Function at 0x4094c0
Capabilities:
Get common file path
Get hostname
Get session user name
Open clipboard
Query environment variable
Read clipboard data
Set environment variable

Disassembly:
enter 0x518, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x108]
call fcn.00401940
mov byte [ebp - 0x319], 0
push 0x426b43
lea eax, [ebp - 0x108]
push eax
call fcn.004033b0
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x110], 0
jle 0x40aba4
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409517
cmp dword [ebp - 0x10c], eax
jge 0x409531
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409531
inc dword [ebp - 0x10c]
jmp 0x409506
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40ab7e
inc eax
mov dword [ebp - 0x114], eax
mov bl, byte [0x454f94]
test bl, bl
jne 0x409607
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x31
jb 0x409607
cmp byte [ebp + eax - 0x108], 0x39
ja 0x409607
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x41c]
push 1
call fcn.00401d30
mov ecx, edi
push ecx
call fcn.004062c0
mov dword [ebp - 0x118], eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
push 2
call fcn.00404fd0
call fcn.0040baa0
cmp eax, dword [ebp - 0x118]
jl 0x409602
lea eax, [ebp - 0x41c]
push eax
push dword [ebp - 0x118]
call fcn.0040b730
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x4094f9
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409618
cmp dword [ebp - 0x114], eax
jge 0x409632
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409632
inc dword [ebp - 0x114]
jmp 0x409607
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40ab7e
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409410
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x426b45
mov eax, edi
push eax
call fcn.004033b0
test eax, eax
jle 0x4096b7
mov byte [ebp - 0x319], 1
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xeb
jmp 0x40ab7e
push 0x426b47
lea eax, [ebp - 0x218]
push eax
call fcn.004033b0
cmp eax, 1
jne 0x409704
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x218]
push ebx
call fcn.0040b2e0
jmp 0x40ab7e
push 0x426b4a
lea eax, [ebp - 0x218]
push eax
call fcn.004033b0
cmp eax, 1
jne 0x40973b
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xec
mov eax, dword [ebp - 0x114]
mov byte [ebp + eax - 0x108], 0xec
jmp 0x40ab7e
lea esi, [ebp - 0x218]
mov edi, 0x426b4d
call fcn.004065d0
test al, al
je 0x409796
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
push 0x427328
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426b53
call fcn.004065d0
test al, al
je 0x4098b6
mov esi, 0x427120
mov edi, 0x426b58
call fcn.004065d0
test al, al
je 0x40986f
mov dword [0x427324], 0xff
push 0x427324
push 0x427021
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x4097dc
lea eax, [ebp - 0x41c]
push eax
push 0x427021
call fcn.00402b90
mov edi, 0x427020
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x427320
push 0x427221
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x409810
lea eax, [ebp - 0x41c]
push eax
push 0x427221
call fcn.00402b90
mov edi, 0x427220
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x426b59
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x427020
call fcn.00401af0
mov edi, 0x427120
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
push 0x427120
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426b5b
call fcn.004065d0
test al, al
je 0x4099d6
mov esi, 0x427120
mov edi, 0x426b60
call fcn.004065d0
test al, al
je 0x40998f
mov dword [0x427324], 0xff
push 0x427324
push 0x427021
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x4098fc
lea eax, [ebp - 0x41c]
push eax
push 0x427021
call fcn.00402b90
mov edi, 0x427020
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x427320
push 0x427221
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x409930
lea eax, [ebp - 0x41c]
push eax
push 0x427221
call fcn.00402b90
mov edi, 0x427220
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x426b61
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x427020
call fcn.00401af0
mov edi, 0x427120
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
push 0x427220
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426b63
call fcn.004065d0
test al, al
je 0x409af6
mov esi, 0x427120
mov edi, 0x426b68
call fcn.004065d0
test al, al
je 0x409aaf
mov dword [0x427324], 0xff
push 0x427324
push 0x427021
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x409a1c
lea eax, [ebp - 0x41c]
push eax
push 0x427021
call fcn.00402b90
mov edi, 0x427020
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x427320
push 0x427221
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x409a50
lea eax, [ebp - 0x41c]
push eax
push 0x427221
call fcn.00402b90
mov edi, 0x427220
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x426b69
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x427020
call fcn.00401af0
mov edi, 0x427120
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
push 0x427020
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426b6b
call fcn.004065d0
test al, al
je 0x409b5a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov bl, byte [0x42701f]
test bl, bl
jne 0x409b39
call fcn.0040b0a0
push 0x426e1f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426b76
call fcn.004065d0
test al, al
je 0x409bbe
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov bl, byte [0x42701f]
