Function at 0x401000
Capabilities:
Allocate thread local storage
Create directory
Get common file path
Read file on windows
Resume thread
Set current directory
Set environment variable
Set file attributes
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x544
push ebx
lea eax, [ebp + 0x14]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
xor ebx, ebx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
jne 0x4018d7
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x138]
push eax
push 3
jne 0x40107d
call esi
test eax, eax
je 0x40105e
cmp byte [ebp - 0x137], 0x3a
jne 0x40105e
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x44c]
mov byte [ebp - 0x44c], 0x42
push eax
mov byte [ebp - 0x44b], 0x3a
mov byte [ebp - 0x44a], bl
call edi
jmp 0x40109a
call esi
test eax, eax
je 0x40109a
cmp byte [ebp - 0x137], 0x3a
jne 0x40109a
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c8]
push eax
push 3
jne 0x4010f1
call esi
test eax, eax
je 0x4010d2
cmp byte [ebp - 0x1c7], 0x3a
jne 0x4010d2
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3ac]
mov byte [ebp - 0x3ac], 0x42
push eax
mov byte [ebp - 0x3ab], 0x3a
mov byte [ebp - 0x3aa], bl
call edi
jmp 0x40110e
call esi
test eax, eax
je 0x40110e
cmp byte [ebp - 0x1c7], 0x3a
jne 0x40110e
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x130]
push eax
push 3
jne 0x401165
call esi
test eax, eax
je 0x401146
cmp byte [ebp - 0x12f], 0x3a
jne 0x401146
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x274]
mov byte [ebp - 0x274], 0x42
push eax
mov byte [ebp - 0x273], 0x3a
mov byte [ebp - 0x272], bl
call edi
jmp 0x401182
call esi
test eax, eax
je 0x401182
cmp byte [ebp - 0x12f], 0x3a
jne 0x401182
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x218]
push eax
push 3
jne 0x4011d7
call esi
test eax, eax
je 0x4011b8
cmp byte [ebp - 0x217], 0x3a
jne 0x4011b8
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x268]
mov byte [ebp - 0x268], 0x42
push eax
mov byte [ebp - 0x267], 0x3a
mov byte [ebp - 0x266], bl
call edi
jmp 0x4011f4
call esi
test eax, eax
je 0x4011f4
cmp byte [ebp - 0x217], 0x3a
jne 0x4011f4
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x124]
push eax
push 3
jne 0x40124a
call esi
test eax, eax
je 0x40122b
cmp byte [ebp - 0x123], 0x3a
jne 0x40122b
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x27c]
mov byte [ebp - 0x27c], 0x42
push eax
mov byte [ebp - 0x27b], 0x3a
mov byte [ebp - 0x27a], bl
call edi
jmp 0x401267
call esi
test eax, eax
je 0x401267
cmp byte [ebp - 0x123], 0x3a
jne 0x401267
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d0]
push eax
push 3
jne 0x4012be
call esi
test eax, eax
je 0x40129f
cmp byte [ebp - 0x1cf], 0x3a
jne 0x40129f
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b4]
mov byte [ebp - 0x3b4], 0x42
push eax
mov byte [ebp - 0x3b3], 0x3a
mov byte [ebp - 0x3b2], bl
call edi
jmp 0x4012db
call esi
test eax, eax
je 0x4012db
cmp byte [ebp - 0x1cf], 0x3a
jne 0x4012db
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x140]
push eax
push 3
jne 0x401333
call esi
test eax, eax
je 0x401314
cmp byte [ebp - 0x13f], 0x3a
jne 0x401314
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x284]
mov byte [ebp - 0x284], 0x42
push eax
mov byte [ebp - 0x283], 0x3a
mov byte [ebp - 0x282], bl
call edi
jmp 0x401350
call esi
test eax, eax
je 0x401350
cmp byte [ebp - 0x13f], 0x3a
jne 0x401350
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x240]
push eax
push 3
jne 0x4013a8
call esi
test eax, eax
je 0x401389
cmp byte [ebp - 0x23f], 0x3a
jne 0x401389
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x49c]
mov byte [ebp - 0x49c], 0x42
push eax
mov byte [ebp - 0x49b], 0x3a
mov byte [ebp - 0x49a], bl
call edi
jmp 0x4013c5
call esi
test eax, eax
je 0x4013c5
cmp byte [ebp - 0x23f], 0x3a
jne 0x4013c5
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x148]
push eax
push 3
jne 0x40141b
call esi
test eax, eax
je 0x4013fc
cmp byte [ebp - 0x147], 0x3a
jne 0x4013fc
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x28c]
mov byte [ebp - 0x28c], 0x42
push eax
mov byte [ebp - 0x28b], 0x3a
mov byte [ebp - 0x28a], bl
call edi
jmp 0x401438
call esi
test eax, eax
je 0x401438
cmp byte [ebp - 0x147], 0x3a
jne 0x401438
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x94]
push eax
push 3
jne 0x4014b6
call esi
test eax, eax
je 0x401471
cmp byte [ebp - 0x93], 0x3a
jne 0x401471
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x94]
push eax
push 3
call esi
test eax, eax
je 0x401497
cmp byte [ebp - 0x93], 0x3a
jne 0x401497
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3bc]
mov byte [ebp - 0x3bc], 0x42
push eax
mov byte [ebp - 0x3bb], 0x3a
mov byte [ebp - 0x3ba], bl
call edi
jmp 0x4014d3
call esi
test eax, eax
je 0x4014d3
cmp byte [ebp - 0x93], 0x3a
jne 0x4014d3
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc]
push eax
push 3
jne 0x40153f
call esi
test eax, eax
je 0x401503
cmp byte [ebp - 0xb], 0x3a
jne 0x401503
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xc]
push eax
push 3
call esi
test eax, eax
je 0x401520
cmp byte [ebp - 0xb], 0x3a
jne 0x401520
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x294]
mov byte [ebp - 0x294], 0x42
push eax
mov byte [ebp - 0x293], 0x3a
mov byte [ebp - 0x292], bl
call edi
jmp 0x401556
call esi
test eax, eax
je 0x401556
cmp byte [ebp - 0xb], 0x3a
jne 0x401556
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xdc]
push eax
push 3
jne 0x4015d4
call esi
test eax, eax
je 0x40158f
cmp byte [ebp - 0xdb], 0x3a
jne 0x40158f
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xdc]
push eax
push 3
call esi
test eax, eax
je 0x4015b5
cmp byte [ebp - 0xdb], 0x3a
jne 0x4015b5
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x454]
mov byte [ebp - 0x454], 0x42
push eax
mov byte [ebp - 0x453], 0x3a
mov byte [ebp - 0x452], bl
call edi
jmp 0x4015f1
call esi
test eax, eax
je 0x4015f1
cmp byte [ebp - 0xdb], 0x3a
jne 0x4015f1
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14]
push eax
push 3
jne 0x40165d
call esi
test eax, eax
je 0x401621
cmp byte [ebp - 0x13], 0x3a
jne 0x401621
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x14]
push eax
push 3
call esi
test eax, eax
je 0x40163e
cmp byte [ebp - 0x13], 0x3a
jne 0x40163e
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x29c]
mov byte [ebp - 0x29c], 0x42
push eax
mov byte [ebp - 0x29b], 0x3a
mov byte [ebp - 0x29a], bl
call edi
jmp 0x401674
call esi
test eax, eax
je 0x401674
cmp byte [ebp - 0x13], 0x3a
jne 0x401674
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x9c]
push eax
push 3
jne 0x4016f0
call esi
test eax, eax
je 0x4016ab
cmp byte [ebp - 0x9b], 0x3a
jne 0x4016ab
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x9c]
push eax
push 3
call esi
test eax, eax
je 0x4016d1
cmp byte [ebp - 0x9b], 0x3a
jne 0x4016d1
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c4]
mov byte [ebp - 0x3c4], 0x42
push eax
mov byte [ebp - 0x3c3], 0x3a
mov byte [ebp - 0x3c2], bl
call edi
jmp 0x40170d
call esi
test eax, eax
je 0x40170d
cmp byte [ebp - 0x9b], 0x3a
jne 0x40170d
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c]
push eax
push 3
jne 0x40177a
call esi
test eax, eax
je 0x40173e
cmp byte [ebp - 0x1b], 0x3a
jne 0x40173e
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x1c]
push eax
push 3
call esi
test eax, eax
je 0x40175b
cmp byte [ebp - 0x1b], 0x3a
jne 0x40175b
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2a4]
mov byte [ebp - 0x2a4], 0x42
push eax
mov byte [ebp - 0x2a3], 0x3a
mov byte [ebp - 0x2a2], bl
call edi
jmp 0x401791
call esi
test eax, eax
je 0x401791
cmp byte [ebp - 0x1b], 0x3a
jne 0x401791
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x11c]
push eax
push 3
jne 0x40180e
call esi
test eax, eax
je 0x4017c9
cmp byte [ebp - 0x11b], 0x3a
jne 0x4017c9
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x11c]
push eax
push 3
call esi
test eax, eax
je 0x4017ef
cmp byte [ebp - 0x11b], 0x3a
jne 0x4017ef
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b8]
mov byte [ebp - 0x4b8], 0x42
push eax
mov byte [ebp - 0x4b7], 0x3a
mov byte [ebp - 0x4b6], bl
call edi
jmp 0x40182b
call esi
test eax, eax
je 0x40182b
cmp byte [ebp - 0x11b], 0x3a
jne 0x40182b
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24]
push eax
push 3
jne 0x4018c0
call esi
test eax, eax
je 0x401884
cmp byte [ebp - 0x23], 0x3a
jne 0x401884
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x24]
push eax
push 3
call esi
test eax, eax
je 0x4018a1
cmp byte [ebp - 0x23], 0x3a
jne 0x4018a1
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2ac]
mov byte [ebp - 0x2ac], 0x42
push eax
mov byte [ebp - 0x2ab], 0x3a
mov byte [ebp - 0x2aa], bl
call edi
jmp 0x4018d7
call esi
test eax, eax
je 0x4018d7
cmp byte [ebp - 0x23], 0x3a
jne 0x4018d7
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0x220
call sub.MFC42.DLL_operatornew
cmp eax, ebx
pop ecx
je 0x4018ef
mov ecx, eax
call fcn.0040e3f5
jmp 0x4018f1
xor eax, eax
lea ecx, [ebp - 0x4e4]
mov dword [0x43c3d0], eax
call fcn.0041128e
lea ecx, [ebp - 0x4d8]
call fcn.004200b8
lea ecx, [ebp - 0x4d8]
call fcn.004200ed
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4021d4
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d8]
push eax
push 3
jne 0x40197a
call esi
test eax, eax
je 0x40195b
cmp byte [ebp - 0x1d7], 0x3a
jne 0x40195b
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3cc]
mov byte [ebp - 0x3cc], 0x42
push eax
mov byte [ebp - 0x3cb], 0x3a
mov byte [ebp - 0x3ca], bl
call edi
jmp 0x401997
call esi
test eax, eax
je 0x401997
cmp byte [ebp - 0x1d7], 0x3a
jne 0x401997
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x150]
push eax
push 3
jne 0x4019ee
call esi
test eax, eax
je 0x4019cf
cmp byte [ebp - 0x14f], 0x3a
jne 0x4019cf
