Function at 0x1800435c0
Capabilities:
Delete file
Read clipboard data

Disassembly:
mov r11, rsp
push rdi
sub rsp, 0x320
mov qword [rsp + 0xc8], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov rax, qword [0x1800a1628]
xor rax, rsp
mov qword [rsp + 0x310], rax
xor edi, edi
mov word [rsp + 0x100], di
xor edx, edx
mov r8d, 0x206
lea rcx, [r11 - 0x226]
call fcn.180059db0
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.180002674
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, str..jpg
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea esi, [rdi + 2]
mov ecx, esi
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
cmp rax, rdi
jne 0x18004366f
mov ecx, esi
call fcn.1800428fc
mov ecx, eax
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
cmp rax, rdi
je 0x180043904
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, 0xf
mov ecx, esi
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rdx, rax
mov rcx, rbx
call fcn.18000e73c
mov rbx, rax
cmp rax, rdi
je 0x1800436bd
lea r8d, [rsi + 0x23]
lea rdx, [rsp + 0x100]
mov rcx, rax
call fcn.18000e864
mov r11, qword [rbx]
lea edx, [rsi - 0xe]
mov rcx, rbx
call qword [r11]
lea rcx, [rsp + 0x100]
call fcn.180001f80
cmp rax, 0x400
ja 0x1800436e5
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x180043904
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.180016754
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x98], 7
mov qword [rsp + 0x90], rdi
mov word [rsp + 0x80], di
lea rcx, [0x180079fa8]
call fcn.180058c38
mov r8, rax
lea rdx, [0x180079fa8]
lea rcx, [rsp + 0x78]
call fcn.1800076f0
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x28]
call fcn.18000e98c
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180016918
mov rbx, rax
lea rdx, str.cl_type
lea rcx, [rsp + 0xa0]
call fcn.180017e84
mov rcx, rax
mov rdx, rbx
call fcn.180016ba4
nop
cmp qword [rsp + 0x48], 0x10
jb 0x18004378e
mov rcx, qword [rsp + 0x30]
call fcn.180058b34
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rdi
mov byte [rsp + 0x30], dil
cmp qword [rsp + 0x98], 8
jb 0x1800437b5
mov rcx, qword [rsp + 0x80]
call fcn.180058b34
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, str.__image__
lea rcx, [rsp + 0x50]
call fcn.180016870
mov rbx, rax
lea rdx, str.cl_content
lea rcx, [rsp + 0xa0]
call fcn.180017e84
mov rcx, rax
mov rdx, rbx
call fcn.180016ba4
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xe8], rdi
mov byte [rsp + 0xd8], dil
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x28]
call fcn.180043410
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180016918
mov rbx, rax
lea rdx, str.cl_procname
lea rcx, [rsp + 0xa0]
call fcn.180017e84
mov rcx, rax
mov rdx, rbx
call fcn.180016ba4
nop
cmp qword [rsp + 0x48], 0x10
jb 0x180043869
mov rcx, qword [rsp + 0x30]
call fcn.180058b34
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.180016918
mov rbx, rax
lea rdx, str.cl_hash4k
lea rcx, [rsp + 0xa0]
call fcn.180017e84
mov rcx, rax
mov rdx, rbx
call fcn.180016ba4
xor r9d, r9d
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0xa0]
lea rcx, str.t_clipboard_log
call fcn.1800264dc
nop
cmp qword [rsp + 0xf0], 0x10
jb 0x1800438df
mov rcx, qword [rsp + 0xd8]
call fcn.180058b34
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xe8], rdi
mov byte [rsp + 0xd8], dil
lea rcx, [rsp + 0xa0]
call fcn.180016b0c
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.180059760
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret