Function at 0x5689d0
Capabilities:
Get common file path
Get startup folder
Open clipboard
Write clipboard data
Write file on windows
Write file to startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58d2c4
mov eax, dword fs:[0]
push eax
sub esp, 0x734
mov eax, dword [0x5ebfc4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x569960
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x56996a
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0x730], eax
mov dword [ebp - 4], 0
call fcn.00407271
mov ecx, eax
test ecx, ecx
je 0x569971
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
cmp eax, 0x5940e4
jne 0x56997b
lock inc dword [ecx + 0x14]
lea eax, [ecx + 8]
add eax, 0x10
mov dword [ebp - 0x728], eax
push 1
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.0040e4e5
mov eax, dword [esi + 0x564]
test eax, eax
je 0x568ae5
cmp eax, 3
je 0x568ae5
push 0x1e6
push str._______________________________________________________________________________r_n_PRODUCT___VERSION__EDITION___C___COPY_YEAR__hiyohiyo_r_n__________________________________Crystal_Dew_World:_https:__crystalmark.info__r_n_______________________________________________________________________________r_n_MB_s__1_000_000_bytes_s__SATA_600__600_000_000_bytes_s__r_n_KB__1000_bytes__KiB__1024_bytes_r_n_r_n_Read__r_n_SequentialRead1__r_n_RandomRead1__r_n_r_n_Write__r_n_SequentialWrite1__r_n_RandomWrite1__r_n_r_n
lea ecx, [ebp - 0x728]
call fcn.00402430
cmp dword [esi + 0x568], 0
je 0x568ab1
push 0x34
push str._Mix___MixRatio__r_n_SequentialMix1__r_n_RandomMix1__r_n_r_n
lea ecx, [ebp - 0x728]
call fcn.004052d0
mov eax, dword [esi + 0x564]
cmp eax, 1
je 0x568ac6
cmp eax, 4
mov eax, str.Profile:_Real_r_n
jne 0x568acb
mov eax, str.Profile:_Peak_r_n
push 0xf
push eax
lea ecx, [ebp - 0x728]
call fcn.004052d0
mov eax, str.___Test:__TestSize___x_TestCount___TestMode____IntervalTime____Affinity__r_n___Date:__Date__r_n_____OS:__OS__r_n_Comment_
mov ecx, 0x73
jmp 0x568b1f
push 0x22c
push str._______________________________________________________________________________r_n_PRODUCT___VERSION__EDITION___C___COPY_YEAR__hiyohiyo_r_n__________________________________Crystal_Dew_World:_https:__crystalmark.info__r_n_______________________________________________________________________________r_n_MB_s__1_000_000_bytes_s__SATA_600__600_000_000_bytes_s__r_n_KB__1000_bytes__KiB__1024_bytes_r_n_r_n_Read__r_n_SequentialRead1__r_n_SequentialRead2__r_n_RandomRead1__r_n_RandomRead2__r_n_r_n_Write__r_n_SequentialWrite1__r_n_SequentialWrite2__r_n_RandomWrite1__r_n_RandomWrite2__r_n_r_n
lea ecx, [ebp - 0x728]
call fcn.00402430
cmp dword [esi + 0x568], 0
je 0x568b15
push 0x54
push str._Mix___MixRatio__r_n_SequentialMix1__r_n_SequentialMix2__r_n_RandomMix1__r_n_RandomMix2__r_n_r_n
lea ecx, [ebp - 0x728]
call fcn.004052d0
mov eax, str.Profile:_Default_r_n___Test:__TestSize___x_TestCount___TestMode____IntervalTime____Affinity__r_n___Date:__Date__r_n_____OS:__OS__r_n_Comment__r_n
mov ecx, 0x87
push ecx
push eax
lea ecx, [ebp - 0x728]
call fcn.004052d0
push 0x5c5d94
push str._PRODUCT_
lea ecx, [ebp - 0x728]
call fcn.00404ff0
push 0x5c583c
push str._VERSION_
lea ecx, [ebp - 0x728]
call fcn.00404ff0
push 0
push 0x5c5eb0
lea ecx, [ebp - 0x730]
call fcn.00402430
mov eax, dword [ebp - 0x730]
cmp dword [eax - 0xc], 0
je 0x568b80
mov eax, 0x5c5eb8
mov ecx, 0x5c5eb4
jmp 0x568b8a
mov eax, str._EDITION_
mov ecx, 0x5c5ecc
push ecx
push eax
lea ecx, [ebp - 0x728]
call fcn.00404ff0
push str.2007_2019
push str._COPY_YEAR_
lea ecx, [ebp - 0x728]
call fcn.00404ff0
mov eax, dword [esi + 0x564]
or edi, 0xffffffff
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 2
je 0x569039
cmp eax, 5
je 0x569039
push dword [esi + 0x518]
fld qword [esi + 0x478]
lea eax, [ebp - 0x724]
push dword [esi + 0x514]
push dword [esi + 0x510]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x418]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x728]
push dword [eax]
push str._SequentialRead1_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x524]
fld qword [esi + 0x488]
lea eax, [ebp - 0x724]
push dword [esi + 0x520]
push dword [esi + 0x51c]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x428]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x728]
push dword [eax]
push str._SequentialRead2_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x518]
fld qword [esi + 0x480]
lea eax, [ebp - 0x724]
push dword [esi + 0x514]
push dword [esi + 0x510]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x420]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x728]
push dword [eax]
