Function at 0x40a696
Capabilities:
Get common file path
Get hostname
Get session user name
Open clipboard
Query environment variable
Read clipboard data
Set environment variable

Disassembly:
enter 0x518, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x108]
call fcn.00401940
mov dword [ebp - 8], esp
mov byte [ebp - 0x31c], 0
push 0x41b4df
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x110], 0
jle 0x40a7fd
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x408fd0
cmp dword [ebp - 0x10c], eax
jge 0x408fea
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x408fea
inc dword [ebp - 0x10c]
jmp 0x408fbf
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a7d1
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x114], eax
mov al, byte [0x41f749]
test al, al
jne 0x4090d9
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x31
jb 0x4090d9
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x39
ja 0x4090d9
mov eax, dword [ebp - 0x114]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x41c]
push 1
call fcn.00401d30
lea eax, [ebp - 0x41c]
push eax
call fcn.0040b9a0
mov dword [ebp - 0x118], eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 2
call fcn.00402fb0
call fcn.0040b940
cmp eax, dword [ebp - 0x118]
jl 0x4090d4
lea eax, [ebp - 0x41c]
push eax
push dword [ebp - 0x118]
call fcn.0040b5d0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
lea eax, [ebp - 0x218]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x408fb2
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x4090ea
cmp dword [ebp - 0x114], eax
jge 0x409104
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409104
inc dword [ebp - 0x114]
jmp 0x4090d9
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a7d1
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408ee0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x41b4e1
lea eax, [ebp - 0x218]
push eax
call fcn.00403000
test eax, eax
jle 0x409193
mov byte [ebp - 0x31c], 1
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xeb
jmp 0x40a7d1
push 0x41b4e3
lea eax, [ebp - 0x218]
push eax
call fcn.00403000
cmp eax, 1
jne 0x4091e0
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x218]
push eax
call fcn.0040b0e0
jmp 0x40a7d1
push 0x41b4e6
lea eax, [ebp - 0x218]
push eax
call fcn.00403000
cmp eax, 1
jne 0x409217
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xec
mov eax, dword [ebp - 0x114]
mov byte [ebp + eax - 0x108], 0xec
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b4e9
call fcn.00408ba0
test al, al
je 0x409272
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
push 0x41af05
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b4ef
call fcn.00408ba0
test al, al
je 0x4093ab
mov esi, 0x41b98b
mov edi, 0x41b4f4
call fcn.00408ba0
test al, al
je 0x409364
mov dword [0x41bb8f], 0xff
push 0x41bb8f
push 0x41b88c
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x4092be
lea eax, [ebp - 0x41c]
push eax
push 0x41b88c
call fcn.00402b80
mov edi, 0x41b88b
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x41bb8b
push 0x41ba8c
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x4092f2
lea eax, [ebp - 0x41c]
push eax
push 0x41ba8c
call fcn.00402b80
mov edi, 0x41ba8b
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, 0x41ba8b
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x41b4f5
lea edi, [ebp - 0x51c]
call fcn.00401af0
lea esi, [ebp - 0x51c]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b88b
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x41b98b
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
push 0x41b98b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b4f7
call fcn.00408ba0
test al, al
je 0x4094e4
mov esi, 0x41b98b
mov edi, 0x41b4fc
call fcn.00408ba0
test al, al
je 0x40949d
mov dword [0x41bb8f], 0xff
push 0x41bb8f
push 0x41b88c
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x4093f7
lea eax, [ebp - 0x41c]
push eax
push 0x41b88c
call fcn.00402b80
mov edi, 0x41b88b
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x41bb8b
push 0x41ba8c
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x40942b
lea eax, [ebp - 0x41c]
push eax
push 0x41ba8c
call fcn.00402b80
mov edi, 0x41ba8b
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, 0x41ba8b
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x41b4fd
lea edi, [ebp - 0x51c]
call fcn.00401af0
lea esi, [ebp - 0x51c]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b88b
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x41b98b
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
push 0x41ba8b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b4ff
call fcn.00408ba0
test al, al
je 0x40961d
mov esi, 0x41b98b
mov edi, 0x41b504
call fcn.00408ba0
test al, al
je 0x4095d6
mov dword [0x41bb8f], 0xff
push 0x41bb8f
push 0x41b88c
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x409530
lea eax, [ebp - 0x41c]
push eax
push 0x41b88c
call fcn.00402b80
mov edi, 0x41b88b
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x41bb8b
push 0x41ba8c
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x409564
lea eax, [ebp - 0x41c]
push eax
push 0x41ba8c
call fcn.00402b80
mov edi, 0x41ba8b
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, 0x41ba8b
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x41b505
lea edi, [ebp - 0x51c]
call fcn.00401af0
lea esi, [ebp - 0x51c]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b88b
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x41b98b
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
push 0x41b88b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b507
call fcn.00408ba0
test al, al
je 0x409686
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov al, byte [0x41b88a]
test al, al
jne 0x409665
call fcn.0040aeb0
push 0x41b757
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b512
