Function at 0x404ae0
Capabilities:
Get common file path
Get hostname
Get session user name
Open clipboard
Query environment variable
Read clipboard data
Set environment variable

Disassembly:
enter 0x414, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x108]
call fcn.00401940
push 0x411249
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x110], 0
jle 0x405fbf
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x404b30
cmp dword [ebp - 0x10c], eax
jge 0x404b4a
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x404b4a
inc dword [ebp - 0x10c]
jmp 0x404b1f
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x405f99
inc eax
mov dword [ebp - 0x114], eax
mov bl, byte [0x41506f]
test bl, bl
jne 0x404c20
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x31
jb 0x404c20
cmp byte [ebp + eax - 0x108], 0x39
ja 0x404c20
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x318]
push 1
call fcn.00401d30
mov ecx, edi
push ecx
call fcn.004041d0
mov dword [ebp - 0x118], eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
push 2
call fcn.004045d0
call fcn.00406a20
cmp eax, dword [ebp - 0x118]
jl 0x404c1b
lea eax, [ebp - 0x318]
push eax
push dword [ebp - 0x118]
call fcn.004066b0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x404b12
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x404c31
cmp dword [ebp - 0x114], eax
jge 0x404c4b
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x404c4b
inc dword [ebp - 0x114]
jmp 0x404c20
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x405f99
lea ebx, [ebp - 0x318]
push ebx
lea ecx, [ebp - 0x418]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x418]
push eax
call fcn.00406210
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0x41124b
mov eax, edi
push eax
call fcn.00403000
cmp eax, 1
jne 0x404cee
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x218]
push ebx
call fcn.004062a0
jmp 0x405f99
push 0x41124e
lea eax, [ebp - 0x218]
push eax
call fcn.00403000
cmp eax, 1
jne 0x404d2e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.004045d0
mov edi, dword [ebp - 0x10c]
mov dword [ebp - 0x110], edi
jmp 0x405f99
lea esi, [ebp - 0x218]
mov edi, 0x411251
call fcn.004044e0
test al, al
je 0x404d89
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
push 0x410e3d
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x411257
call fcn.004044e0
test al, al
je 0x404ea9
mov esi, 0x411681
mov edi, 0x41125c
call fcn.004044e0
test al, al
je 0x404e62
mov dword [0x411885], 0xff
push 0x411885
push 0x411582
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x404dcf
lea eax, [ebp - 0x318]
push eax
push 0x411582
call fcn.00402b80
mov edi, 0x411581
lea esi, [ebp - 0x318]
call fcn.00401940
push 0x411881
push 0x411782
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x404e03
lea eax, [ebp - 0x318]
push eax
push 0x411782
call fcn.00402b80
mov edi, 0x411781
lea esi, [ebp - 0x318]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x418]
call fcn.00401b30
mov esi, 0x41125d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x411581
call fcn.00401af0
mov edi, 0x411681
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
push 0x411681
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x41125f
call fcn.004044e0
test al, al
je 0x404fc9
mov esi, 0x411681
mov edi, 0x411264
call fcn.004044e0
test al, al
je 0x404f82
mov dword [0x411885], 0xff
push 0x411885
push 0x411582
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x404eef
lea eax, [ebp - 0x318]
push eax
push 0x411582
call fcn.00402b80
mov edi, 0x411581
lea esi, [ebp - 0x318]
call fcn.00401940
push 0x411881
push 0x411782
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x404f23
lea eax, [ebp - 0x318]
push eax
push 0x411782
call fcn.00402b80
mov edi, 0x411781
lea esi, [ebp - 0x318]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x418]
call fcn.00401b30
mov esi, 0x411265
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x411581
call fcn.00401af0
mov edi, 0x411681
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
push 0x411781
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x411267
call fcn.004044e0
test al, al
je 0x4050e9
mov esi, 0x411681
mov edi, 0x41126c
call fcn.004044e0
test al, al
je 0x4050a2
mov dword [0x411885], 0xff
push 0x411885
push 0x411582
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x40500f
lea eax, [ebp - 0x318]
push eax
push 0x411582
call fcn.00402b80
mov edi, 0x411581
lea esi, [ebp - 0x318]
call fcn.00401940
push 0x411881
push 0x411782
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x405043
lea eax, [ebp - 0x318]
push eax
push 0x411782
call fcn.00402b80
mov edi, 0x411781
lea esi, [ebp - 0x318]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x418]
call fcn.00401b30
mov esi, 0x41126d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x411581
call fcn.00401af0
mov edi, 0x411681
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
push 0x411581
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x41126f
