Function at 0x409530
Capabilities:
Get common file path
Get hostname
Get session user name
Open clipboard
Query environment variable
Read clipboard data
Set environment variable

Disassembly:
enter 0x518, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x108]
call fcn.00401940
mov byte [ebp - 0x319], 0
push 0x416f55
lea eax, [ebp - 0x108]
push eax
call fcn.00404830
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x110], 0
jle 0x40ac14
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409587
cmp dword [ebp - 0x10c], eax
jge 0x4095a1
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x4095a1
inc dword [ebp - 0x10c]
jmp 0x409576
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40abee
inc eax
mov dword [ebp - 0x114], eax
mov bl, byte [0x42ef88]
test bl, bl
jne 0x409677
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x31
jb 0x409677
cmp byte [ebp + eax - 0x108], 0x39
ja 0x409677
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x41c]
push 1
call fcn.00401d30
mov ecx, edi
push ecx
call fcn.0040bd50
mov dword [ebp - 0x118], eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
push 2
call fcn.00404a10
call fcn.0040bcf0
cmp eax, dword [ebp - 0x118]
jl 0x409672
lea eax, [ebp - 0x41c]
push eax
push dword [ebp - 0x118]
call fcn.0040b980
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x409569
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409688
cmp dword [ebp - 0x114], eax
jge 0x4096a2
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x4096a2
inc dword [ebp - 0x114]
jmp 0x409677
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40abee
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409480
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x416f57
mov eax, edi
push eax
call fcn.00404830
test eax, eax
jle 0x409727
mov byte [ebp - 0x319], 1
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xeb
jmp 0x40abee
push 0x416f59
lea eax, [ebp - 0x218]
push eax
call fcn.00404830
cmp eax, 1
jne 0x409774
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x218]
push ebx
call fcn.0040b530
jmp 0x40abee
push 0x416f5c
lea eax, [ebp - 0x218]
push eax
call fcn.00404830
cmp eax, 1
jne 0x4097ab
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0xec
mov eax, dword [ebp - 0x114]
mov byte [ebp + eax - 0x108], 0xec
jmp 0x40abee
lea esi, [ebp - 0x218]
mov edi, 0x416f5f
call fcn.004034e0
test al, al
je 0x409806
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
push 0x41763a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416f65
call fcn.004034e0
test al, al
je 0x409926
mov esi, 0x415e04
mov edi, 0x416f6a
call fcn.004034e0
test al, al
je 0x4098df
mov dword [0x417636], 0xff
push 0x417636
push 0x417433
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x40984c
lea eax, [ebp - 0x41c]
push eax
push 0x417433
call fcn.00402b80
mov edi, 0x417432
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x417632
push 0x417533
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x409880
lea eax, [ebp - 0x41c]
push eax
push 0x417533
call fcn.00402b80
mov edi, 0x417532
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x416f6b
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x417432
call fcn.00401af0
mov edi, 0x415e04
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
push 0x415e04
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416f6d
call fcn.004034e0
test al, al
je 0x409a46
mov esi, 0x415e04
mov edi, 0x416f72
call fcn.004034e0
test al, al
je 0x4099ff
mov dword [0x417636], 0xff
push 0x417636
push 0x417433
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x40996c
lea eax, [ebp - 0x41c]
push eax
push 0x417433
call fcn.00402b80
mov edi, 0x417432
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x417632
push 0x417533
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x4099a0
lea eax, [ebp - 0x41c]
push eax
push 0x417533
call fcn.00402b80
mov edi, 0x417532
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x416f73
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x417432
call fcn.00401af0
mov edi, 0x415e04
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
push 0x417532
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416f75
call fcn.004034e0
test al, al
je 0x409b66
mov esi, 0x415e04
mov edi, 0x416f7a
call fcn.004034e0
test al, al
je 0x409b1f
mov dword [0x417636], 0xff
push 0x417636
