov byte [ebp - 0x598], 0x42
push eax
mov byte [ebp - 0x597], 0x3a
mov byte [ebp - 0x596], bl
call esi
jmp 0x40807c
call edi
test eax, eax
je 0x40807c
cmp byte [ebp - 0x1c7], 0x3a
jne 0x40807c
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x1d0]
push eax
call esi
test eax, eax
je 0x4080af
cmp byte [ebp - 0x1cf], 0x3a
jne 0x4080af
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d0]
push eax
push 3
jne 0x4080fe
call edi
test eax, eax
je 0x4080df
cmp byte [ebp - 0x1cf], 0x3a
jne 0x4080df
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a0]
mov byte [ebp - 0x5a0], 0x42
push eax
mov byte [ebp - 0x59f], 0x3a
mov byte [ebp - 0x59e], bl
call esi
jmp 0x40811b
call edi
test eax, eax
je 0x40811b
cmp byte [ebp - 0x1cf], 0x3a
jne 0x40811b
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x1d8]
push eax
call esi
test eax, eax
je 0x40814f
cmp byte [ebp - 0x1d7], 0x3a
jne 0x40814f
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d8]
push eax
push 3
jne 0x40819e
call edi
test eax, eax
je 0x40817f
cmp byte [ebp - 0x1d7], 0x3a
jne 0x40817f
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a8]
mov byte [ebp - 0x5a8], 0x42
push eax
mov byte [ebp - 0x5a7], 0x3a
mov byte [ebp - 0x5a6], bl
call esi
jmp 0x4081bb
call edi
test eax, eax
je 0x4081bb
cmp byte [ebp - 0x1d7], 0x3a
jne 0x4081bb
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x1e0]
push eax
call esi
test eax, eax
je 0x4081ef
cmp byte [ebp - 0x1df], 0x3a
jne 0x4081ef
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e0]
push eax
push 3
jne 0x40823e
call edi
test eax, eax
je 0x40821f
cmp byte [ebp - 0x1df], 0x3a
jne 0x40821f
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b0]
mov byte [ebp - 0x5b0], 0x42
push eax
mov byte [ebp - 0x5af], 0x3a
mov byte [ebp - 0x5ae], bl
call esi
jmp 0x40825b
call edi
test eax, eax
je 0x40825b
cmp byte [ebp - 0x1df], 0x3a
jne 0x40825b
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x1e8]
push eax
call esi
test eax, eax
je 0x40828e
cmp byte [ebp - 0x1e7], 0x3a
jne 0x40828e
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e8]
push eax
push 3
jne 0x4082dd
call edi
test eax, eax
je 0x4082be
cmp byte [ebp - 0x1e7], 0x3a
jne 0x4082be
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b8]
mov byte [ebp - 0x5b8], 0x42
push eax
mov byte [ebp - 0x5b7], 0x3a
mov byte [ebp - 0x5b6], bl
call esi
jmp 0x4082fa
call edi
test eax, eax
je 0x4082fa
cmp byte [ebp - 0x1e7], 0x3a
jne 0x4082fa
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x1f0]
push eax
call esi
test eax, eax
je 0x408327
cmp byte [ebp - 0x1ef], 0x3a
jne 0x408327
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f0]
push eax
push 3
jne 0x408376
call edi
test eax, eax
je 0x408357
cmp byte [ebp - 0x1ef], 0x3a
jne 0x408357
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c0]
mov byte [ebp - 0x5c0], 0x42
push eax
mov byte [ebp - 0x5bf], 0x3a
mov byte [ebp - 0x5be], bl
call esi
jmp 0x408393
call edi
test eax, eax
je 0x408393
cmp byte [ebp - 0x1ef], 0x3a
jne 0x408393
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x1f8]
push eax
call esi
test eax, eax
je 0x4083c5
cmp byte [ebp - 0x1f7], 0x3a
jne 0x4083c5
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f8]
push eax
push 3
jne 0x408414
call edi
test eax, eax
je 0x4083f5
cmp byte [ebp - 0x1f7], 0x3a
jne 0x4083f5
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c8]
mov byte [ebp - 0x5c8], 0x42
push eax
mov byte [ebp - 0x5c7], 0x3a
mov byte [ebp - 0x5c6], bl
call esi
jmp 0x408431
call edi
test eax, eax
je 0x408431
cmp byte [ebp - 0x1f7], 0x3a
jne 0x408431
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x200]
push eax
call esi
test eax, eax
je 0x408463
cmp byte [ebp - 0x1ff], 0x3a
jne 0x408463
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x200]
push eax
push 3
jne 0x4084b2
call edi
test eax, eax
je 0x408493
cmp byte [ebp - 0x1ff], 0x3a
jne 0x408493
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d0]
mov byte [ebp - 0x5d0], 0x42
push eax
mov byte [ebp - 0x5cf], 0x3a
mov byte [ebp - 0x5ce], bl
call esi
jmp 0x4084cf
call edi
test eax, eax
je 0x4084cf
cmp byte [ebp - 0x1ff], 0x3a
jne 0x4084cf
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x208]
push eax
call esi
test eax, eax
je 0x408506
cmp byte [ebp - 0x207], 0x3a
jne 0x408506
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x208]
push eax
push 3
jne 0x408555
call edi
test eax, eax
je 0x408536
cmp byte [ebp - 0x207], 0x3a
jne 0x408536
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d8]
mov byte [ebp - 0x5d8], 0x42
push eax
mov byte [ebp - 0x5d7], 0x3a
mov byte [ebp - 0x5d6], bl
call esi
jmp 0x408572
call edi
test eax, eax
je 0x408572
cmp byte [ebp - 0x207], 0x3a
jne 0x408572
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x210]
push eax
call esi
test eax, eax
je 0x4085a4
cmp byte [ebp - 0x20f], 0x3a
jne 0x4085a4
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x210]
push eax
push 3
jne 0x4085f3
call edi
test eax, eax
je 0x4085d4
cmp byte [ebp - 0x20f], 0x3a
jne 0x4085d4
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e0]
mov byte [ebp - 0x5e0], 0x42
push eax