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2b4]
mov byte [ebp - 0x2b4], 0x42
push eax
mov byte [ebp - 0x2b3], 0x3a
mov byte [ebp - 0x2b2], bl
call edi
jmp 0x401a0b
call esi
test eax, eax
je 0x401a0b
cmp byte [ebp - 0x14f], 0x3a
jne 0x401a0b
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x220]
push eax
push 3
jne 0x401a62
call esi
test eax, eax
je 0x401a43
cmp byte [ebp - 0x21f], 0x3a
jne 0x401a43
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x45c]
mov byte [ebp - 0x45c], 0x42
push eax
mov byte [ebp - 0x45b], 0x3a
mov byte [ebp - 0x45a], bl
call edi
jmp 0x401a7f
call esi
test eax, eax
je 0x401a7f
cmp byte [ebp - 0x21f], 0x3a
jne 0x401a7f
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x158]
push eax
push 3
jne 0x401ad4
call esi
test eax, eax
je 0x401ab5
cmp byte [ebp - 0x157], 0x3a
jne 0x401ab5
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2bc]
mov byte [ebp - 0x2bc], 0x42
push eax
mov byte [ebp - 0x2bb], 0x3a
mov byte [ebp - 0x2ba], bl
call edi
jmp 0x401af1
call esi
test eax, eax
je 0x401af1
cmp byte [ebp - 0x157], 0x3a
jne 0x401af1
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e0]
push eax
push 3
jne 0x401b47
call esi
test eax, eax
je 0x401b28
cmp byte [ebp - 0x1df], 0x3a
jne 0x401b28
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d4]
mov byte [ebp - 0x3d4], 0x42
push eax
mov byte [ebp - 0x3d3], 0x3a
mov byte [ebp - 0x3d2], bl
call edi
jmp 0x401b64
call esi
test eax, eax
je 0x401b64
cmp byte [ebp - 0x1df], 0x3a
jne 0x401b64
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x160]
push eax
push 3
jne 0x401bbb
call esi
test eax, eax
je 0x401b9c
cmp byte [ebp - 0x15f], 0x3a
jne 0x401b9c
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2c4]
mov byte [ebp - 0x2c4], 0x42
push eax
mov byte [ebp - 0x2c3], 0x3a
mov byte [ebp - 0x2c2], bl
call edi
jmp 0x401bd8
call esi
test eax, eax
je 0x401bd8
cmp byte [ebp - 0x15f], 0x3a
jne 0x401bd8
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x260]
push eax
push 3
jne 0x401c30
call esi
test eax, eax
je 0x401c11
cmp byte [ebp - 0x25f], 0x3a
jne 0x401c11
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a4]
mov byte [ebp - 0x4a4], 0x42
push eax
mov byte [ebp - 0x4a3], 0x3a
mov byte [ebp - 0x4a2], bl
call edi
jmp 0x401c4d
call esi
test eax, eax
je 0x401c4d
cmp byte [ebp - 0x25f], 0x3a
jne 0x401c4d
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x168]
push eax
push 3
jne 0x401ca5
call esi
test eax, eax
je 0x401c86
cmp byte [ebp - 0x167], 0x3a
jne 0x401c86
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2cc]
mov byte [ebp - 0x2cc], 0x42
push eax
mov byte [ebp - 0x2cb], 0x3a
mov byte [ebp - 0x2ca], bl
call edi
jmp 0x401cc2
call esi
test eax, eax
je 0x401cc2
cmp byte [ebp - 0x167], 0x3a
jne 0x401cc2
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e8]
push eax
push 3
jne 0x401d18
call esi
test eax, eax
je 0x401cf9
cmp byte [ebp - 0x1e7], 0x3a
jne 0x401cf9
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3dc]
mov byte [ebp - 0x3dc], 0x42
push eax
mov byte [ebp - 0x3db], 0x3a
mov byte [ebp - 0x3da], bl
call edi
jmp 0x401d35
call esi
test eax, eax
je 0x401d35
cmp byte [ebp - 0x1e7], 0x3a
jne 0x401d35
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa4]
push eax
push 3
jne 0x401db3
call esi
test eax, eax
je 0x401d6e
cmp byte [ebp - 0xa3], 0x3a
jne 0x401d6e
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xa4]
push eax
push 3
call esi
test eax, eax
je 0x401d94
cmp byte [ebp - 0xa3], 0x3a
jne 0x401d94
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2d4]
mov byte [ebp - 0x2d4], 0x42
push eax
mov byte [ebp - 0x2d3], 0x3a
mov byte [ebp - 0x2d2], bl
call edi
jmp 0x401dd0
call esi
test eax, eax
je 0x401dd0
cmp byte [ebp - 0xa3], 0x3a
jne 0x401dd0
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c]
push eax
push 3
jne 0x401e3c
call esi
test eax, eax
je 0x401e00
cmp byte [ebp - 0x2b], 0x3a
jne 0x401e00
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2c]
push eax
push 3
call esi
test eax, eax
je 0x401e1d
cmp byte [ebp - 0x2b], 0x3a
jne 0x401e1d
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x464]
mov byte [ebp - 0x464], 0x42
push eax
mov byte [ebp - 0x463], 0x3a
mov byte [ebp - 0x462], bl
call edi
jmp 0x401e53
call esi
test eax, eax
je 0x401e53
cmp byte [ebp - 0x2b], 0x3a
jne 0x401e53
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe4]
push eax
push 3
jne 0x401ed1
call esi
test eax, eax
je 0x401e8c
cmp byte [ebp - 0xe3], 0x3a
jne 0x401e8c
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xe4]
push eax
push 3
call esi
test eax, eax
je 0x401eb2
cmp byte [ebp - 0xe3], 0x3a
jne 0x401eb2
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2dc]
mov byte [ebp - 0x2dc], 0x42
push eax
mov byte [ebp - 0x2db], 0x3a
mov byte [ebp - 0x2da], bl
call edi
jmp 0x401eee
call esi
test eax, eax
je 0x401eee
cmp byte [ebp - 0xe3], 0x3a
jne 0x401eee
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34]
push eax
push 3
jne 0x401f5a
call esi
test eax, eax
je 0x401f1e
cmp byte [ebp - 0x33], 0x3a
jne 0x401f1e
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x34]
push eax
push 3
call esi
test eax, eax
je 0x401f3b
cmp byte [ebp - 0x33], 0x3a
jne 0x401f3b
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e4]
mov byte [ebp - 0x3e4], 0x42
push eax
mov byte [ebp - 0x3e3], 0x3a
mov byte [ebp - 0x3e2], bl
call edi
jmp 0x401f71
call esi
test eax, eax
je 0x401f71
cmp byte [ebp - 0x33], 0x3a
jne 0x401f71
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xac]
push eax
push 3
jne 0x401fed
call esi
test eax, eax
je 0x401fa8
cmp byte [ebp - 0xab], 0x3a
jne 0x401fa8
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xac]
push eax
push 3
call esi
test eax, eax
je 0x401fce
cmp byte [ebp - 0xab], 0x3a
jne 0x401fce
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2e4]
mov byte [ebp - 0x2e4], 0x42
push eax
mov byte [ebp - 0x2e3], 0x3a
mov byte [ebp - 0x2e2], bl
call edi
jmp 0x40200a
call esi
test eax, eax
je 0x40200a
cmp byte [ebp - 0xab], 0x3a
jne 0x40200a
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c]
push eax
push 3
jne 0x402077
call esi
test eax, eax
je 0x40203b
cmp byte [ebp - 0x3b], 0x3a
jne 0x40203b
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c]
push eax
push 3
call esi
test eax, eax
je 0x402058
cmp byte [ebp - 0x3b], 0x3a
jne 0x402058
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c0]
mov byte [ebp - 0x4c0], 0x42
push eax
mov byte [ebp - 0x4bf], 0x3a
mov byte [ebp - 0x4be], bl
call edi
jmp 0x40208e
call esi
test eax, eax
je 0x40208e
cmp byte [ebp - 0x3b], 0x3a
jne 0x40208e
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x104]
push eax
push 3
jne 0x40210b
call esi
test eax, eax
je 0x4020c6
cmp byte [ebp - 0x103], 0x3a
jne 0x4020c6
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x104]
push eax
push 3
call esi
test eax, eax
je 0x4020ec
cmp byte [ebp - 0x103], 0x3a
jne 0x4020ec
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2ec]
mov byte [ebp - 0x2ec], 0x42
push eax
mov byte [ebp - 0x2eb], 0x3a
mov byte [ebp - 0x2ea], bl
call edi
jmp 0x402128
call esi
test eax, eax
je 0x402128
cmp byte [ebp - 0x103], 0x3a
jne 0x402128
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x44]
push eax
push 3
jne 0x4021bd
call esi
test eax, eax
je 0x402181
cmp byte [ebp - 0x43], 0x3a
jne 0x402181
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x44]
push eax
push 3
call esi
test eax, eax
je 0x40219e
cmp byte [ebp - 0x43], 0x3a
jne 0x40219e
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3ec]
mov byte [ebp - 0x3ec], 0x42
push eax
mov byte [ebp - 0x3eb], 0x3a
mov byte [ebp - 0x3ea], bl
call edi
jmp 0x4021d4
call esi
test eax, eax
je 0x4021d4
cmp byte [ebp - 0x43], 0x3a
jne 0x4021d4
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x4d0]
call fcn.0041136d
lea ecx, [ebp - 0x4d0]
call fcn.004121e6
test eax, eax
je 0x4033fd
lea eax, [ebp + 0x14]
test eax, eax
jne 0x402aaf
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x170]
push eax
push 3
jne 0x402255
call esi
test eax, eax
je 0x402236
cmp byte [ebp - 0x16f], 0x3a
jne 0x402236
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2f4]
mov byte [ebp - 0x2f4], 0x42
push eax
mov byte [ebp - 0x2f3], 0x3a
mov byte [ebp - 0x2f2], bl
call edi
jmp 0x402272
call esi
test eax, eax
je 0x402272
cmp byte [ebp - 0x16f], 0x3a
jne 0x402272
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x228]
push eax
push 3
jne 0x4022c9
call esi
test eax, eax
je 0x4022aa
cmp byte [ebp - 0x227], 0x3a
jne 0x4022aa
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x46c]
mov byte [ebp - 0x46c], 0x42
push eax
mov byte [ebp - 0x46b], 0x3a
mov byte [ebp - 0x46a], bl
call edi
jmp 0x4022e6
call esi
test eax, eax
je 0x4022e6
cmp byte [ebp - 0x227], 0x3a
jne 0x4022e6
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x178]
push eax
push 3
jne 0x40233d
call esi
test eax, eax
je 0x40231e
cmp byte [ebp - 0x177], 0x3a
jne 0x40231e
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2fc]
mov byte [ebp - 0x2fc], 0x42
push eax
mov byte [ebp - 0x2fb], 0x3a
mov byte [ebp - 0x2fa], bl
call edi
jmp 0x40235a
call esi
test eax, eax
je 0x40235a
cmp byte [ebp - 0x177], 0x3a
jne 0x40235a
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f0]
push eax
push 3
jne 0x4023af
call esi
test eax, eax
je 0x402390
cmp byte [ebp - 0x1ef], 0x3a
jne 0x402390
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f4]
mov byte [ebp - 0x3f4], 0x42
push eax
mov byte [ebp - 0x3f3], 0x3a
mov byte [ebp - 0x3f2], bl
call edi
jmp 0x4023cc
call esi
test eax, eax
je 0x4023cc
cmp byte [ebp - 0x1ef], 0x3a
jne 0x4023cc
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x180]
push eax
push 3
jne 0x402422
call esi
test eax, eax
je 0x402403
cmp byte [ebp - 0x17f], 0x3a