push 0x417433
call sub.kernel32.dll_GetComputerNameA
test al, al
jne 0x409a8c
lea eax, [ebp - 0x41c]
push eax
push 0x417433
call fcn.00402b80
mov edi, 0x417432
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x417632
push 0x417533
call sub.advapi32.dll_GetUserNameA
test al, al
jne 0x409ac0
lea eax, [ebp - 0x41c]
push eax
push 0x417533
call fcn.00402b80
mov edi, 0x417532
lea esi, [ebp - 0x41c]
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x51c]
call fcn.00401b30
mov esi, 0x416f7b
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x417432
call fcn.00401af0
mov edi, 0x415e04
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
push 0x417432
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416f7d
call fcn.004034e0
test al, al
je 0x409bca
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov bl, byte [0x417431]
test bl, bl
jne 0x409ba9
call fcn.0040b2f0
push 0x417231
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416f88
call fcn.004034e0
test al, al
je 0x409c2e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov bl, byte [0x417431]
test bl, bl
jne 0x409c0d
call fcn.0040b2f0
push 0x4170cd
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416f91
call fcn.004034e0
test al, al
jne 0x409c4a
mov edi, 0x416f98
call fcn.004034e0
test al, al
je 0x409cb3
push 0x42ef8a
push 0xff
call sub.kernel32.dll_GetTempPathA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x41c]
push ebx
push 0x42ef8a
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
lea esi, [ebp - 0x218]
mov edi, 0x416f9e
call fcn.004034e0
test al, al
je 0x409d30
push 0xff
push 0x42ef8a
call sub.kernel32.dll_GetWindowsDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x41c]
push ebx
push 0x42ef8a
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416fa7
call fcn.004034e0
test al, al
je 0x409da7
push 0xff
push 0x42ef8a
call sub.kernel32.dll_GetSystemDirectoryA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x41c]
push ebx
push 0x42ef8a
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416fb3
call fcn.004034e0
test al, al
jne 0x409dc7
mov edi, 0x416fc2
call fcn.004034e0
test al, al
je 0x409e6f
lea edi, [ebp - 0x218]
mov esi, 0x416fcc
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416fd9
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x42ef8a
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x41c]
push ebx
push 0x42ef8a
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
lea esi, [ebp - 0x218]
mov edi, 0x416fdb
call fcn.004034e0
test al, al
je 0x409f2b
mov edi, esi
mov esi, 0x416fe5
call fcn.00401940
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416fed
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x42ef8a
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x41c]
push ebx
push 0x42ef8a
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416fef
call fcn.004034e0
test al, al
je 0x40a0f7
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409f74
cmp dword [ebp - 0x10c], eax
jge 0x409f8e
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409f8e
inc dword [ebp - 0x10c]
jmp 0x409f63
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a02b
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x409fbb
cmp dword [ebp - 0x114], eax
jge 0x409fd5
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x409fd5
inc dword [ebp - 0x114]
jmp 0x409faa
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a02b
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409480
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404a10
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404a10
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x416ff5
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
push 0x42ef8a
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_GetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x41c]
push ebx
push 0x42ef8a
call fcn.00402b80
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x416ff7
call fcn.004034e0
test al, al
je 0x40a3e9
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a140
cmp dword [ebp - 0x10c], eax
jge 0x40a15a
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a15a
inc dword [ebp - 0x10c]
jmp 0x40a12f
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a1f7
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a187
cmp dword [ebp - 0x114], eax
jge 0x40a1a1
