Function at 0x401000
Capabilities:
Allocate thread local storage
Create directory
Delete directory
Delete file
Get common file path
Get graphical window text
Get hostname
Read file on windows
Resume thread
Set console window title
Set current directory
Set environment variable
Set file attributes
Suspend thread
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7cc
push ebx
lea eax, [ebp + 0x14]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
xor ebx, ebx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
jne 0x401b5c
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x334]
push eax
push 3
jne 0x40107d
call esi
test eax, eax
je 0x40105e
cmp byte [ebp - 0x333], 0x3a
jne 0x40105e
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3bc]
mov byte [ebp - 0x3bc], 0x42
push eax
mov byte [ebp - 0x3bb], 0x3a
mov byte [ebp - 0x3ba], bl
call edi
jmp 0x40109a
call esi
test eax, eax
je 0x40109a
cmp byte [ebp - 0x333], 0x3a
jne 0x40109a
movzx eax, byte [ebp - 0x334]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc]
push eax
push 3
jne 0x4010e7
call esi
test eax, eax
je 0x4010c8
cmp byte [ebp - 0xb], 0x3a
jne 0x4010c8
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b4]
mov byte [ebp - 0x3b4], 0x42
push eax
mov byte [ebp - 0x3b3], 0x3a
mov byte [ebp - 0x3b2], bl
call edi
jmp 0x4010fe
call esi
test eax, eax
je 0x4010fe
cmp byte [ebp - 0xb], 0x3a
jne 0x4010fe
movzx eax, byte [ebp - 0xc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1dc]
push eax
push 3
jne 0x401156
call esi
test eax, eax
je 0x401137
cmp byte [ebp - 0x1db], 0x3a
jne 0x401137
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x594]
mov byte [ebp - 0x594], 0x42
push eax
mov byte [ebp - 0x593], 0x3a
mov byte [ebp - 0x592], bl
call edi
jmp 0x401173
call esi
test eax, eax
je 0x401173
cmp byte [ebp - 0x1db], 0x3a
jne 0x401173
movzx eax, byte [ebp - 0x1dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14]
push eax
push 3
jne 0x4011c2
call esi
test eax, eax
je 0x4011a3
cmp byte [ebp - 0x13], 0x3a
jne 0x4011a3
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3ac]
mov byte [ebp - 0x3ac], 0x42
push eax
mov byte [ebp - 0x3ab], 0x3a
mov byte [ebp - 0x3aa], bl
call edi
jmp 0x4011d9
call esi
test eax, eax
je 0x4011d9
cmp byte [ebp - 0x13], 0x3a
jne 0x4011d9
movzx eax, byte [ebp - 0x14]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c4]
push eax
push 3
jne 0x401230
call esi
test eax, eax
je 0x401211
cmp byte [ebp - 0x2c3], 0x3a
jne 0x401211
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x684]
mov byte [ebp - 0x684], 0x42
push eax
mov byte [ebp - 0x683], 0x3a
mov byte [ebp - 0x682], bl
call edi
jmp 0x40124d
call esi
test eax, eax
je 0x40124d
cmp byte [ebp - 0x2c3], 0x3a
jne 0x40124d
movzx eax, byte [ebp - 0x2c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c]
push eax
push 3
jne 0x40129a
call esi
test eax, eax
je 0x40127b
cmp byte [ebp - 0x1b], 0x3a
jne 0x40127b
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c4]
mov byte [ebp - 0x3c4], 0x42
push eax
mov byte [ebp - 0x3c3], 0x3a
mov byte [ebp - 0x3c2], bl
call edi
jmp 0x4012b1
call esi
test eax, eax
je 0x4012b1
cmp byte [ebp - 0x1b], 0x3a
jne 0x4012b1
movzx eax, byte [ebp - 0x1c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e4]
push eax
push 3
jne 0x40130b
call esi
test eax, eax
je 0x4012ec
cmp byte [ebp - 0x1e3], 0x3a
jne 0x4012ec
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x59c]
mov byte [ebp - 0x59c], 0x42
push eax
mov byte [ebp - 0x59b], 0x3a
mov byte [ebp - 0x59a], bl
call edi
jmp 0x401328
call esi
test eax, eax
je 0x401328
cmp byte [ebp - 0x1e3], 0x3a
jne 0x401328
movzx eax, byte [ebp - 0x1e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24]
push eax
push 3
jne 0x401375
call esi
test eax, eax
je 0x401356
cmp byte [ebp - 0x23], 0x3a
jne 0x401356
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3cc]
mov byte [ebp - 0x3cc], 0x42
push eax
mov byte [ebp - 0x3cb], 0x3a
mov byte [ebp - 0x3ca], bl
call edi
jmp 0x40138c
call esi
test eax, eax
je 0x40138c
cmp byte [ebp - 0x23], 0x3a
jne 0x40138c
movzx eax, byte [ebp - 0x24]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38c]
push eax
push 3
jne 0x4013e2
call esi
test eax, eax
je 0x4013c3
cmp byte [ebp - 0x38b], 0x3a
jne 0x4013c3
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6fc]
mov byte [ebp - 0x6fc], 0x42
push eax
mov byte [ebp - 0x6fb], 0x3a
mov byte [ebp - 0x6fa], bl
call edi
jmp 0x4013ff
call esi
test eax, eax
je 0x4013ff
cmp byte [ebp - 0x38b], 0x3a
jne 0x4013ff
movzx eax, byte [ebp - 0x38c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c]
push eax
push 3
jne 0x40144d
call esi
test eax, eax
je 0x40142e
cmp byte [ebp - 0x2b], 0x3a
jne 0x40142e
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d4]
mov byte [ebp - 0x3d4], 0x42
push eax
mov byte [ebp - 0x3d3], 0x3a
mov byte [ebp - 0x3d2], bl
call edi
jmp 0x401464
call esi
test eax, eax
je 0x401464
cmp byte [ebp - 0x2b], 0x3a
jne 0x401464
movzx eax, byte [ebp - 0x2c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ec]
push eax
push 3
jne 0x4014ba
call esi
test eax, eax
je 0x40149b
cmp byte [ebp - 0x1eb], 0x3a
jne 0x40149b
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a4]
mov byte [ebp - 0x5a4], 0x42
push eax
mov byte [ebp - 0x5a3], 0x3a
mov byte [ebp - 0x5a2], bl
call edi
jmp 0x4014d7
call esi
test eax, eax
je 0x4014d7
cmp byte [ebp - 0x1eb], 0x3a
jne 0x4014d7
movzx eax, byte [ebp - 0x1ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34]
push eax
push 3
jne 0x401524
call esi
test eax, eax
je 0x401505
cmp byte [ebp - 0x33], 0x3a
jne 0x401505
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3dc]
mov byte [ebp - 0x3dc], 0x42
push eax
mov byte [ebp - 0x3db], 0x3a
mov byte [ebp - 0x3da], bl
call edi
jmp 0x40153b
call esi
test eax, eax
je 0x40153b
cmp byte [ebp - 0x33], 0x3a
jne 0x40153b
movzx eax, byte [ebp - 0x34]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2cc]
push eax
push 3
jne 0x401595
call esi
test eax, eax
je 0x401576
cmp byte [ebp - 0x2cb], 0x3a
jne 0x401576
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x68c]
mov byte [ebp - 0x68c], 0x42
push eax
mov byte [ebp - 0x68b], 0x3a
mov byte [ebp - 0x68a], bl
call edi
jmp 0x4015b2
call esi
test eax, eax
je 0x4015b2
cmp byte [ebp - 0x2cb], 0x3a
jne 0x4015b2
movzx eax, byte [ebp - 0x2cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3c]
push eax
push 3
jne 0x401600
call esi
test eax, eax
je 0x4015e1
cmp byte [ebp - 0x3b], 0x3a
jne 0x4015e1
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e4]
mov byte [ebp - 0x3e4], 0x42
push eax
mov byte [ebp - 0x3e3], 0x3a
mov byte [ebp - 0x3e2], bl
call edi
jmp 0x401617
call esi
test eax, eax
je 0x401617
cmp byte [ebp - 0x3b], 0x3a
jne 0x401617
movzx eax, byte [ebp - 0x3c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f4]
push eax
push 3
jne 0x401670
call esi
test eax, eax
je 0x401651
cmp byte [ebp - 0x1f3], 0x3a
jne 0x401651
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5ac]
mov byte [ebp - 0x5ac], 0x42
push eax
mov byte [ebp - 0x5ab], 0x3a
mov byte [ebp - 0x5aa], bl
call edi
jmp 0x40168d
call esi
test eax, eax
je 0x40168d
cmp byte [ebp - 0x1f3], 0x3a
jne 0x40168d
movzx eax, byte [ebp - 0x1f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x44]
push eax
push 3
jne 0x4016db
call esi
test eax, eax
je 0x4016bc
cmp byte [ebp - 0x43], 0x3a
jne 0x4016bc
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3ec]
mov byte [ebp - 0x3ec], 0x42
push eax
mov byte [ebp - 0x3eb], 0x3a
mov byte [ebp - 0x3ea], bl
call edi
jmp 0x4016f2
call esi
test eax, eax
je 0x4016f2
cmp byte [ebp - 0x43], 0x3a
jne 0x4016f2
movzx eax, byte [ebp - 0x44]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x33c]
push eax
push 3
jne 0x40174a
call esi
test eax, eax
je 0x40172b
cmp byte [ebp - 0x33b], 0x3a
jne 0x40172b
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x750]
mov byte [ebp - 0x750], 0x42
push eax
mov byte [ebp - 0x74f], 0x3a
mov byte [ebp - 0x74e], bl
call edi
jmp 0x401767
call esi
test eax, eax
je 0x401767
cmp byte [ebp - 0x33b], 0x3a
jne 0x401767
movzx eax, byte [ebp - 0x33c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x4c]
push eax
push 3
jne 0x4017b4
call esi
test eax, eax
je 0x401795
cmp byte [ebp - 0x4b], 0x3a
jne 0x401795
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f4]
mov byte [ebp - 0x3f4], 0x42
push eax
mov byte [ebp - 0x3f3], 0x3a
mov byte [ebp - 0x3f2], bl
call edi
jmp 0x4017cb
call esi
test eax, eax
je 0x4017cb
cmp byte [ebp - 0x4b], 0x3a
jne 0x4017cb
movzx eax, byte [ebp - 0x4c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1fc]
push eax
push 3
jne 0x401821
call esi
test eax, eax
je 0x401802
cmp byte [ebp - 0x1fb], 0x3a
jne 0x401802
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b4]
mov byte [ebp - 0x5b4], 0x42
push eax
mov byte [ebp - 0x5b3], 0x3a
mov byte [ebp - 0x5b2], bl
call edi
jmp 0x40183e
call esi
test eax, eax
je 0x40183e
cmp byte [ebp - 0x1fb], 0x3a
jne 0x40183e
movzx eax, byte [ebp - 0x1fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x54]
push eax
push 3
jne 0x40188b
call esi
test eax, eax
je 0x40186c
cmp byte [ebp - 0x53], 0x3a
jne 0x40186c
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3fc]
mov byte [ebp - 0x3fc], 0x42
push eax
mov byte [ebp - 0x3fb], 0x3a
mov byte [ebp - 0x3fa], bl
call edi
jmp 0x4018a2
call esi
test eax, eax
je 0x4018a2
cmp byte [ebp - 0x53], 0x3a
jne 0x4018a2
movzx eax, byte [ebp - 0x54]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d4]
push eax
push 3
jne 0x4018f9
call esi
test eax, eax
je 0x4018da
cmp byte [ebp - 0x2d3], 0x3a
jne 0x4018da
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x694]
mov byte [ebp - 0x694], 0x42
push eax
mov byte [ebp - 0x693], 0x3a
mov byte [ebp - 0x692], bl
call edi
jmp 0x401916
call esi
test eax, eax
je 0x401916
cmp byte [ebp - 0x2d3], 0x3a
jne 0x401916
movzx eax, byte [ebp - 0x2d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x5c]
push eax
push 3
jne 0x401963
call esi
test eax, eax
je 0x401944
cmp byte [ebp - 0x5b], 0x3a
jne 0x401944
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x404]
mov byte [ebp - 0x404], 0x42
push eax
mov byte [ebp - 0x403], 0x3a
mov byte [ebp - 0x402], bl
call edi
jmp 0x40197a
call esi
test eax, eax
je 0x40197a
cmp byte [ebp - 0x5b], 0x3a
jne 0x40197a
movzx eax, byte [ebp - 0x5c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x204]
push eax
push 3
jne 0x4019d0
call esi
test eax, eax
je 0x4019b1
cmp byte [ebp - 0x203], 0x3a
jne 0x4019b1
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5bc]
mov byte [ebp - 0x5bc], 0x42
push eax
mov byte [ebp - 0x5bb], 0x3a
mov byte [ebp - 0x5ba], bl
call edi
jmp 0x4019ed
call esi
test eax, eax
je 0x4019ed
cmp byte [ebp - 0x203], 0x3a
jne 0x4019ed
movzx eax, byte [ebp - 0x204]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x64]
push eax
push 3
jne 0x401a3b
call esi
test eax, eax
je 0x401a1c
cmp byte [ebp - 0x63], 0x3a
jne 0x401a1c
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x40c]
mov byte [ebp - 0x40c], 0x42
push eax
mov byte [ebp - 0x40b], 0x3a
mov byte [ebp - 0x40a], bl
call edi
jmp 0x401a52
call esi
test eax, eax
je 0x401a52
cmp byte [ebp - 0x63], 0x3a
jne 0x401a52
movzx eax, byte [ebp - 0x64]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x374]
push eax
push 3
jne 0x401aaa
call esi
test eax, eax
je 0x401a8b
cmp byte [ebp - 0x373], 0x3a
jne 0x401a8b
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x704]
mov byte [ebp - 0x704], 0x42
push eax
mov byte [ebp - 0x703], 0x3a
mov byte [ebp - 0x702], bl
call edi
jmp 0x401ac7
call esi
test eax, eax
je 0x401ac7
cmp byte [ebp - 0x373], 0x3a
jne 0x401ac7
movzx eax, byte [ebp - 0x374]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x6c]
push eax
push 3
jne 0x401b45
call esi
test eax, eax
je 0x401b26
cmp byte [ebp - 0x6b], 0x3a
jne 0x401b26
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x414]
mov byte [ebp - 0x414], 0x42
push eax
mov byte [ebp - 0x413], 0x3a
mov byte [ebp - 0x412], bl
call edi
jmp 0x401b5c
call esi
test eax, eax
je 0x401b5c
cmp byte [ebp - 0x6b], 0x3a
jne 0x401b5c
movzx eax, byte [ebp - 0x6c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push 0x220
call sub.MFC42.DLL_operatornew
cmp eax, ebx
pop ecx
je 0x401b74
mov ecx, eax
call fcn.00411b3a
jmp 0x401b76
xor eax, eax
lea ecx, [ebp - 0x76c]
mov dword [0x4453d0], eax
call fcn.00414e7f
lea ecx, [ebp - 0x760]
call fcn.004289f1
lea ecx, [ebp - 0x760]
call fcn.00428a26
lea eax, [ebp + 0x14]
test eax, eax
jne 0x402783
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20c]
push eax
push 3
jne 0x401bff
call esi
test eax, eax
je 0x401be0
cmp byte [ebp - 0x20b], 0x3a
jne 0x401be0
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c4]
mov byte [ebp - 0x5c4], 0x42
push eax
mov byte [ebp - 0x5c3], 0x3a
mov byte [ebp - 0x5c2], bl
call edi
jmp 0x401c1c
call esi
test eax, eax
je 0x401c1c
cmp byte [ebp - 0x20b], 0x3a
jne 0x401c1c
movzx eax, byte [ebp - 0x20c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x74]
push eax
push 3
jne 0x401c69
call esi
test eax, eax
je 0x401c4a
cmp byte [ebp - 0x73], 0x3a
jne 0x401c4a
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x41c]
mov byte [ebp - 0x41c], 0x42
push eax
mov byte [ebp - 0x41b], 0x3a
mov byte [ebp - 0x41a], bl
call edi
jmp 0x401c80
call esi
test eax, eax
je 0x401c80
cmp byte [ebp - 0x73], 0x3a
jne 0x401c80
movzx eax, byte [ebp - 0x74]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2dc]
push eax
push 3
jne 0x401cd8
call esi
test eax, eax
je 0x401cb9
cmp byte [ebp - 0x2db], 0x3a
jne 0x401cb9
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x69c]
mov byte [ebp - 0x69c], 0x42
push eax
mov byte [ebp - 0x69b], 0x3a
mov byte [ebp - 0x69a], bl
call edi
jmp 0x401cf5
call esi
test eax, eax
je 0x401cf5
cmp byte [ebp - 0x2db], 0x3a
jne 0x401cf5
movzx eax, byte [ebp - 0x2dc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x7c]
push eax
push 3
jne 0x401d44
call esi
test eax, eax
je 0x401d25
cmp byte [ebp - 0x7b], 0x3a
jne 0x401d25
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x424]
mov byte [ebp - 0x424], 0x42
push eax
mov byte [ebp - 0x423], 0x3a
mov byte [ebp - 0x422], bl
call edi
jmp 0x401d5b
call esi
test eax, eax
je 0x401d5b
cmp byte [ebp - 0x7b], 0x3a
jne 0x401d5b
movzx eax, byte [ebp - 0x7c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x214]
push eax
push 3
jne 0x401db2
call esi
test eax, eax
je 0x401d93
cmp byte [ebp - 0x213], 0x3a
jne 0x401d93
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5cc]
mov byte [ebp - 0x5cc], 0x42
push eax
mov byte [ebp - 0x5cb], 0x3a
mov byte [ebp - 0x5ca], bl
call edi
jmp 0x401dcf
call esi
test eax, eax
je 0x401dcf
cmp byte [ebp - 0x213], 0x3a
jne 0x401dcf
movzx eax, byte [ebp - 0x214]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x84]
push eax
push 3
jne 0x401e25
call esi
test eax, eax
je 0x401e06
cmp byte [ebp - 0x83], 0x3a
jne 0x401e06
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x42c]
mov byte [ebp - 0x42c], 0x42
push eax
mov byte [ebp - 0x42b], 0x3a
mov byte [ebp - 0x42a], bl
call edi
jmp 0x401e42
call esi
test eax, eax
je 0x401e42
cmp byte [ebp - 0x83], 0x3a
jne 0x401e42
movzx eax, byte [ebp - 0x84]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x344]
push eax
push 3
jne 0x401e9c
call esi
test eax, eax
je 0x401e7d
cmp byte [ebp - 0x343], 0x3a
jne 0x401e7d
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x73c]
mov byte [ebp - 0x73c], 0x42
push eax
mov byte [ebp - 0x73b], 0x3a
mov byte [ebp - 0x73a], bl
call edi
jmp 0x401eb9
call esi
test eax, eax
je 0x401eb9
cmp byte [ebp - 0x343], 0x3a
jne 0x401eb9
movzx eax, byte [ebp - 0x344]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x8c]
push eax
push 3
jne 0x401f0f
call esi
test eax, eax
je 0x401ef0
cmp byte [ebp - 0x8b], 0x3a
jne 0x401ef0
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x434]
mov byte [ebp - 0x434], 0x42
push eax
mov byte [ebp - 0x433], 0x3a
mov byte [ebp - 0x432], bl
call edi
jmp 0x401f2c
call esi
test eax, eax
je 0x401f2c
cmp byte [ebp - 0x8b], 0x3a
jne 0x401f2c
movzx eax, byte [ebp - 0x8c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x21c]
push eax
push 3
jne 0x401f82
call esi
test eax, eax
je 0x401f63
cmp byte [ebp - 0x21b], 0x3a
jne 0x401f63
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d4]
mov byte [ebp - 0x5d4], 0x42
push eax
mov byte [ebp - 0x5d3], 0x3a
mov byte [ebp - 0x5d2], bl
call edi
jmp 0x401f9f
call esi
test eax, eax
je 0x401f9f
cmp byte [ebp - 0x21b], 0x3a
jne 0x401f9f
movzx eax, byte [ebp - 0x21c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x94]
push eax
push 3
jne 0x401ff6
call esi
test eax, eax
je 0x401fd7
cmp byte [ebp - 0x93], 0x3a
jne 0x401fd7
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x43c]
mov byte [ebp - 0x43c], 0x42
push eax
mov byte [ebp - 0x43b], 0x3a
mov byte [ebp - 0x43a], bl
call edi
jmp 0x402013
call esi
test eax, eax
je 0x402013
cmp byte [ebp - 0x93], 0x3a
jne 0x402013
movzx eax, byte [ebp - 0x94]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e4]
push eax
push 3
jne 0x402069
call esi
test eax, eax
je 0x40204a
cmp byte [ebp - 0x2e3], 0x3a
jne 0x40204a
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a4]
mov byte [ebp - 0x6a4], 0x42
push eax
mov byte [ebp - 0x6a3], 0x3a
mov byte [ebp - 0x6a2], bl
call edi
jmp 0x402086
call esi
test eax, eax
je 0x402086
cmp byte [ebp - 0x2e3], 0x3a
jne 0x402086
movzx eax, byte [ebp - 0x2e4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x9c]
push eax
push 3
jne 0x4020dc
call esi
test eax, eax
je 0x4020bd
cmp byte [ebp - 0x9b], 0x3a
jne 0x4020bd
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x444]
mov byte [ebp - 0x444], 0x42
push eax
mov byte [ebp - 0x443], 0x3a
mov byte [ebp - 0x442], bl
call edi
jmp 0x4020f9
call esi
test eax, eax
je 0x4020f9
cmp byte [ebp - 0x9b], 0x3a
jne 0x4020f9
movzx eax, byte [ebp - 0x9c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x224]
push eax
push 3
jne 0x402153
call esi
test eax, eax
je 0x402134
cmp byte [ebp - 0x223], 0x3a
jne 0x402134
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5dc]
mov byte [ebp - 0x5dc], 0x42
push eax
mov byte [ebp - 0x5db], 0x3a
mov byte [ebp - 0x5da], bl
call edi
jmp 0x402170
call esi
test eax, eax
je 0x402170
cmp byte [ebp - 0x223], 0x3a
jne 0x402170
movzx eax, byte [ebp - 0x224]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa4]
push eax
push 3
jne 0x4021c7
call esi
test eax, eax
je 0x4021a8
cmp byte [ebp - 0xa3], 0x3a
jne 0x4021a8
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x44c]
mov byte [ebp - 0x44c], 0x42
push eax
mov byte [ebp - 0x44b], 0x3a
mov byte [ebp - 0x44a], bl
call edi
jmp 0x4021e4
call esi
test eax, eax
je 0x4021e4
cmp byte [ebp - 0xa3], 0x3a
jne 0x4021e4
movzx eax, byte [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x39c]
push eax
push 3
jne 0x40223d
call esi
test eax, eax
je 0x40221e
cmp byte [ebp - 0x39b], 0x3a
jne 0x40221e
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x70c]
mov byte [ebp - 0x70c], 0x42
push eax
mov byte [ebp - 0x70b], 0x3a
mov byte [ebp - 0x70a], bl
call edi
jmp 0x40225a
call esi
test eax, eax
je 0x40225a
cmp byte [ebp - 0x39b], 0x3a
jne 0x40225a
movzx eax, byte [ebp - 0x39c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xac]
push eax
push 3
jne 0x4022b1
call esi
test eax, eax
je 0x402292
cmp byte [ebp - 0xab], 0x3a
jne 0x402292
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x454]
mov byte [ebp - 0x454], 0x42
push eax
mov byte [ebp - 0x453], 0x3a
mov byte [ebp - 0x452], bl
call edi
jmp 0x4022ce
call esi
test eax, eax
je 0x4022ce
cmp byte [ebp - 0xab], 0x3a
jne 0x4022ce
movzx eax, byte [ebp - 0xac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x22c]
push eax
push 3
jne 0x402326
call esi
test eax, eax
je 0x402307
cmp byte [ebp - 0x22b], 0x3a
jne 0x402307
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e4]
mov byte [ebp - 0x5e4], 0x42
push eax
mov byte [ebp - 0x5e3], 0x3a
mov byte [ebp - 0x5e2], bl
call edi
jmp 0x402343
call esi
test eax, eax
je 0x402343
cmp byte [ebp - 0x22b], 0x3a
jne 0x402343
movzx eax, byte [ebp - 0x22c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb4]
push eax
push 3
jne 0x402399
call esi
test eax, eax
je 0x40237a
cmp byte [ebp - 0xb3], 0x3a
jne 0x40237a
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x45c]
mov byte [ebp - 0x45c], 0x42
push eax
mov byte [ebp - 0x45b], 0x3a
mov byte [ebp - 0x45a], bl
call edi
jmp 0x4023b6
call esi
test eax, eax
je 0x4023b6
cmp byte [ebp - 0xb3], 0x3a
jne 0x4023b6
movzx eax, byte [ebp - 0xb4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ec]
push eax
push 3
jne 0x40240c
call esi
test eax, eax
je 0x4023ed
cmp byte [ebp - 0x2eb], 0x3a
jne 0x4023ed
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6ac]
mov byte [ebp - 0x6ac], 0x42
push eax
mov byte [ebp - 0x6ab], 0x3a
mov byte [ebp - 0x6aa], bl
call edi
jmp 0x402429
call esi
test eax, eax
je 0x402429
cmp byte [ebp - 0x2eb], 0x3a
jne 0x402429
movzx eax, byte [ebp - 0x2ec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xbc]
push eax
push 3
jne 0x40247f
call esi
test eax, eax
je 0x402460
cmp byte [ebp - 0xbb], 0x3a
jne 0x402460
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x464]
mov byte [ebp - 0x464], 0x42
push eax
mov byte [ebp - 0x463], 0x3a
mov byte [ebp - 0x462], bl
call edi
jmp 0x40249c
call esi
test eax, eax
je 0x40249c
cmp byte [ebp - 0xbb], 0x3a
jne 0x40249c
movzx eax, byte [ebp - 0xbc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x234]
push eax
push 3
jne 0x4024f3
call esi
test eax, eax
je 0x4024d4
cmp byte [ebp - 0x233], 0x3a
jne 0x4024d4
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5ec]
mov byte [ebp - 0x5ec], 0x42
push eax
mov byte [ebp - 0x5eb], 0x3a
mov byte [ebp - 0x5ea], bl
call edi
jmp 0x402510
call esi
test eax, eax
je 0x402510
cmp byte [ebp - 0x233], 0x3a
jne 0x402510
movzx eax, byte [ebp - 0x234]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc4]
push eax
push 3
jne 0x402566
call esi
test eax, eax
je 0x402547
cmp byte [ebp - 0xc3], 0x3a
jne 0x402547
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x46c]
mov byte [ebp - 0x46c], 0x42
push eax
mov byte [ebp - 0x46b], 0x3a
mov byte [ebp - 0x46a], bl
call edi
jmp 0x402583
call esi
test eax, eax
je 0x402583
cmp byte [ebp - 0xc3], 0x3a
jne 0x402583
movzx eax, byte [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x34c]
push eax
push 3
jne 0x4025d9
call esi
test eax, eax
je 0x4025ba
cmp byte [ebp - 0x34b], 0x3a
jne 0x4025ba
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x74c]
mov byte [ebp - 0x74c], 0x42
push eax
mov byte [ebp - 0x74b], 0x3a
mov byte [ebp - 0x74a], bl
call edi
jmp 0x4025f6
call esi
test eax, eax
je 0x4025f6
cmp byte [ebp - 0x34b], 0x3a
jne 0x4025f6
movzx eax, byte [ebp - 0x34c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xcc]
push eax
push 3
jne 0x40264d
call esi
test eax, eax
je 0x40262e
cmp byte [ebp - 0xcb], 0x3a
jne 0x40262e
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x474]
mov byte [ebp - 0x474], 0x42
push eax
mov byte [ebp - 0x473], 0x3a
mov byte [ebp - 0x472], bl
call edi
jmp 0x40266a
call esi
test eax, eax
je 0x40266a
cmp byte [ebp - 0xcb], 0x3a
jne 0x40266a
movzx eax, byte [ebp - 0xcc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x23c]
push eax
push 3
jne 0x4026c2
call esi
test eax, eax
je 0x4026a3
cmp byte [ebp - 0x23b], 0x3a
jne 0x4026a3
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f4]
mov byte [ebp - 0x5f4], 0x42
push eax
mov byte [ebp - 0x5f3], 0x3a
mov byte [ebp - 0x5f2], bl
call edi
jmp 0x4026df
call esi
test eax, eax
je 0x4026df
cmp byte [ebp - 0x23b], 0x3a
jne 0x4026df
movzx eax, byte [ebp - 0x23c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd4]
push eax
push 3
jne 0x402766
call esi
test eax, eax
je 0x402747
cmp byte [ebp - 0xd3], 0x3a
jne 0x402747
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x47c]
mov byte [ebp - 0x47c], 0x42
push eax
mov byte [ebp - 0x47b], 0x3a
mov byte [ebp - 0x47a], bl
call edi
jmp 0x402783
call esi
test eax, eax
je 0x402783
cmp byte [ebp - 0xd3], 0x3a
jne 0x402783
movzx eax, byte [ebp - 0xd4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x758]
call fcn.00414f5e
lea ecx, [ebp - 0x758]
call fcn.00416251
test eax, eax
je 0x404024
lea eax, [ebp + 0x14]
test eax, eax
jne 0x4033a6
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f4]
push eax
push 3
jne 0x402804
call esi
test eax, eax
je 0x4027e5
cmp byte [ebp - 0x2f3], 0x3a
jne 0x4027e5
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b4]
mov byte [ebp - 0x6b4], 0x42
push eax
mov byte [ebp - 0x6b3], 0x3a
mov byte [ebp - 0x6b2], bl
call edi
jmp 0x402821
call esi
test eax, eax
je 0x402821
cmp byte [ebp - 0x2f3], 0x3a
jne 0x402821
movzx eax, byte [ebp - 0x2f4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xdc]
push eax
push 3
jne 0x402877
call esi
test eax, eax
je 0x402858
cmp byte [ebp - 0xdb], 0x3a
jne 0x402858
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x484]
mov byte [ebp - 0x484], 0x42
push eax
mov byte [ebp - 0x483], 0x3a
mov byte [ebp - 0x482], bl
call edi
jmp 0x402894
call esi
test eax, eax
je 0x402894
cmp byte [ebp - 0xdb], 0x3a
jne 0x402894
movzx eax, byte [ebp - 0xdc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x244]
push eax
push 3
jne 0x4028ec
call esi
test eax, eax
je 0x4028cd
cmp byte [ebp - 0x243], 0x3a
jne 0x4028cd
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5fc]
mov byte [ebp - 0x5fc], 0x42
push eax
mov byte [ebp - 0x5fb], 0x3a
mov byte [ebp - 0x5fa], bl
call edi
jmp 0x402909
call esi
test eax, eax
je 0x402909
cmp byte [ebp - 0x243], 0x3a
jne 0x402909
movzx eax, byte [ebp - 0x244]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe4]
push eax
push 3
jne 0x402961
call esi
test eax, eax
je 0x402942
cmp byte [ebp - 0xe3], 0x3a
jne 0x402942
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x48c]
mov byte [ebp - 0x48c], 0x42
push eax
mov byte [ebp - 0x48b], 0x3a
mov byte [ebp - 0x48a], bl
call edi
jmp 0x40297e
call esi
test eax, eax
je 0x40297e
cmp byte [ebp - 0xe3], 0x3a
jne 0x40297e
movzx eax, byte [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x37c]
push eax
push 3
jne 0x4029d5
call esi
test eax, eax
je 0x4029b6
cmp byte [ebp - 0x37b], 0x3a
jne 0x4029b6
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x714]
mov byte [ebp - 0x714], 0x42
push eax
mov byte [ebp - 0x713], 0x3a
mov byte [ebp - 0x712], bl
call edi
jmp 0x4029f2
call esi
test eax, eax
je 0x4029f2
cmp byte [ebp - 0x37b], 0x3a
jne 0x4029f2
movzx eax, byte [ebp - 0x37c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xec]
push eax
push 3
jne 0x402a48
call esi
test eax, eax
je 0x402a29
cmp byte [ebp - 0xeb], 0x3a
jne 0x402a29
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x494]
mov byte [ebp - 0x494], 0x42
push eax
mov byte [ebp - 0x493], 0x3a
mov byte [ebp - 0x492], bl
call edi
jmp 0x402a65
call esi
test eax, eax
je 0x402a65
cmp byte [ebp - 0xeb], 0x3a
jne 0x402a65
movzx eax, byte [ebp - 0xec]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x24c]
push eax
push 3
jne 0x402abf
call esi