call fcn.004044e0
test al, al
je 0x40513e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
push 0x411481
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x41127a
call fcn.004044e0
test al, al
je 0x405193
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
push 0x411381
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x411283
call fcn.004044e0
test al, al
jne 0x4051af
mov edi, 0x41128a
call fcn.004044e0
test al, al
je 0x405218
push 0x415071
push 0xff
call sub.kernel32.dll_GetTempPathA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x318]
push ebx
push 0x415071
call fcn.00402b80
lea eax, [ebp - 0x318]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
lea esi, [ebp - 0x218]
mov edi, 0x411290
call fcn.004044e0
test al, al
je 0x405295
push 0xff
push 0x415071
call sub.kernel32.dll_GetWindowsDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x318]
push ebx
push 0x415071
call fcn.00402b80
lea eax, [ebp - 0x318]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x411299
call fcn.004044e0
test al, al
je 0x40530c
push 0xff
push 0x415071
call sub.kernel32.dll_GetSystemDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x318]
push ebx
push 0x415071
call fcn.00402b80
lea eax, [ebp - 0x318]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x4112a5
call fcn.004044e0
test al, al
jne 0x40532c
mov edi, 0x4112b4
call fcn.004044e0
test al, al
je 0x4053d4
lea edi, [ebp - 0x218]
mov esi, 0x4112be
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x4112cb
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
push 0x415071
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x318]
push ebx
push 0x415071
call fcn.00402b80
lea eax, [ebp - 0x318]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
lea esi, [ebp - 0x218]
mov edi, 0x4112cd
call fcn.004044e0
test al, al
je 0x405490
mov edi, esi
mov esi, 0x4112d7
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x4112df
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
push 0x415071
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x318]
push ebx
push 0x415071
call fcn.00402b80
lea eax, [ebp - 0x318]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x4112e1
call fcn.004044e0
test al, al
je 0x40565c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4054d9
cmp dword [ebp - 0x10c], eax
jge 0x4054f3
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x4054f3
inc dword [ebp - 0x10c]
jmp 0x4054c8
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x405590
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x405520
cmp dword [ebp - 0x114], eax
jge 0x40553a
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40553a
inc dword [ebp - 0x114]
jmp 0x40550f
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x405590
lea ebx, [ebp - 0x318]
push ebx
lea ecx, [ebp - 0x418]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x418]
push eax
call fcn.00406210
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.004045d0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.004045d0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x4112e7
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
push 0x415071
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x318]
push ebx
push 0x415071
call fcn.00402b80
lea eax, [ebp - 0x318]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x4112e9
call fcn.004044e0
test al, al
je 0x40594e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4056a5
cmp dword [ebp - 0x10c], eax
jge 0x4056bf
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x4056bf
inc dword [ebp - 0x10c]
jmp 0x405694
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40575c
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4056ec
cmp dword [ebp - 0x114], eax
jge 0x405706
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x405706
inc dword [ebp - 0x114]
jmp 0x4056db
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40575c
lea ebx, [ebp - 0x318]
push ebx
lea ecx, [ebp - 0x418]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x418]
push eax
call fcn.00406210
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.004045d0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.004045d0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x4112f2
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
mov edi, 0x415070
lea esi, [ebp - 0x218]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4057ff
cmp dword [ebp - 0x10c], eax
jge 0x405819
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x405819
inc dword [ebp - 0x10c]
jmp 0x4057ee
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x4058b6
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x405846
cmp dword [ebp - 0x114], eax
jge 0x405860
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x405860
inc dword [ebp - 0x114]
jmp 0x405835
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x4058b6
lea ebx, [ebp - 0x318]
push ebx
lea ecx, [ebp - 0x418]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x418]
push eax
call fcn.00406210