jne 0x402403
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x304]
mov byte [ebp - 0x304], 0x42
push eax
mov byte [ebp - 0x303], 0x3a
mov byte [ebp - 0x302], bl
call edi
jmp 0x40243f
call esi
test eax, eax
je 0x40243f
cmp byte [ebp - 0x17f], 0x3a
jne 0x40243f
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x248]
push eax
push 3
jne 0x402496
call esi
test eax, eax
je 0x402477
cmp byte [ebp - 0x247], 0x3a
jne 0x402477
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4ac]
mov byte [ebp - 0x4ac], 0x42
push eax
mov byte [ebp - 0x4ab], 0x3a
mov byte [ebp - 0x4aa], bl
call edi
jmp 0x4024b3
call esi
test eax, eax
je 0x4024b3
cmp byte [ebp - 0x247], 0x3a
jne 0x4024b3
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x188]
push eax
push 3
jne 0x40250b
call esi
test eax, eax
je 0x4024ec
cmp byte [ebp - 0x187], 0x3a
jne 0x4024ec
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x30c]
mov byte [ebp - 0x30c], 0x42
push eax
mov byte [ebp - 0x30b], 0x3a
mov byte [ebp - 0x30a], bl
call edi
jmp 0x402528
call esi
test eax, eax
je 0x402528
cmp byte [ebp - 0x187], 0x3a
jne 0x402528
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f8]
push eax
push 3
jne 0x402580
call esi
test eax, eax
je 0x402561
cmp byte [ebp - 0x1f7], 0x3a
jne 0x402561
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3fc]
mov byte [ebp - 0x3fc], 0x42
push eax
mov byte [ebp - 0x3fb], 0x3a
mov byte [ebp - 0x3fa], bl
call edi
jmp 0x40259d
call esi
test eax, eax
je 0x40259d
cmp byte [ebp - 0x1f7], 0x3a
jne 0x40259d
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x190]
push eax
push 3
jne 0x4025f3
call esi
test eax, eax
je 0x4025d4
cmp byte [ebp - 0x18f], 0x3a
jne 0x4025d4
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x314]
mov byte [ebp - 0x314], 0x42
push eax
mov byte [ebp - 0x313], 0x3a
mov byte [ebp - 0x312], bl
call edi
jmp 0x402610
call esi
test eax, eax
je 0x402610
cmp byte [ebp - 0x18f], 0x3a
jne 0x402610
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb4]
push eax
push 3
jne 0x40268e
call esi
test eax, eax
je 0x402649
cmp byte [ebp - 0xb3], 0x3a
jne 0x402649
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xb4]
push eax
push 3
call esi
test eax, eax
je 0x40266f
cmp byte [ebp - 0xb3], 0x3a
jne 0x40266f
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x474]
mov byte [ebp - 0x474], 0x42
push eax
mov byte [ebp - 0x473], 0x3a
mov byte [ebp - 0x472], bl
call edi
jmp 0x4026ab
call esi
test eax, eax
je 0x4026ab
cmp byte [ebp - 0xb3], 0x3a
jne 0x4026ab
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x4c]
push eax
push 3
jne 0x402717
call esi
test eax, eax
je 0x4026db
cmp byte [ebp - 0x4b], 0x3a
jne 0x4026db
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c]
push eax
push 3
call esi
test eax, eax
je 0x4026f8
cmp byte [ebp - 0x4b], 0x3a
jne 0x4026f8
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x31c]
mov byte [ebp - 0x31c], 0x42
push eax
mov byte [ebp - 0x31b], 0x3a
mov byte [ebp - 0x31a], bl
call edi
jmp 0x40272e
call esi
test eax, eax
je 0x40272e
cmp byte [ebp - 0x4b], 0x3a
jne 0x40272e
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xec]
push eax
push 3
jne 0x4027ac
call esi
test eax, eax
je 0x402767
cmp byte [ebp - 0xeb], 0x3a
jne 0x402767
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xec]
push eax
push 3
call esi
test eax, eax
je 0x40278d
cmp byte [ebp - 0xeb], 0x3a
jne 0x40278d
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], 0x42
push eax
mov byte [ebp - 0x403], 0x3a
mov byte [ebp - 0x402], bl
call edi
jmp 0x4027c9
call esi
test eax, eax
je 0x4027c9
cmp byte [ebp - 0xeb], 0x3a
jne 0x4027c9
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x54]
push eax
push 3
jne 0x402835
call esi
test eax, eax
je 0x4027f9
cmp byte [ebp - 0x53], 0x3a
jne 0x4027f9
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x54]
push eax
push 3
call esi
test eax, eax
je 0x402816
cmp byte [ebp - 0x53], 0x3a
jne 0x402816
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x324]
mov byte [ebp - 0x324], 0x42
push eax
mov byte [ebp - 0x323], 0x3a
mov byte [ebp - 0x322], bl
call edi
jmp 0x40284c
call esi
test eax, eax
je 0x40284c
cmp byte [ebp - 0x53], 0x3a
jne 0x40284c
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xbc]
push eax
push 3
jne 0x4028c8
call esi
test eax, eax
je 0x402883
cmp byte [ebp - 0xbb], 0x3a
jne 0x402883
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xbc]
push eax
push 3
call esi
test eax, eax
je 0x4028a9
cmp byte [ebp - 0xbb], 0x3a
jne 0x4028a9
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c8]
mov byte [ebp - 0x4c8], 0x42
push eax
mov byte [ebp - 0x4c7], 0x3a
mov byte [ebp - 0x4c6], bl
call edi
jmp 0x4028e5
call esi
test eax, eax
je 0x4028e5
cmp byte [ebp - 0xbb], 0x3a
jne 0x4028e5
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x5c]
push eax
push 3
jne 0x402952
call esi
test eax, eax
je 0x402916
cmp byte [ebp - 0x5b], 0x3a
jne 0x402916
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c]
push eax
push 3
call esi
test eax, eax
je 0x402933
cmp byte [ebp - 0x5b], 0x3a
jne 0x402933
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x32c]
mov byte [ebp - 0x32c], 0x42
push eax
mov byte [ebp - 0x32b], 0x3a
mov byte [ebp - 0x32a], bl
call edi
jmp 0x402969
call esi
test eax, eax
je 0x402969
cmp byte [ebp - 0x5b], 0x3a
jne 0x402969
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x114]
push eax
push 3
jne 0x4029e6
call esi
test eax, eax
je 0x4029a1
cmp byte [ebp - 0x113], 0x3a
jne 0x4029a1
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x114]
push eax
push 3
call esi
test eax, eax
je 0x4029c7
cmp byte [ebp - 0x113], 0x3a
jne 0x4029c7
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x40c]
mov byte [ebp - 0x40c], 0x42
push eax
mov byte [ebp - 0x40b], 0x3a
mov byte [ebp - 0x40a], bl
call edi
jmp 0x402a03
call esi
test eax, eax
je 0x402a03
cmp byte [ebp - 0x113], 0x3a
jne 0x402a03
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x64]
push eax
push 3
jne 0x402a98
call esi
test eax, eax
je 0x402a5c
cmp byte [ebp - 0x63], 0x3a
jne 0x402a5c
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x64]
push eax
push 3
call esi
test eax, eax
je 0x402a79
cmp byte [ebp - 0x63], 0x3a
jne 0x402a79
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x334]
mov byte [ebp - 0x334], 0x42
push eax
mov byte [ebp - 0x333], 0x3a
mov byte [ebp - 0x332], bl
call edi
jmp 0x402aaf
call esi
test eax, eax
je 0x402aaf
cmp byte [ebp - 0x63], 0x3a
jne 0x402aaf
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x4d0]
push dword [ebp + 0x10]
call fcn.0041295b
lea ecx, [ebp - 0x4d4]
call fcn.0040bd0e
lea ecx, [ebp - 0x4d4]
call fcn.0040cb87
test eax, eax
jne 0x4033f2
lea ecx, [ebp - 0x4e4]
call fcn.00411369
test eax, eax
jne 0x4033f2
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4033c6
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x230]
push eax
push 3
jne 0x402b54
call esi
test eax, eax
je 0x402b35
cmp byte [ebp - 0x22f], 0x3a
jne 0x402b35
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x47c]
mov byte [ebp - 0x47c], 0x42
push eax
mov byte [ebp - 0x47b], 0x3a
mov byte [ebp - 0x47a], bl
call edi
jmp 0x402b71
call esi
test eax, eax
je 0x402b71
cmp byte [ebp - 0x22f], 0x3a
jne 0x402b71
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x198]
push eax
push 3
jne 0x402bc8
call esi
test eax, eax
je 0x402ba9
cmp byte [ebp - 0x197], 0x3a
jne 0x402ba9
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x33c]
mov byte [ebp - 0x33c], 0x42
push eax
mov byte [ebp - 0x33b], 0x3a
mov byte [ebp - 0x33a], bl
call edi
jmp 0x402be5
call esi
test eax, eax
je 0x402be5
cmp byte [ebp - 0x197], 0x3a
jne 0x402be5
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x200]
push eax
push 3
jne 0x402c3c
call esi
test eax, eax
je 0x402c1d
cmp byte [ebp - 0x1ff], 0x3a
jne 0x402c1d
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x414]
mov byte [ebp - 0x414], 0x42
push eax
mov byte [ebp - 0x413], 0x3a
mov byte [ebp - 0x412], bl
call edi
jmp 0x402c59
call esi
test eax, eax
je 0x402c59
cmp byte [ebp - 0x1ff], 0x3a
jne 0x402c59
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a0]
push eax
push 3
jne 0x402cae
call esi
test eax, eax
je 0x402c8f
cmp byte [ebp - 0x19f], 0x3a
jne 0x402c8f
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x344]
mov byte [ebp - 0x344], 0x42
push eax
mov byte [ebp - 0x343], 0x3a
mov byte [ebp - 0x342], bl
call edi
jmp 0x402ccb
call esi
test eax, eax
je 0x402ccb
cmp byte [ebp - 0x19f], 0x3a
jne 0x402ccb
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x258]
push eax
push 3
jne 0x402d21
call esi
test eax, eax
je 0x402d02
cmp byte [ebp - 0x257], 0x3a
jne 0x402d02
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b4]
mov byte [ebp - 0x4b4], 0x42
push eax
mov byte [ebp - 0x4b3], 0x3a
mov byte [ebp - 0x4b2], bl
call edi
jmp 0x402d3e
call esi
test eax, eax
je 0x402d3e
cmp byte [ebp - 0x257], 0x3a
jne 0x402d3e
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a8]
push eax
push 3
jne 0x402d95
call esi
test eax, eax
je 0x402d76
cmp byte [ebp - 0x1a7], 0x3a
jne 0x402d76
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x34c]
mov byte [ebp - 0x34c], 0x42
push eax
mov byte [ebp - 0x34b], 0x3a
mov byte [ebp - 0x34a], bl
call edi
jmp 0x402db2
call esi
test eax, eax
je 0x402db2
cmp byte [ebp - 0x1a7], 0x3a
jne 0x402db2
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x208]
push eax
push 3
jne 0x402e0a
call esi
test eax, eax
je 0x402deb
cmp byte [ebp - 0x207], 0x3a
jne 0x402deb
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x41c]
mov byte [ebp - 0x41c], 0x42
push eax
mov byte [ebp - 0x41b], 0x3a
mov byte [ebp - 0x41a], bl
call edi
jmp 0x402e27
call esi
test eax, eax
je 0x402e27
cmp byte [ebp - 0x207], 0x3a
