Function at 0x41cc8e
Capabilities:
Open clipboard
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x471b69
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
push ebx
push esi
push edi
mov eax, dword [0x492fb4]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
lea ecx, [esp + 0x2c]
call fcn.0041d3f4
lea eax, [esp + 0x1c]
xor edi, edi
push eax
mov dword [esp + 0xc4], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0xc0], 1
cmp ebx, 0xf
je 0x41d0c1
jle 0x41d06e
cmp ebx, 0x11
jle 0x41cfdd
cmp ebx, 0x12
je 0x41cf9b
cmp ebx, 0x13
je 0x41ced3
cmp ebx, 0x14
jne 0x41d06e
mov eax, dword [ebp + 0x1c]
cmp eax, edi
je 0x41cee3
cmp dword [eax + 8], 1
jne 0x41cef3
push dword [eax]
lea ecx, [esp + 0x48]
call fcn.0041d670
push 8
pop eax
mov byte [esp + 0xc0], 5
cmp ax, word [esp + 0x44]
je 0x41cd62
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, 0x80020005
jmp 0x41cfec
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x88]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, edi
je 0x41ceca
push eax
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x41ceca
call dword [sym.imp.USER32.dll_EmptyClipboard]
push dword [esp + 0x4c]
lea ecx, [esp + 0x18]
call fcn.00401be2
mov byte [esp + 0xc0], 6
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], edi
je 0x41ceb8
lea ecx, [esp + 0x80]
call fcn.0040aab3
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0xc4], 7
push dword [esp + 0x18]
call fcn.0040b597
pop ecx
pop ecx
cmp eax, edi
jne 0x41cea4
cmp dword [esp + 0x9c], edi
je 0x41cea4
cmp dword [esp + 0xa0], edi
je 0x41cea4
xor eax, eax
mov byte [esp + 0x18], 0
lea edi, [esp + 0x19]
stosb byte es:[edi], al
push 2
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
call fcn.0040ab75
xor esi, esi
push esi
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x88]
call fcn.004143d2
mov byte [esp + 0xc0], 8
cmp byte [esp + 0x7c], 0
je 0x41ce48
cmp dword [esp + 0x70], esi
je 0x41ce90
cmp dword [esp + 0x78], esi
jne 0x41ce53
jmp 0x41ce90
cmp dword [esp + 0x70], esi
setne al
test al, al
je 0x41ce90
mov edi, dword [esp + 0x70]
lea ecx, [esp + 0x54]
call fcn.0040b070
cmp dword [esp + 0x78], esi
je 0x41ce74
push dword [esp + 0x70]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [esp + 0x78], esi
push edi
push 1
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], esi
call dword [sym.imp.USER32.dll_SetClipboardData]
test eax, eax
jne 0x41ce90
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0xc4], 7
call fcn.00414490
xor edi, edi
lea ecx, [esp + 0x80]
mov byte [esp + 0xc0], 6
call fcn.0040ab4f
call dword [sym.imp.USER32.dll_CloseClipboard]
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0040267a
lea eax, [esp + 0x44]
jmp 0x41cf92
cmp dword [ebp + 0x20], edi
je 0x41cfe2
mov eax, dword [ebp + 0x1c]
cmp eax, edi
jne 0x41ceed
mov esi, 0x8002000f
jmp 0x41cfec
cmp dword [eax + 8], 1
je 0x41cefd
mov esi, 0x8002000e
jmp 0x41cfec
push dword [eax]
lea ecx, [esp + 0xa8]
call fcn.0041d670
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0xc8], 2
call fcn.0041d4f9
push 0x498be8
lea ecx, [esp + 0x18]
mov byte [esp + 0xc4], 3
call fcn.00401ed0
mov eax, dword [ebp + 8]
mov byte [esp + 0xc0], 4
mov ecx, dword [eax + 0x88]
mov eax, dword [ecx]
lea edx, [esp + 0x14]
push edx
push dword [esp + 0x1c]
call dword [eax + 4]
push dword [esp + 0x14]
lea esi, [esp + 0x20]
call fcn.00408ec3
mov eax, esi
push eax
push dword [ebp + 0x20]
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0040267a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0040267a
lea eax, [esp + 0xa4]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x41cfd9
mov edi, dword [ebp + 0x20]
test edi, edi
je 0x41cfe2
push edi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp + 8]
push dword [eax + 0x88]
lea esi, [eax + 0x8c]
mov eax, esi
call fcn.0041cade
mov esi, dword [esi]
pop ecx
test esi, esi
je 0x41cfd4
mov eax, dword [esi]
push esi
call dword [eax + 4]
push 9
pop eax
mov dword [edi + 8], esi
jmp 0x41cfd6
xor eax, eax
mov word [edi], ax
xor esi, esi
jmp 0x41cfec
cmp dword [ebp + 0x20], edi
jne 0x41d010
mov eax, dword [ebp + 0x24]
call fcn.0041cb1a
mov esi, eax
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x2c]
call fcn.0041d479
push dword [esp + 0x2c]
call fcn.00458419
mov eax, esi
jmp 0x41d10b
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 0x88]
mov eax, dword [ecx]
lea edx, [esp + 0x1c]
push edx
lea edx, [esp + 0x30]
push edx
push ebx
call dword [eax + 0x14]
mov edi, eax
lea eax, [esp + 0x1c]
push eax
push dword [ebp + 0x20]
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test edi, edi
je 0x41d04a
mov ecx, dword [ebp + 0x1c]
push ebx
push edi
push esi
call fcn.00420d91
xor edi, edi
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x2c]
call fcn.0041d479
push dword [esp + 0x2c]
call fcn.00458419
mov eax, edi
jmp 0x41d10b
mov eax, dword [ebp + 8]
push dword [eax + 0x88]
lea esi, [eax + 0x8c]
mov eax, esi
call fcn.0041cade
mov esi, dword [esi]
pop ecx
cmp esi, edi
je 0x41d0a7
push dword [ebp + 0x28]
mov eax, dword [esi]
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push ebx
push esi
call dword [eax + 0x18]
cmp eax, edi
je 0x41cfea
mov esi, 0x80020003
cmp eax, esi
jne 0x41cfea
jmp 0x41cfec
cmp dword [ebp + 0x20], edi
je 0x41cfe2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp + 8]
sub eax, dword [ecx + 0x90]
lea esi, [esp + 0x1c]
call fcn.0041d695
mov eax, esi
push eax
push dword [ebp + 0x20]
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x2c]
call fcn.0041d479
push dword [esp + 0x2c]
call fcn.00458419
xor eax, eax
pop ecx
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24