mov byte [ebp - 0x5df], 0x3a
mov byte [ebp - 0x5de], bl
call esi
jmp 0x408610
call edi
test eax, eax
je 0x408610
cmp byte [ebp - 0x20f], 0x3a
jne 0x408610
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x218]
push eax
call esi
test eax, eax
je 0x40863b
cmp byte [ebp - 0x217], 0x3a
jne 0x40863b
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x218]
push eax
push 3
jne 0x40868a
call edi
test eax, eax
je 0x40866b
cmp byte [ebp - 0x217], 0x3a
jne 0x40866b
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e8]
mov byte [ebp - 0x5e8], 0x42
push eax
mov byte [ebp - 0x5e7], 0x3a
mov byte [ebp - 0x5e6], bl
call esi
jmp 0x4086a7
call edi
test eax, eax
je 0x4086a7
cmp byte [ebp - 0x217], 0x3a
jne 0x4086a7
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x220]
push eax
call esi
test eax, eax
je 0x4086d9
cmp byte [ebp - 0x21f], 0x3a
jne 0x4086d9
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x220]
push eax
push 3
jne 0x408728
call edi
test eax, eax
je 0x408709
cmp byte [ebp - 0x21f], 0x3a
jne 0x408709
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f0]
mov byte [ebp - 0x5f0], 0x42
push eax
mov byte [ebp - 0x5ef], 0x3a
mov byte [ebp - 0x5ee], bl
call esi
jmp 0x408745
call edi
test eax, eax
je 0x408745
cmp byte [ebp - 0x21f], 0x3a
jne 0x408745
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x228]
push eax
call esi
test eax, eax
je 0x408778
cmp byte [ebp - 0x227], 0x3a
jne 0x408778
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x228]
push eax
push 3
jne 0x4087c7
call edi
test eax, eax
je 0x4087a8
cmp byte [ebp - 0x227], 0x3a
jne 0x4087a8
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f8]
mov byte [ebp - 0x5f8], 0x42
push eax
mov byte [ebp - 0x5f7], 0x3a
mov byte [ebp - 0x5f6], bl
call esi
jmp 0x4087e4
call edi
test eax, eax
je 0x4087e4
cmp byte [ebp - 0x227], 0x3a
jne 0x4087e4
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x230]
push eax
call esi
test eax, eax
je 0x408818
cmp byte [ebp - 0x22f], 0x3a
jne 0x408818
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x230]
push eax
push 3
jne 0x408867
call edi
test eax, eax
je 0x408848
cmp byte [ebp - 0x22f], 0x3a
jne 0x408848
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x600]
mov byte [ebp - 0x600], 0x42
push eax
mov byte [ebp - 0x5ff], 0x3a
mov byte [ebp - 0x5fe], bl
call esi
jmp 0x408884
call edi
test eax, eax
je 0x408884
cmp byte [ebp - 0x22f], 0x3a
jne 0x408884
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x81c]
call fcn.0042edc3
lea eax, [ebp - 0x7e4]
lea ecx, [ebp - 0x81c]
push eax
call fcn.004329ed
test eax, eax
je 0x409a71
lea eax, [ebp + 0x14]
test eax, eax
jne 0x409a43
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x238]
push eax
call esi
test eax, eax
je 0x4088fe
cmp byte [ebp - 0x237], 0x3a
jne 0x4088fe
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x238]
push eax
push 3
jne 0x40894d
call edi
test eax, eax
je 0x40892e
cmp byte [ebp - 0x237], 0x3a
jne 0x40892e
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x608]
mov byte [ebp - 0x608], 0x42
push eax
mov byte [ebp - 0x607], 0x3a
mov byte [ebp - 0x606], bl
call esi
jmp 0x40896a
call edi
test eax, eax
je 0x40896a
cmp byte [ebp - 0x237], 0x3a
jne 0x40896a
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x240]
push eax
call esi
test eax, eax
je 0x40898e
cmp byte [ebp - 0x23f], 0x3a
jne 0x40898e
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x240]
push eax
push 3
jne 0x4089dd
call edi
test eax, eax
je 0x4089be
cmp byte [ebp - 0x23f], 0x3a
jne 0x4089be
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x610]
mov byte [ebp - 0x610], 0x42
push eax
mov byte [ebp - 0x60f], 0x3a
mov byte [ebp - 0x60e], bl
call esi
jmp 0x4089fa
call edi
test eax, eax
je 0x4089fa
cmp byte [ebp - 0x23f], 0x3a
jne 0x4089fa
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x248]
push eax
call esi
test eax, eax
je 0x408a36
cmp byte [ebp - 0x247], 0x3a
jne 0x408a36
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x248]
push eax
push 3
jne 0x408a85
call edi
test eax, eax
je 0x408a66
cmp byte [ebp - 0x247], 0x3a
jne 0x408a66
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x618]
mov byte [ebp - 0x618], 0x42
push eax
mov byte [ebp - 0x617], 0x3a
mov byte [ebp - 0x616], bl
call esi
jmp 0x408aa2
call edi
test eax, eax
je 0x408aa2
cmp byte [ebp - 0x247], 0x3a
jne 0x408aa2
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x250]
push eax
call esi
test eax, eax
je 0x408ad2
cmp byte [ebp - 0x24f], 0x3a
jne 0x408ad2
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x250]
push eax
push 3
jne 0x408b21
call edi
test eax, eax
je 0x408b02
cmp byte [ebp - 0x24f], 0x3a
jne 0x408b02
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x620]
mov byte [ebp - 0x620], 0x42
push eax
mov byte [ebp - 0x61f], 0x3a
mov byte [ebp - 0x61e], bl
call esi
jmp 0x408b3e
call edi
test eax, eax
je 0x408b3e
cmp byte [ebp - 0x24f], 0x3a
jne 0x408b3e
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x258]
push eax
call esi
test eax, eax
je 0x408b69
cmp byte [ebp - 0x257], 0x3a
jne 0x408b69
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x258]
push eax
push 3
jne 0x408bb8
call edi
test eax, eax
je 0x408b99
cmp byte [ebp - 0x257], 0x3a
jne 0x408b99
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x628]
mov byte [ebp - 0x628], 0x42
push eax
mov byte [ebp - 0x627], 0x3a
mov byte [ebp - 0x626], bl
call esi
jmp 0x408bd5
call edi
test eax, eax
je 0x408bd5
cmp byte [ebp - 0x257], 0x3a
jne 0x408bd5
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0x260]
push eax
call esi
test eax, eax
je 0x408c00
cmp byte [ebp - 0x25f], 0x3a
jne 0x408c00
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x260]
push eax
push 3
jne 0x408c4f
call edi
test eax, eax
je 0x408c30
cmp byte [ebp - 0x25f], 0x3a
jne 0x408c30
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x630]
mov byte [ebp - 0x630], 0x42
push eax
mov byte [ebp - 0x62f], 0x3a
mov byte [ebp - 0x62e], bl
call esi
jmp 0x408c6c
call edi
test eax, eax
je 0x408c6c
cmp byte [ebp - 0x25f], 0x3a
jne 0x408c6c
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x268]
push eax
call esi
test eax, eax
je 0x408ca3
cmp byte [ebp - 0x267], 0x3a
jne 0x408ca3
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x268]
push eax
push 3
jne 0x408cf2
call edi
test eax, eax
je 0x408cd3
cmp byte [ebp - 0x267], 0x3a
jne 0x408cd3
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x638]
mov byte [ebp - 0x638], 0x42
push eax
mov byte [ebp - 0x637], 0x3a
mov byte [ebp - 0x636], bl
call esi
jmp 0x408d0f
call edi
test eax, eax
je 0x408d0f
cmp byte [ebp - 0x267], 0x3a
jne 0x408d0f
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x270]
push eax
call esi
test eax, eax
je 0x408d54
cmp byte [ebp - 0x26f], 0x3a
jne 0x408d54
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x270]
push eax
push 3
jne 0x408da3
call edi
test eax, eax
je 0x408d84
cmp byte [ebp - 0x26f], 0x3a
jne 0x408d84
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x640]
mov byte [ebp - 0x640], 0x42
push eax
mov byte [ebp - 0x63f], 0x3a
mov byte [ebp - 0x63e], bl
call esi
jmp 0x408dc0
call edi
test eax, eax
je 0x408dc0
cmp byte [ebp - 0x26f], 0x3a
jne 0x408dc0
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x278]
push eax
call esi
test eax, eax
je 0x408df4
cmp byte [ebp - 0x277], 0x3a
jne 0x408df4
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x278]
push eax
push 3
jne 0x408e43
call edi
test eax, eax
je 0x408e24
cmp byte [ebp - 0x277], 0x3a
jne 0x408e24
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x648]
mov byte [ebp - 0x648], 0x42
push eax
mov byte [ebp - 0x647], 0x3a
mov byte [ebp - 0x646], bl
call esi
jmp 0x408e60
call edi
test eax, eax
je 0x408e60
cmp byte [ebp - 0x277], 0x3a
jne 0x408e60
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x280]
push eax
call esi
test eax, eax
je 0x408e93
cmp byte [ebp - 0x27f], 0x3a
jne 0x408e93
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x280]
push eax
push 3
jne 0x408ee2
call edi
test eax, eax
je 0x408ec3
cmp byte [ebp - 0x27f], 0x3a
jne 0x408ec3
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x650]
mov byte [ebp - 0x650], 0x42
push eax
mov byte [ebp - 0x64f], 0x3a
mov byte [ebp - 0x64e], bl
call esi
jmp 0x408eff
call edi
test eax, eax
je 0x408eff
cmp byte [ebp - 0x27f], 0x3a
jne 0x408eff
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x288]
push eax
call esi
test eax, eax
je 0x408f35
cmp byte [ebp - 0x287], 0x3a
jne 0x408f35
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x288]
push eax
push 3
jne 0x408f84
call edi
test eax, eax
je 0x408f65
cmp byte [ebp - 0x287], 0x3a
jne 0x408f65
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x658]
mov byte [ebp - 0x658], 0x42
push eax
mov byte [ebp - 0x657], 0x3a
mov byte [ebp - 0x656], bl
call esi
jmp 0x408fa1
call edi
test eax, eax
je 0x408fa1
cmp byte [ebp - 0x287], 0x3a
jne 0x408fa1
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x290]
push eax
call esi
test eax, eax
je 0x408fdd
cmp byte [ebp - 0x28f], 0x3a
jne 0x408fdd
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x290]
push eax
push 3
jne 0x40902c
call edi
test eax, eax
je 0x40900d
cmp byte [ebp - 0x28f], 0x3a
jne 0x40900d
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x660]
mov byte [ebp - 0x660], 0x42
push eax
mov byte [ebp - 0x65f], 0x3a
mov byte [ebp - 0x65e], bl
call esi
jmp 0x409049
call edi
test eax, eax
je 0x409049
cmp byte [ebp - 0x28f], 0x3a
jne 0x409049
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x298]
push eax
call esi
test eax, eax
je 0x409081
cmp byte [ebp - 0x297], 0x3a
jne 0x409081
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x298]
push eax
push 3
jne 0x4090d0
call edi
test eax, eax
je 0x4090b1
cmp byte [ebp - 0x297], 0x3a
jne 0x4090b1
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x668]
mov byte [ebp - 0x668], 0x42
push eax
mov byte [ebp - 0x667], 0x3a
mov byte [ebp - 0x666], bl
call esi
jmp 0x4090ed
call edi
test eax, eax
je 0x4090ed
cmp byte [ebp - 0x297], 0x3a
jne 0x4090ed
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x2a0]
push eax
call esi
test eax, eax
je 0x409118
cmp byte [ebp - 0x29f], 0x3a
jne 0x409118
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a0]
push eax
push 3
jne 0x409167
call edi
test eax, eax
je 0x409148
cmp byte [ebp - 0x29f], 0x3a
jne 0x409148
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x670]
mov byte [ebp - 0x670], 0x42
push eax
mov byte [ebp - 0x66f], 0x3a
mov byte [ebp - 0x66e], bl
call esi
jmp 0x409184
call edi
test eax, eax
je 0x409184
cmp byte [ebp - 0x29f], 0x3a
jne 0x409184
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x2a8]
push eax
call esi
test eax, eax
je 0x4091af
cmp byte [ebp - 0x2a7], 0x3a
jne 0x4091af
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a8]
push eax
push 3
jne 0x4091fe
call edi
test eax, eax
je 0x4091df
cmp byte [ebp - 0x2a7], 0x3a
jne 0x4091df
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x678]
mov byte [ebp - 0x678], 0x42
push eax
mov byte [ebp - 0x677], 0x3a
mov byte [ebp - 0x676], bl
call esi
jmp 0x40921b
call edi
test eax, eax
je 0x40921b
cmp byte [ebp - 0x2a7], 0x3a
jne 0x40921b
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x2b0]
push eax
call esi
test eax, eax
je 0x40924e
cmp byte [ebp - 0x2af], 0x3a
jne 0x40924e
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b0]
push eax
push 3
jne 0x40929d
call edi
test eax, eax
je 0x40927e
cmp byte [ebp - 0x2af], 0x3a
jne 0x40927e
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x680]
mov byte [ebp - 0x680], 0x42
push eax
mov byte [ebp - 0x67f], 0x3a
mov byte [ebp - 0x67e], bl
call esi
jmp 0x4092ba
call edi
test eax, eax
je 0x4092ba
cmp byte [ebp - 0x2af], 0x3a
jne 0x4092ba
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x2b8]
push eax
call esi
test eax, eax
je 0x4092ee
cmp byte [ebp - 0x2b7], 0x3a
jne 0x4092ee
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b8]
push eax
push 3
jne 0x40933d
call edi
test eax, eax
je 0x40931e
cmp byte [ebp - 0x2b7], 0x3a
jne 0x40931e
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x688]
mov byte [ebp - 0x688], 0x42
push eax
mov byte [ebp - 0x687], 0x3a
mov byte [ebp - 0x686], bl
call esi
jmp 0x40935a
call edi
test eax, eax
je 0x40935a
cmp byte [ebp - 0x2b7], 0x3a
jne 0x40935a
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x2c0]
push eax
call esi
test eax, eax
je 0x40938e
cmp byte [ebp - 0x2bf], 0x3a
jne 0x40938e
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c0]
push eax
push 3
jne 0x4093dd
call edi
test eax, eax
je 0x4093be
cmp byte [ebp - 0x2bf], 0x3a
jne 0x4093be
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x690]
mov byte [ebp - 0x690], 0x42
push eax
mov byte [ebp - 0x68f], 0x3a
mov byte [ebp - 0x68e], bl
call esi
jmp 0x4093fa
call edi
test eax, eax
je 0x4093fa
cmp byte [ebp - 0x2bf], 0x3a
jne 0x4093fa
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x2c8]
push eax
call esi
test eax, eax
je 0x40942d
cmp byte [ebp - 0x2c7], 0x3a
jne 0x40942d
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c8]
push eax
push 3
jne 0x40947c
call edi
test eax, eax
je 0x40945d
cmp byte [ebp - 0x2c7], 0x3a
jne 0x40945d
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x698]
mov byte [ebp - 0x698], 0x42
push eax
mov byte [ebp - 0x697], 0x3a
mov byte [ebp - 0x696], bl
call esi
jmp 0x409499
call edi
test eax, eax
je 0x409499
cmp byte [ebp - 0x2c7], 0x3a
jne 0x409499
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x2d0]
push eax
call esi
test eax, eax
je 0x4094c6
cmp byte [ebp - 0x2cf], 0x3a
jne 0x4094c6
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d0]
push eax
push 3
jne 0x409515
call edi
test eax, eax
je 0x4094f6
cmp byte [ebp - 0x2cf], 0x3a
jne 0x4094f6
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a0]
mov byte [ebp - 0x6a0], 0x42
push eax
mov byte [ebp - 0x69f], 0x3a
mov byte [ebp - 0x69e], bl
call esi
jmp 0x409532
call edi
test eax, eax
je 0x409532
cmp byte [ebp - 0x2cf], 0x3a
jne 0x409532
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x2d8]
push eax
call esi
test eax, eax
je 0x409564
cmp byte [ebp - 0x2d7], 0x3a
jne 0x409564
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d8]
push eax
push 3
jne 0x4095b3
call edi
test eax, eax
je 0x409594
cmp byte [ebp - 0x2d7], 0x3a
jne 0x409594
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a8]
mov byte [ebp - 0x6a8], 0x42
push eax
mov byte [ebp - 0x6a7], 0x3a
mov byte [ebp - 0x6a6], bl
call esi
jmp 0x4095d0
call edi
test eax, eax
je 0x4095d0
cmp byte [ebp - 0x2d7], 0x3a
jne 0x4095d0
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x2e0]
push eax
call esi
test eax, eax
je 0x409602
cmp byte [ebp - 0x2df], 0x3a
jne 0x409602
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e0]
push eax
push 3
jne 0x409651
call edi
test eax, eax
je 0x409632
cmp byte [ebp - 0x2df], 0x3a
jne 0x409632
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b0]
mov byte [ebp - 0x6b0], 0x42
push eax
mov byte [ebp - 0x6af], 0x3a
mov byte [ebp - 0x6ae], bl
call esi
jmp 0x40966e
call edi
test eax, eax
je 0x40966e
cmp byte [ebp - 0x2df], 0x3a
jne 0x40966e
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x2e8]
push eax
call esi
test eax, eax
je 0x4096a5
cmp byte [ebp - 0x2e7], 0x3a
jne 0x4096a5
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e8]
push eax
push 3
jne 0x4096f4
call edi
test eax, eax
je 0x4096d5
cmp byte [ebp - 0x2e7], 0x3a
jne 0x4096d5
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b8]
mov byte [ebp - 0x6b8], 0x42
push eax
mov byte [ebp - 0x6b7], 0x3a
mov byte [ebp - 0x6b6], bl
call esi
jmp 0x409711
call edi
test eax, eax
je 0x409711
cmp byte [ebp - 0x2e7], 0x3a
jne 0x409711
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x2f0]
push eax
call esi
test eax, eax
je 0x409743
cmp byte [ebp - 0x2ef], 0x3a
jne 0x409743
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f0]
push eax
push 3
jne 0x409792
call edi
test eax, eax
je 0x409773
cmp byte [ebp - 0x2ef], 0x3a
jne 0x409773
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c0]
mov byte [ebp - 0x6c0], 0x42
push eax
mov byte [ebp - 0x6bf], 0x3a
mov byte [ebp - 0x6be], bl
call esi
jmp 0x4097af
call edi
test eax, eax
je 0x4097af
cmp byte [ebp - 0x2ef], 0x3a
jne 0x4097af
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x2f8]
push eax
call esi
test eax, eax
je 0x4097da
cmp byte [ebp - 0x2f7], 0x3a
jne 0x4097da
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f8]
push eax
push 3
jne 0x409829
call edi
test eax, eax
je 0x40980a
cmp byte [ebp - 0x2f7], 0x3a
jne 0x40980a
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c8]
mov byte [ebp - 0x6c8], 0x42
push eax
mov byte [ebp - 0x6c7], 0x3a
mov byte [ebp - 0x6c6], bl
call esi
jmp 0x409846
call edi
test eax, eax
je 0x409846
cmp byte [ebp - 0x2f7], 0x3a
jne 0x409846
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x300]
push eax
call esi
test eax, eax
je 0x409878
cmp byte [ebp - 0x2ff], 0x3a
jne 0x409878
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x300]
push eax
push 3
jne 0x4098c7
call edi
test eax, eax
je 0x4098a8
cmp byte [ebp - 0x2ff], 0x3a
jne 0x4098a8
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d0]
mov byte [ebp - 0x6d0], 0x42
push eax
mov byte [ebp - 0x6cf], 0x3a
mov byte [ebp - 0x6ce], bl
call esi
jmp 0x4098e4
call edi
test eax, eax
je 0x4098e4
cmp byte [ebp - 0x2ff], 0x3a
jne 0x4098e4
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x308]
push eax
call esi
test eax, eax
je 0x409917
cmp byte [ebp - 0x307], 0x3a
jne 0x409917
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x308]
push eax
push 3
jne 0x409966
call edi
test eax, eax
je 0x409947
cmp byte [ebp - 0x307], 0x3a
jne 0x409947
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d8]
mov byte [ebp - 0x6d8], 0x42
push eax
mov byte [ebp - 0x6d7], 0x3a
mov byte [ebp - 0x6d6], bl
call esi
jmp 0x409983
call edi
test eax, eax
je 0x409983
cmp byte [ebp - 0x307], 0x3a
jne 0x409983
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x310]
push eax
call esi
test eax, eax
je 0x4099b7
cmp byte [ebp - 0x30f], 0x3a
jne 0x4099b7
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x310]
push eax
push 3
jne 0x409a06
call edi
test eax, eax
je 0x4099e7
cmp byte [ebp - 0x30f], 0x3a
jne 0x4099e7
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e0]
mov byte [ebp - 0x6e0], 0x42
push eax
mov byte [ebp - 0x6df], 0x3a
mov byte [ebp - 0x6de], bl
call esi
jmp 0x409a23
call edi
test eax, eax
je 0x409a23
cmp byte [ebp - 0x30f], 0x3a
jne 0x409a23
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea ecx, [ebp - 0x7e4]
call fcn.00417205
mov eax, dword [0x4543d0]
push 0xbb8
call dword [eax + 0x3c]
lea ecx, [ebp - 0x81c]
call fcn.00430a62
lea ecx, [ebp - 0x81c]
call fcn.00431826
lea ecx, [ebp - 0x81c]
call fcn.0042fc27
lea ecx, [ebp - 0x7e4]
call fcn.0041561f
lea ecx, [ebp - 0x7e8]
call fcn.0041daa9
lea ecx, [ebp - 0x7f0]
call fcn.00437e6e
lea ecx, [ebp - 0x7fc]
call fcn.0041ccc4
mov ecx, dword [0x4543d0]
cmp ecx, ebx
je 0x409ab8
mov eax, dword [ecx]
push 1
call dword [eax]
lea eax, [ebp + 0x14]
test eax, eax
jne 0x40ac32
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x318]
push eax
call esi
test eax, eax
je 0x409aed
cmp byte [ebp - 0x317], 0x3a
jne 0x409aed
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x318]
push eax
push 3
jne 0x409b3c
call edi
test eax, eax
je 0x409b1d
cmp byte [ebp - 0x317], 0x3a
jne 0x409b1d
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e8]
mov byte [ebp - 0x6e8], 0x42
push eax
mov byte [ebp - 0x6e7], 0x3a
mov byte [ebp - 0x6e6], bl
call esi
jmp 0x409b59
call edi
test eax, eax
je 0x409b59
cmp byte [ebp - 0x317], 0x3a
jne 0x409b59
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x320]
push eax
call esi
test eax, eax
je 0x409b7d
cmp byte [ebp - 0x31f], 0x3a
jne 0x409b7d
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x320]
push eax
push 3
jne 0x409bcc
call edi
test eax, eax
je 0x409bad
cmp byte [ebp - 0x31f], 0x3a
jne 0x409bad
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f0]
mov byte [ebp - 0x6f0], 0x42
push eax
mov byte [ebp - 0x6ef], 0x3a
mov byte [ebp - 0x6ee], bl
call esi
jmp 0x409be9
call edi
test eax, eax
je 0x409be9
cmp byte [ebp - 0x31f], 0x3a
jne 0x409be9
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [ebp - 0x328]
push eax
call esi
test eax, eax
je 0x409c25
cmp byte [ebp - 0x327], 0x3a
jne 0x409c25
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x328]
push eax
push 3
jne 0x409c74
call edi
test eax, eax
je 0x409c55
cmp byte [ebp - 0x327], 0x3a
jne 0x409c55
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f8]
mov byte [ebp - 0x6f8], 0x42
push eax
mov byte [ebp - 0x6f7], 0x3a
mov byte [ebp - 0x6f6], bl
call esi
jmp 0x409c91
call edi
test eax, eax
je 0x409c91
cmp byte [ebp - 0x327], 0x3a
jne 0x409c91
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x330]
push eax
call esi
test eax, eax
je 0x409cc1
cmp byte [ebp - 0x32f], 0x3a
jne 0x409cc1
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x330]
push eax
push 3
jne 0x409d10
call edi
test eax, eax
je 0x409cf1
cmp byte [ebp - 0x32f], 0x3a
jne 0x409cf1
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x700]
mov byte [ebp - 0x700], 0x42
push eax
mov byte [ebp - 0x6ff], 0x3a
mov byte [ebp - 0x6fe], bl
call esi
jmp 0x409d2d
call edi
test eax, eax
je 0x409d2d
cmp byte [ebp - 0x32f], 0x3a
jne 0x409d2d
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x338]
push eax
call esi
test eax, eax
je 0x409d58
cmp byte [ebp - 0x337], 0x3a
jne 0x409d58
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x338]
push eax
push 3
jne 0x409da7
call edi
test eax, eax
je 0x409d88
cmp byte [ebp - 0x337], 0x3a
jne 0x409d88
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x708]
mov byte [ebp - 0x708], 0x42
push eax
mov byte [ebp - 0x707], 0x3a
mov byte [ebp - 0x706], bl
call esi
jmp 0x409dc4
call edi
test eax, eax
je 0x409dc4
cmp byte [ebp - 0x337], 0x3a
jne 0x409dc4
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomA]
lea eax, [ebp - 0x340]
push eax
call esi
test eax, eax
je 0x409def
cmp byte [ebp - 0x33f], 0x3a
jne 0x409def
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x340]
push eax
push 3
jne 0x409e3e
call edi
test eax, eax
je 0x409e1f
cmp byte [ebp - 0x33f], 0x3a
jne 0x409e1f
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x710]
mov byte [ebp - 0x710], 0x42
push eax
mov byte [ebp - 0x70f], 0x3a
mov byte [ebp - 0x70e], bl
call esi
jmp 0x409e5b
call edi
test eax, eax
je 0x409e5b
cmp byte [ebp - 0x33f], 0x3a
jne 0x409e5b
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x348]
push eax
call esi
test eax, eax
je 0x409e92
cmp byte [ebp - 0x347], 0x3a
jne 0x409e92
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x348]
push eax
push 3
jne 0x409ee1
call edi
test eax, eax
je 0x409ec2
cmp byte [ebp - 0x347], 0x3a
jne 0x409ec2
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x718]
mov byte [ebp - 0x718], 0x42
push eax
mov byte [ebp - 0x717], 0x3a
mov byte [ebp - 0x716], bl
call esi
jmp 0x409efe
call edi
test eax, eax
je 0x409efe
cmp byte [ebp - 0x347], 0x3a
jne 0x409efe
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x350]
push eax
call esi
test eax, eax
je 0x409f43
cmp byte [ebp - 0x34f], 0x3a
jne 0x409f43
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x350]
push eax
push 3
jne 0x409f92
call edi
test eax, eax
je 0x409f73
cmp byte [ebp - 0x34f], 0x3a
jne 0x409f73
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x720]
mov byte [ebp - 0x720], 0x42
push eax
mov byte [ebp - 0x71f], 0x3a
mov byte [ebp - 0x71e], bl
call esi
jmp 0x409faf
call edi
test eax, eax
je 0x409faf
cmp byte [ebp - 0x34f], 0x3a
jne 0x409faf
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x358]
push eax
call esi
test eax, eax
je 0x409fe3
cmp byte [ebp - 0x357], 0x3a
jne 0x409fe3
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x358]
push eax
push 3
jne 0x40a032
call edi
test eax, eax
je 0x40a013
cmp byte [ebp - 0x357], 0x3a
jne 0x40a013
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x728]
mov byte [ebp - 0x728], 0x42
push eax
mov byte [ebp - 0x727], 0x3a
mov byte [ebp - 0x726], bl
call esi
jmp 0x40a04f
call edi
test eax, eax
je 0x40a04f
cmp byte [ebp - 0x357], 0x3a
jne 0x40a04f
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x360]
push eax
call esi
test eax, eax
je 0x40a082
cmp byte [ebp - 0x35f], 0x3a
jne 0x40a082
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x360]
push eax
push 3
jne 0x40a0d1
call edi
test eax, eax
je 0x40a0b2
cmp byte [ebp - 0x35f], 0x3a
jne 0x40a0b2
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x730]
mov byte [ebp - 0x730], 0x42
push eax
mov byte [ebp - 0x72f], 0x3a
mov byte [ebp - 0x72e], bl
call esi
jmp 0x40a0ee
call edi
test eax, eax
je 0x40a0ee
cmp byte [ebp - 0x35f], 0x3a
jne 0x40a0ee
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x368]
push eax
call esi
test eax, eax
je 0x40a124
cmp byte [ebp - 0x367], 0x3a
jne 0x40a124
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x368]
push eax
push 3
jne 0x40a173
call edi
test eax, eax
je 0x40a154
cmp byte [ebp - 0x367], 0x3a
jne 0x40a154
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x738]
mov byte [ebp - 0x738], 0x42
push eax
mov byte [ebp - 0x737], 0x3a
mov byte [ebp - 0x736], bl
call esi
jmp 0x40a190
call edi
test eax, eax
je 0x40a190
cmp byte [ebp - 0x367], 0x3a
jne 0x40a190
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x370]
push eax
call esi
test eax, eax
je 0x40a1cc
cmp byte [ebp - 0x36f], 0x3a
jne 0x40a1cc
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x370]
push eax
push 3
jne 0x40a21b
call edi
test eax, eax
je 0x40a1fc
cmp byte [ebp - 0x36f], 0x3a
jne 0x40a1fc
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x740]
mov byte [ebp - 0x740], 0x42
push eax
mov byte [ebp - 0x73f], 0x3a
mov byte [ebp - 0x73e], bl
call esi
jmp 0x40a238
call edi
test eax, eax
je 0x40a238
cmp byte [ebp - 0x36f], 0x3a
jne 0x40a238
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x378]
push eax
call esi
test eax, eax
je 0x40a270
cmp byte [ebp - 0x377], 0x3a
jne 0x40a270
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x378]
push eax
push 3
jne 0x40a2bf
call edi
test eax, eax
je 0x40a2a0
cmp byte [ebp - 0x377], 0x3a
jne 0x40a2a0
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x748]
mov byte [ebp - 0x748], 0x42
push eax
mov byte [ebp - 0x747], 0x3a
mov byte [ebp - 0x746], bl
call esi
jmp 0x40a2dc
call edi
test eax, eax
je 0x40a2dc
cmp byte [ebp - 0x377], 0x3a
jne 0x40a2dc
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x380]
push eax
call esi
test eax, eax
je 0x40a307
cmp byte [ebp - 0x37f], 0x3a
jne 0x40a307
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x380]
push eax
push 3
jne 0x40a356
call edi
test eax, eax
je 0x40a337
cmp byte [ebp - 0x37f], 0x3a
jne 0x40a337
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x750]
mov byte [ebp - 0x750], 0x42
push eax
mov byte [ebp - 0x74f], 0x3a
mov byte [ebp - 0x74e], bl
call esi
jmp 0x40a373
call edi
test eax, eax
je 0x40a373
cmp byte [ebp - 0x37f], 0x3a
jne 0x40a373
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x388]
push eax
call esi
test eax, eax
je 0x40a39e
cmp byte [ebp - 0x387], 0x3a
jne 0x40a39e
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x388]
push eax
push 3
jne 0x40a3ed
call edi
test eax, eax
je 0x40a3ce
cmp byte [ebp - 0x387], 0x3a
jne 0x40a3ce
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x758]
mov byte [ebp - 0x758], 0x42
push eax
mov byte [ebp - 0x757], 0x3a
mov byte [ebp - 0x756], bl
call esi
jmp 0x40a40a
call edi
test eax, eax
je 0x40a40a
cmp byte [ebp - 0x387], 0x3a
jne 0x40a40a
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x390]
push eax
call esi
test eax, eax
je 0x40a43d
cmp byte [ebp - 0x38f], 0x3a
jne 0x40a43d
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x390]
push eax
push 3
jne 0x40a48c
call edi
test eax, eax
je 0x40a46d
cmp byte [ebp - 0x38f], 0x3a
jne 0x40a46d
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x760]
mov byte [ebp - 0x760], 0x42
push eax
mov byte [ebp - 0x75f], 0x3a
mov byte [ebp - 0x75e], bl
call esi
jmp 0x40a4a9
call edi
test eax, eax
je 0x40a4a9
cmp byte [ebp - 0x38f], 0x3a
jne 0x40a4a9
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x398]
push eax
call esi
test eax, eax
je 0x40a4dd
cmp byte [ebp - 0x397], 0x3a
jne 0x40a4dd
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x398]
push eax
push 3
jne 0x40a52c
call edi
test eax, eax
je 0x40a50d
cmp byte [ebp - 0x397], 0x3a
jne 0x40a50d
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x768]
mov byte [ebp - 0x768], 0x42
push eax
mov byte [ebp - 0x767], 0x3a
mov byte [ebp - 0x766], bl
call esi
jmp 0x40a549
call edi
test eax, eax
je 0x40a549
cmp byte [ebp - 0x397], 0x3a
jne 0x40a549
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x3a0]
push eax
call esi
test eax, eax
je 0x40a57d
cmp byte [ebp - 0x39f], 0x3a
jne 0x40a57d
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a0]
push eax
push 3
jne 0x40a5cc
call edi
test eax, eax
je 0x40a5ad
cmp byte [ebp - 0x39f], 0x3a
jne 0x40a5ad
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x770]
mov byte [ebp - 0x770], 0x42
push eax
mov byte [ebp - 0x76f], 0x3a
mov byte [ebp - 0x76e], bl
call esi
jmp 0x40a5e9
call edi
test eax, eax
je 0x40a5e9
cmp byte [ebp - 0x39f], 0x3a
jne 0x40a5e9
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x3a8]
push eax
call esi
test eax, eax
je 0x40a61c
cmp byte [ebp - 0x3a7], 0x3a
jne 0x40a61c
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a8]
push eax
push 3
jne 0x40a66b
call edi
test eax, eax
je 0x40a64c
cmp byte [ebp - 0x3a7], 0x3a
jne 0x40a64c
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x778]
mov byte [ebp - 0x778], 0x42
push eax
mov byte [ebp - 0x777], 0x3a
mov byte [ebp - 0x776], bl
call esi
jmp 0x40a688
call edi
test eax, eax
je 0x40a688
cmp byte [ebp - 0x3a7], 0x3a
jne 0x40a688
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x3b0]
push eax
call esi
test eax, eax
je 0x40a6b5
cmp byte [ebp - 0x3af], 0x3a
jne 0x40a6b5
movzx eax, byte [ebp - 0x3b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3b0]
push eax
push 3
jne 0x40a704
call edi
test eax, eax
je 0x40a6e5
cmp byte [ebp - 0x3af], 0x3a
jne 0x40a6e5
movzx eax, byte [ebp - 0x3b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x780]
mov byte [ebp - 0x780], 0x42
push eax
mov byte [ebp - 0x77f], 0x3a
mov byte [ebp - 0x77e], bl
call esi
jmp 0x40a721
call edi
test eax, eax
je 0x40a721
cmp byte [ebp - 0x3af], 0x3a
jne 0x40a721
movzx eax, byte [ebp - 0x3b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x3b8]
push eax
call esi
test eax, eax
je 0x40a753
cmp byte [ebp - 0x3b7], 0x3a
jne 0x40a753
movzx eax, byte [ebp - 0x3b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3b8]
push eax
push 3
jne 0x40a7a2
call edi
test eax, eax
je 0x40a783
cmp byte [ebp - 0x3b7], 0x3a
jne 0x40a783
movzx eax, byte [ebp - 0x3b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x788]
mov byte [ebp - 0x788], 0x42
push eax
mov byte [ebp - 0x787], 0x3a
mov byte [ebp - 0x786], bl
call esi
jmp 0x40a7bf
call edi
test eax, eax
je 0x40a7bf
cmp byte [ebp - 0x3b7], 0x3a
jne 0x40a7bf
movzx eax, byte [ebp - 0x3b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x3c0]
push eax
call esi
test eax, eax
je 0x40a7f1
cmp byte [ebp - 0x3bf], 0x3a
jne 0x40a7f1
movzx eax, byte [ebp - 0x3c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c0]
push eax
push 3
jne 0x40a840
call edi
test eax, eax
je 0x40a821
cmp byte [ebp - 0x3bf], 0x3a
jne 0x40a821
movzx eax, byte [ebp - 0x3c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x790]
mov byte [ebp - 0x790], 0x42
push eax
mov byte [ebp - 0x78f], 0x3a
mov byte [ebp - 0x78e], bl
call esi
jmp 0x40a85d
call edi
test eax, eax
je 0x40a85d
cmp byte [ebp - 0x3bf], 0x3a
jne 0x40a85d
movzx eax, byte [ebp - 0x3c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x3c8]
push eax
call esi
test eax, eax
je 0x40a894
cmp byte [ebp - 0x3c7], 0x3a
jne 0x40a894
movzx eax, byte [ebp - 0x3c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c8]
push eax
push 3
jne 0x40a8e3
call edi
test eax, eax
je 0x40a8c4
cmp byte [ebp - 0x3c7], 0x3a
jne 0x40a8c4
movzx eax, byte [ebp - 0x3c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x798]
mov byte [ebp - 0x798], 0x42
push eax
mov byte [ebp - 0x797], 0x3a
mov byte [ebp - 0x796], bl
call esi
jmp 0x40a900
call edi
test eax, eax
je 0x40a900
cmp byte [ebp - 0x3c7], 0x3a
jne 0x40a900
movzx eax, byte [ebp - 0x3c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x3d0]
push eax
call esi
test eax, eax
je 0x40a932
cmp byte [ebp - 0x3cf], 0x3a
jne 0x40a932
movzx eax, byte [ebp - 0x3d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3d0]
push eax
push 3
jne 0x40a981
call edi
test eax, eax
je 0x40a962
cmp byte [ebp - 0x3cf], 0x3a
jne 0x40a962
movzx eax, byte [ebp - 0x3d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7a0]
mov byte [ebp - 0x7a0], 0x42
push eax
mov byte [ebp - 0x79f], 0x3a
mov byte [ebp - 0x79e], bl
call esi
jmp 0x40a99e
call edi
test eax, eax
je 0x40a99e
cmp byte [ebp - 0x3cf], 0x3a
jne 0x40a99e
movzx eax, byte [ebp - 0x3d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x3d8]
push eax
call esi
test eax, eax
je 0x40a9c9
cmp byte [ebp - 0x3d7], 0x3a
jne 0x40a9c9
movzx eax, byte [ebp - 0x3d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3d8]
push eax
push 3
jne 0x40aa18
call edi
test eax, eax
je 0x40a9f9
cmp byte [ebp - 0x3d7], 0x3a
jne 0x40a9f9
movzx eax, byte [ebp - 0x3d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7a8]
mov byte [ebp - 0x7a8], 0x42
push eax
mov byte [ebp - 0x7a7], 0x3a
mov byte [ebp - 0x7a6], bl
call esi
jmp 0x40aa35
call edi
test eax, eax
je 0x40aa35
cmp byte [ebp - 0x3d7], 0x3a
jne 0x40aa35
movzx eax, byte [ebp - 0x3d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x3e0]
push eax
call esi
test eax, eax
je 0x40aa67
cmp byte [ebp - 0x3df], 0x3a
jne 0x40aa67
movzx eax, byte [ebp - 0x3e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3e0]
push eax
push 3
jne 0x40aab6
call edi
test eax, eax
je 0x40aa97
cmp byte [ebp - 0x3df], 0x3a
jne 0x40aa97
movzx eax, byte [ebp - 0x3e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7b0]
mov byte [ebp - 0x7b0], 0x42
push eax
mov byte [ebp - 0x7af], 0x3a
mov byte [ebp - 0x7ae], bl
call esi
jmp 0x40aad3
call edi
test eax, eax
je 0x40aad3
cmp byte [ebp - 0x3df], 0x3a
jne 0x40aad3
movzx eax, byte [ebp - 0x3e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x3e8]
push eax
call esi
test eax, eax
je 0x40ab06
cmp byte [ebp - 0x3e7], 0x3a
jne 0x40ab06
movzx eax, byte [ebp - 0x3e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3e8]
push eax
push 3
jne 0x40ab55
call edi
test eax, eax
je 0x40ab36
cmp byte [ebp - 0x3e7], 0x3a
jne 0x40ab36
movzx eax, byte [ebp - 0x3e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7b8]
mov byte [ebp - 0x7b8], 0x42
push eax
mov byte [ebp - 0x7b7], 0x3a
mov byte [ebp - 0x7b6], bl
call esi
jmp 0x40ab72
call edi
test eax, eax
je 0x40ab72
cmp byte [ebp - 0x3e7], 0x3a
jne 0x40ab72
movzx eax, byte [ebp - 0x3e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x3f0]
push eax
call esi
test eax, eax
je 0x40aba6
cmp byte [ebp - 0x3ef], 0x3a
jne 0x40aba6
movzx eax, byte [ebp - 0x3f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3f0]
push eax
push 3
jne 0x40abf5
call edi
test eax, eax
je 0x40abd6
cmp byte [ebp - 0x3ef], 0x3a
jne 0x40abd6
movzx eax, byte [ebp - 0x3f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7c0]
mov byte [ebp - 0x7c0], 0x42
push eax
mov byte [ebp - 0x7bf], 0x3a
mov byte [ebp - 0x7be], bl
call esi
jmp 0x40ac12
call edi
test eax, eax
je 0x40ac12
cmp byte [ebp - 0x3ef], 0x3a
jne 0x40ac12
movzx eax, byte [ebp - 0x3f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10