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.004045d0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.004045d0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x4112f4
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0x415071
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
jmp 0x405f99
mov edi, 0x4112f6
call fcn.004044e0
test al, al
je 0x405995
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov byte [0x41506f], 1
mov byte [0x411380], 1
jmp 0x405f99
mov edi, 0x4112fd
call fcn.004044e0
test al, al
je 0x4059dc
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov byte [0x41506f], 0
mov byte [0x411380], 0
jmp 0x405f99
mov edi, 0x411303
call fcn.004044e0
test al, al
je 0x405a1c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov byte [0x41506e], 1
jmp 0x405f99
mov edi, 0x411308
call fcn.004044e0
test al, al
je 0x405b19
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov byte [0x41506d], 1
mov edi, 0x414f6c
mov esi, 0x41130e
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x405afb
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x41130f
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x405afb
mov esi, 0x414f6c
lea edi, [ebp - 0x318]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x418]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x318]
call fcn.00401af0
mov edi, 0x414f6c
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.004045d0
jmp 0x405a6a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.004045d0
jmp 0x405f99
mov edi, 0x411318
call fcn.004044e0
test al, al
je 0x405c1d
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov byte [0x41506d], 1
mov byte [0x41506c], 1
mov edi, 0x414f6c
mov esi, 0x41131f
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x405bff
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x411320
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x405bff
mov esi, 0x414f6c
lea edi, [ebp - 0x318]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x418]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x318]
call fcn.00401af0
mov edi, 0x414f6c
lea esi, [ebp - 0x318]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.004045d0
jmp 0x405b6e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.004045d0
jmp 0x405f99
mov edi, 0x411329
call fcn.004044e0
test al, al
je 0x405c5d
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov byte [0x41137f], 1
jmp 0x405f99
mov edi, 0x411330
call fcn.004044e0
test al, al
je 0x405d29
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea edi, [ebp - 0x218]
mov esi, 0x411338
call fcn.00401940
push 0
call sub.user32.dll_OpenClipboard
test al, al
je 0x405d06
push 1
call sub.user32.dll_GetClipboardData
mov dword [0x414f64], eax
test eax, eax
jbe 0x405cfd
push eax
call sub.kernel32.dll_GlobalLock
mov dword [0x414f68], eax
test eax, eax
je 0x405cf2
lea ebx, [ebp - 0x318]
push ebx
push dword [0x414f68]
call fcn.00402b80
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push dword [0x414f64]
call sub.kernel32.dll_CloseHandle
call sub.user32.dll_CloseClipboard
test al, al
je 0x405d06
lea eax, [ebp - 0x218]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
mov edi, 0x411339
call fcn.004044e0
test al, al
je 0x405d70
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov byte [0x41137f], 1
mov byte [0x41137e], 1
jmp 0x405f99
mov edi, 0x411341
call fcn.004044e0
test al, al
je 0x405da9
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
jmp 0x405f99
mov edi, 0x411349
call fcn.004044e0
test al, al
je 0x405dec
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov dword [0x414f60], 0x4000000
jmp 0x405f99
mov edi, 0x41134f
call fcn.004044e0
test al, al
je 0x405e2f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov dword [0x414f60], 0x200
jmp 0x405f99
mov edi, 0x411356
call fcn.004044e0
test al, al
je 0x405e72
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov dword [0x414f60], 0x10
jmp 0x405f99
mov edi, 0x41135d
call fcn.004044e0
test al, al
je 0x405eb5
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov dword [0x414f60], 0x800
jmp 0x405f99
mov edi, 0x411363
call fcn.004044e0
test al, al
je 0x405ef8
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
mov dword [0x414f60], 0x1000
jmp 0x405f99
mov edi, 0x41136a
call fcn.004044e0
test al, al
je 0x405f5e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.004045d0
lea ebx, [ebp - 0x318]
push ebx
push dword [0x414f5c]
call fcn.00406070
lea eax, [ebp - 0x318]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.00405fe0
jmp 0x405f99
lea edi, [ebp - 0x318]
call fcn.00401b30
mov esi, 0x411372
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x318]
call fcn.00401940
push 0
push 0x411374
lea eax, [ebp - 0x217]
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0x41137c
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x10c], eax
jne 0x405fba
jmp 0x405fbf
jmp 0x404b12
mov edi, dword [ebp + 0xc]
lea esi, [ebp - 0x108]
call fcn.00401940
pop edx
pop ecx
pop ebx
leave
ret 8