jne 0x402e27
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b0]
push eax
push 3
jne 0x402e7f
call esi
test eax, eax
je 0x402e60
cmp byte [ebp - 0x1af], 0x3a
jne 0x402e60
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x354]
mov byte [ebp - 0x354], 0x42
push eax
mov byte [ebp - 0x353], 0x3a
mov byte [ebp - 0x352], bl
call edi
jmp 0x402e9c
call esi
test eax, eax
je 0x402e9c
cmp byte [ebp - 0x1af], 0x3a
jne 0x402e9c
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x238]
push eax
push 3
jne 0x402ef2
call esi
test eax, eax
je 0x402ed3
cmp byte [ebp - 0x237], 0x3a
jne 0x402ed3
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x484]
mov byte [ebp - 0x484], 0x42
push eax
mov byte [ebp - 0x483], 0x3a
mov byte [ebp - 0x482], bl
call edi
jmp 0x402f0f
call esi
test eax, eax
je 0x402f0f
cmp byte [ebp - 0x237], 0x3a
jne 0x402f0f
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc4]
push eax
push 3
jne 0x402f8d
call esi
test eax, eax
je 0x402f48
cmp byte [ebp - 0xc3], 0x3a
jne 0x402f48
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xc4]
push eax
push 3
call esi
test eax, eax
je 0x402f6e
cmp byte [ebp - 0xc3], 0x3a
jne 0x402f6e
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x35c]
mov byte [ebp - 0x35c], 0x42
push eax
mov byte [ebp - 0x35b], 0x3a
mov byte [ebp - 0x35a], bl
call edi
jmp 0x402faa
call esi
test eax, eax
je 0x402faa
cmp byte [ebp - 0xc3], 0x3a
jne 0x402faa
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x6c]
push eax
push 3
jne 0x403016
call esi
test eax, eax
je 0x402fda
cmp byte [ebp - 0x6b], 0x3a
jne 0x402fda
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c]
push eax
push 3
call esi
test eax, eax
je 0x402ff7
cmp byte [ebp - 0x6b], 0x3a
jne 0x402ff7
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x424]
mov byte [ebp - 0x424], 0x42
push eax
mov byte [ebp - 0x423], 0x3a
mov byte [ebp - 0x422], bl
call edi
jmp 0x40302d
call esi
test eax, eax
je 0x40302d
cmp byte [ebp - 0x6b], 0x3a
jne 0x40302d
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf4]
push eax
push 3
jne 0x4030ab
call esi
test eax, eax
je 0x403066
cmp byte [ebp - 0xf3], 0x3a
jne 0x403066
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xf4]
push eax
push 3
call esi
test eax, eax
je 0x40308c
cmp byte [ebp - 0xf3], 0x3a
jne 0x40308c
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x364]
mov byte [ebp - 0x364], 0x42
push eax
mov byte [ebp - 0x363], 0x3a
mov byte [ebp - 0x362], bl
call edi
jmp 0x4030c8
call esi
test eax, eax
je 0x4030c8
cmp byte [ebp - 0xf3], 0x3a
jne 0x4030c8
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x74]
push eax
push 3
jne 0x403134
call esi
test eax, eax
je 0x4030f8
cmp byte [ebp - 0x73], 0x3a
jne 0x4030f8
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x74]
push eax
push 3
call esi
test eax, eax
je 0x403115
cmp byte [ebp - 0x73], 0x3a
jne 0x403115
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c4]
mov byte [ebp - 0x4c4], 0x42
push eax
mov byte [ebp - 0x4c3], 0x3a
mov byte [ebp - 0x4c2], bl
call edi
jmp 0x40314b
call esi
test eax, eax
je 0x40314b
cmp byte [ebp - 0x73], 0x3a
jne 0x40314b
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xcc]
push eax
push 3
jne 0x4031c7
call esi
test eax, eax
je 0x403182
cmp byte [ebp - 0xcb], 0x3a
jne 0x403182
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xcc]
push eax
push 3
call esi
test eax, eax
je 0x4031a8
cmp byte [ebp - 0xcb], 0x3a
jne 0x4031a8
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x36c]
mov byte [ebp - 0x36c], 0x42
push eax
mov byte [ebp - 0x36b], 0x3a
mov byte [ebp - 0x36a], bl
call edi
jmp 0x4031e4
call esi
test eax, eax
je 0x4031e4
cmp byte [ebp - 0xcb], 0x3a
jne 0x4031e4
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x7c]
push eax
push 3
jne 0x403251
call esi
test eax, eax
je 0x403215
cmp byte [ebp - 0x7b], 0x3a
jne 0x403215
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x7c]
push eax
push 3
call esi
test eax, eax
je 0x403232
cmp byte [ebp - 0x7b], 0x3a
jne 0x403232
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x42c]
mov byte [ebp - 0x42c], 0x42
push eax
mov byte [ebp - 0x42b], 0x3a
mov byte [ebp - 0x42a], bl
call edi
jmp 0x403268
call esi
test eax, eax
je 0x403268
cmp byte [ebp - 0x7b], 0x3a
jne 0x403268
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10c]
push eax
push 3
jne 0x4032e5
call esi
test eax, eax
je 0x4032a0
cmp byte [ebp - 0x10b], 0x3a
jne 0x4032a0
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x10c]
push eax
push 3
call esi
test eax, eax
je 0x4032c6
cmp byte [ebp - 0x10b], 0x3a
jne 0x4032c6
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x374]
mov byte [ebp - 0x374], 0x42
push eax
mov byte [ebp - 0x373], 0x3a
mov byte [ebp - 0x372], bl
call edi
jmp 0x403302
call esi
test eax, eax
je 0x403302
cmp byte [ebp - 0x10b], 0x3a
jne 0x403302
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x84]
push eax
push 3
jne 0x4033a9
call esi
test eax, eax
je 0x403364
cmp byte [ebp - 0x83], 0x3a
jne 0x403364
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x84]
push eax
push 3
call esi
test eax, eax
je 0x40338a
cmp byte [ebp - 0x83], 0x3a
jne 0x40338a
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x48c]
mov byte [ebp - 0x48c], 0x42
push eax
mov byte [ebp - 0x48b], 0x3a
mov byte [ebp - 0x48a], bl
call edi
jmp 0x4033c6
call esi
test eax, eax
je 0x4033c6
cmp byte [ebp - 0x83], 0x3a
jne 0x4033c6
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x524]
call fcn.0041b15e
lea ecx, [ebp - 0x524]
call fcn.0041c0f9
lea ecx, [ebp - 0x524]
call fcn.0041c83d
lea ecx, [ebp - 0x524]
call fcn.0041b940
lea ecx, [ebp - 0x4d4]
jmp 0x40579a
lea eax, [ebp + 0x14]
test eax, eax
jne 0x403ca2
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b8]
push eax
push 3
jne 0x403460
call esi
test eax, eax
je 0x403441
cmp byte [ebp - 0x1b7], 0x3a
jne 0x403441
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x37c]
mov byte [ebp - 0x37c], 0x42
push eax
mov byte [ebp - 0x37b], 0x3a
mov byte [ebp - 0x37a], bl
call edi
jmp 0x40347d
call esi
test eax, eax
je 0x40347d
cmp byte [ebp - 0x1b7], 0x3a
jne 0x40347d
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x210]
push eax
push 3
jne 0x4034d4
call esi
test eax, eax
je 0x4034b5
cmp byte [ebp - 0x20f], 0x3a
jne 0x4034b5
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x434]
mov byte [ebp - 0x434], 0x42
push eax
mov byte [ebp - 0x433], 0x3a
mov byte [ebp - 0x432], bl
call edi
jmp 0x4034f1
call esi
test eax, eax
je 0x4034f1
cmp byte [ebp - 0x20f], 0x3a
jne 0x4034f1
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c0]
push eax
push 3
jne 0x403548
call esi
test eax, eax
je 0x403529
cmp byte [ebp - 0x1bf], 0x3a
jne 0x403529
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x384]
mov byte [ebp - 0x384], 0x42
push eax
mov byte [ebp - 0x383], 0x3a
mov byte [ebp - 0x382], bl
call edi
jmp 0x403565
call esi
test eax, eax
je 0x403565
cmp byte [ebp - 0x1bf], 0x3a
jne 0x403565
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x250]
push eax
push 3
jne 0x4035ba
call esi
test eax, eax
je 0x40359b
cmp byte [ebp - 0x24f], 0x3a
jne 0x40359b
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4bc]
mov byte [ebp - 0x4bc], 0x42
push eax
mov byte [ebp - 0x4bb], 0x3a
mov byte [ebp - 0x4ba], bl
call edi
jmp 0x4035d7
call esi
test eax, eax
je 0x4035d7
cmp byte [ebp - 0x24f], 0x3a
jne 0x4035d7
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x128]
push eax
push 3
jne 0x40362d
call esi
test eax, eax
je 0x40360e
cmp byte [ebp - 0x127], 0x3a
jne 0x40360e
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x38c]
mov byte [ebp - 0x38c], 0x42
push eax
mov byte [ebp - 0x38b], 0x3a
mov byte [ebp - 0x38a], bl
call edi
jmp 0x40364a
call esi
test eax, eax
je 0x40364a
cmp byte [ebp - 0x127], 0x3a
jne 0x40364a
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x12c]
push eax
push 3
jne 0x4036a1
call esi
test eax, eax
je 0x403682
cmp byte [ebp - 0x12b], 0x3a
jne 0x403682
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x43c]
mov byte [ebp - 0x43c], 0x42
push eax
mov byte [ebp - 0x43b], 0x3a
mov byte [ebp - 0x43a], bl
call edi
jmp 0x4036be
call esi
test eax, eax
je 0x4036be
cmp byte [ebp - 0x12b], 0x3a
jne 0x4036be
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x134]
push eax
push 3
jne 0x403716
call esi
test eax, eax
je 0x4036f7
cmp byte [ebp - 0x133], 0x3a
jne 0x4036f7
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x394]
mov byte [ebp - 0x394], 0x42
push eax
mov byte [ebp - 0x393], 0x3a
mov byte [ebp - 0x392], bl
call edi
jmp 0x403733
call esi
test eax, eax
je 0x403733
cmp byte [ebp - 0x133], 0x3a
jne 0x403733
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x13c]
push eax
push 3
jne 0x40378b
call esi
test eax, eax
je 0x40376c
cmp byte [ebp - 0x13b], 0x3a
jne 0x40376c
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x494]
mov byte [ebp - 0x494], 0x42
push eax
mov byte [ebp - 0x493], 0x3a
mov byte [ebp - 0x492], bl
call edi
jmp 0x4037a8
call esi
test eax, eax
je 0x4037a8
cmp byte [ebp - 0x13b], 0x3a
jne 0x4037a8
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x144]
push eax
push 3
jne 0x4037fe
call esi
test eax, eax
je 0x4037df
cmp byte [ebp - 0x143], 0x3a
jne 0x4037df
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x39c]
mov byte [ebp - 0x39c], 0x42
push eax
mov byte [ebp - 0x39b], 0x3a
mov byte [ebp - 0x39a], bl
call edi
jmp 0x40381b
call esi
test eax, eax
je 0x40381b
cmp byte [ebp - 0x143], 0x3a
jne 0x40381b
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd4]
push eax
push 3
jne 0x403899
call esi
test eax, eax
je 0x403854
cmp byte [ebp - 0xd3], 0x3a
jne 0x403854
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xd4]
push eax
push 3
call esi
test eax, eax
je 0x40387a
cmp byte [ebp - 0xd3], 0x3a
jne 0x40387a
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x444]
mov byte [ebp - 0x444], 0x42
push eax
mov byte [ebp - 0x443], 0x3a
mov byte [ebp - 0x442], bl
call edi
jmp 0x4038b6
call esi
test eax, eax
je 0x4038b6
cmp byte [ebp - 0xd3], 0x3a
jne 0x4038b6
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x8c]
push eax
push 3
jne 0x403934
call esi
test eax, eax
je 0x4038ef
cmp byte [ebp - 0x8b], 0x3a
jne 0x4038ef
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x8c]
push eax
push 3
call esi
test eax, eax
je 0x403915
cmp byte [ebp - 0x8b], 0x3a
jne 0x403915
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3a4]
mov byte [ebp - 0x3a4], 0x42
push eax
mov byte [ebp - 0x3a3], 0x3a
mov byte [ebp - 0x3a2], bl
call edi
jmp 0x403951
call esi
test eax, eax
je 0x403951
cmp byte [ebp - 0x8b], 0x3a
jne 0x403951
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xfc]
push eax
push 3
jne 0x4039cf
call esi
test eax, eax
je 0x40398a
cmp byte [ebp - 0xfb], 0x3a
jne 0x40398a
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xfc]
push eax
push 3
call esi
test eax, eax
je 0x4039b0
cmp byte [ebp - 0xfb], 0x3a
jne 0x4039b0
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b0]
mov byte [ebp - 0x4b0], 0x42
push eax
mov byte [ebp - 0x4af], 0x3a
mov byte [ebp - 0x4ae], bl
call edi
jmp 0x4039ec
call esi
test eax, eax
je 0x4039ec
cmp byte [ebp - 0xfb], 0x3a
jne 0x4039ec
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x403a58
call esi
test eax, eax
je 0x403a1c
cmp byte [ebp - 3], 0x3a
jne 0x403a1c
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 4]
push eax
push 3
call esi
test eax, eax
je 0x403a39
cmp byte [ebp - 3], 0x3a
jne 0x403a39
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x26c]
mov byte [ebp - 0x26c], 0x42
push eax
mov byte [ebp - 0x26b], 0x3a
mov byte [ebp - 0x26a], bl
call edi
jmp 0x403a6f
call esi
test eax, eax
je 0x403a6f
cmp byte [ebp - 3], 0x3a
jne 0x403a6f
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 8]
push eax
push 3
jne 0x403ad9
call esi
test eax, eax
je 0x403a9d
cmp byte [ebp - 7], 0x3a
jne 0x403a9d
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 8]
push eax
push 3
call esi
test eax, eax
je 0x403aba
cmp byte [ebp - 7], 0x3a
jne 0x403aba
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x270]
mov byte [ebp - 0x270], 0x42
push eax
mov byte [ebp - 0x26f], 0x3a
mov byte [ebp - 0x26e], bl
call edi
jmp 0x403af0
call esi
test eax, eax
je 0x403af0
cmp byte [ebp - 7], 0x3a
jne 0x403af0
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x403b5d
call esi
test eax, eax
je 0x403b21
cmp byte [ebp - 0xf], 0x3a
jne 0x403b21
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x10]
push eax
push 3
call esi
test eax, eax
je 0x403b3e
cmp byte [ebp - 0xf], 0x3a
jne 0x403b3e
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x278]
mov byte [ebp - 0x278], 0x42
push eax
mov byte [ebp - 0x277], 0x3a
mov byte [ebp - 0x276], bl
call edi
jmp 0x403b74
call esi
test eax, eax
je 0x403b74
cmp byte [ebp - 0xf], 0x3a
jne 0x403b74
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18]
push eax
push 3
jne 0x403bdf
call esi
test eax, eax
je 0x403ba3
cmp byte [ebp - 0x17], 0x3a
jne 0x403ba3
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x18]
push eax
push 3
call esi
test eax, eax
je 0x403bc0
cmp byte [ebp - 0x17], 0x3a
jne 0x403bc0
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x280]
mov byte [ebp - 0x280], 0x42
push eax
mov byte [ebp - 0x27f], 0x3a
mov byte [ebp - 0x27e], bl
call edi
jmp 0x403bf6
call esi
test eax, eax
je 0x403bf6
cmp byte [ebp - 0x17], 0x3a
jne 0x403bf6
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20]
push eax
push 3
jne 0x403c8b
call esi
test eax, eax
je 0x403c4f
cmp byte [ebp - 0x1f], 0x3a
jne 0x403c4f
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x20]
push eax
push 3
call esi
test eax, eax
je 0x403c6c
cmp byte [ebp - 0x1f], 0x3a
jne 0x403c6c
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x288]
mov byte [ebp - 0x288], 0x42
push eax
mov byte [ebp - 0x287], 0x3a
mov byte [ebp - 0x286], bl
call edi
jmp 0x403ca2
call esi
test eax, eax
je 0x403ca2
cmp byte [ebp - 0x1f], 0x3a
jne 0x403ca2
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x4cc]
call fcn.0040bd0e
lea ecx, [ebp - 0x4cc]
call fcn.0040cb87
test eax, eax
jne 0x40455c
lea ecx, [ebp - 0x4e4]
call fcn.00411369
test eax, eax
jne 0x40455c
lea eax, [ebp + 0x14]
test eax, eax
jne 0x404530
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14c]
push eax
push 3
jne 0x403d36
call esi
test eax, eax
je 0x403d17
cmp byte [ebp - 0x14b], 0x3a
jne 0x403d17
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x290]
mov byte [ebp - 0x290], 0x42
push eax
mov byte [ebp - 0x28f], 0x3a
mov byte [ebp - 0x28e], bl
call edi
jmp 0x403d53
call esi
test eax, eax
je 0x403d53
cmp byte [ebp - 0x14b], 0x3a
jne 0x403d53
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x154]
push eax
push 3
jne 0x403daa
call esi
test eax, eax
je 0x403d8b
cmp byte [ebp - 0x153], 0x3a
jne 0x403d8b
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x298]
mov byte [ebp - 0x298], 0x42
push eax
mov byte [ebp - 0x297], 0x3a
mov byte [ebp - 0x296], bl
call edi
jmp 0x403dc7
call esi
test eax, eax
je 0x403dc7
cmp byte [ebp - 0x153], 0x3a
jne 0x403dc7
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x15c]
push eax
push 3
jne 0x403e1e
call esi
test eax, eax
je 0x403dff
cmp byte [ebp - 0x15b], 0x3a
jne 0x403dff
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2a0]
mov byte [ebp - 0x2a0], 0x42
push eax
mov byte [ebp - 0x29f], 0x3a
mov byte [ebp - 0x29e], bl
call edi
jmp 0x403e3b
call esi
test eax, eax
je 0x403e3b
cmp byte [ebp - 0x15b], 0x3a
jne 0x403e3b
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x164]
push eax
push 3
jne 0x403e90
call esi
test eax, eax
je 0x403e71
cmp byte [ebp - 0x163], 0x3a
jne 0x403e71
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2a8]
mov byte [ebp - 0x2a8], 0x42
push eax
mov byte [ebp - 0x2a7], 0x3a
mov byte [ebp - 0x2a6], bl
call edi
jmp 0x403ead
call esi
test eax, eax
je 0x403ead
cmp byte [ebp - 0x163], 0x3a
jne 0x403ead
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x16c]
push eax
push 3
jne 0x403f03
call esi
test eax, eax
je 0x403ee4
cmp byte [ebp - 0x16b], 0x3a
jne 0x403ee4
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2b0]
mov byte [ebp - 0x2b0], 0x42
push eax
mov byte [ebp - 0x2af], 0x3a
mov byte [ebp - 0x2ae], bl
call edi
jmp 0x403f20
call esi
test eax, eax
je 0x403f20
cmp byte [ebp - 0x16b], 0x3a
jne 0x403f20
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x174]
push eax
push 3
jne 0x403f77
call esi
test eax, eax
je 0x403f58
cmp byte [ebp - 0x173], 0x3a
jne 0x403f58
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2b8]
mov byte [ebp - 0x2b8], 0x42
push eax
mov byte [ebp - 0x2b7], 0x3a
mov byte [ebp - 0x2b6], bl
call edi
jmp 0x403f94
call esi
test eax, eax
je 0x403f94
cmp byte [ebp - 0x173], 0x3a
jne 0x403f94
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x17c]
push eax
push 3
jne 0x403fec
call esi
test eax, eax
je 0x403fcd
cmp byte [ebp - 0x17b], 0x3a
jne 0x403fcd
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2c0]
mov byte [ebp - 0x2c0], 0x42
push eax
mov byte [ebp - 0x2bf], 0x3a
mov byte [ebp - 0x2be], bl
call edi
jmp 0x404009
call esi
test eax, eax
je 0x404009
cmp byte [ebp - 0x17b], 0x3a
jne 0x404009
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x184]
push eax
push 3
jne 0x404061
call esi
test eax, eax
je 0x404042
cmp byte [ebp - 0x183], 0x3a
jne 0x404042
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2c8]
mov byte [ebp - 0x2c8], 0x42
push eax
mov byte [ebp - 0x2c7], 0x3a
mov byte [ebp - 0x2c6], bl
call edi
jmp 0x40407e
call esi
test eax, eax
je 0x40407e
cmp byte [ebp - 0x183], 0x3a
jne 0x40407e
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18c]
push eax
push 3
jne 0x4040d4
call esi
test eax, eax
je 0x4040b5
cmp byte [ebp - 0x18b], 0x3a
jne 0x4040b5
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2d0]
mov byte [ebp - 0x2d0], 0x42
push eax
mov byte [ebp - 0x2cf], 0x3a
mov byte [ebp - 0x2ce], bl
call edi
jmp 0x4040f1
call esi
test eax, eax
je 0x4040f1
cmp byte [ebp - 0x18b], 0x3a
jne 0x4040f1
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28]
push eax
push 3
jne 0x40415d
call esi
test eax, eax
je 0x404121
cmp byte [ebp - 0x27], 0x3a
jne 0x404121
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x28]
push eax
push 3
call esi
test eax, eax
je 0x40413e
cmp byte [ebp - 0x27], 0x3a
jne 0x40413e
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2d8]
mov byte [ebp - 0x2d8], 0x42
push eax
mov byte [ebp - 0x2d7], 0x3a
mov byte [ebp - 0x2d6], bl
call edi
jmp 0x404174
call esi
test eax, eax
je 0x404174
cmp byte [ebp - 0x27], 0x3a
jne 0x404174
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30]
push eax
push 3
jne 0x4041e0
call esi
test eax, eax
je 0x4041a4
cmp byte [ebp - 0x2f], 0x3a
jne 0x4041a4
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x30]
push eax
push 3
call esi
test eax, eax
je 0x4041c1
cmp byte [ebp - 0x2f], 0x3a
jne 0x4041c1
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2e0]
mov byte [ebp - 0x2e0], 0x42
push eax
mov byte [ebp - 0x2df], 0x3a
mov byte [ebp - 0x2de], bl
call edi
jmp 0x4041f7
call esi
test eax, eax
je 0x4041f7
cmp byte [ebp - 0x2f], 0x3a
jne 0x4041f7
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38]
push eax
push 3
jne 0x404263
call esi
test eax, eax
je 0x404227
cmp byte [ebp - 0x37], 0x3a
jne 0x404227
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x38]
push eax
push 3
call esi
test eax, eax
je 0x404244
cmp byte [ebp - 0x37], 0x3a
jne 0x404244
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2e8]
mov byte [ebp - 0x2e8], 0x42
push eax
mov byte [ebp - 0x2e7], 0x3a
mov byte [ebp - 0x2e6], bl
call edi
jmp 0x40427a
call esi
test eax, eax
je 0x40427a
cmp byte [ebp - 0x37], 0x3a
jne 0x40427a
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x40]
push eax
push 3
jne 0x4042e6
call esi
test eax, eax
je 0x4042aa
cmp byte [ebp - 0x3f], 0x3a
jne 0x4042aa
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x40]
push eax
push 3
call esi
test eax, eax
je 0x4042c7
cmp byte [ebp - 0x3f], 0x3a
jne 0x4042c7
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2f0]
mov byte [ebp - 0x2f0], 0x42
push eax
mov byte [ebp - 0x2ef], 0x3a
mov byte [ebp - 0x2ee], bl
call edi
jmp 0x4042fd
call esi
test eax, eax
je 0x4042fd
cmp byte [ebp - 0x3f], 0x3a
jne 0x4042fd
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x48]
push eax
push 3
jne 0x404367
call esi
test eax, eax
je 0x40432b
cmp byte [ebp - 0x47], 0x3a
jne 0x40432b
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x48]
push eax
push 3
call esi
test eax, eax
je 0x404348
cmp byte [ebp - 0x47], 0x3a
jne 0x404348
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x2f8]
mov byte [ebp - 0x2f8], 0x42
push eax
mov byte [ebp - 0x2f7], 0x3a
mov byte [ebp - 0x2f6], bl
call edi
jmp 0x40437e
call esi
test eax, eax
je 0x40437e
cmp byte [ebp - 0x47], 0x3a
jne 0x40437e
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x50]
push eax
push 3
jne 0x4043eb
call esi
test eax, eax
je 0x4043af
cmp byte [ebp - 0x4f], 0x3a
jne 0x4043af
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x50]
push eax
push 3
call esi
test eax, eax
je 0x4043cc
cmp byte [ebp - 0x4f], 0x3a
jne 0x4043cc
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x300]
mov byte [ebp - 0x300], 0x42
push eax
mov byte [ebp - 0x2ff], 0x3a
mov byte [ebp - 0x2fe], bl
call edi
jmp 0x404402
call esi
test eax, eax
je 0x404402
cmp byte [ebp - 0x4f], 0x3a
jne 0x404402
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x58]
push eax
push 3
jne 0x40446d
call esi
test eax, eax
je 0x404431
cmp byte [ebp - 0x57], 0x3a
jne 0x404431
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x58]
push eax
push 3
call esi
test eax, eax
je 0x40444e
cmp byte [ebp - 0x57], 0x3a
jne 0x40444e
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x308]
mov byte [ebp - 0x308], 0x42
push eax
mov byte [ebp - 0x307], 0x3a
mov byte [ebp - 0x306], bl
call edi
jmp 0x404484
call esi
test eax, eax
je 0x404484
cmp byte [ebp - 0x57], 0x3a
jne 0x404484
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x60]
push eax
push 3
jne 0x404519
call esi
test eax, eax
je 0x4044dd
cmp byte [ebp - 0x5f], 0x3a
jne 0x4044dd
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x60]
push eax
push 3
call esi
test eax, eax
je 0x4044fa
cmp byte [ebp - 0x5f], 0x3a
jne 0x4044fa
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x310]
mov byte [ebp - 0x310], 0x42
push eax
mov byte [ebp - 0x30f], 0x3a
mov byte [ebp - 0x30e], bl
call edi
jmp 0x404530
call esi
test eax, eax
je 0x404530
cmp byte [ebp - 0x5f], 0x3a
jne 0x404530
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x544]
call fcn.0041b15e
lea ecx, [ebp - 0x544]
call fcn.0041c0f9
lea ecx, [ebp - 0x544]
call fcn.0041c83d
lea ecx, [ebp - 0x544]
jmp 0x40578f
lea eax, [ebp + 0x14]
test eax, eax
jne 0x404e19
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x194]
push eax
push 3
jne 0x4045bf
call esi
test eax, eax
je 0x4045a0
cmp byte [ebp - 0x193], 0x3a
jne 0x4045a0
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x318]
mov byte [ebp - 0x318], 0x42
push eax
mov byte [ebp - 0x317], 0x3a
mov byte [ebp - 0x316], bl
call edi
jmp 0x4045dc
call esi
test eax, eax
je 0x4045dc
cmp byte [ebp - 0x193], 0x3a
jne 0x4045dc
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x19c]
push eax
push 3
jne 0x404633
call esi
test eax, eax
je 0x404614
cmp byte [ebp - 0x19b], 0x3a
jne 0x404614
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x320]
mov byte [ebp - 0x320], 0x42
push eax
mov byte [ebp - 0x31f], 0x3a
mov byte [ebp - 0x31e], bl
call edi
jmp 0x404650
call esi
test eax, eax
je 0x404650
cmp byte [ebp - 0x19b], 0x3a
jne 0x404650
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a4]
push eax
push 3
jne 0x4046a7
call esi
test eax, eax
je 0x404688
cmp byte [ebp - 0x1a3], 0x3a
jne 0x404688
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x328]
mov byte [ebp - 0x328], 0x42
push eax
mov byte [ebp - 0x327], 0x3a
mov byte [ebp - 0x326], bl
call edi
jmp 0x4046c4
call esi
test eax, eax
je 0x4046c4
cmp byte [ebp - 0x1a3], 0x3a
jne 0x4046c4
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ac]
push eax
push 3
jne 0x404719
call esi
test eax, eax
je 0x4046fa
cmp byte [ebp - 0x1ab], 0x3a
jne 0x4046fa
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x330]
mov byte [ebp - 0x330], 0x42
push eax
mov byte [ebp - 0x32f], 0x3a
mov byte [ebp - 0x32e], bl
call edi
jmp 0x404736
call esi
test eax, eax
je 0x404736
cmp byte [ebp - 0x1ab], 0x3a
jne 0x404736
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b4]
push eax
push 3
jne 0x40478c
call esi
test eax, eax
je 0x40476d
cmp byte [ebp - 0x1b3], 0x3a
jne 0x40476d
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x338]
mov byte [ebp - 0x338], 0x42
push eax
mov byte [ebp - 0x337], 0x3a
mov byte [ebp - 0x336], bl
call edi
jmp 0x4047a9
call esi
test eax, eax
je 0x4047a9
cmp byte [ebp - 0x1b3], 0x3a
jne 0x4047a9
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1bc]
push eax
push 3
jne 0x404800
call esi
test eax, eax
je 0x4047e1
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4047e1
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x340]
mov byte [ebp - 0x340], 0x42
push eax
mov byte [ebp - 0x33f], 0x3a
mov byte [ebp - 0x33e], bl
call edi
jmp 0x40481d
call esi
test eax, eax
je 0x40481d
cmp byte [ebp - 0x1bb], 0x3a
jne 0x40481d
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c4]
push eax
push 3
jne 0x404875
call esi
test eax, eax
je 0x404856
cmp byte [ebp - 0x1c3], 0x3a
jne 0x404856
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x348]
mov byte [ebp - 0x348], 0x42
push eax
mov byte [ebp - 0x347], 0x3a
mov byte [ebp - 0x346], bl
call edi
jmp 0x404892
call esi
test eax, eax
je 0x404892
cmp byte [ebp - 0x1c3], 0x3a
jne 0x404892
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1cc]
push eax
push 3
jne 0x4048ea
call esi
test eax, eax
je 0x4048cb
cmp byte [ebp - 0x1cb], 0x3a
jne 0x4048cb
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x350]
mov byte [ebp - 0x350], 0x42
push eax
mov byte [ebp - 0x34f], 0x3a
mov byte [ebp - 0x34e], bl
call edi
jmp 0x404907
call esi
test eax, eax
je 0x404907
cmp byte [ebp - 0x1cb], 0x3a
jne 0x404907
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d4]
push eax
push 3
jne 0x40495d
call esi
test eax, eax
je 0x40493e
cmp byte [ebp - 0x1d3], 0x3a
jne 0x40493e
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x358]
mov byte [ebp - 0x358], 0x42
push eax
mov byte [ebp - 0x357], 0x3a
mov byte [ebp - 0x356], bl
call edi
jmp 0x40497a
call esi
test eax, eax
je 0x40497a
cmp byte [ebp - 0x1d3], 0x3a
jne 0x40497a
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x68]
push eax
push 3
jne 0x4049e6
call esi
test eax, eax
je 0x4049aa
cmp byte [ebp - 0x67], 0x3a
jne 0x4049aa
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x68]
push eax
push 3
call esi
test eax, eax
je 0x4049c7
cmp byte [ebp - 0x67], 0x3a
jne 0x4049c7
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x360]
mov byte [ebp - 0x360], 0x42
push eax
mov byte [ebp - 0x35f], 0x3a
mov byte [ebp - 0x35e], bl
call edi
jmp 0x4049fd
call esi
test eax, eax
je 0x4049fd
cmp byte [ebp - 0x67], 0x3a
jne 0x4049fd
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x70]
push eax
push 3
jne 0x404a69
call esi
test eax, eax
je 0x404a2d
cmp byte [ebp - 0x6f], 0x3a
jne 0x404a2d
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x70]
push eax
push 3
call esi
test eax, eax
je 0x404a4a
cmp byte [ebp - 0x6f], 0x3a
jne 0x404a4a
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x368]
mov byte [ebp - 0x368], 0x42
push eax
mov byte [ebp - 0x367], 0x3a
mov byte [ebp - 0x366], bl
call edi
jmp 0x404a80
call esi
test eax, eax
je 0x404a80
cmp byte [ebp - 0x6f], 0x3a
jne 0x404a80
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x78]
push eax
push 3
jne 0x404aec
call esi
test eax, eax
je 0x404ab0
cmp byte [ebp - 0x77], 0x3a
jne 0x404ab0
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x78]
push eax
push 3
call esi
test eax, eax
je 0x404acd
cmp byte [ebp - 0x77], 0x3a
jne 0x404acd
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x370]
mov byte [ebp - 0x370], 0x42
push eax
mov byte [ebp - 0x36f], 0x3a
mov byte [ebp - 0x36e], bl
call edi
jmp 0x404b03
call esi
test eax, eax
je 0x404b03
cmp byte [ebp - 0x77], 0x3a
jne 0x404b03
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x80]
push eax
push 3
jne 0x404b6f
call esi
test eax, eax
je 0x404b33
cmp byte [ebp - 0x7f], 0x3a
jne 0x404b33
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x80]
push eax
push 3
call esi
test eax, eax
je 0x404b50
cmp byte [ebp - 0x7f], 0x3a
jne 0x404b50
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x378]
mov byte [ebp - 0x378], 0x42
push eax
mov byte [ebp - 0x377], 0x3a
mov byte [ebp - 0x376], bl
call edi
jmp 0x404b86
call esi
test eax, eax
je 0x404b86
cmp byte [ebp - 0x7f], 0x3a
jne 0x404b86
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x88]
push eax
push 3
jne 0x404c02
call esi
test eax, eax
je 0x404bbd
cmp byte [ebp - 0x87], 0x3a
jne 0x404bbd
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x88]
push eax
push 3
call esi
test eax, eax
je 0x404be3
cmp byte [ebp - 0x87], 0x3a
jne 0x404be3
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x380]
