Function at 0x406b60
Capabilities:
Get common file path
Get hostname
Get session user name
Open clipboard
Query environment variable
Read clipboard data
Set environment variable

Disassembly:
enter 0x518, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x108]
call fcn.00401940
mov byte [ebp - 0x319], 0
push 0x4165a8
lea eax, [ebp - 0x108]
push eax
call fcn.00404e80
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x110], 0
jle 0x408244
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x406bb7
cmp dword [ebp - 0x10c], eax
jge 0x406bd1
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x406bd1
inc dword [ebp - 0x10c]
jmp 0x406ba6
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40821e
inc eax
mov dword [ebp - 0x114], eax
mov bl, byte [0x42b8f3]
test bl, bl
jne 0x406ca7
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x31
jb 0x406ca7
cmp byte [ebp + eax - 0x108], 0x39
ja 0x406ca7
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x41c]
push 1
call fcn.00401d30
mov ecx, edi
push ecx
call fcn.00409550
mov dword [ebp - 0x118], eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
push 2
call fcn.00404550
call fcn.004094f0
cmp eax, dword [ebp - 0x118]
jl 0x406ca2
lea eax, [ebp - 0x41c]
push eax
push dword [ebp - 0x118]
call fcn.00409180
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x406b99
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x406cb8
cmp dword [ebp - 0x114], eax
jge 0x406cd2
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x406cd2
inc dword [ebp - 0x114]
jmp 0x406ca7
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40821e
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408a60
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x4165aa
mov eax, edi
push eax
call fcn.00404e80
test eax, eax
jle 0x406d57
mov byte [ebp - 0x319], 1
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xeb
jmp 0x40821e
push 0x4165ac
lea eax, [ebp - 0x218]
push eax
call fcn.00404e80
cmp eax, 1
jne 0x406da4
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x218]
push ebx
call fcn.00408d30
jmp 0x40821e
push 0x4165af
lea eax, [ebp - 0x218]
push eax
call fcn.00404e80
cmp eax, 1
jne 0x406ddb
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xec
mov eax, dword [ebp - 0x114]
mov byte [ebp + eax - 0x108], 0xec
jmp 0x40821e
lea esi, [ebp - 0x218]
mov edi, 0x4165b2
call fcn.00408a40
test al, al
je 0x406e36
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
push 0x416c9b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4165b8
call fcn.00408a40
test al, al
je 0x406f56
mov esi, 0x416a93
mov edi, 0x4165bd
call fcn.00408a40
test al, al
je 0x406f0f
mov dword [0x416c97], 0xff
push 0x416c97
push 0x416994
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x406e7c
lea eax, [ebp - 0x41c]
push eax
push 0x416994
call fcn.00402b90
mov edi, 0x416993
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x416c93
push 0x416b94
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x406eb0
lea eax, [ebp - 0x41c]
push eax
push 0x416b94
call fcn.00402b90
mov edi, 0x416b93
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x4165be
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416993
call fcn.00401af0
mov edi, 0x416a93
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
push 0x416a93
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4165c0
call fcn.00408a40
test al, al
je 0x407076
mov esi, 0x416a93
mov edi, 0x4165c5
call fcn.00408a40
test al, al
je 0x40702f
mov dword [0x416c97], 0xff
push 0x416c97
push 0x416994
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x406f9c
lea eax, [ebp - 0x41c]
push eax
push 0x416994
call fcn.00402b90
mov edi, 0x416993
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x416c93
push 0x416b94
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x406fd0
lea eax, [ebp - 0x41c]
push eax
push 0x416b94
call fcn.00402b90
mov edi, 0x416b93
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x4165c6
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416993
call fcn.00401af0
mov edi, 0x416a93
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
push 0x416b93
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4165c8
call fcn.00408a40
test al, al
je 0x407196
mov esi, 0x416a93
mov edi, 0x4165cd
call fcn.00408a40
test al, al
je 0x40714f
mov dword [0x416c97], 0xff
push 0x416c97
push 0x416994
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x4070bc
lea eax, [ebp - 0x41c]
push eax
push 0x416994
call fcn.00402b90
mov edi, 0x416993
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x416c93
push 0x416b94
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x4070f0
lea eax, [ebp - 0x41c]
push eax
push 0x416b94
call fcn.00402b90
mov edi, 0x416b93
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x4165ce
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416993
call fcn.00401af0
mov edi, 0x416a93
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
push 0x416993
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4165d0
call fcn.00408a40
test al, al
je 0x4071fa
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov bl, byte [0x416992]
test bl, bl
jne 0x4071d9
call fcn.00408af0
push 0x416890
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4165db
call fcn.00408a40
test al, al
je 0x40725e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov bl, byte [0x416992]
test bl, bl
jne 0x40723d
call fcn.00408af0
push 0x41672c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4165e4
call fcn.00408a40
test al, al
jne 0x40727a
mov edi, 0x4165eb
call fcn.00408a40
test al, al
je 0x4072e3
push 0x42b8f5
push 0xff
call sub.kernel32.dll_GetTempPathA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x41c]
push ebx
push 0x42b8f5
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
lea esi, [ebp - 0x218]
mov edi, 0x4165f1
call fcn.00408a40
test al, al
je 0x407360
push 0xff
push 0x42b8f5
call sub.kernel32.dll_GetWindowsDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x41c]
push ebx
push 0x42b8f5
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4165fa
call fcn.00408a40
test al, al
je 0x4073d7
push 0xff
push 0x42b8f5
call sub.kernel32.dll_GetSystemDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x41c]
push ebx
push 0x42b8f5
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x416606
call fcn.00408a40
test al, al
jne 0x4073f7
mov edi, 0x416615
call fcn.00408a40
test al, al
je 0x40749f
lea edi, [ebp - 0x218]
mov esi, 0x41661f
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41662c
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x42b8f5
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x41c]
push ebx
push 0x42b8f5
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
lea esi, [ebp - 0x218]
mov edi, 0x41662e
call fcn.00408a40
test al, al
je 0x40755b
mov edi, esi
mov esi, 0x416638
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416640
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x42b8f5
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x41c]
push ebx
push 0x42b8f5
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x416642
call fcn.00408a40
test al, al
je 0x407727
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4075a4
cmp dword [ebp - 0x10c], eax
jge 0x4075be
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x4075be
inc dword [ebp - 0x10c]
jmp 0x407593
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40765b
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4075eb
cmp dword [ebp - 0x114], eax
jge 0x407605
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x407605
inc dword [ebp - 0x114]
jmp 0x4075da
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40765b
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408a60
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404550
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404550
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416648
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x42b8f5
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x41c]
push ebx
push 0x42b8f5
call fcn.00402b90
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x41664a
call fcn.00408a40
test al, al
je 0x407a19
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x407770
cmp dword [ebp - 0x10c], eax
jge 0x40778a
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40778a
inc dword [ebp - 0x10c]
jmp 0x40775f
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x407827
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4077b7
cmp dword [ebp - 0x114], eax
jge 0x4077d1
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x4077d1
inc dword [ebp - 0x114]
jmp 0x4077a6
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x407827
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408a60
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404550
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404550
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416653
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
mov edi, 0x42b8f4
lea esi, [ebp - 0x218]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4078ca
cmp dword [ebp - 0x10c], eax
jge 0x4078e4
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x4078e4
inc dword [ebp - 0x10c]
jmp 0x4078b9
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x407981
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x407911
cmp dword [ebp - 0x114], eax
jge 0x40792b
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40792b
inc dword [ebp - 0x114]
jmp 0x407900
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x407981
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408a60
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404550
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404550
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416655
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x42b8f5
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
jmp 0x40821e
mov edi, 0x416657
call fcn.00408a40
test al, al
je 0x407a7c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea edi, [ebp - 0x318]
mov esi, 0x41665d
call fcn.00401940
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x416661
call fcn.00408a40
test al, al
je 0x407ac3
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov byte [0x42b8f3], 1
mov byte [0x41672b], 1
jmp 0x40821e
mov edi, 0x416668
call fcn.00408a40
test al, al
je 0x407b0a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov byte [0x42b8f3], 0
mov byte [0x41672b], 0
jmp 0x40821e
mov edi, 0x41666e
call fcn.00408a40
test al, al
je 0x407b4a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov byte [0x42b8f2], 1
jmp 0x40821e
mov edi, 0x416673
call fcn.00408a40
test al, al
je 0x407c47
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov byte [0x42b8f1], 1
mov edi, 0x42b7f0
mov esi, 0x416679
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x407c29
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x41667a
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x407c29
mov esi, 0x42b7f0
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x42b7f0
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.00404550
jmp 0x407b98
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00404550
jmp 0x40821e
mov edi, 0x416683
call fcn.00408a40
test al, al
je 0x407d4b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov byte [0x42b8f1], 1
mov byte [0x42b8f0], 1
mov edi, 0x42b7f0
mov esi, 0x41668a
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x407d2d
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x41668b
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x407d2d
mov esi, 0x42b7f0
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x42b7f0
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.00404550
jmp 0x407c9c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00404550
jmp 0x40821e
mov edi, 0x416694
call fcn.00408a40
test al, al
je 0x407d8b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov byte [0x41672a], 1
jmp 0x40821e
mov edi, 0x41669b
call fcn.00408a40
test al, al
je 0x407e57
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea edi, [ebp - 0x218]
mov esi, 0x4166a3
call fcn.00401940
push 0
call sub.user32.dll_OpenClipboard
test al, al
je 0x407e34
push 1
call sub.user32.dll_GetClipboardData
mov dword [0x42b7e8], eax
test eax, eax
jbe 0x407e2b
push eax
call sub.kernel32.dll_GlobalLock
mov dword [0x42b7ec], eax
test eax, eax
je 0x407e20
lea ebx, [ebp - 0x41c]
push ebx
push dword [0x42b7ec]
call fcn.00402b90
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push dword [0x42b7e8]
call sub.kernel32.dll_CloseHandle
call sub.user32.dll_CloseClipboard
test al, al
je 0x407e34
lea eax, [ebp - 0x218]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4166a4
call fcn.00408a40
test al, al
je 0x407e9e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov byte [0x41672a], 1
mov byte [0x416729], 1
jmp 0x40821e
mov edi, 0x4166ac
call fcn.00408a40
test al, al
je 0x407ed7
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
jmp 0x40821e
mov edi, 0x4166b4
call fcn.00408a40
test al, al
je 0x407f1a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov dword [0x42b7e4], 0x4000000
jmp 0x40821e
mov edi, 0x4166ba
call fcn.00408a40
test al, al
je 0x407f5d
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov dword [0x42b7e4], 0x200
jmp 0x40821e
mov edi, 0x4166c1
call fcn.00408a40
test al, al
je 0x407fa0
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov dword [0x42b7e4], 0x10
jmp 0x40821e
mov edi, 0x4166c8
call fcn.00408a40
test al, al
je 0x407fe3
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov dword [0x42b7e4], 0x800
jmp 0x40821e
mov edi, 0x4166ce
call fcn.00408a40
test al, al
je 0x408026
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov dword [0x42b7e4], 0x1000
jmp 0x40821e
mov edi, 0x4166d5
call fcn.00408a40
test al, al
je 0x40808f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
lea ebx, [ebp - 0x41c]
push ebx
push dword [0x42b7e0]
call fcn.00402fd0
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
mov edi, 0x4166dd
call fcn.00408a40
test al, al
je 0x4081e3
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404550
mov ebx, dword [ebp - 0x10c]
cmp byte [ebp + ebx - 0x108], 0x22
jne 0x4081c3
push 0xff
lea eax, [ebp - 0x108]
push eax
push ebx
push 1
call fcn.00404550
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x108]
push eax
push 1
push 0xff
call fcn.00401cd0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x4166e5
mov eax, edi
push eax
call fcn.00404e80
test eax, eax
jle 0x408170
push 0xff
lea eax, [ebp - 0x218]
push eax
push 0x4166e7
push eax
call fcn.00404e80
push eax
push 0xff
call fcn.00404550
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx ebx, byte [ebp - 0x218]
inc ebx
push ebx
call fcn.00404550
jmp 0x40818f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx ebx, byte [ebp - 0x218]
push ebx
call fcn.00404550
lea esi, [ebp - 0x218]
mov edi, 0x4166e9
call fcn.00408a00
test al, al
je 0x4081c3
lea eax, [ebp - 0x41c]
push eax
mov ebx, esi
push ebx
call fcn.00408390
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
lea eax, [ebp - 0x218]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00408300
jmp 0x40821e
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x4166ea
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0
push 0x4166ec
lea eax, [ebp - 0x217]
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0x4166f4
lea eax, [ebp - 0x108]
push eax
call fcn.00404e80
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x10c], eax
jne 0x40823f
jmp 0x408244
jmp 0x406b99
mov al, byte [ebp - 0x319]
test al, al
je 0x408295
push 0x4166f6
lea ebx, [ebp - 0x108]
push ebx
call fcn.00404e80
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x408295
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x4166f8
lea eax, [ebp - 0x108]
push eax
call fcn.00404e80
mov dword [ebp - 0x10c], eax
jmp 0x408265
push 0x4166fa
lea eax, [ebp - 0x108]
push eax
call fcn.00404e80
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x4082dc
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x4166fc
lea eax, [ebp - 0x108]
push eax
call fcn.00404e80
mov dword [ebp - 0x10c], eax
jmp 0x4082ac
mov edi, dword [ebp + 0xc]
lea esi, [ebp - 0x108]
call fcn.00401940
pop edx
pop ecx
pop ebx
leave
ret 8