call fcn.00408ba0
test al, al
je 0x4096ef
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov al, byte [0x41b88a]
test al, al
jne 0x4096ce
call fcn.0040aeb0
push 0x41b657
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b51b
call fcn.00408ba0
test al, al
jne 0x409717
lea esi, [ebp - 0x218]
mov edi, 0x41b522
call fcn.00408ba0
test al, al
je 0x409780
push 0x41f74b
push 0xff
call sub.kernel32.dll_GetTempPathA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
push 0x41f74b
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b528
call fcn.00408ba0
test al, al
je 0x4097fd
push 0xff
push 0x41f74b
call sub.kernel32.dll_GetWindowsDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
push 0x41f74b
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b531
call fcn.00408ba0
test al, al
je 0x40987a
push 0xff
push 0x41f74b
call sub.kernel32.dll_GetSystemDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
push 0x41f74b
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b53d
call fcn.00408ba0
test al, al
jne 0x4098a6
lea esi, [ebp - 0x218]
mov edi, 0x41b54c
call fcn.00408ba0
test al, al
je 0x409958
lea edi, [ebp - 0x218]
mov esi, 0x41b556
call fcn.00401940
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b563
lea edi, [ebp - 0x41c]
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x41f74b
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
push 0x41f74b
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b565
call fcn.00408ba0
test al, al
je 0x409a22
lea edi, [ebp - 0x218]
mov esi, 0x41b56f
call fcn.00401940
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b577
lea edi, [ebp - 0x41c]
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x41f74b
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
push 0x41f74b
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b579
call fcn.00408ba0
test al, al
je 0x409c06
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409a71
cmp dword [ebp - 0x10c], eax
jge 0x409a8b
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409a8b
inc dword [ebp - 0x10c]
jmp 0x409a60
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409b34
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409abe
cmp dword [ebp - 0x114], eax
jge 0x409ad8
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409ad8
inc dword [ebp - 0x114]
jmp 0x409aad
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409b34
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408ee0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx eax, byte [ebp - 0x218]
push eax
push 1
call fcn.00402fb0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00402fb0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b57f
lea edi, [ebp - 0x41c]
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x41f74b
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
push 0x41f74b
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b581
call fcn.00408ba0
test al, al
je 0x409f22
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409c55
cmp dword [ebp - 0x10c], eax
jge 0x409c6f
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409c6f
inc dword [ebp - 0x10c]
jmp 0x409c44
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409d18
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409ca2
cmp dword [ebp - 0x114], eax
jge 0x409cbc
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409cbc
inc dword [ebp - 0x114]
jmp 0x409c91
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409d18
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408ee0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx eax, byte [ebp - 0x218]
push eax
push 1
call fcn.00402fb0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00402fb0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b58a
lea edi, [ebp - 0x41c]
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
mov edi, 0x41f74a
lea esi, [ebp - 0x218]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409dc1
cmp dword [ebp - 0x10c], eax
jge 0x409ddb
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409ddb
inc dword [ebp - 0x10c]
jmp 0x409db0
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409e84
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409e0e
cmp dword [ebp - 0x114], eax
jge 0x409e28
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409e28
inc dword [ebp - 0x114]
jmp 0x409dfd
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x409e84
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00408ee0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx eax, byte [ebp - 0x218]
push eax
push 1
call fcn.00402fb0
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00402fb0
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b58c
lea edi, [ebp - 0x41c]
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x41f74b
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b58e
call fcn.00408ba0
test al, al
je 0x409f8f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea edi, [ebp - 0x318]
mov esi, 0x41b594
call fcn.00401940
lea eax, [ebp - 0x318]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b598
call fcn.00408ba0
test al, al
je 0x409fdc
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov byte [0x41f749], 1
mov byte [0x41b656], 1
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b59f
call fcn.00408ba0
test al, al
je 0x40a029
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov byte [0x41f749], 0
mov byte [0x41b656], 0
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5a5
call fcn.00408ba0
test al, al
je 0x40a06f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov byte [0x41b3a7], 1
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5aa
call fcn.00408ba0
test al, al
je 0x40a17b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov byte [0x41f748], 1
mov edi, 0x41f647
mov esi, 0x41b5b0
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x40a15d
mov eax, dword [ebp - 0x10c]
movzx eax, byte [ebp + eax - 0x108]
mov esi, 0x41b5b1
movzx eax, ax
push 0x470020
call fcn.0040148e
test al, al
je 0x40a15d
mov esi, 0x41f647
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
lea esi, [ebp - 0x51c]
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x41f647
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00402fb0
jmp 0x40a0c3
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00402fb0
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5ba
call fcn.00408ba0
test al, al
je 0x40a28e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov byte [0x41f748], 1
mov byte [0x41f747], 1
mov edi, 0x41f647
mov esi, 0x41b5c1
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x40a270
mov eax, dword [ebp - 0x10c]
movzx eax, byte [ebp + eax - 0x108]
mov esi, 0x41b5c2
movzx eax, ax
push 0x470020
call fcn.0040148e
test al, al
je 0x40a270
mov esi, 0x41f647
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
lea esi, [ebp - 0x51c]
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x41f647
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00402fb0
jmp 0x40a1d6
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00402fb0
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5cb
call fcn.00408ba0
test al, al
je 0x40a2d4
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov byte [0x41b655], 1
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5d2
call fcn.00408ba0
test al, al
je 0x40a3b5
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea edi, [ebp - 0x218]
mov esi, 0x41b5da
call fcn.00401940
push 0
call sub.user32.dll_OpenClipboard
test al, al
je 0x40a392
push 1
call sub.user32.dll_GetClipboardData
mov dword [0x41f63f], eax
cmp dword [0x41f63f], 0
jbe 0x40a389
push dword [0x41f63f]
call sub.kernel32.dll_GlobalLock
mov dword [0x41f643], eax
cmp dword [0x41f643], 0
je 0x40a37e
lea eax, [ebp - 0x41c]
push eax
push dword [0x41f643]
call fcn.00402b80
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push dword [0x41f63f]
call sub.kernel32.dll_CloseHandle
call sub.user32.dll_CloseClipboard
test al, al
je 0x40a392
lea eax, [ebp - 0x218]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5db
call fcn.00408ba0
test al, al
je 0x40a402
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov byte [0x41b655], 1
mov byte [0x41b654], 1
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5e3
call fcn.00408ba0
test al, al
je 0x40a441
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5eb
call fcn.00408ba0
test al, al
je 0x40a48a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov dword [0x41f633], 0x4000000
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5f1
call fcn.00408ba0
test al, al
je 0x40a4d3
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov dword [0x41f633], 0x200
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5f8
call fcn.00408ba0
test al, al
je 0x40a51c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov dword [0x41f633], 0x10
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b5ff
call fcn.00408ba0
test al, al
je 0x40a565
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov dword [0x41f633], 0x800
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b605
call fcn.00408ba0
test al, al
je 0x40a5ae
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov dword [0x41f633], 0x1000
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b60c
call fcn.00408ba0
test al, al
je 0x40a61d
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
push dword [0x41f627]
call fcn.0040ad10
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
mov edi, 0x41b614
call fcn.00408ba0
test al, al
je 0x40a78a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00402fb0
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x22
jne 0x40a76a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00402fb0
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x108]
push eax
push 1
push 0xff
call fcn.00401cd0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x41b61c
lea eax, [ebp - 0x218]
push eax
call fcn.00403000
test eax, eax
jle 0x40a713
push 0xff
lea eax, [ebp - 0x218]
push eax
push 0x41b61e
lea eax, [ebp - 0x218]
push eax
call fcn.00403000
push eax
push 0xff
call fcn.00402fb0
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx eax, byte [ebp - 0x218]
inc eax
push eax
call fcn.00402fb0
jmp 0x40a732
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx eax, byte [ebp - 0x218]
push eax
call fcn.00402fb0
lea esi, [ebp - 0x218]
mov edi, 0x41b620
call fcn.00406910
test al, al
je 0x40a76a
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0040a8b0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
lea eax, [ebp - 0x218]
push eax
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.00402f20
jmp 0x40a7d1
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x41b621
lea edi, [ebp - 0x41c]
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0
push 0x41b623
lea eax, [ebp - 0x217]
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0x41b62b
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x10c], eax
jne 0x40a7f8
jmp 0x40a7fd
jmp 0x408fb2
mov al, byte [ebp - 0x31c]
test al, al
je 0x40a84e
push 0x41b62d
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x40a84e
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x41b62f
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x10c], eax
jmp 0x40a81e
push 0x41b631
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x40a895
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x41b633
lea eax, [ebp - 0x108]
push eax
call fcn.00403000
mov dword [ebp - 0x10c], eax
jmp 0x40a865
mov edi, dword [ebp + 0xc]
lea esi, [ebp - 0x108]
call fcn.00401940
pop edx
pop ecx
pop ebx
leave
ret 8