mov byte [ebp - 0x380], 0x42
push eax
mov byte [ebp - 0x37f], 0x3a
mov byte [ebp - 0x37e], bl
call edi
jmp 0x404c1f
call esi
test eax, eax
je 0x404c1f
cmp byte [ebp - 0x87], 0x3a
jne 0x404c1f
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x90]
push eax
push 3
jne 0x404c9e
call esi
test eax, eax
je 0x404c59
cmp byte [ebp - 0x8f], 0x3a
jne 0x404c59
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x90]
push eax
push 3
call esi
test eax, eax
je 0x404c7f
cmp byte [ebp - 0x8f], 0x3a
jne 0x404c7f
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x388]
mov byte [ebp - 0x388], 0x42
push eax
mov byte [ebp - 0x387], 0x3a
mov byte [ebp - 0x386], bl
call edi
jmp 0x404cbb
call esi
test eax, eax
je 0x404cbb
cmp byte [ebp - 0x8f], 0x3a
jne 0x404cbb
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x98]
push eax
push 3
jne 0x404d38
call esi
test eax, eax
je 0x404cf3
cmp byte [ebp - 0x97], 0x3a
jne 0x404cf3
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x98]
push eax
push 3
call esi
test eax, eax
je 0x404d19
cmp byte [ebp - 0x97], 0x3a
jne 0x404d19
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x390]
mov byte [ebp - 0x390], 0x42
push eax
mov byte [ebp - 0x38f], 0x3a
mov byte [ebp - 0x38e], bl
call edi
jmp 0x404d55
call esi
test eax, eax
je 0x404d55
cmp byte [ebp - 0x97], 0x3a
jne 0x404d55
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa0]
push eax
push 3
jne 0x404dfc
call esi
test eax, eax
je 0x404db7
cmp byte [ebp - 0x9f], 0x3a
jne 0x404db7
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xa0]
push eax
push 3
call esi
test eax, eax
je 0x404ddd
cmp byte [ebp - 0x9f], 0x3a
jne 0x404ddd
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x398]
mov byte [ebp - 0x398], 0x42
push eax
mov byte [ebp - 0x397], 0x3a
mov byte [ebp - 0x396], bl
call edi
jmp 0x404e19
call esi
test eax, eax
je 0x404e19
cmp byte [ebp - 0x9f], 0x3a
jne 0x404e19
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x504]
call fcn.0041b15e
lea eax, [ebp - 0x4cc]
lea ecx, [ebp - 0x504]
push eax
call fcn.0041d362
test eax, eax
je 0x405789
lea eax, [ebp + 0x14]
test eax, eax
jne 0x40575b
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1dc]
push eax
push 3
jne 0x404ea1
call esi
test eax, eax
je 0x404e82
cmp byte [ebp - 0x1db], 0x3a
jne 0x404e82
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3a0]
mov byte [ebp - 0x3a0], 0x42
push eax
mov byte [ebp - 0x39f], 0x3a
mov byte [ebp - 0x39e], bl
call edi
jmp 0x404ebe
call esi
test eax, eax
je 0x404ebe
cmp byte [ebp - 0x1db], 0x3a
jne 0x404ebe
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e4]
push eax
push 3
jne 0x404f15
call esi
test eax, eax
je 0x404ef6
cmp byte [ebp - 0x1e3], 0x3a
jne 0x404ef6
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3a8]
mov byte [ebp - 0x3a8], 0x42
push eax
mov byte [ebp - 0x3a7], 0x3a
mov byte [ebp - 0x3a6], bl
call edi
jmp 0x404f32
call esi
test eax, eax
je 0x404f32
cmp byte [ebp - 0x1e3], 0x3a
jne 0x404f32
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ec]
push eax
push 3
jne 0x404f89
call esi
test eax, eax
je 0x404f6a
cmp byte [ebp - 0x1eb], 0x3a
jne 0x404f6a
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b0]
mov byte [ebp - 0x3b0], 0x42
push eax
mov byte [ebp - 0x3af], 0x3a
mov byte [ebp - 0x3ae], bl
call edi
jmp 0x404fa6
call esi
test eax, eax
je 0x404fa6
cmp byte [ebp - 0x1eb], 0x3a
jne 0x404fa6
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f4]
push eax
push 3
jne 0x404ffb
call esi
test eax, eax
je 0x404fdc
cmp byte [ebp - 0x1f3], 0x3a
jne 0x404fdc
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b8]
mov byte [ebp - 0x3b8], 0x42
push eax
mov byte [ebp - 0x3b7], 0x3a
mov byte [ebp - 0x3b6], bl
call edi
jmp 0x405018
call esi
test eax, eax
je 0x405018
cmp byte [ebp - 0x1f3], 0x3a
jne 0x405018
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1fc]
push eax
push 3
jne 0x40506e
call esi
test eax, eax
je 0x40504f
cmp byte [ebp - 0x1fb], 0x3a
jne 0x40504f
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c0]
mov byte [ebp - 0x3c0], 0x42
push eax
mov byte [ebp - 0x3bf], 0x3a
mov byte [ebp - 0x3be], bl
call edi
jmp 0x40508b
call esi
test eax, eax
je 0x40508b
cmp byte [ebp - 0x1fb], 0x3a
jne 0x40508b
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x204]
push eax
push 3
jne 0x4050e2
call esi
test eax, eax
je 0x4050c3
cmp byte [ebp - 0x203], 0x3a
jne 0x4050c3
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c8]
mov byte [ebp - 0x3c8], 0x42
push eax
mov byte [ebp - 0x3c7], 0x3a
mov byte [ebp - 0x3c6], bl
call edi
jmp 0x4050ff
call esi
test eax, eax
je 0x4050ff
cmp byte [ebp - 0x203], 0x3a
jne 0x4050ff
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20c]
push eax
push 3
jne 0x405157
call esi
test eax, eax
je 0x405138
cmp byte [ebp - 0x20b], 0x3a
jne 0x405138
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d0]
mov byte [ebp - 0x3d0], 0x42
push eax
mov byte [ebp - 0x3cf], 0x3a
mov byte [ebp - 0x3ce], bl
call edi
jmp 0x405174
call esi
test eax, eax
je 0x405174
cmp byte [ebp - 0x20b], 0x3a
jne 0x405174
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x214]
push eax
push 3
jne 0x4051cc
call esi
test eax, eax
je 0x4051ad
cmp byte [ebp - 0x213], 0x3a
jne 0x4051ad
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d8]
mov byte [ebp - 0x3d8], 0x42
push eax
mov byte [ebp - 0x3d7], 0x3a
mov byte [ebp - 0x3d6], bl
call edi
jmp 0x4051e9
call esi
test eax, eax
je 0x4051e9
cmp byte [ebp - 0x213], 0x3a
jne 0x4051e9
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x21c]
push eax
push 3
jne 0x40523f
call esi
test eax, eax
je 0x405220
cmp byte [ebp - 0x21b], 0x3a
jne 0x405220
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e0]
mov byte [ebp - 0x3e0], 0x42
push eax
mov byte [ebp - 0x3df], 0x3a
mov byte [ebp - 0x3de], bl
call edi
jmp 0x40525c
call esi
test eax, eax
je 0x40525c
cmp byte [ebp - 0x21b], 0x3a
jne 0x40525c
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa8]
push eax
push 3
jne 0x4052da
call esi
test eax, eax
je 0x405295
cmp byte [ebp - 0xa7], 0x3a
jne 0x405295
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xa8]
push eax
push 3
call esi
test eax, eax
je 0x4052bb
cmp byte [ebp - 0xa7], 0x3a
jne 0x4052bb
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e8]
mov byte [ebp - 0x3e8], 0x42
push eax
mov byte [ebp - 0x3e7], 0x3a
mov byte [ebp - 0x3e6], bl
call edi
jmp 0x4052f7
call esi
test eax, eax
je 0x4052f7
cmp byte [ebp - 0xa7], 0x3a
jne 0x4052f7
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb0]
push eax
push 3
jne 0x405375
call esi
test eax, eax
je 0x405330
cmp byte [ebp - 0xaf], 0x3a
jne 0x405330
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xb0]
push eax
push 3
call esi
test eax, eax
je 0x405356
cmp byte [ebp - 0xaf], 0x3a
jne 0x405356
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f0]
mov byte [ebp - 0x3f0], 0x42
push eax
mov byte [ebp - 0x3ef], 0x3a
mov byte [ebp - 0x3ee], bl
call edi
jmp 0x405392
call esi
test eax, eax
je 0x405392
cmp byte [ebp - 0xaf], 0x3a
jne 0x405392
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb8]
push eax
push 3
jne 0x405410
call esi
test eax, eax
je 0x4053cb
cmp byte [ebp - 0xb7], 0x3a
jne 0x4053cb
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xb8]
push eax
push 3
call esi
test eax, eax
je 0x4053f1
cmp byte [ebp - 0xb7], 0x3a
jne 0x4053f1
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f8]
mov byte [ebp - 0x3f8], 0x42
push eax
mov byte [ebp - 0x3f7], 0x3a
mov byte [ebp - 0x3f6], bl
call edi
jmp 0x40542d
call esi
test eax, eax
je 0x40542d
cmp byte [ebp - 0xb7], 0x3a
jne 0x40542d
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc0]
push eax
push 3
jne 0x4054ab
call esi
test eax, eax
je 0x405466
cmp byte [ebp - 0xbf], 0x3a
jne 0x405466
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xc0]
push eax
push 3
call esi
test eax, eax
je 0x40548c
cmp byte [ebp - 0xbf], 0x3a
jne 0x40548c
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x400]
mov byte [ebp - 0x400], 0x42
push eax
mov byte [ebp - 0x3ff], 0x3a
mov byte [ebp - 0x3fe], bl
call edi
jmp 0x4054c8
call esi
test eax, eax
je 0x4054c8
cmp byte [ebp - 0xbf], 0x3a
jne 0x4054c8
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc8]
push eax
push 3
jne 0x405544
call esi
test eax, eax
je 0x4054ff
cmp byte [ebp - 0xc7], 0x3a
jne 0x4054ff
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xc8]
push eax
push 3
call esi
test eax, eax
je 0x405525
cmp byte [ebp - 0xc7], 0x3a
jne 0x405525
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x408]
mov byte [ebp - 0x408], 0x42
push eax
mov byte [ebp - 0x407], 0x3a
mov byte [ebp - 0x406], bl
call edi
jmp 0x405561
call esi
test eax, eax
je 0x405561
cmp byte [ebp - 0xc7], 0x3a
jne 0x405561
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd0]
push eax
push 3
jne 0x4055e0
call esi
test eax, eax
je 0x40559b
cmp byte [ebp - 0xcf], 0x3a
jne 0x40559b
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xd0]
push eax
push 3
call esi
test eax, eax
je 0x4055c1
cmp byte [ebp - 0xcf], 0x3a
jne 0x4055c1
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x410]
mov byte [ebp - 0x410], 0x42
push eax
mov byte [ebp - 0x40f], 0x3a
mov byte [ebp - 0x40e], bl
call edi
jmp 0x4055fd
call esi
test eax, eax
je 0x4055fd
cmp byte [ebp - 0xcf], 0x3a
jne 0x4055fd
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd8]
push eax
push 3
jne 0x40567a
call esi
test eax, eax
je 0x405635
cmp byte [ebp - 0xd7], 0x3a
jne 0x405635
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xd8]
push eax
push 3
call esi
test eax, eax
je 0x40565b
cmp byte [ebp - 0xd7], 0x3a
jne 0x40565b
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x418]
mov byte [ebp - 0x418], 0x42
push eax
mov byte [ebp - 0x417], 0x3a
mov byte [ebp - 0x416], bl
call edi
jmp 0x405697
call esi
test eax, eax
je 0x405697
cmp byte [ebp - 0xd7], 0x3a
jne 0x405697
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe0]
push eax
push 3
jne 0x40573e
call esi
test eax, eax
je 0x4056f9
cmp byte [ebp - 0xdf], 0x3a
jne 0x4056f9
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xe0]
push eax
push 3
call esi
test eax, eax
je 0x40571f
cmp byte [ebp - 0xdf], 0x3a
jne 0x40571f
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x420]
mov byte [ebp - 0x420], 0x42
push eax
mov byte [ebp - 0x41f], 0x3a
mov byte [ebp - 0x41e], bl
call edi
jmp 0x40575b
call esi
test eax, eax
je 0x40575b
cmp byte [ebp - 0xdf], 0x3a
jne 0x40575b
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x4cc]
call fcn.0040d342
mov eax, dword [0x43c3d0]
push 0xbb8
call dword [eax + 0x3c]
lea ecx, [ebp - 0x504]
call fcn.0041c0f9
lea ecx, [ebp - 0x504]
call fcn.0041c83d
lea ecx, [ebp - 0x504]
call fcn.0041b940
lea ecx, [ebp - 0x4cc]
call fcn.0040c45c
lea ecx, [ebp - 0x4d0]
call fcn.00411abb
lea ecx, [ebp - 0x4d8]
call fcn.004200e6
lea ecx, [ebp - 0x4e4]
call fcn.00411352
mov ecx, dword [0x43c3d0]
cmp ecx, ebx
je 0x4057d0
mov eax, dword [ecx]
push 1
call dword [eax]
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4060ed
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x224]
push eax
push 3
jne 0x405833
call esi
test eax, eax
je 0x405814
cmp byte [ebp - 0x223], 0x3a
jne 0x405814
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x428]
mov byte [ebp - 0x428], 0x42
push eax
mov byte [ebp - 0x427], 0x3a
mov byte [ebp - 0x426], bl
call edi
jmp 0x405850
call esi
test eax, eax
je 0x405850
cmp byte [ebp - 0x223], 0x3a
jne 0x405850
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x22c]
push eax
push 3
jne 0x4058a7
call esi
test eax, eax
je 0x405888
cmp byte [ebp - 0x22b], 0x3a
jne 0x405888
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x430]
mov byte [ebp - 0x430], 0x42
push eax
mov byte [ebp - 0x42f], 0x3a
mov byte [ebp - 0x42e], bl
call edi
jmp 0x4058c4
call esi
test eax, eax
je 0x4058c4
cmp byte [ebp - 0x22b], 0x3a
jne 0x4058c4
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x234]
push eax
push 3
jne 0x40591b
call esi
test eax, eax
je 0x4058fc
cmp byte [ebp - 0x233], 0x3a
jne 0x4058fc
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x438]
mov byte [ebp - 0x438], 0x42
push eax
mov byte [ebp - 0x437], 0x3a
mov byte [ebp - 0x436], bl
call edi
jmp 0x405938
call esi
test eax, eax
je 0x405938
cmp byte [ebp - 0x233], 0x3a
jne 0x405938
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x23c]
push eax
push 3
jne 0x40598d
call esi
test eax, eax
je 0x40596e
cmp byte [ebp - 0x23b], 0x3a
jne 0x40596e
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x440]
mov byte [ebp - 0x440], 0x42
push eax
mov byte [ebp - 0x43f], 0x3a
mov byte [ebp - 0x43e], bl
call edi
jmp 0x4059aa
call esi
test eax, eax
je 0x4059aa
cmp byte [ebp - 0x23b], 0x3a
jne 0x4059aa
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x244]
push eax
push 3
jne 0x405a00
call esi
test eax, eax
je 0x4059e1
cmp byte [ebp - 0x243], 0x3a
jne 0x4059e1
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x448]
mov byte [ebp - 0x448], 0x42
push eax
mov byte [ebp - 0x447], 0x3a
mov byte [ebp - 0x446], bl
call edi
jmp 0x405a1d
call esi
test eax, eax
je 0x405a1d
cmp byte [ebp - 0x243], 0x3a
jne 0x405a1d
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24c]
push eax
push 3
jne 0x405a74
call esi
test eax, eax
je 0x405a55
cmp byte [ebp - 0x24b], 0x3a
jne 0x405a55
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x450]
mov byte [ebp - 0x450], 0x42
push eax
mov byte [ebp - 0x44f], 0x3a
mov byte [ebp - 0x44e], bl
call edi
jmp 0x405a91
call esi
test eax, eax
je 0x405a91
cmp byte [ebp - 0x24b], 0x3a
jne 0x405a91
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x254]
push eax
push 3
jne 0x405ae9
call esi
test eax, eax
je 0x405aca
cmp byte [ebp - 0x253], 0x3a
jne 0x405aca
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x458]
mov byte [ebp - 0x458], 0x42
push eax
mov byte [ebp - 0x457], 0x3a
mov byte [ebp - 0x456], bl
call edi
jmp 0x405b06
call esi
test eax, eax
je 0x405b06
cmp byte [ebp - 0x253], 0x3a
jne 0x405b06
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x25c]
push eax
push 3
jne 0x405b5e
call esi
test eax, eax
je 0x405b3f
cmp byte [ebp - 0x25b], 0x3a
jne 0x405b3f
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x460]
mov byte [ebp - 0x460], 0x42
push eax
mov byte [ebp - 0x45f], 0x3a
mov byte [ebp - 0x45e], bl
call edi
jmp 0x405b7b
call esi
test eax, eax
je 0x405b7b
cmp byte [ebp - 0x25b], 0x3a
jne 0x405b7b
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x264]
push eax
push 3
jne 0x405bd1
call esi
test eax, eax
je 0x405bb2
cmp byte [ebp - 0x263], 0x3a
jne 0x405bb2
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x468]
mov byte [ebp - 0x468], 0x42
push eax
mov byte [ebp - 0x467], 0x3a
mov byte [ebp - 0x466], bl
call edi
jmp 0x405bee
call esi
test eax, eax
je 0x405bee
cmp byte [ebp - 0x263], 0x3a
jne 0x405bee
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe8]
push eax
push 3
jne 0x405c6c
call esi
test eax, eax
je 0x405c27
cmp byte [ebp - 0xe7], 0x3a
jne 0x405c27
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xe8]
push eax
push 3
call esi
test eax, eax
je 0x405c4d
cmp byte [ebp - 0xe7], 0x3a
jne 0x405c4d
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x470]
mov byte [ebp - 0x470], 0x42
push eax
mov byte [ebp - 0x46f], 0x3a
mov byte [ebp - 0x46e], bl
call edi
jmp 0x405c89
call esi
test eax, eax
je 0x405c89
cmp byte [ebp - 0xe7], 0x3a
jne 0x405c89
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetAtomNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf0]
push eax
push 3
jne 0x405d07
call esi
test eax, eax
je 0x405cc2
cmp byte [ebp - 0xef], 0x3a
jne 0x405cc2
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xf0]
push eax
push 3
call esi
test eax, eax
je 0x405ce8
cmp byte [ebp - 0xef], 0x3a
jne 0x405ce8
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x478]
mov byte [ebp - 0x478], 0x42
push eax
mov byte [ebp - 0x477], 0x3a
mov byte [ebp - 0x476], bl
call edi
jmp 0x405d24
call esi
test eax, eax
je 0x405d24
cmp byte [ebp - 0xef], 0x3a
jne 0x405d24
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf8]
push eax
push 3
jne 0x405da2
call esi
test eax, eax
je 0x405d5d
cmp byte [ebp - 0xf7], 0x3a
jne 0x405d5d
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0xf8]
push eax
push 3
call esi
test eax, eax
je 0x405d83
cmp byte [ebp - 0xf7], 0x3a
jne 0x405d83
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x480]
mov byte [ebp - 0x480], 0x42
push eax
mov byte [ebp - 0x47f], 0x3a
mov byte [ebp - 0x47e], bl
call edi
jmp 0x405dbf
call esi
test eax, eax
je 0x405dbf
cmp byte [ebp - 0xf7], 0x3a
jne 0x405dbf
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x100]
push eax
push 3
jne 0x405e3d
call esi
test eax, eax
je 0x405df8
cmp byte [ebp - 0xff], 0x3a
jne 0x405df8
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x100]
push eax
push 3
call esi
test eax, eax
je 0x405e1e
cmp byte [ebp - 0xff], 0x3a
jne 0x405e1e
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x488]
mov byte [ebp - 0x488], 0x42
push eax
mov byte [ebp - 0x487], 0x3a
mov byte [ebp - 0x486], bl
call edi
jmp 0x405e5a
call esi
test eax, eax
je 0x405e5a
cmp byte [ebp - 0xff], 0x3a
jne 0x405e5a
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x108]
push eax
push 3
jne 0x405ed6
call esi
test eax, eax
je 0x405e91
cmp byte [ebp - 0x107], 0x3a
jne 0x405e91
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x108]
push eax
push 3
call esi
test eax, eax
je 0x405eb7
cmp byte [ebp - 0x107], 0x3a
jne 0x405eb7
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x490]
mov byte [ebp - 0x490], 0x42
push eax
mov byte [ebp - 0x48f], 0x3a
mov byte [ebp - 0x48e], bl
call edi
jmp 0x405ef3
call esi
test eax, eax
je 0x405ef3
cmp byte [ebp - 0x107], 0x3a
jne 0x405ef3
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x110]
push eax
push 3
jne 0x405f72
call esi
test eax, eax
je 0x405f2d
cmp byte [ebp - 0x10f], 0x3a
jne 0x405f2d
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x110]
push eax
push 3
call esi
test eax, eax
je 0x405f53
cmp byte [ebp - 0x10f], 0x3a
jne 0x405f53
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x498]
mov byte [ebp - 0x498], 0x42
push eax
mov byte [ebp - 0x497], 0x3a
mov byte [ebp - 0x496], bl
call edi
jmp 0x405f8f
call esi
test eax, eax
je 0x405f8f
cmp byte [ebp - 0x10f], 0x3a
jne 0x405f8f
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x118]
push eax
push 3
jne 0x40600c
call esi
test eax, eax
je 0x405fc7
cmp byte [ebp - 0x117], 0x3a
jne 0x405fc7
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x118]
push eax
push 3
call esi
test eax, eax
je 0x405fed
cmp byte [ebp - 0x117], 0x3a
jne 0x405fed
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a0]
mov byte [ebp - 0x4a0], 0x42
push eax
mov byte [ebp - 0x49f], 0x3a
mov byte [ebp - 0x49e], bl
call edi
jmp 0x406029
call esi
test eax, eax
je 0x406029
cmp byte [ebp - 0x117], 0x3a
jne 0x406029
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x120]
push eax
push 3
jne 0x4060d0
call esi
test eax, eax
je 0x40608b
cmp byte [ebp - 0x11f], 0x3a
jne 0x40608b
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x120]
push eax
push 3
call esi
test eax, eax
je 0x4060b1
cmp byte [ebp - 0x11f], 0x3a
jne 0x4060b1
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a8]
mov byte [ebp - 0x4a8], 0x42
push eax
mov byte [ebp - 0x4a7], 0x3a
mov byte [ebp - 0x4a6], bl
call edi
jmp 0x4060ed
call esi
test eax, eax
je 0x4060ed
cmp byte [ebp - 0x11f], 0x3a
jne 0x4060ed
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10