Function at 0x432927
Capabilities:
Allocate thread local storage
Clear file content
Create directory
Delete directory
Delete file
Get common file path
Get graphical window text
Read file on windows
Resume thread
Set current directory
Set environment variable
Set file attributes
Suspend thread
Write file on windows

Disassembly:
mov eax, 0x448e53
call fcn.00448330
mov eax, 0x3f7c4
call fcn.00448360
push ebx
push esi
lea eax, [ebp - 0x18]
mov esi, ecx
xor ebx, ebx
push edi
test eax, eax
mov dword [ebp - 0x18], esi
jne 0x4335e6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432977
cmp byte [ebp - 0xf], 0x3a
jne 0x432977
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4329b7
call edi
test eax, eax
je 0x4329a4
cmp byte [ebp - 0xf], 0x3a
jne 0x4329a4
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x4329ce
call edi
test eax, eax
je 0x4329ce
cmp byte [ebp - 0xf], 0x3a
jne 0x4329ce
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x4329e9
cmp byte [ebp - 0xf], 0x3a
jne 0x4329e9
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432a23
call edi
test eax, eax
je 0x432a10
cmp byte [ebp - 0xf], 0x3a
jne 0x432a10
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432a3a
call edi
test eax, eax
je 0x432a3a
cmp byte [ebp - 0xf], 0x3a
jne 0x432a3a
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToUnicode]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432a6d
cmp byte [ebp - 0xf], 0x3a
jne 0x432a6d
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432aa7
call edi
test eax, eax
je 0x432a94
cmp byte [ebp - 0xf], 0x3a
jne 0x432a94
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432abe
call edi
test eax, eax
je 0x432abe
cmp byte [ebp - 0xf], 0x3a
jne 0x432abe
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432ae0
cmp byte [ebp - 0xf], 0x3a
jne 0x432ae0
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432b1a
call edi
test eax, eax
je 0x432b07
cmp byte [ebp - 0xf], 0x3a
jne 0x432b07
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432b31
call edi
test eax, eax
je 0x432b31
cmp byte [ebp - 0xf], 0x3a
jne 0x432b31
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432b52
cmp byte [ebp - 0xf], 0x3a
jne 0x432b52
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432b8c
call edi
test eax, eax
je 0x432b79
cmp byte [ebp - 0xf], 0x3a
jne 0x432b79
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432ba3
call edi
test eax, eax
je 0x432ba3
cmp byte [ebp - 0xf], 0x3a
jne 0x432ba3
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432bdf
cmp byte [ebp - 0xf], 0x3a
jne 0x432bdf
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432c19
call edi
test eax, eax
je 0x432c06
cmp byte [ebp - 0xf], 0x3a
jne 0x432c06
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432c30
call edi
test eax, eax
je 0x432c30
cmp byte [ebp - 0xf], 0x3a
jne 0x432c30
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432c5b
cmp byte [ebp - 0xf], 0x3a
jne 0x432c5b
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432c95
call edi
test eax, eax
je 0x432c82
cmp byte [ebp - 0xf], 0x3a
jne 0x432c82
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432cac
call edi
test eax, eax
je 0x432cac
cmp byte [ebp - 0xf], 0x3a
jne 0x432cac
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432cd6
cmp byte [ebp - 0xf], 0x3a
jne 0x432cd6
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432d10
call edi
test eax, eax
je 0x432cfd
cmp byte [ebp - 0xf], 0x3a
jne 0x432cfd
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432d27
call edi
test eax, eax
je 0x432d27
cmp byte [ebp - 0xf], 0x3a
jne 0x432d27
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawTextA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432d54
cmp byte [ebp - 0xf], 0x3a
jne 0x432d54
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432d8e
call edi
test eax, eax
je 0x432d7b
cmp byte [ebp - 0xf], 0x3a
jne 0x432d7b
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432da5
call edi
test eax, eax
je 0x432da5
cmp byte [ebp - 0xf], 0x3a
jne 0x432da5
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432dd8
cmp byte [ebp - 0xf], 0x3a
jne 0x432dd8
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432e12
call edi
test eax, eax
je 0x432dff
cmp byte [ebp - 0xf], 0x3a
jne 0x432dff
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432e29
call edi
test eax, eax
je 0x432e29
cmp byte [ebp - 0xf], 0x3a
jne 0x432e29
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432e58
cmp byte [ebp - 0xf], 0x3a
jne 0x432e58
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432e92
call edi
test eax, eax
je 0x432e7f
cmp byte [ebp - 0xf], 0x3a
jne 0x432e7f
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432ea9
call edi
test eax, eax
je 0x432ea9
cmp byte [ebp - 0xf], 0x3a
jne 0x432ea9
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432ecb
cmp byte [ebp - 0xf], 0x3a
jne 0x432ecb
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432f05
call edi
test eax, eax
je 0x432ef2
cmp byte [ebp - 0xf], 0x3a
jne 0x432ef2
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432f1c
call edi
test eax, eax
je 0x432f1c
cmp byte [ebp - 0xf], 0x3a
jne 0x432f1c
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432f3e
cmp byte [ebp - 0xf], 0x3a
jne 0x432f3e
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432f78
call edi
test eax, eax
je 0x432f65
cmp byte [ebp - 0xf], 0x3a
jne 0x432f65
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x432f8f
call edi
test eax, eax
je 0x432f8f
cmp byte [ebp - 0xf], 0x3a
jne 0x432f8f
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x432fb9
cmp byte [ebp - 0xf], 0x3a
jne 0x432fb9
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x432ff3
call edi
test eax, eax
je 0x432fe0
cmp byte [ebp - 0xf], 0x3a
jne 0x432fe0
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x43300a
call edi
test eax, eax
je 0x43300a
cmp byte [ebp - 0xf], 0x3a
jne 0x43300a
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x433035
cmp byte [ebp - 0xf], 0x3a
jne 0x433035
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43306f
call edi
test eax, eax
je 0x43305c
cmp byte [ebp - 0xf], 0x3a
jne 0x43305c
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x433086
call edi
test eax, eax
je 0x433086
cmp byte [ebp - 0xf], 0x3a
jne 0x433086
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push ebx
call dword [sym.imp.USER32.dll_CloseWindow]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x4330b1
cmp byte [ebp - 0xf], 0x3a
jne 0x4330b1
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4330eb
call edi
test eax, eax
je 0x4330d8
cmp byte [ebp - 0xf], 0x3a
jne 0x4330d8
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x433102
call edi
test eax, eax
je 0x433102
cmp byte [ebp - 0xf], 0x3a
jne 0x433102
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x43312c
cmp byte [ebp - 0xf], 0x3a
jne 0x43312c
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433166
call edi
test eax, eax
je 0x433153
cmp byte [ebp - 0xf], 0x3a
jne 0x433153
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x43317d
call edi
test eax, eax
je 0x43317d
cmp byte [ebp - 0xf], 0x3a
jne 0x43317d
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x4331a1
cmp byte [ebp - 0xf], 0x3a
jne 0x4331a1
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4331db
call edi
test eax, eax
je 0x4331c8
cmp byte [ebp - 0xf], 0x3a
jne 0x4331c8
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x4331f2
call edi
test eax, eax
je 0x4331f2
cmp byte [ebp - 0xf], 0x3a
jne 0x4331f2
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x43321b
cmp byte [ebp - 0xf], 0x3a
jne 0x43321b
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433255
call edi
test eax, eax
je 0x433242
cmp byte [ebp - 0xf], 0x3a
jne 0x433242
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x43326c
call edi
test eax, eax
je 0x43326c
cmp byte [ebp - 0xf], 0x3a
jne 0x43326c
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_FindAtomA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x433295
cmp byte [ebp - 0xf], 0x3a
jne 0x433295
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4332cf
call edi
test eax, eax
je 0x4332bc
cmp byte [ebp - 0xf], 0x3a
jne 0x4332bc
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x4332e6
call edi
test eax, eax
je 0x4332e6
cmp byte [ebp - 0xf], 0x3a
jne 0x4332e6
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_ToAscii]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x433314
cmp byte [ebp - 0xf], 0x3a
jne 0x433314
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43334e
call edi
test eax, eax
je 0x43333b
cmp byte [ebp - 0xf], 0x3a
jne 0x43333b