push str._SequentialWrite1_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x524]
fld qword [esi + 0x490]
lea eax, [ebp - 0x724]
push dword [esi + 0x520]
push dword [esi + 0x51c]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x430]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x728]
push dword [eax]
push str._SequentialWrite2_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x530]
push dword [esi + 0x52c]
fld qword [esi + 0x498]
lea eax, [ebp - 0x724]
push dword [esi + 0x528]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x438]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x728]
push dword [eax]
push str._RandomRead1_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x53c]
fld qword [esi + 0x4a8]
lea eax, [ebp - 0x724]
push dword [esi + 0x538]
push dword [esi + 0x534]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x448]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x728]
push dword [eax]
push str._RandomRead2_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x530]
fld qword [esi + 0x4a0]
lea eax, [ebp - 0x724]
push dword [esi + 0x52c]
push dword [esi + 0x528]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x440]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x728]
push dword [eax]
push str._RandomWrite1_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x53c]
fld qword [esi + 0x4b0]
lea eax, [ebp - 0x724]
push dword [esi + 0x538]
push dword [esi + 0x534]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x450]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x728]
push dword [eax]
push str._RandomWrite2_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
cmp dword [esi + 0x568], 0
je 0x569427
push dword [esi + 0x518]
fld qword [esi + 0x4b8]
lea eax, [ebp - 0x724]
push dword [esi + 0x514]
push dword [esi + 0x510]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x458]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x728]
push dword [eax]
push str._SequentialMix1_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x524]
fld qword [esi + 0x4c0]
lea eax, [ebp - 0x724]
push dword [esi + 0x520]
push dword [esi + 0x51c]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x460]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x728]
push dword [eax]
push str._SequentialMix2_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x530]
fld qword [esi + 0x4c8]
lea eax, [ebp - 0x724]
push dword [esi + 0x52c]
push dword [esi + 0x528]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x468]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x728]
push dword [eax]
push str._RandomMix1_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
push dword [esi + 0x53c]
fld qword [esi + 0x4d0]
lea eax, [ebp - 0x724]
push dword [esi + 0x538]
push dword [esi + 0x534]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x470]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x728]
push dword [eax]
push str._RandomMix2_
call fcn.00404ff0
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 1
call fcn.00402930
mov ecx, dword [esi + 0x56c]
push ecx
mov eax, 0x64
sub eax, ecx
push eax
lea eax, [ebp - 0x730]
push str.Read__d___Write__d__
push eax
call fcn.00404950
add esp, 0x10
push dword [ebp - 0x730]
push str._MixRatio_
jmp 0x56941c
fld qword [esi + 0x478]
lea eax, [ebp - 0x724]
push 1
push 1
push 1
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x418]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x728]
push dword [eax]
push 0x5c5f10
call fcn.00404ff0
mov byte [ebp - 4], 1
mov eax, edi
mov ecx, dword [ebp - 0x724]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x5690d5
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 0x5940e4
jne 0x56998f
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x569982
push 0
push dword [edx + 4]
call ebx
fld qword [esi + 0x480]
lea eax, [ebp - 0x724]
push 1
push 1
push 1
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x420]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x728]
push dword [eax]
push 0x5c5f34
call fcn.00404ff0
mov byte [ebp - 4], 1
mov eax, edi
mov ecx, dword [ebp - 0x724]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x569171
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 0x5940e4
jne 0x5699a9
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x56999c
push 0
push dword [edx + 4]
call ebx
fld qword [esi + 0x498]
lea eax, [ebp - 0x724]
push 1
push 1
push 4
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x438]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x728]
push dword [eax]
push 0x5c5f5c
call fcn.00404ff0
mov byte [ebp - 4], 1
mov eax, edi