test eax, eax
je 0x402aa0
cmp byte [ebp - 0x24b], 0x3a
jne 0x402aa0
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x604]
mov byte [ebp - 0x604], 0x42
push eax
mov byte [ebp - 0x603], 0x3a
mov byte [ebp - 0x602], bl
call edi
jmp 0x402adc
call esi
test eax, eax
je 0x402adc
cmp byte [ebp - 0x24b], 0x3a
jne 0x402adc
movzx eax, byte [ebp - 0x24c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf4]
push eax
push 3
jne 0x402b32
call esi
test eax, eax
je 0x402b13
cmp byte [ebp - 0xf3], 0x3a
jne 0x402b13
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x49c]
mov byte [ebp - 0x49c], 0x42
push eax
mov byte [ebp - 0x49b], 0x3a
mov byte [ebp - 0x49a], bl
call edi
jmp 0x402b4f
call esi
test eax, eax
je 0x402b4f
cmp byte [ebp - 0xf3], 0x3a
jne 0x402b4f
movzx eax, byte [ebp - 0xf4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2fc]
push eax
push 3
jne 0x402ba5
call esi
test eax, eax
je 0x402b86
cmp byte [ebp - 0x2fb], 0x3a
jne 0x402b86
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6bc]
mov byte [ebp - 0x6bc], 0x42
push eax
mov byte [ebp - 0x6bb], 0x3a
mov byte [ebp - 0x6ba], bl
call edi
jmp 0x402bc2
call esi
test eax, eax
je 0x402bc2
cmp byte [ebp - 0x2fb], 0x3a
jne 0x402bc2
movzx eax, byte [ebp - 0x2fc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xfc]
push eax
push 3
jne 0x402c19
call esi
test eax, eax
je 0x402bfa
cmp byte [ebp - 0xfb], 0x3a
jne 0x402bfa
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a4]
mov byte [ebp - 0x4a4], 0x42
push eax
mov byte [ebp - 0x4a3], 0x3a
mov byte [ebp - 0x4a2], bl
call edi
jmp 0x402c36
call esi
test eax, eax
je 0x402c36
cmp byte [ebp - 0xfb], 0x3a
jne 0x402c36
movzx eax, byte [ebp - 0xfc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x254]
push eax
push 3
jne 0x402c8c
call esi
test eax, eax
je 0x402c6d
cmp byte [ebp - 0x253], 0x3a
jne 0x402c6d
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x60c]
mov byte [ebp - 0x60c], 0x42
push eax
mov byte [ebp - 0x60b], 0x3a
mov byte [ebp - 0x60a], bl
call edi
jmp 0x402ca9
call esi
test eax, eax
je 0x402ca9
cmp byte [ebp - 0x253], 0x3a
jne 0x402ca9
movzx eax, byte [ebp - 0x254]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x104]
push eax
push 3
jne 0x402cff
call esi
test eax, eax
je 0x402ce0
cmp byte [ebp - 0x103], 0x3a
jne 0x402ce0
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4ac]
mov byte [ebp - 0x4ac], 0x42
push eax
mov byte [ebp - 0x4ab], 0x3a
mov byte [ebp - 0x4aa], bl
call edi
jmp 0x402d1c
call esi
test eax, eax
je 0x402d1c
cmp byte [ebp - 0x103], 0x3a
jne 0x402d1c
movzx eax, byte [ebp - 0x104]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x354]
push eax
push 3
jne 0x402d76
call esi
test eax, eax
je 0x402d57
cmp byte [ebp - 0x353], 0x3a
jne 0x402d57
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x744]
mov byte [ebp - 0x744], 0x42
push eax
mov byte [ebp - 0x743], 0x3a
mov byte [ebp - 0x742], bl
call edi
jmp 0x402d93
call esi
test eax, eax
je 0x402d93
cmp byte [ebp - 0x353], 0x3a
jne 0x402d93
movzx eax, byte [ebp - 0x354]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10c]
push eax
push 3
jne 0x402dea
call esi
test eax, eax
je 0x402dcb
cmp byte [ebp - 0x10b], 0x3a
jne 0x402dcb
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b4]
mov byte [ebp - 0x4b4], 0x42
push eax
mov byte [ebp - 0x4b3], 0x3a
mov byte [ebp - 0x4b2], bl
call edi
jmp 0x402e07
call esi
test eax, eax
je 0x402e07
cmp byte [ebp - 0x10b], 0x3a
jne 0x402e07
movzx eax, byte [ebp - 0x10c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x25c]
push eax
push 3
jne 0x402e60
call esi
test eax, eax
je 0x402e41
cmp byte [ebp - 0x25b], 0x3a
jne 0x402e41
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x614]
mov byte [ebp - 0x614], 0x42
push eax
mov byte [ebp - 0x613], 0x3a
mov byte [ebp - 0x612], bl
call edi
jmp 0x402e7d
call esi
test eax, eax
je 0x402e7d
cmp byte [ebp - 0x25b], 0x3a
jne 0x402e7d
movzx eax, byte [ebp - 0x25c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x114]
push eax
push 3
jne 0x402ed4
call esi
test eax, eax
je 0x402eb5
cmp byte [ebp - 0x113], 0x3a
jne 0x402eb5
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4bc]
mov byte [ebp - 0x4bc], 0x42
push eax
mov byte [ebp - 0x4bb], 0x3a
mov byte [ebp - 0x4ba], bl
call edi
jmp 0x402ef1
call esi
test eax, eax
je 0x402ef1
cmp byte [ebp - 0x113], 0x3a
jne 0x402ef1
movzx eax, byte [ebp - 0x114]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x304]
push eax
push 3
jne 0x402f49
call esi
test eax, eax
je 0x402f2a
cmp byte [ebp - 0x303], 0x3a
jne 0x402f2a
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c4]
mov byte [ebp - 0x6c4], 0x42
push eax
mov byte [ebp - 0x6c3], 0x3a
mov byte [ebp - 0x6c2], bl
call edi
jmp 0x402f66
call esi
test eax, eax
je 0x402f66
cmp byte [ebp - 0x303], 0x3a
jne 0x402f66
movzx eax, byte [ebp - 0x304]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x11c]
push eax
push 3
jne 0x402fbc
call esi
test eax, eax
je 0x402f9d
cmp byte [ebp - 0x11b], 0x3a
jne 0x402f9d
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c4]
mov byte [ebp - 0x4c4], 0x42
push eax
mov byte [ebp - 0x4c3], 0x3a
mov byte [ebp - 0x4c2], bl
call edi
jmp 0x402fd9
call esi
test eax, eax
je 0x402fd9
cmp byte [ebp - 0x11b], 0x3a
jne 0x402fd9
movzx eax, byte [ebp - 0x11c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x264]
push eax
push 3
jne 0x40302f
call esi
test eax, eax
je 0x403010
cmp byte [ebp - 0x263], 0x3a
jne 0x403010
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x61c]
mov byte [ebp - 0x61c], 0x42
push eax
mov byte [ebp - 0x61b], 0x3a
mov byte [ebp - 0x61a], bl
call edi
jmp 0x40304c
call esi
test eax, eax
je 0x40304c
cmp byte [ebp - 0x263], 0x3a
jne 0x40304c
movzx eax, byte [ebp - 0x264]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x124]
push eax
push 3
jne 0x4030a2
call esi
test eax, eax
je 0x403083
cmp byte [ebp - 0x123], 0x3a
jne 0x403083
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4cc]
mov byte [ebp - 0x4cc], 0x42
push eax
mov byte [ebp - 0x4cb], 0x3a
mov byte [ebp - 0x4ca], bl
call edi
jmp 0x4030bf
call esi
test eax, eax
je 0x4030bf
cmp byte [ebp - 0x123], 0x3a
jne 0x4030bf
movzx eax, byte [ebp - 0x124]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x394]
push eax
push 3
jne 0x403116
call esi
test eax, eax
je 0x4030f7
cmp byte [ebp - 0x393], 0x3a
jne 0x4030f7
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x71c]
mov byte [ebp - 0x71c], 0x42
push eax
mov byte [ebp - 0x71b], 0x3a
mov byte [ebp - 0x71a], bl
call edi
jmp 0x403133
call esi
test eax, eax
je 0x403133
cmp byte [ebp - 0x393], 0x3a
jne 0x403133
movzx eax, byte [ebp - 0x394]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x12c]
push eax
push 3
jne 0x403189
call esi
test eax, eax
je 0x40316a
cmp byte [ebp - 0x12b], 0x3a
jne 0x40316a
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d4]
mov byte [ebp - 0x4d4], 0x42
push eax
mov byte [ebp - 0x4d3], 0x3a
mov byte [ebp - 0x4d2], bl
call edi
jmp 0x4031a6
call esi
test eax, eax
je 0x4031a6
cmp byte [ebp - 0x12b], 0x3a
jne 0x4031a6
movzx eax, byte [ebp - 0x12c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x26c]
push eax
push 3
jne 0x4031fc
call esi
test eax, eax
je 0x4031dd
cmp byte [ebp - 0x26b], 0x3a
jne 0x4031dd
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x624]
mov byte [ebp - 0x624], 0x42
push eax
mov byte [ebp - 0x623], 0x3a
mov byte [ebp - 0x622], bl
call edi
jmp 0x403219
call esi
test eax, eax
je 0x403219
cmp byte [ebp - 0x26b], 0x3a
jne 0x403219
movzx eax, byte [ebp - 0x26c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x134]
push eax
push 3
jne 0x403270
call esi
test eax, eax
je 0x403251
cmp byte [ebp - 0x133], 0x3a
jne 0x403251
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4dc]
mov byte [ebp - 0x4dc], 0x42
push eax
mov byte [ebp - 0x4db], 0x3a
mov byte [ebp - 0x4da], bl
call edi
jmp 0x40328d
call esi
test eax, eax
je 0x40328d
cmp byte [ebp - 0x133], 0x3a
jne 0x40328d
movzx eax, byte [ebp - 0x134]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30c]
push eax
push 3
jne 0x4032e5
call esi
test eax, eax
je 0x4032c6
cmp byte [ebp - 0x30b], 0x3a
jne 0x4032c6
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6cc]
mov byte [ebp - 0x6cc], 0x42
push eax
mov byte [ebp - 0x6cb], 0x3a
mov byte [ebp - 0x6ca], bl
call edi
jmp 0x403302
call esi
test eax, eax
je 0x403302
cmp byte [ebp - 0x30b], 0x3a
jne 0x403302
movzx eax, byte [ebp - 0x30c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x13c]
push eax
push 3
jne 0x403389
call esi
test eax, eax
je 0x40336a
cmp byte [ebp - 0x13b], 0x3a
jne 0x40336a
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e4]
mov byte [ebp - 0x4e4], 0x42
push eax
mov byte [ebp - 0x4e3], 0x3a
mov byte [ebp - 0x4e2], bl
call edi
jmp 0x4033a6
call esi
test eax, eax
je 0x4033a6
cmp byte [ebp - 0x13b], 0x3a
jne 0x4033a6
movzx eax, byte [ebp - 0x13c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x758]
push dword [ebp + 0x10]
call fcn.00416c03
lea ecx, [ebp - 0x75c]
call fcn.0040e922
lea ecx, [ebp - 0x75c]
call fcn.0040fc15
test eax, eax
jne 0x404019
lea ecx, [ebp - 0x76c]
call fcn.00414f5a
test eax, eax
jne 0x404019
lea eax, [ebp + 0x14]
test eax, eax
jne 0x403fed
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x274]
push eax
push 3
jne 0x40344b
call esi
test eax, eax
je 0x40342c
cmp byte [ebp - 0x273], 0x3a
jne 0x40342c
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x62c]
mov byte [ebp - 0x62c], 0x42
push eax
mov byte [ebp - 0x62b], 0x3a
mov byte [ebp - 0x62a], bl
call edi
jmp 0x403468
call esi
test eax, eax
je 0x403468
cmp byte [ebp - 0x273], 0x3a
jne 0x403468
movzx eax, byte [ebp - 0x274]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x144]
push eax
push 3
jne 0x4034be
call esi
test eax, eax
je 0x40349f
cmp byte [ebp - 0x143], 0x3a
jne 0x40349f
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4ec]
mov byte [ebp - 0x4ec], 0x42
push eax
mov byte [ebp - 0x4eb], 0x3a
mov byte [ebp - 0x4ea], bl
call edi
jmp 0x4034db
call esi
test eax, eax
je 0x4034db
cmp byte [ebp - 0x143], 0x3a
jne 0x4034db
movzx eax, byte [ebp - 0x144]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x35c]
push eax
push 3
jne 0x403533
call esi
test eax, eax
je 0x403514
cmp byte [ebp - 0x35b], 0x3a
jne 0x403514
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x738]
mov byte [ebp - 0x738], 0x42
push eax
mov byte [ebp - 0x737], 0x3a
mov byte [ebp - 0x736], bl
call edi
jmp 0x403550
call esi
test eax, eax
je 0x403550
cmp byte [ebp - 0x35b], 0x3a
jne 0x403550
movzx eax, byte [ebp - 0x35c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x14c]
push eax
push 3
jne 0x4035a8
call esi
test eax, eax
je 0x403589
cmp byte [ebp - 0x14b], 0x3a
jne 0x403589
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f4]
mov byte [ebp - 0x4f4], 0x42
push eax
mov byte [ebp - 0x4f3], 0x3a
mov byte [ebp - 0x4f2], bl
call edi
jmp 0x4035c5
call esi
test eax, eax
je 0x4035c5
cmp byte [ebp - 0x14b], 0x3a
jne 0x4035c5
movzx eax, byte [ebp - 0x14c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x27c]
push eax
push 3
jne 0x40361c
call esi
test eax, eax
je 0x4035fd
cmp byte [ebp - 0x27b], 0x3a
jne 0x4035fd
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x634]
mov byte [ebp - 0x634], 0x42
push eax
mov byte [ebp - 0x633], 0x3a
mov byte [ebp - 0x632], bl
call edi
jmp 0x403639
call esi
test eax, eax
je 0x403639
cmp byte [ebp - 0x27b], 0x3a
jne 0x403639
movzx eax, byte [ebp - 0x27c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x154]
push eax
push 3
jne 0x40368f
call esi
test eax, eax
je 0x403670
cmp byte [ebp - 0x153], 0x3a
jne 0x403670
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4fc]
mov byte [ebp - 0x4fc], 0x42
push eax
mov byte [ebp - 0x4fb], 0x3a
mov byte [ebp - 0x4fa], bl
call edi
jmp 0x4036ac
call esi
test eax, eax
je 0x4036ac
cmp byte [ebp - 0x153], 0x3a
jne 0x4036ac
movzx eax, byte [ebp - 0x154]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x314]
push eax
push 3
jne 0x403706
call esi
test eax, eax
je 0x4036e7
cmp byte [ebp - 0x313], 0x3a
jne 0x4036e7
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d4]
mov byte [ebp - 0x6d4], 0x42
push eax
mov byte [ebp - 0x6d3], 0x3a
mov byte [ebp - 0x6d2], bl
call edi
jmp 0x403723
call esi
test eax, eax
je 0x403723
cmp byte [ebp - 0x313], 0x3a
jne 0x403723
movzx eax, byte [ebp - 0x314]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x15c]
push eax
push 3
jne 0x403779
call esi
test eax, eax
je 0x40375a
cmp byte [ebp - 0x15b], 0x3a
jne 0x40375a
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x504]
mov byte [ebp - 0x504], 0x42
push eax
mov byte [ebp - 0x503], 0x3a
mov byte [ebp - 0x502], bl
call edi
jmp 0x403796
call esi
test eax, eax
je 0x403796
cmp byte [ebp - 0x15b], 0x3a
jne 0x403796
movzx eax, byte [ebp - 0x15c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x284]
push eax
push 3
jne 0x4037ec
call esi
test eax, eax
je 0x4037cd
cmp byte [ebp - 0x283], 0x3a
jne 0x4037cd
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x63c]
mov byte [ebp - 0x63c], 0x42
push eax
mov byte [ebp - 0x63b], 0x3a
mov byte [ebp - 0x63a], bl
call edi
jmp 0x403809
call esi
test eax, eax
je 0x403809
cmp byte [ebp - 0x283], 0x3a
jne 0x403809
movzx eax, byte [ebp - 0x284]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x164]
push eax
push 3
jne 0x403860
call esi
test eax, eax
je 0x403841
cmp byte [ebp - 0x163], 0x3a
jne 0x403841
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x50c]
mov byte [ebp - 0x50c], 0x42
push eax
mov byte [ebp - 0x50b], 0x3a