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x433365
call edi
test eax, eax
je 0x433365
cmp byte [ebp - 0xf], 0x3a
jne 0x433365
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CopyIcon]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x43338e
cmp byte [ebp - 0xf], 0x3a
jne 0x43338e
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4333c8
call edi
test eax, eax
je 0x4333b5
cmp byte [ebp - 0xf], 0x3a
jne 0x4333b5
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x4333df
call edi
test eax, eax
je 0x4333df
cmp byte [ebp - 0xf], 0x3a
jne 0x4333df
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call sub.MSVCRT.dll_iswspace
pop ecx
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x433401
cmp byte [ebp - 0xf], 0x3a
jne 0x433401
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x43343b
call edi
test eax, eax
je 0x433428
cmp byte [ebp - 0xf], 0x3a
jne 0x433428
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x433452
call edi
test eax, eax
je 0x433452
cmp byte [ebp - 0xf], 0x3a
jne 0x433452
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.USER32.dll_CloseDesktop]
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x43347b
cmp byte [ebp - 0xf], 0x3a
jne 0x43347b
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4334b5
call edi
test eax, eax
je 0x4334a2
cmp byte [ebp - 0xf], 0x3a
jne 0x4334a2
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x4334cc
call edi
test eax, eax
je 0x4334cc
cmp byte [ebp - 0xf], 0x3a
jne 0x4334cc
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push ebx
call dword [sym.imp.USER32.dll_GetDC]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x4334f6
cmp byte [ebp - 0xf], 0x3a
jne 0x4334f6
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x433530
call edi
test eax, eax
je 0x43351d
cmp byte [ebp - 0xf], 0x3a
jne 0x43351d
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x433547
call edi
test eax, eax
je 0x433547
cmp byte [ebp - 0xf], 0x3a
jne 0x433547
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp - 0x10]
push eax
call esi
test eax, eax
je 0x433572
cmp byte [ebp - 0xf], 0x3a
jne 0x433572
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4335ac
call edi
test eax, eax
je 0x433599
cmp byte [ebp - 0xf], 0x3a
jne 0x433599
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x42
push eax
mov byte [ebp - 0x13], 0x3a
mov byte [ebp - 0x12], bl
call esi
jmp 0x4335c3
call edi
test eax, eax
je 0x4335c3
cmp byte [ebp - 0xf], 0x3a
jne 0x4335c3
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push ebx
push ebx
call sub.MSVCRT.dll_vprintf
pop ecx
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov esi, dword [ebp - 0x18]
mov eax, dword [0x4503d0]
push 0x7530
push dword [esi + 0x18]
call dword [eax + 0x70]
cmp eax, ebx
je 0x433700
cmp eax, 0xffffffff
je 0x433700
push 0x1fbd0
call sub.MFC42.DLL_operatornew
pop ecx
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x3f7d0]
mov dword [ebp - 0x1c], ebx
call fcn.0041f2b3
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x3f7d0]
push eax
mov dword [ebp - 4], ebx
push dword [ebp - 0x20]
call fcn.00420c57
cmp dword [ebp - 0x1c], ebx
je 0x433682
mov eax, dword [0x4503d0]
push 0xbb8
push dword [esi + 0x18]
call dword [eax + 0x70]
cmp eax, ebx
je 0x4336f1
cmp eax, 0xffffffff
je 0x4336f1
xor edi, edi
cmp dword [ebp - 0x1c], ebx
jle 0x433682
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
mov ecx, esi
call fcn.0043370f
add dword [ebp - 0x18], 0x104
inc edi
cmp edi, dword [ebp - 0x1c]
jl 0x43366b
mov eax, dword [0x4503d0]
push 0x1388
push dword [esi + 0x18]
call dword [eax + 0x70]
cmp eax, ebx
je 0x4336f1
cmp eax, 0xffffffff
je 0x4336f1
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x3f7d0]
push eax
push dword [ebp - 0x20]
call fcn.004219e5
cmp dword [ebp - 0x1c], ebx
je 0x433682
mov eax, dword [0x4503d0]
push 0xbb8
push dword [esi + 0x18]
call dword [eax + 0x70]
cmp eax, ebx
je 0x4336f1
cmp eax, 0xffffffff
je 0x4336f1
xor edi, edi
cmp dword [ebp - 0x1c], ebx
jle 0x433682
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
mov ecx, esi
call fcn.0043370f
add dword [ebp - 0x18], 0x104
inc edi
cmp edi, dword [ebp - 0x1c]
jl 0x4336d8
jmp 0x433682
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f7d0]
call fcn.0041ff95
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret