Function at 0x11cca7c0
Capabilities:
Get file attributes
Get graphical window text

Disassembly:
push 0xffffffffffffffff
push 0x11fa0e96
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x448
push ebx
push ebp
push esi
mov dword [esp + 0xc], ecx
push edi
push 2
lea ecx, [esp + 0x34]
call fcn.11e15fa0
mov esi, dword [esp + 0x468]
xor eax, eax
mov dword [esp + 0x460], eax
mov dword [esp + 0x1c], eax
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov ebx, dword [esi + 0x24]
mov dword [esp + 0x24], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
lea ecx, [esp + 0x24]
push eax
lea edx, [esp + 0x20]
push ecx
push edx
push edi
call fcn.11e15b00
mov eax, dword [esp + 0x34]
add esp, 0x10
test eax, eax
je 0x11cca870
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x470]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x46c]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x20]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebp
mov dword [esi + 0x24], ebx
mov dword [esi + 0xc], edx
jmp 0x11cca8b2
mov edi, dword [esi + 0x18]
test edi, edi
je 0x11cca8b2
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x470]
mov ecx, dword [esp + 0x46c]
push eax
push ecx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cca8b2
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x14]
test eax, eax
mov dword [esp + 0x1c], eax
jne 0x11cca8d8
lea ecx, [esp + 0x30]
mov dword [esp + 0x460], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11ccae9f
push 0xffffffffffffffdd
lea ecx, [esp + 0x40]
call fcn.11e15fa0
mov byte [esp + 0x460], 1
call fcn.11e93550
test eax, eax
je 0x11ccab08
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cca91b
mov eax, dword [0x12126854]
push eax
push str.__s__OnSetClipboardData___PDM_File_1_
push str.SPDM
push 2
call fcn.11ca5810
add esp, 0x10
cmp dword [esp + 0x46c], 0xf
jne 0x11ccab08
mov ecx, 0x1212b5c0
call fcn.11da0ac0
test eax, eax
je 0x11cca943
mov eax, dword [esi + 0x18]
push eax
call fcn.11ccde60
add esp, 4
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cca966
mov eax, dword [0x12126854]
push eax
push str.__s__OnSetClipboardData___PDM_File_2_
push str.SPDM
push 2
call fcn.11ca5810
add esp, 0x10
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11cca97e
mov ecx, 0x1212b5c0
call fcn.11d6c6f0
mov edi, dword [esp + 0x470]
test edi, edi
je 0x11ccab08
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cca9b0
mov eax, dword [0x12126854]
push eax
push str.__s__OnSetClipboardData___PDM_File_3_
push str.SPDM
push 2
call fcn.11ca5810
add esp, 0x10
mov ebx, dword [sym.imp.SHELL32.dll_DragQueryFileW]
push 0
push 0
push 0xffffffffffffffff
push edi
call ebx
mov ebp, eax
mov eax, dword [0x12133f80]
test eax, eax
mov dword [esp + 0x14], ebp
je 0x11cca9e9
mov eax, dword [0x12126854]
push ebp
push eax
push str.__s__OnSetClipboardData___PDM_File_4_nFiles__d__
push str.SPDM
push 2
call fcn.11ca5810
add esp, 0x14
test ebp, ebp
je 0x11ccab08
mov ecx, 0x1212b5c0
call fcn.11d6b620
test eax, eax
je 0x11ccab08
mov ecx, 0x1212b458
call fcn.11df40d0
test eax, eax
je 0x11ccac77
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x252]
mov word [esp + 0x250], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor edi, edi
test ebp, ebp
jle 0x11ccaafe
mov eax, dword [esp + 0x470]
lea edx, [esp + 0x250]
push 0x104
push edx
push edi
push eax
call ebx
mov eax, dword [0x12133f80]
test eax, eax
je 0x11ccaa7e
mov eax, dword [0x12126854]
lea ecx, [esp + 0x250]
push ecx
push eax
push str.__s__OnSetClipboardData___PDM_File__s__
push str.SPDM
push 2
call fcn.11ca5810
add esp, 0x14
lea edx, [esp + 0x250]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test al, 0x10
je 0x11ccaabe
lea eax, [esp + 0x250]
push 0
push eax
mov ecx, 0x1212b5c0
call fcn.11d6bef0
test eax, eax
je 0x11ccaaf5
lea ecx, [esp + 0x250]
push 1
push ecx
mov ecx, 0x1212b5c0
call fcn.11d6c1e0
jmp 0x11ccaaf5
mov eax, dword [0x12133f80]
test eax, eax
je 0x11ccaae3
mov eax, dword [0x12126854]
push 0xf
push eax
push str.__s__OnSetClipboardData___PDM_uFormat__d__
push str.SPDM
push 2
call fcn.11ca5810
add esp, 0x14
lea edx, [esp + 0x250]
mov ecx, 0x1212b5c0
push edx
call fcn.11d6c3b0
inc edi
cmp edi, ebp
jl 0x11ccaa3b
mov ecx, 0x1212b5c0
call fcn.11d6c4e0
mov ebp, dword [esp + 0x10]
xor edi, edi
mov ecx, 0x1212b458
mov dword [esp + 0x28], edi
call fcn.11df4850
test eax, eax
je 0x11ccad6d
mov ecx, 0x1212b5c0
call fcn.11da98e0
test al, 0x20
jne 0x11ccad6d
cmp dword [ebp + 0x10], edi
je 0x11ccad6d
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, edi
je 0x11ccad6d
lea edx, [esp + 0x28]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [0x1212b464]
mov ecx, dword [esp + 0x28]
cmp ecx, eax
je 0x11ccab9b
mov ecx, 0x1212b458
call fcn.11df4810
test eax, eax
je 0x11ccad6d
push edi
lea eax, [esp + 0x18]
push edi
push eax
mov ecx, ebp
mov dword [esp + 0x20], edi
call fcn.11ccd2e0
mov eax, dword [0x1212b464]
mov ecx, dword [esp + 0x14]
cmp ecx, eax
jne 0x11ccad6d
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x14], edi
cmp eax, edi
mov dword [esp + 0x18], edi
jne 0x11ccad2e
lea ecx, [esp + 0x14]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x11ccad29
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
push edx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov ebx, eax
test ebx, ebx
je 0x11ccad6d
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x4a]
mov word [esp + 0x48], 0
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x48]
push 0x103
push ecx
push ebx
stosw word es:[edi], ax
call dword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
jle 0x11ccad6d
lea edx, [esp + 0x48]
push str.Collect_and_Paste_2.0
push edx
call fcn.11e67e01
add esp, 8
test eax, eax
jne 0x11ccad6d
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push eax
mov dword [ebp + 0x18], ebx
call fcn.11dd8450
mov eax, dword [0x12133f80]
add esp, 4
test eax, eax
je 0x11ccac5b
mov ecx, dword [esp + 0x10]
push ecx
push ebx
push str.OnSetClipboardData_click_paste__hWnd_0x_x__bHasEncryptDataInOfficeClip__d_
push str.safeclipboard
push 2
call fcn.11ca5810
add esp, 0x14
mov eax, dword [esp + 0x10]
test eax, eax
je 0x11ccad6d
mov eax, 1
mov dword [ebp + 4], eax
mov dword [ebp + 0x14], eax
jmp 0x11ccad6d
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x4a]
mov word [esp + 0x48], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x14]
xor ebp, ebp
test eax, eax
jle 0x11ccab08
mov ecx, dword [esp + 0x470]
lea eax, [esp + 0x48]
push 0x104
push eax
push ebp
push ecx
call ebx
lea edx, [esp + 0x48]
mov ecx, 0x1212b5c0
push edx
call fcn.11d6b710
mov edi, eax
test edi, edi
jne 0x11ccace5
lea eax, [esp + 0x48]
mov ecx, 0x1212b5c0
push eax
call fcn.11d6b820
mov edi, eax
test edi, edi
jne 0x11ccace5
mov eax, dword [esp + 0x14]
inc ebp
cmp ebp, eax
jl 0x11ccac9b
jmp 0x11ccad0d
mov eax, dword [0x12133f80]
test eax, eax
je 0x11ccad0d
mov eax, dword [0x12126854]
lea ecx, [esp + 0x48]
push ecx
push eax
push str.__s__OnSetClipboardData___Check_PDM_File__Src__s_
push str.SPDM
push 2
call fcn.11ca5810
add esp, 0x14
test edi, edi
je 0x11ccab08
mov ebp, dword [esp + 0x10]
mov eax, 1
mov dword [ebp + 0x2c], eax
mov dword [ebp + 4], eax
jmp 0x11ccab0c
cmp dword [ebp + 0xc], edi
je 0x11ccad6d
mov ecx, 0x1212b5c0
call fcn.11d689a0
test eax, eax
jne 0x11ccad6d
cmp dword [0x12133f80], edi
je 0x11ccad58
push str.OnSetClipboardData_HasEncryptDataInOfficeClip
push str.safeclipboard
push 2
call fcn.11ca5810
add esp, 0xc
lea edx, [esp + 0x20]
mov dword [esp + 0x20], 1
push edx
call fcn.11dd8460
add esp, 4
lea eax, [esp + 0x2c]
mov dword [esp + 0x2c], 0
push eax
push 0
call fcn.11dd8410
mov eax, dword [ebp + 0xc]
add esp, 8
test eax, eax
je 0x11ccae59
mov ecx, 0x1212b5c0
call fcn.11d689a0
test eax, eax
jne 0x11ccae3c
mov ecx, 0x1212b5c0
call fcn.11d689b0
test eax, eax
je 0x11ccadbd
mov ecx, 0x1212b5c0
call fcn.11da6570
test eax, eax
je 0x11ccade2
mov ecx, 0x1212b5c0
call fcn.11da9350
test eax, eax
je 0x11ccade9
mov eax, dword [0x1212c760]
test eax, eax
jne 0x11ccade9
mov ecx, 0x1212b5c0
call fcn.11da8bc0
test eax, eax
je 0x11ccade9
mov dword [ebp + 4], 1
mov esi, dword [esi + 0x18]
mov ecx, ebp
call fcn.11cccf60
mov ecx, dword [ebp + 8]
push 0
push ecx
push esi
call fcn.11cc9e00
mov eax, dword [0x12133f80]
add esp, 0xc
test eax, eax
je 0x11ccae76
push str.OnSetClipboardData___SetEmptyClipboardData
push str.safeclipboard
push 2
call fcn.11ca5810
mov eax, dword [0x12133f80]
add esp, 0xc
test eax, eax
je 0x11ccae76
push str.OnSetClipboardData___1
push str.safeclipboard
push 2
call fcn.11ca5810
add esp, 0xc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11ccae76
push str.OnSetClipboardData___2
push str.safeclipboard
push 2
call fcn.11ca5810
add esp, 0xc
mov eax, dword [0x12133f80]
test eax, eax
je 0x11ccae76
push str.OnSetClipboardData___3
push str.safeclipboard
push 2
call fcn.11ca5810
add esp, 0xc
lea ecx, [esp + 0x3c]
mov byte [esp + 0x460], 0
call fcn.11e15fd0
lea ecx, [esp + 0x30]
mov dword [esp + 0x460], 0xffffffff
call fcn.11e15fd0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x458]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x454
ret 0xc