mov byte [ebp - 0x50a], bl
call edi
jmp 0x40387d
call esi
test eax, eax
je 0x40387d
cmp byte [ebp - 0x163], 0x3a
jne 0x40387d
movzx eax, byte [ebp - 0x164]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x384]
push eax
push 3
jne 0x4038d3
call esi
test eax, eax
je 0x4038b4
cmp byte [ebp - 0x383], 0x3a
jne 0x4038b4
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x724]
mov byte [ebp - 0x724], 0x42
push eax
mov byte [ebp - 0x723], 0x3a
mov byte [ebp - 0x722], bl
call edi
jmp 0x4038f0
call esi
test eax, eax
je 0x4038f0
cmp byte [ebp - 0x383], 0x3a
jne 0x4038f0
movzx eax, byte [ebp - 0x384]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x16c]
push eax
push 3
jne 0x403946
call esi
test eax, eax
je 0x403927
cmp byte [ebp - 0x16b], 0x3a
jne 0x403927
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x514]
mov byte [ebp - 0x514], 0x42
push eax
mov byte [ebp - 0x513], 0x3a
mov byte [ebp - 0x512], bl
call edi
jmp 0x403963
call esi
test eax, eax
je 0x403963
cmp byte [ebp - 0x16b], 0x3a
jne 0x403963
movzx eax, byte [ebp - 0x16c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28c]
push eax
push 3
jne 0x4039bd
call esi
test eax, eax
je 0x40399e
cmp byte [ebp - 0x28b], 0x3a
jne 0x40399e
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x644]
mov byte [ebp - 0x644], 0x42
push eax
mov byte [ebp - 0x643], 0x3a
mov byte [ebp - 0x642], bl
call edi
jmp 0x4039da
call esi
test eax, eax
je 0x4039da
cmp byte [ebp - 0x28b], 0x3a
jne 0x4039da
movzx eax, byte [ebp - 0x28c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x174]
push eax
push 3
jne 0x403a31
call esi
test eax, eax
je 0x403a12
cmp byte [ebp - 0x173], 0x3a
jne 0x403a12
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x51c]
mov byte [ebp - 0x51c], 0x42
push eax
mov byte [ebp - 0x51b], 0x3a
mov byte [ebp - 0x51a], bl
call edi
jmp 0x403a4e
call esi
test eax, eax
je 0x403a4e
cmp byte [ebp - 0x173], 0x3a
jne 0x403a4e
movzx eax, byte [ebp - 0x174]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x31c]
push eax
push 3
jne 0x403aa7
call esi
test eax, eax
je 0x403a88
cmp byte [ebp - 0x31b], 0x3a
jne 0x403a88
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6dc]
mov byte [ebp - 0x6dc], 0x42
push eax
mov byte [ebp - 0x6db], 0x3a
mov byte [ebp - 0x6da], bl
call edi
jmp 0x403ac4
call esi
test eax, eax
je 0x403ac4
cmp byte [ebp - 0x31b], 0x3a
jne 0x403ac4
movzx eax, byte [ebp - 0x31c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x17c]
push eax
push 3
jne 0x403b1b
call esi
test eax, eax
je 0x403afc
cmp byte [ebp - 0x17b], 0x3a
jne 0x403afc
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x524]
mov byte [ebp - 0x524], 0x42
push eax
mov byte [ebp - 0x523], 0x3a
mov byte [ebp - 0x522], bl
call edi
jmp 0x403b38
call esi
test eax, eax
je 0x403b38
cmp byte [ebp - 0x17b], 0x3a
jne 0x403b38
movzx eax, byte [ebp - 0x17c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x294]
push eax
push 3
jne 0x403b90
call esi
test eax, eax
je 0x403b71
cmp byte [ebp - 0x293], 0x3a
jne 0x403b71
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x64c]
mov byte [ebp - 0x64c], 0x42
push eax
mov byte [ebp - 0x64b], 0x3a
mov byte [ebp - 0x64a], bl
call edi
jmp 0x403bad
call esi
test eax, eax
je 0x403bad
cmp byte [ebp - 0x293], 0x3a
jne 0x403bad
movzx eax, byte [ebp - 0x294]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x184]
push eax
push 3
jne 0x403c03
call esi
test eax, eax
je 0x403be4
cmp byte [ebp - 0x183], 0x3a
jne 0x403be4
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x52c]
mov byte [ebp - 0x52c], 0x42
push eax
mov byte [ebp - 0x52b], 0x3a
mov byte [ebp - 0x52a], bl
call edi
jmp 0x403c20
call esi
test eax, eax
je 0x403c20
cmp byte [ebp - 0x183], 0x3a
jne 0x403c20
movzx eax, byte [ebp - 0x184]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x364]
push eax
push 3
jne 0x403c76
call esi
test eax, eax
je 0x403c57
cmp byte [ebp - 0x363], 0x3a
jne 0x403c57
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x740]
mov byte [ebp - 0x740], 0x42
push eax
mov byte [ebp - 0x73f], 0x3a
mov byte [ebp - 0x73e], bl
call edi
jmp 0x403c93
call esi
test eax, eax
je 0x403c93
cmp byte [ebp - 0x363], 0x3a
jne 0x403c93
movzx eax, byte [ebp - 0x364]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18c]
push eax
push 3
jne 0x403ce9
call esi
test eax, eax
je 0x403cca
cmp byte [ebp - 0x18b], 0x3a
jne 0x403cca
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x534]
mov byte [ebp - 0x534], 0x42
push eax
mov byte [ebp - 0x533], 0x3a
mov byte [ebp - 0x532], bl
call edi
jmp 0x403d06
call esi
test eax, eax
je 0x403d06
cmp byte [ebp - 0x18b], 0x3a
jne 0x403d06
movzx eax, byte [ebp - 0x18c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x29c]
push eax
push 3
jne 0x403d5d
call esi
test eax, eax
je 0x403d3e
cmp byte [ebp - 0x29b], 0x3a
jne 0x403d3e
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x654]
mov byte [ebp - 0x654], 0x42
push eax
mov byte [ebp - 0x653], 0x3a
mov byte [ebp - 0x652], bl
call edi
jmp 0x403d7a
call esi
test eax, eax
je 0x403d7a
cmp byte [ebp - 0x29b], 0x3a
jne 0x403d7a
movzx eax, byte [ebp - 0x29c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x194]
push eax
push 3
jne 0x403dd0
call esi
test eax, eax
je 0x403db1
cmp byte [ebp - 0x193], 0x3a
jne 0x403db1
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x53c]
mov byte [ebp - 0x53c], 0x42
push eax
mov byte [ebp - 0x53b], 0x3a
mov byte [ebp - 0x53a], bl
call edi
jmp 0x403ded
call esi
test eax, eax
je 0x403ded
cmp byte [ebp - 0x193], 0x3a
jne 0x403ded
movzx eax, byte [ebp - 0x194]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x324]
push eax
push 3
jne 0x403e43
call esi
test eax, eax
je 0x403e24
cmp byte [ebp - 0x323], 0x3a
jne 0x403e24
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e4]
mov byte [ebp - 0x6e4], 0x42
push eax
mov byte [ebp - 0x6e3], 0x3a
mov byte [ebp - 0x6e2], bl
call edi
jmp 0x403e60
call esi
test eax, eax
je 0x403e60
cmp byte [ebp - 0x323], 0x3a
jne 0x403e60
movzx eax, byte [ebp - 0x324]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x19c]
push eax
push 3
jne 0x403eb7
call esi
test eax, eax
je 0x403e98
cmp byte [ebp - 0x19b], 0x3a
jne 0x403e98
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x544]
mov byte [ebp - 0x544], 0x42
push eax
mov byte [ebp - 0x543], 0x3a
mov byte [ebp - 0x542], bl
call edi
jmp 0x403ed4
call esi
test eax, eax
je 0x403ed4
cmp byte [ebp - 0x19b], 0x3a
jne 0x403ed4
movzx eax, byte [ebp - 0x19c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a4]
push eax
push 3
jne 0x403f2c
call esi
test eax, eax
je 0x403f0d
cmp byte [ebp - 0x2a3], 0x3a
jne 0x403f0d
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x65c]
mov byte [ebp - 0x65c], 0x42
push eax
mov byte [ebp - 0x65b], 0x3a
mov byte [ebp - 0x65a], bl
call edi
jmp 0x403f49
call esi
test eax, eax
je 0x403f49
cmp byte [ebp - 0x2a3], 0x3a
jne 0x403f49
movzx eax, byte [ebp - 0x2a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a4]
push eax
push 3
jne 0x403fd0
call esi
test eax, eax
je 0x403fb1
cmp byte [ebp - 0x1a3], 0x3a
jne 0x403fb1
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x54c]
mov byte [ebp - 0x54c], 0x42
push eax
mov byte [ebp - 0x54b], 0x3a
mov byte [ebp - 0x54a], bl
call edi
jmp 0x403fed
call esi
test eax, eax
je 0x403fed
cmp byte [ebp - 0x1a3], 0x3a
jne 0x403fed
movzx eax, byte [ebp - 0x1a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x7ac]
call fcn.0042241d
lea ecx, [ebp - 0x7ac]
call fcn.00423832
lea ecx, [ebp - 0x7ac]
call fcn.004241b3
lea ecx, [ebp - 0x7ac]
call fcn.00422e3c
lea ecx, [ebp - 0x75c]
jmp 0x406ffa
lea eax, [ebp + 0x14]
test eax, eax
jne 0x404b57
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a4]
push eax
push 3
jne 0x404087
call esi
test eax, eax
je 0x404068
cmp byte [ebp - 0x3a3], 0x3a
jne 0x404068
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x72c]
mov byte [ebp - 0x72c], 0x42
push eax
mov byte [ebp - 0x72b], 0x3a
mov byte [ebp - 0x72a], bl
call edi
jmp 0x4040a4
call esi
test eax, eax
je 0x4040a4
cmp byte [ebp - 0x3a3], 0x3a
jne 0x4040a4
movzx eax, byte [ebp - 0x3a4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1ac]
push eax
push 3
jne 0x4040fa
call esi
test eax, eax
je 0x4040db
cmp byte [ebp - 0x1ab], 0x3a
jne 0x4040db
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x554]
mov byte [ebp - 0x554], 0x42
push eax
mov byte [ebp - 0x553], 0x3a
mov byte [ebp - 0x552], bl
call edi
jmp 0x404117
call esi
test eax, eax
je 0x404117
cmp byte [ebp - 0x1ab], 0x3a
jne 0x404117
movzx eax, byte [ebp - 0x1ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2ac]
push eax
push 3
jne 0x40416f
call esi
test eax, eax
je 0x404150
cmp byte [ebp - 0x2ab], 0x3a
jne 0x404150
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x664]
mov byte [ebp - 0x664], 0x42
push eax
mov byte [ebp - 0x663], 0x3a
mov byte [ebp - 0x662], bl
call edi
jmp 0x40418c
call esi
test eax, eax
je 0x40418c
cmp byte [ebp - 0x2ab], 0x3a
jne 0x40418c
movzx eax, byte [ebp - 0x2ac]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b4]
push eax
push 3
jne 0x4041e4
call esi
test eax, eax
je 0x4041c5
cmp byte [ebp - 0x1b3], 0x3a
jne 0x4041c5
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x55c]
mov byte [ebp - 0x55c], 0x42
push eax
mov byte [ebp - 0x55b], 0x3a
mov byte [ebp - 0x55a], bl
call edi
jmp 0x404201
call esi
test eax, eax
je 0x404201
cmp byte [ebp - 0x1b3], 0x3a
jne 0x404201
movzx eax, byte [ebp - 0x1b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x32c]
push eax
push 3
jne 0x404258
call esi
test eax, eax
je 0x404239
cmp byte [ebp - 0x32b], 0x3a
jne 0x404239
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6ec]
mov byte [ebp - 0x6ec], 0x42
push eax
mov byte [ebp - 0x6eb], 0x3a
mov byte [ebp - 0x6ea], bl
call edi
jmp 0x404275
call esi
test eax, eax
je 0x404275
cmp byte [ebp - 0x32b], 0x3a
jne 0x404275
movzx eax, byte [ebp - 0x32c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1bc]
push eax
push 3
jne 0x4042cb
call esi
test eax, eax
je 0x4042ac
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4042ac
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x564]
mov byte [ebp - 0x564], 0x42
push eax
mov byte [ebp - 0x563], 0x3a
mov byte [ebp - 0x562], bl
call edi
jmp 0x4042e8
call esi
test eax, eax
je 0x4042e8
cmp byte [ebp - 0x1bb], 0x3a
jne 0x4042e8
movzx eax, byte [ebp - 0x1bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b4]
push eax
push 3
jne 0x404342
call esi
test eax, eax
je 0x404323
cmp byte [ebp - 0x2b3], 0x3a
jne 0x404323
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x66c]
mov byte [ebp - 0x66c], 0x42
push eax
mov byte [ebp - 0x66b], 0x3a
mov byte [ebp - 0x66a], bl
call edi
jmp 0x40435f
call esi
test eax, eax
je 0x40435f
cmp byte [ebp - 0x2b3], 0x3a
jne 0x40435f
movzx eax, byte [ebp - 0x2b4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c4]
push eax
push 3
jne 0x4043b5
call esi
test eax, eax
je 0x404396
cmp byte [ebp - 0x1c3], 0x3a
jne 0x404396
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x56c]
mov byte [ebp - 0x56c], 0x42
push eax
mov byte [ebp - 0x56b], 0x3a
mov byte [ebp - 0x56a], bl
call edi
jmp 0x4043d2
call esi
test eax, eax
je 0x4043d2
cmp byte [ebp - 0x1c3], 0x3a
jne 0x4043d2
movzx eax, byte [ebp - 0x1c4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x36c]
push eax
push 3
jne 0x404428
call esi
test eax, eax
je 0x404409
cmp byte [ebp - 0x36b], 0x3a
jne 0x404409
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x748]
mov byte [ebp - 0x748], 0x42
push eax
mov byte [ebp - 0x747], 0x3a
mov byte [ebp - 0x746], bl
call edi
jmp 0x404445
call esi
test eax, eax
je 0x404445
cmp byte [ebp - 0x36b], 0x3a
jne 0x404445
movzx eax, byte [ebp - 0x36c]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1cc]
push eax
push 3
jne 0x40449c
call esi
test eax, eax
je 0x40447d
cmp byte [ebp - 0x1cb], 0x3a
jne 0x40447d
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x574]
mov byte [ebp - 0x574], 0x42
push eax
mov byte [ebp - 0x573], 0x3a
mov byte [ebp - 0x572], bl
call edi
jmp 0x4044b9
call esi
test eax, eax
je 0x4044b9
cmp byte [ebp - 0x1cb], 0x3a
jne 0x4044b9
movzx eax, byte [ebp - 0x1cc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2bc]
push eax
push 3
jne 0x40450f
call esi
test eax, eax
je 0x4044f0
cmp byte [ebp - 0x2bb], 0x3a
jne 0x4044f0
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x674]
mov byte [ebp - 0x674], 0x42
push eax
mov byte [ebp - 0x673], 0x3a
mov byte [ebp - 0x672], bl
call edi
jmp 0x40452c
call esi
test eax, eax
je 0x40452c
cmp byte [ebp - 0x2bb], 0x3a
jne 0x40452c
movzx eax, byte [ebp - 0x2bc]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d4]
push eax
push 3
jne 0x404582
call esi
test eax, eax
je 0x404563
cmp byte [ebp - 0x1d3], 0x3a
jne 0x404563
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x57c]
mov byte [ebp - 0x57c], 0x42
push eax
mov byte [ebp - 0x57b], 0x3a
mov byte [ebp - 0x57a], bl
call edi
jmp 0x40459f
call esi
test eax, eax
je 0x40459f
cmp byte [ebp - 0x1d3], 0x3a
jne 0x40459f
movzx eax, byte [ebp - 0x1d4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 4]
push eax
push 3
jne 0x4045f0
call esi
test eax, eax
je 0x4045d1
cmp byte [ebp - 3], 0x3a
jne 0x4045d1
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f4]
mov byte [ebp - 0x6f4], 0x42
push eax
mov byte [ebp - 0x6f3], 0x3a
mov byte [ebp - 0x6f2], bl
call edi
jmp 0x404607
call esi
test eax, eax
je 0x404607
cmp byte [ebp - 3], 0x3a
jne 0x404607
movzx eax, byte [ebp - 4]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 8]
push eax
push 3
jne 0x404655
call esi
test eax, eax
je 0x404636
cmp byte [ebp - 7], 0x3a
jne 0x404636
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x584]
mov byte [ebp - 0x584], 0x42
push eax
mov byte [ebp - 0x583], 0x3a
mov byte [ebp - 0x582], bl
call edi
jmp 0x40466c
call esi
test eax, eax
je 0x40466c
cmp byte [ebp - 7], 0x3a
jne 0x40466c
movzx eax, byte [ebp - 8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x10]
push eax
push 3
jne 0x4046bc
call esi
test eax, eax
je 0x40469d
cmp byte [ebp - 0xf], 0x3a
jne 0x40469d
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x67c]
mov byte [ebp - 0x67c], 0x42
push eax
mov byte [ebp - 0x67b], 0x3a
mov byte [ebp - 0x67a], bl
call edi
jmp 0x4046d3
call esi
test eax, eax
je 0x4046d3
cmp byte [ebp - 0xf], 0x3a
jne 0x4046d3
movzx eax, byte [ebp - 0x10]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x18]
push eax
push 3
jne 0x404721
call esi
test eax, eax
je 0x404702
cmp byte [ebp - 0x17], 0x3a
jne 0x404702
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x58c]
mov byte [ebp - 0x58c], 0x42
push eax
mov byte [ebp - 0x58b], 0x3a
mov byte [ebp - 0x58a], bl
call edi
jmp 0x404738
call esi
test eax, eax
je 0x404738
cmp byte [ebp - 0x17], 0x3a
jne 0x404738
movzx eax, byte [ebp - 0x18]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x20]
push eax
push 3
jne 0x404787
call esi
test eax, eax
je 0x404768
cmp byte [ebp - 0x1f], 0x3a
jne 0x404768
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x734]
mov byte [ebp - 0x734], 0x42
push eax
mov byte [ebp - 0x733], 0x3a
mov byte [ebp - 0x732], bl
call edi
jmp 0x40479e
call esi
test eax, eax
je 0x40479e
cmp byte [ebp - 0x1f], 0x3a
jne 0x40479e
movzx eax, byte [ebp - 0x20]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x28]
push eax
push 3
jne 0x4047eb
call esi
test eax, eax
je 0x4047cc
cmp byte [ebp - 0x27], 0x3a
jne 0x4047cc
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b0]
mov byte [ebp - 0x3b0], 0x42
push eax
mov byte [ebp - 0x3af], 0x3a
mov byte [ebp - 0x3ae], bl
call edi
jmp 0x404802
call esi
test eax, eax
je 0x404802
cmp byte [ebp - 0x27], 0x3a
jne 0x404802
movzx eax, byte [ebp - 0x28]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x30]
push eax
push 3
jne 0x40484f
call esi
test eax, eax
je 0x404830
cmp byte [ebp - 0x2f], 0x3a
jne 0x404830
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3b8]
mov byte [ebp - 0x3b8], 0x42
push eax
mov byte [ebp - 0x3b7], 0x3a
mov byte [ebp - 0x3b6], bl
call edi
jmp 0x404866
call esi
test eax, eax
je 0x404866
cmp byte [ebp - 0x2f], 0x3a
jne 0x404866
movzx eax, byte [ebp - 0x30]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x38]
push eax
push 3
jne 0x4048b3
call esi
test eax, eax
je 0x404894
cmp byte [ebp - 0x37], 0x3a
jne 0x404894
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c0]
mov byte [ebp - 0x3c0], 0x42
push eax
mov byte [ebp - 0x3bf], 0x3a
mov byte [ebp - 0x3be], bl
call edi
jmp 0x4048ca
call esi
test eax, eax
je 0x4048ca
cmp byte [ebp - 0x37], 0x3a
jne 0x4048ca
movzx eax, byte [ebp - 0x38]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x40]
push eax
push 3
jne 0x404918
call esi
test eax, eax
je 0x4048f9
cmp byte [ebp - 0x3f], 0x3a
jne 0x4048f9
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3c8]
mov byte [ebp - 0x3c8], 0x42
push eax
mov byte [ebp - 0x3c7], 0x3a
mov byte [ebp - 0x3c6], bl
call edi
jmp 0x40492f
call esi
test eax, eax
je 0x40492f
cmp byte [ebp - 0x3f], 0x3a
jne 0x40492f
movzx eax, byte [ebp - 0x40]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x48]
push eax
push 3
jne 0x40497c
call esi
test eax, eax
je 0x40495d
cmp byte [ebp - 0x47], 0x3a
jne 0x40495d
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d0]
mov byte [ebp - 0x3d0], 0x42
push eax
mov byte [ebp - 0x3cf], 0x3a
mov byte [ebp - 0x3ce], bl
call edi
jmp 0x404993
call esi
test eax, eax
je 0x404993
cmp byte [ebp - 0x47], 0x3a
jne 0x404993
movzx eax, byte [ebp - 0x48]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x50]
push eax
push 3
jne 0x4049e0
call esi
test eax, eax
je 0x4049c1
cmp byte [ebp - 0x4f], 0x3a
jne 0x4049c1
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3d8]
mov byte [ebp - 0x3d8], 0x42
push eax
mov byte [ebp - 0x3d7], 0x3a
mov byte [ebp - 0x3d6], bl
call edi
jmp 0x4049f7
call esi
test eax, eax
je 0x4049f7
cmp byte [ebp - 0x4f], 0x3a
jne 0x4049f7
movzx eax, byte [ebp - 0x50]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x58]
push eax
push 3
jne 0x404a45
call esi
test eax, eax
je 0x404a26
cmp byte [ebp - 0x57], 0x3a
jne 0x404a26
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e0]
mov byte [ebp - 0x3e0], 0x42
push eax
mov byte [ebp - 0x3df], 0x3a
mov byte [ebp - 0x3de], bl
call edi
jmp 0x404a5c
call esi
test eax, eax
je 0x404a5c
cmp byte [ebp - 0x57], 0x3a
jne 0x404a5c
movzx eax, byte [ebp - 0x58]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x60]
push eax
push 3
jne 0x404aab
call esi
test eax, eax
je 0x404a8c
cmp byte [ebp - 0x5f], 0x3a
jne 0x404a8c
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3e8]
mov byte [ebp - 0x3e8], 0x42
push eax
mov byte [ebp - 0x3e7], 0x3a
mov byte [ebp - 0x3e6], bl
call edi
jmp 0x404ac2
call esi
test eax, eax
je 0x404ac2
cmp byte [ebp - 0x5f], 0x3a
jne 0x404ac2
movzx eax, byte [ebp - 0x60]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x68]
push eax
push 3
jne 0x404b40
call esi
test eax, eax
je 0x404b21
cmp byte [ebp - 0x67], 0x3a
jne 0x404b21
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f0]
mov byte [ebp - 0x3f0], 0x42
push eax
mov byte [ebp - 0x3ef], 0x3a
mov byte [ebp - 0x3ee], bl
call edi
jmp 0x404b57
call esi
test eax, eax
je 0x404b57
cmp byte [ebp - 0x67], 0x3a
jne 0x404b57
movzx eax, byte [ebp - 0x68]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x754]
call fcn.0040e922
lea ecx, [ebp - 0x754]
call fcn.0040fc15
test eax, eax
jne 0x40578c
lea ecx, [ebp - 0x76c]
call fcn.00414f5a
test eax, eax
jne 0x40578c
lea eax, [ebp + 0x14]
test eax, eax
jne 0x405760
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x70]
push eax
push 3
jne 0x404be2
call esi
test eax, eax
je 0x404bc3
cmp byte [ebp - 0x6f], 0x3a
jne 0x404bc3
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x3f8]
mov byte [ebp - 0x3f8], 0x42
push eax
mov byte [ebp - 0x3f7], 0x3a
mov byte [ebp - 0x3f6], bl
call edi
jmp 0x404bf9
call esi
test eax, eax
je 0x404bf9
cmp byte [ebp - 0x6f], 0x3a
jne 0x404bf9
movzx eax, byte [ebp - 0x70]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x78]
push eax
push 3
jne 0x404c46
call esi
test eax, eax
je 0x404c27
cmp byte [ebp - 0x77], 0x3a
jne 0x404c27
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x400]
mov byte [ebp - 0x400], 0x42
push eax
mov byte [ebp - 0x3ff], 0x3a
mov byte [ebp - 0x3fe], bl
call edi
jmp 0x404c5d
call esi
test eax, eax
je 0x404c5d
cmp byte [ebp - 0x77], 0x3a
jne 0x404c5d
movzx eax, byte [ebp - 0x78]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x80]
push eax
push 3
jne 0x404cac
call esi
test eax, eax
je 0x404c8d
cmp byte [ebp - 0x7f], 0x3a
jne 0x404c8d
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x408]
mov byte [ebp - 0x408], 0x42
push eax
mov byte [ebp - 0x407], 0x3a
mov byte [ebp - 0x406], bl
call edi
jmp 0x404cc3
call esi
test eax, eax
je 0x404cc3
cmp byte [ebp - 0x7f], 0x3a
jne 0x404cc3
movzx eax, byte [ebp - 0x80]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x88]
push eax
push 3
jne 0x404d1b
call esi
test eax, eax
je 0x404cfc
cmp byte [ebp - 0x87], 0x3a
jne 0x404cfc
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x410]
mov byte [ebp - 0x410], 0x42
push eax
mov byte [ebp - 0x40f], 0x3a
mov byte [ebp - 0x40e], bl
call edi
jmp 0x404d38
call esi
test eax, eax
je 0x404d38
cmp byte [ebp - 0x87], 0x3a
jne 0x404d38
movzx eax, byte [ebp - 0x88]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x90]
push eax
push 3
jne 0x404d8f
call esi
test eax, eax
je 0x404d70
cmp byte [ebp - 0x8f], 0x3a
jne 0x404d70
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x418]
mov byte [ebp - 0x418], 0x42
push eax
mov byte [ebp - 0x417], 0x3a
mov byte [ebp - 0x416], bl
call edi
jmp 0x404dac
call esi
test eax, eax
je 0x404dac
cmp byte [ebp - 0x8f], 0x3a
jne 0x404dac
movzx eax, byte [ebp - 0x90]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x98]
push eax
push 3
jne 0x404e02
call esi
test eax, eax
je 0x404de3
cmp byte [ebp - 0x97], 0x3a
jne 0x404de3
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x420]
mov byte [ebp - 0x420], 0x42
push eax
mov byte [ebp - 0x41f], 0x3a
mov byte [ebp - 0x41e], bl
call edi
jmp 0x404e1f
call esi
test eax, eax
je 0x404e1f
cmp byte [ebp - 0x97], 0x3a
jne 0x404e1f
movzx eax, byte [ebp - 0x98]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa0]
push eax
push 3
jne 0x404e79
call esi
test eax, eax
je 0x404e5a
cmp byte [ebp - 0x9f], 0x3a
jne 0x404e5a
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x428]
mov byte [ebp - 0x428], 0x42
push eax
mov byte [ebp - 0x427], 0x3a
mov byte [ebp - 0x426], bl
call edi
jmp 0x404e96
call esi
test eax, eax
je 0x404e96
cmp byte [ebp - 0x9f], 0x3a
jne 0x404e96
movzx eax, byte [ebp - 0xa0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xa8]
push eax
push 3
jne 0x404eec
call esi
test eax, eax
je 0x404ecd
cmp byte [ebp - 0xa7], 0x3a
jne 0x404ecd
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x430]
mov byte [ebp - 0x430], 0x42
push eax
mov byte [ebp - 0x42f], 0x3a
mov byte [ebp - 0x42e], bl
call edi
jmp 0x404f09
call esi
test eax, eax
je 0x404f09
cmp byte [ebp - 0xa7], 0x3a
jne 0x404f09
movzx eax, byte [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb0]
push eax
push 3
jne 0x404f5f
call esi
test eax, eax
je 0x404f40
cmp byte [ebp - 0xaf], 0x3a
jne 0x404f40
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x438]
mov byte [ebp - 0x438], 0x42
push eax
mov byte [ebp - 0x437], 0x3a
mov byte [ebp - 0x436], bl
call edi
jmp 0x404f7c
call esi
test eax, eax
je 0x404f7c
cmp byte [ebp - 0xaf], 0x3a
jne 0x404f7c
movzx eax, byte [ebp - 0xb0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xb8]
push eax
push 3
jne 0x404fd3
call esi
test eax, eax
je 0x404fb4
cmp byte [ebp - 0xb7], 0x3a
jne 0x404fb4
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x440]
mov byte [ebp - 0x440], 0x42
push eax
mov byte [ebp - 0x43f], 0x3a
mov byte [ebp - 0x43e], bl
call edi
jmp 0x404ff0
call esi
test eax, eax
je 0x404ff0
cmp byte [ebp - 0xb7], 0x3a
jne 0x404ff0
movzx eax, byte [ebp - 0xb8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc0]
push eax
push 3
jne 0x405046
call esi
test eax, eax
je 0x405027
cmp byte [ebp - 0xbf], 0x3a
jne 0x405027
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x448]
mov byte [ebp - 0x448], 0x42
push eax
mov byte [ebp - 0x447], 0x3a
mov byte [ebp - 0x446], bl
call edi
jmp 0x405063
call esi
test eax, eax
je 0x405063
cmp byte [ebp - 0xbf], 0x3a
jne 0x405063
movzx eax, byte [ebp - 0xc0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xc8]
push eax
push 3
jne 0x4050b9
call esi
test eax, eax
je 0x40509a
cmp byte [ebp - 0xc7], 0x3a
jne 0x40509a
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x450]
mov byte [ebp - 0x450], 0x42
push eax
mov byte [ebp - 0x44f], 0x3a
mov byte [ebp - 0x44e], bl
call edi
jmp 0x4050d6
call esi
test eax, eax
je 0x4050d6
cmp byte [ebp - 0xc7], 0x3a
jne 0x4050d6
movzx eax, byte [ebp - 0xc8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd0]
push eax
push 3
jne 0x405130
call esi
test eax, eax
je 0x405111
cmp byte [ebp - 0xcf], 0x3a
jne 0x405111
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x458]
mov byte [ebp - 0x458], 0x42
push eax
mov byte [ebp - 0x457], 0x3a
mov byte [ebp - 0x456], bl
call edi
jmp 0x40514d
call esi
test eax, eax
je 0x40514d
cmp byte [ebp - 0xcf], 0x3a
jne 0x40514d
movzx eax, byte [ebp - 0xd0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xd8]
push eax
push 3
jne 0x4051a4
call esi
test eax, eax
je 0x405185
cmp byte [ebp - 0xd7], 0x3a
jne 0x405185
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x460]
mov byte [ebp - 0x460], 0x42
push eax
mov byte [ebp - 0x45f], 0x3a
mov byte [ebp - 0x45e], bl
call edi
jmp 0x4051c1
call esi
test eax, eax
je 0x4051c1
cmp byte [ebp - 0xd7], 0x3a
jne 0x4051c1
movzx eax, byte [ebp - 0xd8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe0]
push eax
push 3
jne 0x40521a
call esi
test eax, eax
je 0x4051fb
cmp byte [ebp - 0xdf], 0x3a
jne 0x4051fb
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x468]
mov byte [ebp - 0x468], 0x42
push eax
mov byte [ebp - 0x467], 0x3a
mov byte [ebp - 0x466], bl
call edi
jmp 0x405237
call esi
test eax, eax
je 0x405237
cmp byte [ebp - 0xdf], 0x3a
jne 0x405237
movzx eax, byte [ebp - 0xe0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xe8]
push eax
push 3
jne 0x40528e
call esi
test eax, eax
je 0x40526f
cmp byte [ebp - 0xe7], 0x3a
jne 0x40526f
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x470]
mov byte [ebp - 0x470], 0x42
push eax
mov byte [ebp - 0x46f], 0x3a
mov byte [ebp - 0x46e], bl
call edi
jmp 0x4052ab
call esi
test eax, eax
je 0x4052ab
cmp byte [ebp - 0xe7], 0x3a
jne 0x4052ab
movzx eax, byte [ebp - 0xe8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf0]
push eax
push 3
jne 0x405303
call esi
test eax, eax
je 0x4052e4
cmp byte [ebp - 0xef], 0x3a
jne 0x4052e4
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x478]
mov byte [ebp - 0x478], 0x42
push eax
mov byte [ebp - 0x477], 0x3a
mov byte [ebp - 0x476], bl
call edi
jmp 0x405320
call esi
test eax, eax
je 0x405320
cmp byte [ebp - 0xef], 0x3a
jne 0x405320
movzx eax, byte [ebp - 0xf0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0xf8]
push eax
push 3
jne 0x405376
call esi
test eax, eax
je 0x405357
cmp byte [ebp - 0xf7], 0x3a
jne 0x405357
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x480]
mov byte [ebp - 0x480], 0x42
push eax
mov byte [ebp - 0x47f], 0x3a
mov byte [ebp - 0x47e], bl
call edi
jmp 0x405393
call esi
test eax, eax
je 0x405393
cmp byte [ebp - 0xf7], 0x3a
jne 0x405393
movzx eax, byte [ebp - 0xf8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x100]
push eax
push 3
jne 0x4053e9
call esi
test eax, eax
je 0x4053ca
cmp byte [ebp - 0xff], 0x3a
jne 0x4053ca
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x488]
mov byte [ebp - 0x488], 0x42
push eax
mov byte [ebp - 0x487], 0x3a
mov byte [ebp - 0x486], bl
call edi
jmp 0x405406
call esi
test eax, eax
je 0x405406
cmp byte [ebp - 0xff], 0x3a
jne 0x405406
movzx eax, byte [ebp - 0x100]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x108]
push eax
push 3
jne 0x40545c
call esi
test eax, eax
je 0x40543d
cmp byte [ebp - 0x107], 0x3a
jne 0x40543d
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x490]
mov byte [ebp - 0x490], 0x42
push eax
mov byte [ebp - 0x48f], 0x3a
mov byte [ebp - 0x48e], bl
call edi
jmp 0x405479
call esi
test eax, eax
je 0x405479
cmp byte [ebp - 0x107], 0x3a
jne 0x405479
movzx eax, byte [ebp - 0x108]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x110]
push eax
push 3
jne 0x4054d0
call esi
test eax, eax
je 0x4054b1
cmp byte [ebp - 0x10f], 0x3a
jne 0x4054b1
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x498]
mov byte [ebp - 0x498], 0x42
push eax
mov byte [ebp - 0x497], 0x3a
mov byte [ebp - 0x496], bl
call edi
jmp 0x4054ed
call esi
test eax, eax
je 0x4054ed
cmp byte [ebp - 0x10f], 0x3a
jne 0x4054ed
movzx eax, byte [ebp - 0x110]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x118]
push eax
push 3
jne 0x405543
call esi
test eax, eax
je 0x405524
cmp byte [ebp - 0x117], 0x3a
jne 0x405524
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a0]
mov byte [ebp - 0x4a0], 0x42
push eax
mov byte [ebp - 0x49f], 0x3a
mov byte [ebp - 0x49e], bl
call edi
jmp 0x405560
call esi
test eax, eax
je 0x405560
cmp byte [ebp - 0x117], 0x3a
jne 0x405560
movzx eax, byte [ebp - 0x118]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x120]
push eax
push 3
jne 0x4055b6
call esi
test eax, eax
je 0x405597
cmp byte [ebp - 0x11f], 0x3a
jne 0x405597
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4a8]
mov byte [ebp - 0x4a8], 0x42
push eax
mov byte [ebp - 0x4a7], 0x3a
mov byte [ebp - 0x4a6], bl
call edi
jmp 0x4055d3
call esi
test eax, eax
je 0x4055d3
cmp byte [ebp - 0x11f], 0x3a
jne 0x4055d3
movzx eax, byte [ebp - 0x120]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x128]
push eax
push 3
jne 0x40562a
call esi
test eax, eax
je 0x40560b
cmp byte [ebp - 0x127], 0x3a
jne 0x40560b
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b0]
mov byte [ebp - 0x4b0], 0x42
push eax
mov byte [ebp - 0x4af], 0x3a
mov byte [ebp - 0x4ae], bl
call edi
jmp 0x405647
call esi
test eax, eax
je 0x405647
cmp byte [ebp - 0x127], 0x3a
jne 0x405647
movzx eax, byte [ebp - 0x128]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x130]
push eax
push 3
jne 0x40569f
call esi
test eax, eax
je 0x405680
cmp byte [ebp - 0x12f], 0x3a
jne 0x405680
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4b8]
mov byte [ebp - 0x4b8], 0x42
push eax
mov byte [ebp - 0x4b7], 0x3a
mov byte [ebp - 0x4b6], bl
call edi
jmp 0x4056bc
call esi
test eax, eax
je 0x4056bc
cmp byte [ebp - 0x12f], 0x3a
jne 0x4056bc
movzx eax, byte [ebp - 0x130]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x138]
push eax
push 3
jne 0x405743
call esi
test eax, eax
je 0x405724
cmp byte [ebp - 0x137], 0x3a
jne 0x405724
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c0]
mov byte [ebp - 0x4c0], 0x42
push eax
mov byte [ebp - 0x4bf], 0x3a
mov byte [ebp - 0x4be], bl
call edi
jmp 0x405760
call esi
test eax, eax
je 0x405760
cmp byte [ebp - 0x137], 0x3a
jne 0x405760
movzx eax, byte [ebp - 0x138]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x7cc]
call fcn.0042241d
lea ecx, [ebp - 0x7cc]
call fcn.00423832
lea ecx, [ebp - 0x7cc]
call fcn.004241b3
lea ecx, [ebp - 0x7cc]
jmp 0x406fef
lea eax, [ebp + 0x14]
test eax, eax
jne 0x406391
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x140]
push eax
push 3
jne 0x4057ef
call esi
test eax, eax
je 0x4057d0
cmp byte [ebp - 0x13f], 0x3a
jne 0x4057d0
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4c8]
mov byte [ebp - 0x4c8], 0x42
push eax
mov byte [ebp - 0x4c7], 0x3a
mov byte [ebp - 0x4c6], bl
call edi
jmp 0x40580c
call esi
test eax, eax
je 0x40580c
cmp byte [ebp - 0x13f], 0x3a
jne 0x40580c
movzx eax, byte [ebp - 0x140]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x148]
push eax
push 3
jne 0x405862
call esi
test eax, eax
je 0x405843
cmp byte [ebp - 0x147], 0x3a
jne 0x405843
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d0]
mov byte [ebp - 0x4d0], 0x42
push eax
mov byte [ebp - 0x4cf], 0x3a
mov byte [ebp - 0x4ce], bl
call edi
jmp 0x40587f
call esi
test eax, eax
je 0x40587f
cmp byte [ebp - 0x147], 0x3a
jne 0x40587f
movzx eax, byte [ebp - 0x148]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x150]
push eax
push 3
jne 0x4058d7
call esi
test eax, eax
je 0x4058b8
cmp byte [ebp - 0x14f], 0x3a
jne 0x4058b8
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4d8]
mov byte [ebp - 0x4d8], 0x42
push eax
mov byte [ebp - 0x4d7], 0x3a
mov byte [ebp - 0x4d6], bl
call edi
jmp 0x4058f4
call esi
test eax, eax
je 0x4058f4
cmp byte [ebp - 0x14f], 0x3a
jne 0x4058f4
movzx eax, byte [ebp - 0x150]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x158]
push eax
push 3
jne 0x40594c
call esi
test eax, eax
je 0x40592d
cmp byte [ebp - 0x157], 0x3a
jne 0x40592d
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e0]
mov byte [ebp - 0x4e0], 0x42
push eax
mov byte [ebp - 0x4df], 0x3a
mov byte [ebp - 0x4de], bl
call edi
jmp 0x405969
call esi
test eax, eax
je 0x405969
cmp byte [ebp - 0x157], 0x3a
jne 0x405969
movzx eax, byte [ebp - 0x158]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x160]
push eax
push 3
jne 0x4059c0
call esi
test eax, eax
je 0x4059a1
cmp byte [ebp - 0x15f], 0x3a
jne 0x4059a1
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4e8]
mov byte [ebp - 0x4e8], 0x42
push eax
mov byte [ebp - 0x4e7], 0x3a
mov byte [ebp - 0x4e6], bl
call edi
jmp 0x4059dd
call esi
test eax, eax
je 0x4059dd
cmp byte [ebp - 0x15f], 0x3a
jne 0x4059dd
movzx eax, byte [ebp - 0x160]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x168]
push eax
push 3
jne 0x405a33
call esi
test eax, eax
je 0x405a14
cmp byte [ebp - 0x167], 0x3a
jne 0x405a14
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f0]
mov byte [ebp - 0x4f0], 0x42
push eax
mov byte [ebp - 0x4ef], 0x3a
mov byte [ebp - 0x4ee], bl
call edi
jmp 0x405a50
call esi
test eax, eax
je 0x405a50
cmp byte [ebp - 0x167], 0x3a
jne 0x405a50
movzx eax, byte [ebp - 0x168]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x170]
push eax
push 3
jne 0x405aaa
call esi
test eax, eax
je 0x405a8b
cmp byte [ebp - 0x16f], 0x3a
jne 0x405a8b
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x4f8]
mov byte [ebp - 0x4f8], 0x42
push eax
mov byte [ebp - 0x4f7], 0x3a
mov byte [ebp - 0x4f6], bl
call edi
jmp 0x405ac7
call esi
test eax, eax
je 0x405ac7
cmp byte [ebp - 0x16f], 0x3a
jne 0x405ac7
movzx eax, byte [ebp - 0x170]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x178]
push eax
push 3
jne 0x405b1d
call esi
test eax, eax
je 0x405afe
cmp byte [ebp - 0x177], 0x3a
jne 0x405afe
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x500]
mov byte [ebp - 0x500], 0x42
push eax
mov byte [ebp - 0x4ff], 0x3a
mov byte [ebp - 0x4fe], bl
call edi
jmp 0x405b3a
call esi
test eax, eax
je 0x405b3a
cmp byte [ebp - 0x177], 0x3a
jne 0x405b3a
movzx eax, byte [ebp - 0x178]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x180]
push eax
push 3
jne 0x405b90
call esi
test eax, eax
je 0x405b71
cmp byte [ebp - 0x17f], 0x3a
jne 0x405b71
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x508]
mov byte [ebp - 0x508], 0x42
push eax
mov byte [ebp - 0x507], 0x3a
mov byte [ebp - 0x506], bl
call edi
jmp 0x405bad
call esi
test eax, eax
je 0x405bad
cmp byte [ebp - 0x17f], 0x3a
jne 0x405bad
movzx eax, byte [ebp - 0x180]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x188]
push eax
push 3
jne 0x405c04
call esi
test eax, eax
je 0x405be5
cmp byte [ebp - 0x187], 0x3a
jne 0x405be5
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x510]
mov byte [ebp - 0x510], 0x42
push eax
mov byte [ebp - 0x50f], 0x3a
mov byte [ebp - 0x50e], bl
call edi
jmp 0x405c21
call esi
test eax, eax
je 0x405c21
cmp byte [ebp - 0x187], 0x3a
jne 0x405c21
movzx eax, byte [ebp - 0x188]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x190]
push eax
push 3
jne 0x405c77
call esi
test eax, eax
je 0x405c58
cmp byte [ebp - 0x18f], 0x3a
jne 0x405c58
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x518]
mov byte [ebp - 0x518], 0x42
push eax
mov byte [ebp - 0x517], 0x3a
mov byte [ebp - 0x516], bl
call edi
jmp 0x405c94
call esi
test eax, eax
je 0x405c94
cmp byte [ebp - 0x18f], 0x3a
jne 0x405c94
movzx eax, byte [ebp - 0x190]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x198]
push eax
push 3
jne 0x405cea
call esi
test eax, eax
je 0x405ccb
cmp byte [ebp - 0x197], 0x3a
jne 0x405ccb
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x520]
mov byte [ebp - 0x520], 0x42
push eax
mov byte [ebp - 0x51f], 0x3a
mov byte [ebp - 0x51e], bl
call edi
jmp 0x405d07
call esi
test eax, eax
je 0x405d07
cmp byte [ebp - 0x197], 0x3a
jne 0x405d07
movzx eax, byte [ebp - 0x198]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a0]
push eax
push 3
jne 0x405d61
call esi
test eax, eax
je 0x405d42
cmp byte [ebp - 0x19f], 0x3a
jne 0x405d42
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x528]
mov byte [ebp - 0x528], 0x42
push eax
mov byte [ebp - 0x527], 0x3a
mov byte [ebp - 0x526], bl
call edi
jmp 0x405d7e
call esi
test eax, eax
je 0x405d7e
cmp byte [ebp - 0x19f], 0x3a
jne 0x405d7e
movzx eax, byte [ebp - 0x1a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1a8]
push eax
push 3
jne 0x405dd5
call esi
test eax, eax
je 0x405db6
cmp byte [ebp - 0x1a7], 0x3a
jne 0x405db6
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x530]
mov byte [ebp - 0x530], 0x42
push eax
mov byte [ebp - 0x52f], 0x3a
mov byte [ebp - 0x52e], bl
call edi
jmp 0x405df2
call esi
test eax, eax
je 0x405df2
cmp byte [ebp - 0x1a7], 0x3a
jne 0x405df2
movzx eax, byte [ebp - 0x1a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b0]
push eax
push 3
jne 0x405e4b
call esi
test eax, eax
je 0x405e2c
cmp byte [ebp - 0x1af], 0x3a
jne 0x405e2c
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x538]
mov byte [ebp - 0x538], 0x42
push eax
mov byte [ebp - 0x537], 0x3a
mov byte [ebp - 0x536], bl
call edi
jmp 0x405e68
call esi
test eax, eax
je 0x405e68
cmp byte [ebp - 0x1af], 0x3a
jne 0x405e68
movzx eax, byte [ebp - 0x1b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1b8]
push eax
push 3
jne 0x405ebf
call esi
test eax, eax
je 0x405ea0
cmp byte [ebp - 0x1b7], 0x3a
jne 0x405ea0
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x540]
mov byte [ebp - 0x540], 0x42
push eax
mov byte [ebp - 0x53f], 0x3a
mov byte [ebp - 0x53e], bl
call edi
jmp 0x405edc
call esi
test eax, eax
je 0x405edc
cmp byte [ebp - 0x1b7], 0x3a
jne 0x405edc
movzx eax, byte [ebp - 0x1b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c0]
push eax
push 3
jne 0x405f34
call esi
test eax, eax
je 0x405f15
cmp byte [ebp - 0x1bf], 0x3a
jne 0x405f15
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x548]
mov byte [ebp - 0x548], 0x42
push eax
mov byte [ebp - 0x547], 0x3a
mov byte [ebp - 0x546], bl
call edi
jmp 0x405f51
call esi
test eax, eax
je 0x405f51
cmp byte [ebp - 0x1bf], 0x3a
jne 0x405f51
movzx eax, byte [ebp - 0x1c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1c8]
push eax
push 3
jne 0x405fa7
call esi
test eax, eax
je 0x405f88
cmp byte [ebp - 0x1c7], 0x3a
jne 0x405f88
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x550]
mov byte [ebp - 0x550], 0x42
push eax
mov byte [ebp - 0x54f], 0x3a
mov byte [ebp - 0x54e], bl
call edi
jmp 0x405fc4
call esi
test eax, eax
je 0x405fc4
cmp byte [ebp - 0x1c7], 0x3a
jne 0x405fc4
movzx eax, byte [ebp - 0x1c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d0]
push eax
push 3
jne 0x40601a
call esi
test eax, eax
je 0x405ffb
cmp byte [ebp - 0x1cf], 0x3a
jne 0x405ffb
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x558]
mov byte [ebp - 0x558], 0x42
push eax
mov byte [ebp - 0x557], 0x3a
mov byte [ebp - 0x556], bl
call edi
jmp 0x406037
call esi
test eax, eax
je 0x406037
cmp byte [ebp - 0x1cf], 0x3a
jne 0x406037
movzx eax, byte [ebp - 0x1d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1d8]
push eax
push 3
jne 0x40608d
call esi
test eax, eax
je 0x40606e
cmp byte [ebp - 0x1d7], 0x3a
jne 0x40606e
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x560]
mov byte [ebp - 0x560], 0x42
push eax
mov byte [ebp - 0x55f], 0x3a
mov byte [ebp - 0x55e], bl
call edi
jmp 0x4060aa
call esi
test eax, eax
je 0x4060aa
cmp byte [ebp - 0x1d7], 0x3a
jne 0x4060aa
movzx eax, byte [ebp - 0x1d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e0]
push eax
push 3
jne 0x406101
call esi
test eax, eax
je 0x4060e2
cmp byte [ebp - 0x1df], 0x3a
jne 0x4060e2
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x568]
mov byte [ebp - 0x568], 0x42
push eax
mov byte [ebp - 0x567], 0x3a
mov byte [ebp - 0x566], bl
call edi
jmp 0x40611e
call esi
test eax, eax
je 0x40611e
cmp byte [ebp - 0x1df], 0x3a
jne 0x40611e
movzx eax, byte [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1e8]
push eax
push 3
jne 0x406174
call esi
test eax, eax
je 0x406155
cmp byte [ebp - 0x1e7], 0x3a
jne 0x406155
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x570]
mov byte [ebp - 0x570], 0x42
push eax
mov byte [ebp - 0x56f], 0x3a
mov byte [ebp - 0x56e], bl
call edi
jmp 0x406191
call esi
test eax, eax
je 0x406191
cmp byte [ebp - 0x1e7], 0x3a
jne 0x406191
movzx eax, byte [ebp - 0x1e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f0]
push eax
push 3
jne 0x4061e7
call esi
test eax, eax
je 0x4061c8
cmp byte [ebp - 0x1ef], 0x3a
jne 0x4061c8
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x578]
mov byte [ebp - 0x578], 0x42
push eax
mov byte [ebp - 0x577], 0x3a
mov byte [ebp - 0x576], bl
call edi
jmp 0x406204
call esi
test eax, eax
je 0x406204
cmp byte [ebp - 0x1ef], 0x3a
jne 0x406204
movzx eax, byte [ebp - 0x1f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x1f8]
push eax
push 3
jne 0x40625b
call esi
test eax, eax
je 0x40623c
cmp byte [ebp - 0x1f7], 0x3a
jne 0x40623c
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x580]
mov byte [ebp - 0x580], 0x42
push eax
mov byte [ebp - 0x57f], 0x3a
mov byte [ebp - 0x57e], bl
call edi
jmp 0x406278
call esi
test eax, eax
je 0x406278
cmp byte [ebp - 0x1f7], 0x3a
jne 0x406278
movzx eax, byte [ebp - 0x1f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x200]
push eax
push 3
jne 0x4062d0
call esi
test eax, eax
je 0x4062b1
cmp byte [ebp - 0x1ff], 0x3a
jne 0x4062b1
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x588]
mov byte [ebp - 0x588], 0x42
push eax
mov byte [ebp - 0x587], 0x3a
mov byte [ebp - 0x586], bl
call edi
jmp 0x4062ed
call esi
test eax, eax
je 0x4062ed
cmp byte [ebp - 0x1ff], 0x3a
jne 0x4062ed
movzx eax, byte [ebp - 0x200]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x208]
push eax
push 3
jne 0x406374
call esi
test eax, eax
je 0x406355
cmp byte [ebp - 0x207], 0x3a
jne 0x406355
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x590]
mov byte [ebp - 0x590], 0x42
push eax
mov byte [ebp - 0x58f], 0x3a
mov byte [ebp - 0x58e], bl
call edi
jmp 0x406391
call esi
test eax, eax
je 0x406391
cmp byte [ebp - 0x207], 0x3a
jne 0x406391
movzx eax, byte [ebp - 0x208]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x78c]
call fcn.0042241d
lea eax, [ebp - 0x754]
lea ecx, [ebp - 0x78c]
push eax
call fcn.00424f2d
test eax, eax
je 0x406fe9
lea eax, [ebp + 0x14]
test eax, eax
jne 0x406fbb
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x210]
push eax
push 3
jne 0x406419
call esi
test eax, eax
je 0x4063fa
cmp byte [ebp - 0x20f], 0x3a
jne 0x4063fa
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x598]
mov byte [ebp - 0x598], 0x42
push eax
mov byte [ebp - 0x597], 0x3a
mov byte [ebp - 0x596], bl
call edi
jmp 0x406436
call esi
test eax, eax
je 0x406436
cmp byte [ebp - 0x20f], 0x3a
jne 0x406436
movzx eax, byte [ebp - 0x210]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x218]
push eax
push 3
jne 0x40648c
call esi
test eax, eax
je 0x40646d
cmp byte [ebp - 0x217], 0x3a
jne 0x40646d
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a0]
mov byte [ebp - 0x5a0], 0x42
push eax
mov byte [ebp - 0x59f], 0x3a
mov byte [ebp - 0x59e], bl
call edi
jmp 0x4064a9
call esi
test eax, eax
je 0x4064a9
cmp byte [ebp - 0x217], 0x3a
jne 0x4064a9
movzx eax, byte [ebp - 0x218]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x220]
push eax
push 3
jne 0x406501
call esi
test eax, eax
je 0x4064e2
cmp byte [ebp - 0x21f], 0x3a
jne 0x4064e2
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5a8]
mov byte [ebp - 0x5a8], 0x42
push eax
mov byte [ebp - 0x5a7], 0x3a
mov byte [ebp - 0x5a6], bl
call edi
jmp 0x40651e
call esi
test eax, eax
je 0x40651e
cmp byte [ebp - 0x21f], 0x3a
jne 0x40651e
movzx eax, byte [ebp - 0x220]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x228]
push eax
push 3
jne 0x406576
call esi
test eax, eax
je 0x406557
cmp byte [ebp - 0x227], 0x3a
jne 0x406557
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b0]
mov byte [ebp - 0x5b0], 0x42
push eax
mov byte [ebp - 0x5af], 0x3a
mov byte [ebp - 0x5ae], bl
call edi
jmp 0x406593
call esi
test eax, eax
je 0x406593
cmp byte [ebp - 0x227], 0x3a
jne 0x406593
movzx eax, byte [ebp - 0x228]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x230]
push eax
push 3
jne 0x4065ea
call esi
test eax, eax
je 0x4065cb
cmp byte [ebp - 0x22f], 0x3a
jne 0x4065cb
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5b8]
mov byte [ebp - 0x5b8], 0x42
push eax
mov byte [ebp - 0x5b7], 0x3a
mov byte [ebp - 0x5b6], bl
call edi
jmp 0x406607
call esi
test eax, eax
je 0x406607
cmp byte [ebp - 0x22f], 0x3a
jne 0x406607
movzx eax, byte [ebp - 0x230]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x238]
push eax
push 3
jne 0x40665d
call esi
test eax, eax
je 0x40663e
cmp byte [ebp - 0x237], 0x3a
jne 0x40663e
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c0]
mov byte [ebp - 0x5c0], 0x42
push eax
mov byte [ebp - 0x5bf], 0x3a
mov byte [ebp - 0x5be], bl
call edi
jmp 0x40667a
call esi
test eax, eax
je 0x40667a
cmp byte [ebp - 0x237], 0x3a
jne 0x40667a
movzx eax, byte [ebp - 0x238]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x240]
push eax
push 3
jne 0x4066d4
call esi
test eax, eax
je 0x4066b5
cmp byte [ebp - 0x23f], 0x3a
jne 0x4066b5
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5c8]
mov byte [ebp - 0x5c8], 0x42
push eax
mov byte [ebp - 0x5c7], 0x3a
mov byte [ebp - 0x5c6], bl
call edi
jmp 0x4066f1
call esi
test eax, eax
je 0x4066f1
cmp byte [ebp - 0x23f], 0x3a
jne 0x4066f1
movzx eax, byte [ebp - 0x240]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x248]
push eax
push 3
jne 0x406747
call esi
test eax, eax
je 0x406728
cmp byte [ebp - 0x247], 0x3a
jne 0x406728
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d0]
mov byte [ebp - 0x5d0], 0x42
push eax
mov byte [ebp - 0x5cf], 0x3a
mov byte [ebp - 0x5ce], bl
call edi
jmp 0x406764
call esi
test eax, eax
je 0x406764
cmp byte [ebp - 0x247], 0x3a
jne 0x406764
movzx eax, byte [ebp - 0x248]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x250]
push eax
push 3
jne 0x4067ba
call esi
test eax, eax
je 0x40679b
cmp byte [ebp - 0x24f], 0x3a
jne 0x40679b
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5d8]
mov byte [ebp - 0x5d8], 0x42
push eax
mov byte [ebp - 0x5d7], 0x3a
mov byte [ebp - 0x5d6], bl
call edi
jmp 0x4067d7
call esi
test eax, eax
je 0x4067d7
cmp byte [ebp - 0x24f], 0x3a
jne 0x4067d7
movzx eax, byte [ebp - 0x250]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x258]
push eax
push 3
jne 0x40682e
call esi
test eax, eax
je 0x40680f
cmp byte [ebp - 0x257], 0x3a
jne 0x40680f
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e0]
mov byte [ebp - 0x5e0], 0x42
push eax
mov byte [ebp - 0x5df], 0x3a
mov byte [ebp - 0x5de], bl
call edi
jmp 0x40684b
call esi
test eax, eax
je 0x40684b
cmp byte [ebp - 0x257], 0x3a
jne 0x40684b
movzx eax, byte [ebp - 0x258]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x260]
push eax
push 3
jne 0x4068a1
call esi
test eax, eax
je 0x406882
cmp byte [ebp - 0x25f], 0x3a
jne 0x406882
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5e8]
mov byte [ebp - 0x5e8], 0x42
push eax
mov byte [ebp - 0x5e7], 0x3a
mov byte [ebp - 0x5e6], bl
call edi
jmp 0x4068be
call esi
test eax, eax
je 0x4068be
cmp byte [ebp - 0x25f], 0x3a
jne 0x4068be
movzx eax, byte [ebp - 0x260]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x268]
push eax
push 3
jne 0x406914
call esi
test eax, eax
je 0x4068f5
cmp byte [ebp - 0x267], 0x3a
jne 0x4068f5
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f0]
mov byte [ebp - 0x5f0], 0x42
push eax
mov byte [ebp - 0x5ef], 0x3a
mov byte [ebp - 0x5ee], bl
call edi
jmp 0x406931
call esi
test eax, eax
je 0x406931
cmp byte [ebp - 0x267], 0x3a
jne 0x406931
movzx eax, byte [ebp - 0x268]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x270]
push eax
push 3
jne 0x40698b
call esi
test eax, eax
je 0x40696c
cmp byte [ebp - 0x26f], 0x3a
jne 0x40696c
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x5f8]
mov byte [ebp - 0x5f8], 0x42
push eax
mov byte [ebp - 0x5f7], 0x3a
mov byte [ebp - 0x5f6], bl
call edi
jmp 0x4069a8
call esi
test eax, eax
je 0x4069a8
cmp byte [ebp - 0x26f], 0x3a
jne 0x4069a8
movzx eax, byte [ebp - 0x270]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x278]
push eax
push 3
jne 0x4069ff
call esi
test eax, eax
je 0x4069e0
cmp byte [ebp - 0x277], 0x3a
jne 0x4069e0
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x600]
mov byte [ebp - 0x600], 0x42
push eax
mov byte [ebp - 0x5ff], 0x3a
mov byte [ebp - 0x5fe], bl
call edi
jmp 0x406a1c
call esi
test eax, eax
je 0x406a1c
cmp byte [ebp - 0x277], 0x3a
jne 0x406a1c
movzx eax, byte [ebp - 0x278]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x280]
push eax
push 3
jne 0x406a75
call esi
test eax, eax
je 0x406a56
cmp byte [ebp - 0x27f], 0x3a
jne 0x406a56
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x608]
mov byte [ebp - 0x608], 0x42
push eax
mov byte [ebp - 0x607], 0x3a
mov byte [ebp - 0x606], bl
call edi
jmp 0x406a92
call esi
test eax, eax
je 0x406a92
cmp byte [ebp - 0x27f], 0x3a
jne 0x406a92
movzx eax, byte [ebp - 0x280]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x288]
push eax
push 3
jne 0x406ae9
call esi
test eax, eax
je 0x406aca
cmp byte [ebp - 0x287], 0x3a
jne 0x406aca
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x610]
mov byte [ebp - 0x610], 0x42
push eax
mov byte [ebp - 0x60f], 0x3a
mov byte [ebp - 0x60e], bl
call edi
jmp 0x406b06
call esi
test eax, eax
je 0x406b06
cmp byte [ebp - 0x287], 0x3a
jne 0x406b06
movzx eax, byte [ebp - 0x288]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x290]
push eax
push 3
jne 0x406b5e
call esi
test eax, eax
je 0x406b3f
cmp byte [ebp - 0x28f], 0x3a
jne 0x406b3f
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x618]
mov byte [ebp - 0x618], 0x42
push eax
mov byte [ebp - 0x617], 0x3a
mov byte [ebp - 0x616], bl
call edi
jmp 0x406b7b
call esi
test eax, eax
je 0x406b7b
cmp byte [ebp - 0x28f], 0x3a
jne 0x406b7b
movzx eax, byte [ebp - 0x290]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x298]
push eax
push 3
jne 0x406bd1
call esi
test eax, eax
je 0x406bb2
cmp byte [ebp - 0x297], 0x3a
jne 0x406bb2
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x620]
mov byte [ebp - 0x620], 0x42
push eax
mov byte [ebp - 0x61f], 0x3a
mov byte [ebp - 0x61e], bl
call edi
jmp 0x406bee
call esi
test eax, eax
je 0x406bee
cmp byte [ebp - 0x297], 0x3a
jne 0x406bee
movzx eax, byte [ebp - 0x298]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a0]
push eax
push 3
jne 0x406c44
call esi
test eax, eax
je 0x406c25
cmp byte [ebp - 0x29f], 0x3a
jne 0x406c25
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x628]
mov byte [ebp - 0x628], 0x42
push eax
mov byte [ebp - 0x627], 0x3a
mov byte [ebp - 0x626], bl
call edi
jmp 0x406c61
call esi
test eax, eax
je 0x406c61
cmp byte [ebp - 0x29f], 0x3a
jne 0x406c61
movzx eax, byte [ebp - 0x2a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2a8]
push eax
push 3
jne 0x406cb7
call esi
test eax, eax
je 0x406c98
cmp byte [ebp - 0x2a7], 0x3a
jne 0x406c98
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x630]
mov byte [ebp - 0x630], 0x42
push eax
mov byte [ebp - 0x62f], 0x3a
mov byte [ebp - 0x62e], bl
call edi
jmp 0x406cd4
call esi
test eax, eax
je 0x406cd4
cmp byte [ebp - 0x2a7], 0x3a
jne 0x406cd4
movzx eax, byte [ebp - 0x2a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b0]
push eax
push 3
jne 0x406d2b
call esi
test eax, eax
je 0x406d0c
cmp byte [ebp - 0x2af], 0x3a
jne 0x406d0c
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x638]
mov byte [ebp - 0x638], 0x42
push eax
mov byte [ebp - 0x637], 0x3a
mov byte [ebp - 0x636], bl
call edi
jmp 0x406d48
call esi
test eax, eax
je 0x406d48
cmp byte [ebp - 0x2af], 0x3a
jne 0x406d48
movzx eax, byte [ebp - 0x2b0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2b8]
push eax
push 3
jne 0x406d9e
call esi
test eax, eax
je 0x406d7f
cmp byte [ebp - 0x2b7], 0x3a
jne 0x406d7f
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x640]
mov byte [ebp - 0x640], 0x42
push eax
mov byte [ebp - 0x63f], 0x3a
mov byte [ebp - 0x63e], bl
call edi
jmp 0x406dbb
call esi
test eax, eax
je 0x406dbb
cmp byte [ebp - 0x2b7], 0x3a
jne 0x406dbb
movzx eax, byte [ebp - 0x2b8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c0]
push eax
push 3
jne 0x406e11
call esi
test eax, eax
je 0x406df2
cmp byte [ebp - 0x2bf], 0x3a
jne 0x406df2
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x648]
mov byte [ebp - 0x648], 0x42
push eax
mov byte [ebp - 0x647], 0x3a
mov byte [ebp - 0x646], bl
call edi
jmp 0x406e2e
call esi
test eax, eax
je 0x406e2e
cmp byte [ebp - 0x2bf], 0x3a
jne 0x406e2e
movzx eax, byte [ebp - 0x2c0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2c8]
push eax
push 3
jne 0x406e85
call esi
test eax, eax
je 0x406e66
cmp byte [ebp - 0x2c7], 0x3a
jne 0x406e66
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x650]
mov byte [ebp - 0x650], 0x42
push eax
mov byte [ebp - 0x64f], 0x3a
mov byte [ebp - 0x64e], bl
call edi
jmp 0x406ea2
call esi
test eax, eax
je 0x406ea2
cmp byte [ebp - 0x2c7], 0x3a
jne 0x406ea2
movzx eax, byte [ebp - 0x2c8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d0]
push eax
push 3
jne 0x406efa
call esi
test eax, eax