test bl, bl
jne 0x409b9d
call fcn.0040b0a0
push 0x426cbb
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426b7f
call fcn.004065d0
test al, al
jne 0x409bda
mov edi, 0x426b86
call fcn.004065d0
test al, al
je 0x409c43
push 0x454f96
push 0xff
call sub.kernel32.dll_GetTempPathA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x41c]
push ebx
push 0x454f96
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
lea esi, [ebp - 0x218]
mov edi, 0x426b8c
call fcn.004065d0
test al, al
je 0x409cc0
push 0xff
push 0x454f96
call sub.kernel32.dll_GetWindowsDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x41c]
push ebx
push 0x454f96
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426b95
call fcn.004065d0
test al, al
je 0x409d37
push 0xff
push 0x454f96
call sub.kernel32.dll_GetSystemDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x41c]
push ebx
push 0x454f96
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426ba1
call fcn.004065d0
test al, al
jne 0x409d57
mov edi, 0x426bb0
call fcn.004065d0
test al, al
je 0x409dff
lea edi, [ebp - 0x218]
mov esi, 0x426bba
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x426bc7
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x454f96
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x41c]
push ebx
push 0x454f96
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
lea esi, [ebp - 0x218]
mov edi, 0x426bc9
call fcn.004065d0
test al, al
je 0x409ebb
mov edi, esi
mov esi, 0x426bd3
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x426bdb
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x454f96
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x41c]
push ebx
push 0x454f96
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426bdd
call fcn.004065d0
test al, al
je 0x40a087
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409f04
cmp dword [ebp - 0x10c], eax
jge 0x409f1e
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409f1e
inc dword [ebp - 0x10c]
jmp 0x409ef3
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409fbb
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409f4b
cmp dword [ebp - 0x114], eax
jge 0x409f65
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409f65
inc dword [ebp - 0x114]
jmp 0x409f3a
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409fbb
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409410
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404fd0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x426be3
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x454f96
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x41c]
push ebx
push 0x454f96
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426be5
call fcn.004065d0
test al, al
je 0x40a379
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a0d0
cmp dword [ebp - 0x10c], eax
jge 0x40a0ea
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a0ea
inc dword [ebp - 0x10c]
jmp 0x40a0bf
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a187
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a117
cmp dword [ebp - 0x114], eax
jge 0x40a131
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a131
inc dword [ebp - 0x114]
jmp 0x40a106
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a187
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409410
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404fd0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x426bee
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
mov edi, 0x454f95
lea esi, [ebp - 0x218]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a22a
cmp dword [ebp - 0x10c], eax
jge 0x40a244
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a244
inc dword [ebp - 0x10c]
jmp 0x40a219
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a2e1
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a271
cmp dword [ebp - 0x114], eax
jge 0x40a28b
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a28b
inc dword [ebp - 0x114]
jmp 0x40a260
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a2e1
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409410
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404fd0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x426bf0
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x454f96
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
jmp 0x40ab7e
mov edi, 0x426bf2
call fcn.004065d0
test al, al
je 0x40a3dc
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea edi, [ebp - 0x318]
mov esi, 0x426bf8
call fcn.00401940
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426bfc
call fcn.004065d0
test al, al
je 0x40a423
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov byte [0x454f94], 1
mov byte [0x426cba], 1
jmp 0x40ab7e
mov edi, 0x426c03
call fcn.004065d0
test al, al
je 0x40a46a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov byte [0x454f94], 0
mov byte [0x426cba], 0
jmp 0x40ab7e
mov edi, 0x426c09
call fcn.004065d0
test al, al
je 0x40a4aa
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov byte [0x454e7d], 1
jmp 0x40ab7e
mov edi, 0x426c0e
call fcn.004065d0
test al, al
je 0x40a5a7
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov byte [0x454e8a], 1
mov edi, 0x454e93
mov esi, 0x426c14
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x40a589
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x426c15
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x40a589
mov esi, 0x454e93
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x454e93
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.00404fd0
jmp 0x40a4f8
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00404fd0
jmp 0x40ab7e
mov edi, 0x426c1e
call fcn.004065d0
test al, al
je 0x40a6ab
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov byte [0x454e8a], 1
mov byte [0x454f93], 1
mov edi, 0x454e93
mov esi, 0x426c25
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x40a68d
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x426c26
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x40a68d
mov esi, 0x454e93
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x454e93
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.00404fd0
jmp 0x40a5fc
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00404fd0
jmp 0x40ab7e
mov edi, 0x426c2f
call fcn.004065d0
test al, al
je 0x40a6eb
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov byte [0x426cb9], 1
jmp 0x40ab7e
mov edi, 0x426c36
call fcn.004065d0
test al, al
je 0x40a7b7
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea edi, [ebp - 0x218]
mov esi, 0x426c3e
call fcn.00401940
push 0
call sub.user32.dll_OpenClipboard
test al, al
je 0x40a794
push 1
call sub.user32.dll_GetClipboardData
mov dword [0x454e8b], eax
test eax, eax
jbe 0x40a78b
push eax
call sub.kernel32.dll_GlobalLock
mov dword [0x454e8f], eax
test eax, eax
je 0x40a780
lea ebx, [ebp - 0x41c]
push ebx
push dword [0x454e8f]
call fcn.00402b90
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push dword [0x454e8b]
call sub.kernel32.dll_CloseHandle
call sub.user32.dll_CloseClipboard
test al, al
je 0x40a794
lea eax, [ebp - 0x218]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426c3f
call fcn.004065d0
test al, al
je 0x40a7fe
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov byte [0x426cb9], 1
mov byte [0x426cb8], 1
jmp 0x40ab7e
mov edi, 0x426c47
call fcn.004065d0
test al, al
je 0x40a837
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
jmp 0x40ab7e
mov edi, 0x426c4f
call fcn.004065d0
test al, al
je 0x40a87a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov dword [0x454e86], 0x4000000
jmp 0x40ab7e
mov edi, 0x426c55
call fcn.004065d0
test al, al
je 0x40a8bd
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov dword [0x454e86], 0x200
jmp 0x40ab7e
mov edi, 0x426c5c
call fcn.004065d0
test al, al
je 0x40a900
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov dword [0x454e86], 0x10
jmp 0x40ab7e
mov edi, 0x426c63
call fcn.004065d0
test al, al
je 0x40a943
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov dword [0x454e86], 0x800
jmp 0x40ab7e
mov edi, 0x426c69
call fcn.004065d0
test al, al
je 0x40a986
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov dword [0x454e86], 0x1000
jmp 0x40ab7e
mov edi, 0x426c70
call fcn.004065d0
test al, al
je 0x40a9ef
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
lea ebx, [ebp - 0x41c]
push ebx
push dword [0x454e79]
call fcn.00403b60
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
mov edi, 0x426c78
call fcn.004065d0
test al, al
je 0x40ab43
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404fd0
mov ebx, dword [ebp - 0x10c]
cmp byte [ebp + ebx - 0x108], 0x22
jne 0x40ab23
push 0xff
lea eax, [ebp - 0x108]
push eax
push ebx
push 1
call fcn.00404fd0
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x108]
push eax
push 1
push 0xff
call fcn.00401cd0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x426c80
mov eax, edi
push eax
call fcn.004033b0
test eax, eax
jle 0x40aad0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 0x426c82
push eax
call fcn.004033b0
push eax
push 0xff
call fcn.00404fd0
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx ebx, byte [ebp - 0x218]
inc ebx
push ebx
call fcn.00404fd0
jmp 0x40aaef
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx ebx, byte [ebp - 0x218]
push ebx
call fcn.00404fd0
lea esi, [ebp - 0x218]
mov edi, 0x426c84
call fcn.004066c0
test al, al
je 0x40ab23
lea eax, [ebp - 0x41c]
push eax
mov ebx, esi
push ebx
call fcn.0040ac60
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
lea eax, [ebp - 0x218]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00409380
jmp 0x40ab7e
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x426c85
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0
push 0x426c87
lea eax, [ebp - 0x217]
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0x426c8f
lea eax, [ebp - 0x108]
push eax
call fcn.004033b0
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x10c], eax
jne 0x40ab9f
jmp 0x40aba4
jmp 0x4094f9
mov al, byte [ebp - 0x319]
test al, al
je 0x40abf5
push 0x426c91
lea ebx, [ebp - 0x108]
push ebx
call fcn.004033b0
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x40abf5
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x426c93
lea eax, [ebp - 0x108]
push eax
call fcn.004033b0
mov dword [ebp - 0x10c], eax
jmp 0x40abc5
push 0x426c95
lea eax, [ebp - 0x108]
push eax
call fcn.004033b0
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x40ac3c
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x426c97
lea eax, [ebp - 0x108]
push eax
call fcn.004033b0
mov dword [ebp - 0x10c], eax
jmp 0x40ac0c
mov edi, dword [ebp + 0xc]
lea esi, [ebp - 0x108]
call fcn.00401940
pop edx
pop ecx
pop ebx
leave
ret 8