mov ecx, dword [ebp - 0x724]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x56920d
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 0x5940e4
jne 0x5699c3
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x5699b6
push 0
push dword [edx + 4]
call ebx
fld qword [esi + 0x4a0]
lea eax, [ebp - 0x724]
push 1
push 1
push 4
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x440]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x728]
push dword [eax]
push 0x5c5f78
call fcn.00404ff0
mov byte [ebp - 4], 1
mov eax, edi
mov ecx, dword [ebp - 0x724]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x5692a9
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 0x5940e4
jne 0x5699dd
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x5699d0
push 0
push dword [edx + 4]
call ebx
cmp dword [esi + 0x568], 0
je 0x569427
fld qword [esi + 0x4b8]
lea eax, [ebp - 0x724]
push 1
push 1
push 1
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x458]
fstp qword [esp]
push eax
call fcn.00569a50
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x728]
push dword [eax]
push 0x5c5f98
call fcn.00404ff0
mov byte [ebp - 4], 1
mov eax, edi
mov ecx, dword [ebp - 0x724]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x569352
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 0x5940e4
jne 0x5699f7
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x5699ea
push 0
push dword [edx + 4]
call ebx
fld qword [esi + 0x4c8]
lea eax, [ebp - 0x724]
push 1
push 1
push 4
sub esp, 0x10
fstp qword [esp + 8]
fld qword [esi + 0x468]
fstp qword [esp]
push eax
call fcn.00569b30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x728]
push dword [eax]
push 0x5c5fbc
call fcn.00404ff0
mov byte [ebp - 4], 1
mov eax, edi
mov ecx, dword [ebp - 0x724]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x5693ee
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 0x5940e4
jne 0x569a11
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x569a04
push 0
push dword [edx + 4]
call ebx
mov ecx, dword [esi + 0x56c]
mov eax, 0x64
push ecx
sub eax, ecx
push eax
lea eax, [ebp - 0x730]
push 0x5c5fd8
push eax
call fcn.00404950
add esp, 0x10
push dword [ebp - 0x730]
push 0x5c6004
lea ecx, [ebp - 0x728]
call fcn.00404ff0
mov eax, dword [esi + 0x4e4]
cmp dword [eax - 0xc], 0
jl 0x569460
push 0x5c61f0
push eax
call fcn.0053dc90
add esp, 8
test eax, eax
je 0x569460
mov ecx, dword [esi + 0x4e4]
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x569460
mov dword [ebp - 0x724], str._d_MiB
jmp 0x569470
mov ecx, dword [esi + 0x4e4]
mov dword [ebp - 0x724], str._d_GiB
push ecx
call fcn.00545198
push eax
push dword [ebp - 0x724]
lea eax, [ebp - 0x730]
push eax
call fcn.00404950
add esp, 0x10
lea ecx, [ebp - 0x728]
push dword [ebp - 0x730]
push str._TestSize_
call fcn.00404ff0
push dword [esi + 0x4e0]
call fcn.00545198
push eax
lea eax, [ebp - 0x730]
push 0x5c6230
push eax
call fcn.00404950
add esp, 0x10
lea ecx, [ebp - 0x728]
push dword [ebp - 0x730]
push str._TestCount_
call fcn.00404ff0
mov eax, dword [esi + 0x554]
mov ecx, str._DefaultAffinityDISABLED_
test eax, eax
je 0x5694ec
mov ecx, str._DefaultAffinityENABLED_
neg eax
sbb eax, eax
add eax, 0x1a
push eax
push ecx
lea ecx, [ebp - 0x730]
call fcn.00402430
push dword [ebp - 0x730]
lea ecx, [ebp - 0x728]
push str._Affinity_
call fcn.00404ff0
lea eax, [ebp - 0x730]
push eax
lea ecx, [esi + 0x1a10]
call fcn.0040bb4e
mov eax, dword [ebp - 0x730]
cmp dword [eax - 0xc], 0
jne 0x56954e
push 0x5c62d4
push 0x5c62d8
lea ecx, [ebp - 0x728]
call fcn.00404ff0
jmp 0x569637
lea eax, [ebp - 0x730]
push eax
lea eax, [ebp - 0x738]
push str.Comment:
push eax
call fcn.004058c0
push 0x5c62ec
push eax
lea eax, [ebp - 0x724]
mov byte [ebp - 4], 0x14
push eax
call fcn.004059c0
add esp, 0x18
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x728]
push dword [eax]
push str._Comment_
call fcn.00404ff0
mov byte [ebp - 4], 0x14
mov eax, edi
mov ecx, dword [ebp - 0x724]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x5695f3
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, 0x5940e4
jne 0x569a2b
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov ebx, dword [eax + 4]
mov dword [ebp - 0x72c], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x569a1e
push 0
push dword [edx + 4]
call ebx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x738]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], edi
dec edi
test edi, edi
jg 0x569637
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, 0x5940e4
jne 0x569a38
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x569a38
push 0
push dword [edx + 4]