je 0x406edb
cmp byte [ebp - 0x2cf], 0x3a
jne 0x406edb
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x658]
mov byte [ebp - 0x658], 0x42
push eax
mov byte [ebp - 0x657], 0x3a
mov byte [ebp - 0x656], bl
call edi
jmp 0x406f17
call esi
test eax, eax
je 0x406f17
cmp byte [ebp - 0x2cf], 0x3a
jne 0x406f17
movzx eax, byte [ebp - 0x2d0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2d8]
push eax
push 3
jne 0x406f9e
call esi
test eax, eax
je 0x406f7f
cmp byte [ebp - 0x2d7], 0x3a
jne 0x406f7f
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x660]
mov byte [ebp - 0x660], 0x42
push eax
mov byte [ebp - 0x65f], 0x3a
mov byte [ebp - 0x65e], bl
call edi
jmp 0x406fbb
call esi
test eax, eax
je 0x406fbb
cmp byte [ebp - 0x2d7], 0x3a
jne 0x406fbb
movzx eax, byte [ebp - 0x2d8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea ecx, [ebp - 0x754]
call fcn.0041060d
mov eax, dword [0x4453d0]
push 0xbb8
call dword [eax + 0x3c]
lea ecx, [ebp - 0x78c]
call fcn.00423832
lea ecx, [ebp - 0x78c]
call fcn.004241b3
lea ecx, [ebp - 0x78c]
call fcn.00422e3c
lea ecx, [ebp - 0x754]
call fcn.0040f2ad
lea ecx, [ebp - 0x758]
call fcn.004158e9
lea ecx, [ebp - 0x760]
call fcn.00428a1f
lea ecx, [ebp - 0x76c]
call fcn.00414f43
mov ecx, dword [0x4453d0]
cmp ecx, ebx
je 0x407030
mov eax, dword [ecx]
push 1
call dword [eax]
lea eax, [ebp + 0x14]
test eax, eax
jne 0x407c35
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e0]
push eax
push 3
jne 0x407093
call esi
test eax, eax
je 0x407074
cmp byte [ebp - 0x2df], 0x3a
jne 0x407074
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x668]
mov byte [ebp - 0x668], 0x42
push eax
mov byte [ebp - 0x667], 0x3a
mov byte [ebp - 0x666], bl
call edi
jmp 0x4070b0
call esi
test eax, eax
je 0x4070b0
cmp byte [ebp - 0x2df], 0x3a
jne 0x4070b0
movzx eax, byte [ebp - 0x2e0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2e8]
push eax
push 3
jne 0x407106
call esi
test eax, eax
je 0x4070e7
cmp byte [ebp - 0x2e7], 0x3a
jne 0x4070e7
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x670]
mov byte [ebp - 0x670], 0x42
push eax
mov byte [ebp - 0x66f], 0x3a
mov byte [ebp - 0x66e], bl
call edi
jmp 0x407123
call esi
test eax, eax
je 0x407123
cmp byte [ebp - 0x2e7], 0x3a
jne 0x407123
movzx eax, byte [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f0]
push eax
push 3
jne 0x40717b
call esi
test eax, eax
je 0x40715c
cmp byte [ebp - 0x2ef], 0x3a
jne 0x40715c
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x678]
mov byte [ebp - 0x678], 0x42
push eax
mov byte [ebp - 0x677], 0x3a
mov byte [ebp - 0x676], bl
call edi
jmp 0x407198
call esi
test eax, eax
je 0x407198
cmp byte [ebp - 0x2ef], 0x3a
jne 0x407198
movzx eax, byte [ebp - 0x2f0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x2f8]
push eax
push 3
jne 0x4071f0
call esi
test eax, eax
je 0x4071d1
cmp byte [ebp - 0x2f7], 0x3a
jne 0x4071d1
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x680]
mov byte [ebp - 0x680], 0x42
push eax
mov byte [ebp - 0x67f], 0x3a
mov byte [ebp - 0x67e], bl
call edi
jmp 0x40720d
call esi
test eax, eax
je 0x40720d
cmp byte [ebp - 0x2f7], 0x3a
jne 0x40720d
movzx eax, byte [ebp - 0x2f8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x300]
push eax
push 3
jne 0x407264
call esi
test eax, eax
je 0x407245
cmp byte [ebp - 0x2ff], 0x3a
jne 0x407245
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x688]
mov byte [ebp - 0x688], 0x42
push eax
mov byte [ebp - 0x687], 0x3a
mov byte [ebp - 0x686], bl
call edi
jmp 0x407281
call esi
test eax, eax
je 0x407281
cmp byte [ebp - 0x2ff], 0x3a
jne 0x407281
movzx eax, byte [ebp - 0x300]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x308]
push eax
push 3
jne 0x4072d7
call esi
test eax, eax
je 0x4072b8
cmp byte [ebp - 0x307], 0x3a
jne 0x4072b8
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x690]
mov byte [ebp - 0x690], 0x42
push eax
mov byte [ebp - 0x68f], 0x3a
mov byte [ebp - 0x68e], bl
call edi
jmp 0x4072f4
call esi
test eax, eax
je 0x4072f4
cmp byte [ebp - 0x307], 0x3a
jne 0x4072f4
movzx eax, byte [ebp - 0x308]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x310]
push eax
push 3
jne 0x40734e
call esi
test eax, eax
je 0x40732f
cmp byte [ebp - 0x30f], 0x3a
jne 0x40732f
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x698]
mov byte [ebp - 0x698], 0x42
push eax
mov byte [ebp - 0x697], 0x3a
mov byte [ebp - 0x696], bl
call edi
jmp 0x40736b
call esi
test eax, eax
je 0x40736b
cmp byte [ebp - 0x30f], 0x3a
jne 0x40736b
movzx eax, byte [ebp - 0x310]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_PulseEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x318]
push eax
push 3
jne 0x4073c1
call esi
test eax, eax
je 0x4073a2
cmp byte [ebp - 0x317], 0x3a
jne 0x4073a2
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a0]
mov byte [ebp - 0x6a0], 0x42
push eax
mov byte [ebp - 0x69f], 0x3a
mov byte [ebp - 0x69e], bl
call edi
jmp 0x4073de
call esi
test eax, eax
je 0x4073de
cmp byte [ebp - 0x317], 0x3a
jne 0x4073de
movzx eax, byte [ebp - 0x318]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x320]
push eax
push 3
jne 0x407434
call esi
test eax, eax
je 0x407415
cmp byte [ebp - 0x31f], 0x3a
jne 0x407415
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6a8]
mov byte [ebp - 0x6a8], 0x42
push eax
mov byte [ebp - 0x6a7], 0x3a
mov byte [ebp - 0x6a6], bl
call edi
jmp 0x407451
call esi
test eax, eax
je 0x407451
cmp byte [ebp - 0x31f], 0x3a
jne 0x407451
movzx eax, byte [ebp - 0x320]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x328]
push eax
push 3
jne 0x4074a8
call esi
test eax, eax
je 0x407489
cmp byte [ebp - 0x327], 0x3a
jne 0x407489
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b0]
mov byte [ebp - 0x6b0], 0x42
push eax
mov byte [ebp - 0x6af], 0x3a
mov byte [ebp - 0x6ae], bl
call edi
jmp 0x4074c5
call esi
test eax, eax
je 0x4074c5
cmp byte [ebp - 0x327], 0x3a
jne 0x4074c5
movzx eax, byte [ebp - 0x328]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x330]
push eax
push 3
jne 0x40751b
call esi
test eax, eax
je 0x4074fc
cmp byte [ebp - 0x32f], 0x3a
jne 0x4074fc
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6b8]
mov byte [ebp - 0x6b8], 0x42
push eax
mov byte [ebp - 0x6b7], 0x3a
mov byte [ebp - 0x6b6], bl
call edi
jmp 0x407538
call esi
test eax, eax
je 0x407538
cmp byte [ebp - 0x32f], 0x3a
jne 0x407538
movzx eax, byte [ebp - 0x330]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x338]
push eax
push 3
jne 0x40758e
call esi
test eax, eax
je 0x40756f
cmp byte [ebp - 0x337], 0x3a
jne 0x40756f
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c0]
mov byte [ebp - 0x6c0], 0x42
push eax
mov byte [ebp - 0x6bf], 0x3a
mov byte [ebp - 0x6be], bl
call edi
jmp 0x4075ab
call esi
test eax, eax
je 0x4075ab
cmp byte [ebp - 0x337], 0x3a
jne 0x4075ab
movzx eax, byte [ebp - 0x338]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x340]
push eax
push 3
jne 0x407605
call esi
test eax, eax
je 0x4075e6
cmp byte [ebp - 0x33f], 0x3a
jne 0x4075e6
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6c8]
mov byte [ebp - 0x6c8], 0x42
push eax
mov byte [ebp - 0x6c7], 0x3a
mov byte [ebp - 0x6c6], bl
call edi
jmp 0x407622
call esi
test eax, eax
je 0x407622
cmp byte [ebp - 0x33f], 0x3a
jne 0x407622
movzx eax, byte [ebp - 0x340]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x348]
push eax
push 3
jne 0x407679
call esi
test eax, eax
je 0x40765a
cmp byte [ebp - 0x347], 0x3a
jne 0x40765a
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d0]
mov byte [ebp - 0x6d0], 0x42
push eax
mov byte [ebp - 0x6cf], 0x3a
mov byte [ebp - 0x6ce], bl
call edi
jmp 0x407696
call esi
test eax, eax
je 0x407696
cmp byte [ebp - 0x347], 0x3a
jne 0x407696
movzx eax, byte [ebp - 0x348]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x350]
push eax
push 3
jne 0x4076ef
call esi
test eax, eax
je 0x4076d0
cmp byte [ebp - 0x34f], 0x3a
jne 0x4076d0
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6d8]
mov byte [ebp - 0x6d8], 0x42
push eax
mov byte [ebp - 0x6d7], 0x3a
mov byte [ebp - 0x6d6], bl
call edi
jmp 0x40770c
call esi
test eax, eax
je 0x40770c
cmp byte [ebp - 0x34f], 0x3a
jne 0x40770c
movzx eax, byte [ebp - 0x350]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x358]
push eax
push 3
jne 0x407763
call esi
test eax, eax
je 0x407744
cmp byte [ebp - 0x357], 0x3a
jne 0x407744
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e0]
mov byte [ebp - 0x6e0], 0x42
push eax
mov byte [ebp - 0x6df], 0x3a
mov byte [ebp - 0x6de], bl
call edi
jmp 0x407780
call esi
test eax, eax
je 0x407780
cmp byte [ebp - 0x357], 0x3a
jne 0x407780
movzx eax, byte [ebp - 0x358]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x360]
push eax
push 3
jne 0x4077d8
call esi
test eax, eax
je 0x4077b9
cmp byte [ebp - 0x35f], 0x3a
jne 0x4077b9
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6e8]
mov byte [ebp - 0x6e8], 0x42
push eax
mov byte [ebp - 0x6e7], 0x3a
mov byte [ebp - 0x6e6], bl
call edi
jmp 0x4077f5
call esi
test eax, eax
je 0x4077f5
cmp byte [ebp - 0x35f], 0x3a
jne 0x4077f5
movzx eax, byte [ebp - 0x360]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x368]
push eax
push 3
jne 0x40784b
call esi
test eax, eax
je 0x40782c
cmp byte [ebp - 0x367], 0x3a
jne 0x40782c
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f0]
mov byte [ebp - 0x6f0], 0x42
push eax
mov byte [ebp - 0x6ef], 0x3a
mov byte [ebp - 0x6ee], bl
call edi
jmp 0x407868
call esi
test eax, eax
je 0x407868
cmp byte [ebp - 0x367], 0x3a
jne 0x407868
movzx eax, byte [ebp - 0x368]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x370]
push eax
push 3
jne 0x4078be
call esi
test eax, eax
je 0x40789f
cmp byte [ebp - 0x36f], 0x3a
jne 0x40789f
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x6f8]
mov byte [ebp - 0x6f8], 0x42
push eax
mov byte [ebp - 0x6f7], 0x3a
mov byte [ebp - 0x6f6], bl
call edi
jmp 0x4078db
call esi
test eax, eax
je 0x4078db
cmp byte [ebp - 0x36f], 0x3a
jne 0x4078db
movzx eax, byte [ebp - 0x370]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x378]
push eax
push 3
jne 0x407931
call esi
test eax, eax
je 0x407912
cmp byte [ebp - 0x377], 0x3a
jne 0x407912
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x700]
mov byte [ebp - 0x700], 0x42
push eax
mov byte [ebp - 0x6ff], 0x3a
mov byte [ebp - 0x6fe], bl
call edi
jmp 0x40794e
call esi
test eax, eax
je 0x40794e
cmp byte [ebp - 0x377], 0x3a
jne 0x40794e
movzx eax, byte [ebp - 0x378]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x380]
push eax
push 3
jne 0x4079a5
call esi
test eax, eax
je 0x407986
cmp byte [ebp - 0x37f], 0x3a
jne 0x407986
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x708]
mov byte [ebp - 0x708], 0x42
push eax
mov byte [ebp - 0x707], 0x3a
mov byte [ebp - 0x706], bl
call edi
jmp 0x4079c2
call esi
test eax, eax
je 0x4079c2
cmp byte [ebp - 0x37f], 0x3a
jne 0x4079c2
movzx eax, byte [ebp - 0x380]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x388]
push eax
push 3
jne 0x407a18
call esi
test eax, eax
je 0x4079f9
cmp byte [ebp - 0x387], 0x3a
jne 0x4079f9
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x710]
mov byte [ebp - 0x710], 0x42
push eax
mov byte [ebp - 0x70f], 0x3a
mov byte [ebp - 0x70e], bl
call edi
jmp 0x407a35
call esi
test eax, eax
je 0x407a35
cmp byte [ebp - 0x387], 0x3a
jne 0x407a35
movzx eax, byte [ebp - 0x388]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEvent]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x390]
push eax
push 3
jne 0x407a8b
call esi
test eax, eax
je 0x407a6c
cmp byte [ebp - 0x38f], 0x3a
jne 0x407a6c
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x718]
mov byte [ebp - 0x718], 0x42
push eax
mov byte [ebp - 0x717], 0x3a
mov byte [ebp - 0x716], bl
call edi
jmp 0x407aa8
call esi
test eax, eax
je 0x407aa8
cmp byte [ebp - 0x38f], 0x3a
jne 0x407aa8
movzx eax, byte [ebp - 0x390]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SleepEx]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x398]
push eax
push 3
jne 0x407aff
call esi
test eax, eax
je 0x407ae0
cmp byte [ebp - 0x397], 0x3a
jne 0x407ae0
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x720]
mov byte [ebp - 0x720], 0x42
push eax
mov byte [ebp - 0x71f], 0x3a
mov byte [ebp - 0x71e], bl
call edi
jmp 0x407b1c
call esi
test eax, eax
je 0x407b1c
cmp byte [ebp - 0x397], 0x3a
jne 0x407b1c
movzx eax, byte [ebp - 0x398]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a0]
push eax
push 3
jne 0x407b74
call esi
test eax, eax
je 0x407b55
cmp byte [ebp - 0x39f], 0x3a
jne 0x407b55
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x728]
mov byte [ebp - 0x728], 0x42
push eax
mov byte [ebp - 0x727], 0x3a
mov byte [ebp - 0x726], bl
call edi
jmp 0x407b91
call esi
test eax, eax
je 0x407b91
cmp byte [ebp - 0x39f], 0x3a
jne 0x407b91
movzx eax, byte [ebp - 0x3a0]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenEventA]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenThread]
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea eax, [ebp + 0x14]
cmp eax, 0x4db
lea eax, [ebp - 0x3a8]
push eax
push 3
jne 0x407c18
call esi
test eax, eax
je 0x407bf9
cmp byte [ebp - 0x3a7], 0x3a
jne 0x407bf9
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
lea eax, [ebp - 0x730]
mov byte [ebp - 0x730], 0x42
push eax
mov byte [ebp - 0x72f], 0x3a
mov byte [ebp - 0x72e], bl
call edi
jmp 0x407c35
call esi
test eax, eax
je 0x407c35
cmp byte [ebp - 0x3a7], 0x3a
jne 0x407c35
movzx eax, byte [ebp - 0x3a8]
push eax
call sub.MSVCRT.dll_toupper
pop ecx
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10