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a1a1
inc dword [ebp - 0x114]
jmp 0x40a176
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a1f7
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409480
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404a10
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404a10
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x417000
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
mov edi, 0x42ef89
lea esi, [ebp - 0x218]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a29a
cmp dword [ebp - 0x10c], eax
jge 0x40a2b4
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a2b4
inc dword [ebp - 0x10c]
jmp 0x40a289
mov eax, dword [ebp - 0x10c]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a351
inc eax
mov dword [ebp - 0x114], eax
movzx eax, byte [ebp - 0x108]
test eax, eax
jl 0x40a2e1
cmp dword [ebp - 0x114], eax
jge 0x40a2fb
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
je 0x40a2fb
inc dword [ebp - 0x114]
jmp 0x40a2d0
mov eax, dword [ebp - 0x114]
cmp byte [ebp + eax - 0x108], 0x25
jne 0x40a351
lea ebx, [ebp - 0x41c]
push ebx
lea ecx, [ebp - 0x51c]
push ecx
lea edx, [ebp - 0x108]
push edx
push dword [ebp - 0x10c]
sub eax, dword [ebp - 0x10c]
inc eax
push eax
call fcn.00401cd0
lea eax, [ebp - 0x51c]
push eax
call fcn.00409480
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea eax, [ebp - 0x218]
push eax
movzx ebx, byte [ebp - 0x218]
push ebx
push 1
call fcn.00404a10
push 0xff
lea eax, [ebp - 0x218]
push eax
push 1
push 1
call fcn.00404a10
lea esi, [ebp - 0x218]
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x417002
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x42ef8a
lea eax, [ebp - 0x217]
push eax
call sub.kernel32.dll_SetEnvironmentVariableA
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
jmp 0x40abee
mov edi, 0x417004
call fcn.004034e0
test al, al
je 0x40a44c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea edi, [ebp - 0x318]
mov esi, 0x41700a
call fcn.00401940
mov eax, edi
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x41700e
call fcn.004034e0
test al, al
je 0x40a493
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov byte [0x42ef88], 1
mov byte [0x4170cc], 1
jmp 0x40abee
mov edi, 0x417015
call fcn.004034e0
test al, al
je 0x40a4da
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov byte [0x42ef88], 0
mov byte [0x4170cc], 0
jmp 0x40abee
mov edi, 0x41701b
call fcn.004034e0
test al, al
je 0x40a51a
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov byte [0x42ee71], 1
jmp 0x40abee
mov edi, 0x417020
call fcn.004034e0
test al, al
je 0x40a617
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov byte [0x42ee7e], 1
mov edi, 0x42ee87
mov esi, 0x417026
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x40a5f9
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x417027
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x40a5f9
mov esi, 0x42ee87
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x42ee87
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.00404a10
jmp 0x40a568
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00404a10
jmp 0x40abee
mov edi, 0x417030
call fcn.004034e0
test al, al
je 0x40a71b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov byte [0x42ee7e], 1
mov byte [0x42ef87], 1
mov edi, 0x42ee87
mov esi, 0x417037
call fcn.00401940
cmp byte [ebp - 0x108], 0
jbe 0x40a6fd
mov eax, dword [ebp - 0x10c]
movzx ebx, byte [ebp + eax - 0x108]
mov esi, 0x417038
movzx eax, bx
push 0x470020
call fcn.0040148e
test al, al
je 0x40a6fd
mov esi, 0x42ee87
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov eax, dword [ebp - 0x10c]
lea esi, [ebp + eax - 0x108]
lea edi, [ebp - 0x51c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x41c]
call fcn.00401af0
mov edi, 0x42ee87
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push eax
push 1
call fcn.00404a10
jmp 0x40a66c
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
push 1
call fcn.00404a10
jmp 0x40abee
mov edi, 0x417041
call fcn.004034e0
test al, al
je 0x40a75b
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov byte [0x4170cb], 1
jmp 0x40abee
mov edi, 0x417048
call fcn.004034e0
test al, al
je 0x40a827
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea edi, [ebp - 0x218]
mov esi, 0x417050
call fcn.00401940
push 0
call sub.user32.dll_OpenClipboard