call ebx
cmp dword [esi + 0x55c], 1
jne 0x56964c
mov eax, 0x5c6330
mov ecx, 0x5c631c
jmp 0x569656
mov eax, str._TestMode_
mov ecx, 0x5c6348
push ecx
push eax
lea ecx, [ebp - 0x728]
call fcn.00404ff0
push dword [esi + 0x550]
lea eax, [ebp - 0x730]
push str.Interval:__d_sec
push eax
call fcn.00404950
add esp, 0xc
lea ecx, [ebp - 0x728]
push dword [ebp - 0x730]
push str._IntervalTime_
call fcn.00404ff0
lea ecx, [ebp - 0x730]
call fcn.0057e420
push dword [ebp - 0x730]
lea ecx, [ebp - 0x728]
push str._OS_
call fcn.00404ff0
mov edi, dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0x228]
push eax
call edi
movzx eax, word [ebp - 0x21c]
push eax
movzx eax, word [ebp - 0x21e]
push eax
movzx eax, word [ebp - 0x220]
push eax
movzx eax, word [ebp - 0x222]
push eax
movzx eax, word [ebp - 0x226]
push eax
movzx eax, word [ebp - 0x228]
push eax
lea eax, [ebp - 0x730]
push str._04d__02d__02d__d:_02d:_02d
push eax
call fcn.00404950
add esp, 0x20
lea ecx, [ebp - 0x728]
push dword [ebp - 0x730]
push str._Date_
call fcn.00404ff0
cmp dword [ebp + 8], 0
jne 0x569791
push dword [esi + 0x20]
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x56992c
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov esi, dword [ebp - 0x728]
mov eax, dword [esi - 0xc]
lea eax, [eax*2 + 2]
push eax
push 0x2000
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
test edi, edi
je 0x56977d
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x569776
mov ecx, dword [esi - 0xc]
push esi
inc ecx
push ecx
push eax
call fcn.0054548f
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
push 0xd
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x56992c
lea ecx, [ebp - 0x724]
call fcn.00404c10
lea ecx, [ebp - 0x72c]
call fcn.00404c10
lea ecx, [ebp - 0x738]
call fcn.00404c10
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 0x18
push eax
mov word [ebp - 0x734], 0xfeff
call edi
movzx eax, word [ebp - 0x22c]
push eax
movzx eax, word [ebp - 0x22e]
push eax
movzx eax, word [ebp - 0x230]
push eax
movzx eax, word [ebp - 0x232]
push eax
movzx eax, word [ebp - 0x236]
push eax
movzx eax, word [ebp - 0x238]
push eax
lea eax, [ebp - 0x72c]
push str.CDM__04d_02d_02d_0d_02d_02d
push eax
call fcn.00404950
add esp, 0x20
lea ecx, [ebp - 0x724]
push 0x5c6434
call fcn.00405b40
push str..txt.txt
lea ecx, [ebp - 0x738]
call fcn.00405b40
push 1
push 0
push 0
push dword [ebp - 0x738]
lea ecx, [ebp - 0x720]
push 6
push dword [ebp - 0x72c]
push dword [ebp - 0x724]
push 0
call fcn.00418aad
push 1
push 0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0x19
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea ecx, [ebp - 0x720]
call fcn.00419671
lea ecx, [ebp - 0x218]
mov dword [eax + 0x2c], ecx
lea ecx, [ebp - 0x720]
call fcn.004194e1
cmp eax, 1
jne 0x569900
lea eax, [ebp - 0x740]
push eax
lea ecx, [ebp - 0x720]
call fcn.00419678
push str.wb_ccsUNICODE
push dword [eax]
lea eax, [ebp - 0x73c]
push eax
call fcn.00543a4b
add esp, 0xc
lea ecx, [ebp - 0x740]
call fcn.00402930
mov eax, dword [ebp - 0x73c]
test eax, eax
je 0x569900
push eax
push 2
lea eax, [ebp - 0x734]
push 1
push eax
call fcn.00545704
push dword [ebp - 0x728]
push 0x5c6468
push dword [ebp - 0x73c]
call fcn.00405400
push dword [ebp - 0x73c]
call fcn.00543e2c
add esp, 0x20
lea ecx, [ebp - 0x720]
call fcn.00418d9c
lea ecx, [ebp - 0x738]
call fcn.00402930
lea ecx, [ebp - 0x72c]
call fcn.00402930
lea ecx, [ebp - 0x724]
call fcn.00402930
lea ecx, [ebp - 0x728]
call fcn.00402930
lea ecx, [ebp - 0x730]
call fcn.00402930
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053c0f2
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.00402ab0
call edx
jmp 0x568a26
push 0x80004005
call fcn.00402ab0
call edx
jmp 0x568a5c
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5690d5
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5690d5
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x569171
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x569171
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x56920d
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x56920d
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5692a9
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5692a9
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x569352
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x569352
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5693ee
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5693ee
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5695f3
mov ecx, edx
call dword [ebp - 0x72c]
jmp 0x5695f3
mov ecx, edx
call edi
jmp 0x569637