test al, al
je 0x40a804
push 1
call sub.user32.dll_GetClipboardData
mov dword [0x42ee7f], eax
test eax, eax
jbe 0x40a7fb
push eax
call sub.kernel32.dll_GlobalLock
mov dword [0x42ee83], eax
test eax, eax
je 0x40a7f0
lea ebx, [ebp - 0x41c]
push ebx
push dword [0x42ee83]
call fcn.00402b80
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push dword [0x42ee7f]
call sub.kernel32.dll_CloseHandle
call sub.user32.dll_CloseClipboard
test al, al
je 0x40a804
lea eax, [ebp - 0x218]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x417051
call fcn.004034e0
test al, al
je 0x40a86e
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov byte [0x4170cb], 1
mov byte [0x4170ca], 1
jmp 0x40abee
mov edi, 0x417059
call fcn.004034e0
test al, al
je 0x40a8a7
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
jmp 0x40abee
mov edi, 0x417061
call fcn.004034e0
test al, al
je 0x40a8ea
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov dword [0x42ee7a], 0x4000000
jmp 0x40abee
mov edi, 0x417067
call fcn.004034e0
test al, al
je 0x40a92d
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov dword [0x42ee7a], 0x200
jmp 0x40abee
mov edi, 0x41706e
call fcn.004034e0
test al, al
je 0x40a970
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov dword [0x42ee7a], 0x10
jmp 0x40abee
mov edi, 0x417075
call fcn.004034e0
test al, al
je 0x40a9b3
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov dword [0x42ee7a], 0x800
jmp 0x40abee
mov edi, 0x41707b
call fcn.004034e0
test al, al
je 0x40a9f6
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov dword [0x42ee7a], 0x1000
jmp 0x40abee
mov edi, 0x417082
call fcn.004034e0
test al, al
je 0x40aa5f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
lea ebx, [ebp - 0x41c]
push ebx
push dword [0x42ee6d]
call fcn.0040b150
lea eax, [ebp - 0x41c]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
mov edi, 0x41708a
call fcn.004034e0
test al, al
je 0x40abb3
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
mov ebx, dword [ebp - 0x114]
sub ebx, dword [ebp - 0x10c]
inc ebx
push ebx
call fcn.00404a10
mov ebx, dword [ebp - 0x10c]
cmp byte [ebp + ebx - 0x108], 0x22
jne 0x40ab93
push 0xff
lea eax, [ebp - 0x108]
push eax
push ebx
push 1
call fcn.00404a10
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x108]
push eax
push 1
push 0xff
call fcn.00401cd0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0x417092
mov eax, edi
push eax
call fcn.00404830
test eax, eax
jle 0x40ab40
push 0xff
lea eax, [ebp - 0x218]
push eax
push 0x417094
push eax
call fcn.00404830
push eax
push 0xff
call fcn.00404a10
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx ebx, byte [ebp - 0x218]
inc ebx
push ebx
call fcn.00404a10
jmp 0x40ab5f
push 0xff
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x10c]
movzx ebx, byte [ebp - 0x218]
push ebx
call fcn.00404a10
lea esi, [ebp - 0x218]
mov edi, 0x417096
call fcn.0040b110
test al, al
je 0x40ab93
lea eax, [ebp - 0x41c]
push eax
mov ebx, esi
push ebx
call fcn.0040acd0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
lea eax, [ebp - 0x218]
push eax
push 0xff
lea ebx, [ebp - 0x108]
push ebx
push dword [ebp - 0x10c]
call fcn.004093f0
jmp 0x40abee
lea edi, [ebp - 0x41c]
call fcn.00401b30
mov esi, 0x417097
call fcn.00401af0
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x41c]
call fcn.00401940
push 0
push 0x417099
lea eax, [ebp - 0x217]
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0x4170a1
lea eax, [ebp - 0x108]
push eax
call fcn.00404830
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x10c], eax
jne 0x40ac0f
jmp 0x40ac14
jmp 0x409569
mov al, byte [ebp - 0x319]
test al, al
je 0x40ac65
push 0x4170a3
lea ebx, [ebp - 0x108]
push ebx
call fcn.00404830
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x40ac65
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x4170a5
lea eax, [ebp - 0x108]
push eax
call fcn.00404830
mov dword [ebp - 0x10c], eax
jmp 0x40ac35
push 0x4170a7
lea eax, [ebp - 0x108]
push eax
call fcn.00404830
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jle 0x40acac
mov eax, dword [ebp - 0x10c]
mov byte [ebp + eax - 0x108], 0x25
push 0x4170a9
lea eax, [ebp - 0x108]
push eax
call fcn.00404830
mov dword [ebp - 0x10c], eax
jmp 0x40ac7c
mov edi, dword [ebp + 0xc]
lea esi, [ebp - 0x108]
call fcn.00401940
pop edx
pop ecx
pop ebx
leave
ret 8