Function at 0x6d17b65f
Capabilities:
Write clipboard data

Disassembly:
push 8
mov eax, 0x6d1c21ca
call fcn.6d1c0ca9
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.6d1acfff
call fcn.6d180d61
mov edi, dword [ebp + 0x18]
cmp edi, ebx
je 0x6d17b769
mov esi, dword [ebp + 8]
mov eax, dword [esi]
push edi
push esi
call dword [eax + 0x2ac]
cmp dword [ebp + 0x10], 0xe
mov ecx, eax
mov dword [ebp + 8], ecx
jne 0x6d17b6fb
cmp dword [ebp + 0x14], ebx
jne 0x6d17b6fb
mov eax, dword [esi]
push ebx
push edi
push esi
call dword [eax + 0x378]
mov edi, eax
cmp edi, ebx
jne 0x6d17b6d4
mov eax, dword [esi]
push ebx
push esi
call dword [eax + 0x50]
xor eax, eax
lea edi, [ebp + 0x1b]
stosb byte es:[edi], al
mov al, byte [ebp + 0x1b]
mov byte [ebp - 0x11], al
push 0x6d1e6500
lea eax, [ebp - 0x11]
push eax
call sub.MSVCR100.dll__CxxThrowException
push edi
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SetEnhMetaFileBits]
push 2
push edi
push dword [ebp + 0x18]
mov ebx, eax
mov eax, dword [esi]
push esi
call dword [eax + 0x37c]
test ebx, ebx
je 0x6d17b769
push ebx
push 0xe
jmp 0x6d17b870
cmp dword [ebp + 0x10], 3
jne 0x6d17b7f5
cmp dword [ebp + 0x14], ebx
jne 0x6d17b7f5
mov eax, dword [esi]
push ebx
push edi
push esi
call dword [eax + 0x378]
mov edi, eax
cmp edi, ebx
jne 0x6d17b73c
mov eax, dword [esi]
push ebx
push esi
call dword [eax + 0x50]
xor eax, eax
lea edi, [ebp + 0x1b]
stosb byte es:[edi], al
mov al, byte [ebp + 0x1b]
mov byte [ebp - 0x12], al
push 0x6d1e6500
lea eax, [ebp - 0x12]
jmp 0x6d17b6ce
lea eax, [edi + 0x10]
push eax
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
push eax
call dword [sym.imp.GDI32.dll_SetMetaFileBitsEx]
mov ebx, eax
test ebx, ebx
jne 0x6d17b771
mov eax, dword [esi]
push 2
push edi
push dword [ebp + 0x18]
push esi
call dword [eax + 0x37c]
mov eax, dword [esi]
push ebx
push esi
call dword [eax + 0x50]
call fcn.6d1c0d4e
ret 0x14
push 0x10
push 0x2042
call dword [sym.imp.kernel32.dll_GlobalAlloc]
mov dword [ebp + 8], eax
test eax, eax
jne 0x6d17b7bc
push ebx
call dword [sym.imp.GDI32.dll_DeleteMetaFile]
mov eax, dword [esi]
push 2
push edi
push dword [ebp + 0x18]
push esi
call dword [eax + 0x37c]
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x50]
xor eax, eax
lea edi, [ebp + 0x1b]
stosb byte es:[edi], al
mov al, byte [ebp + 0x1b]
mov byte [ebp - 0x13], al
push 0x6d1e6500
lea eax, [ebp - 0x13]
jmp 0x6d17b6ce
push eax
call dword [sym.imp.kernel32.dll_GlobalLock]
mov ecx, dword [edi]
push dword [ebp + 8]
mov dword [eax], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edi + 8]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ebx
call dword [sym.imp.kernel32.dll_GlobalUnlock]
mov eax, dword [esi]
push 2
push edi
push dword [ebp + 0x18]
push esi
call dword [eax + 0x37c]
push dword [ebp + 8]
push 3
jmp 0x6d17b870
cmp dword [ebp + 0x10], 0xf
jne 0x6d17b805
cmp dword [ebp + 0x14], ebx
jne 0x6d17b805
push 0x14
pop eax
jmp 0x6d17b807
xor eax, eax
add eax, ecx
push eax
push 0x2042
call dword [sym.imp.kernel32.dll_GlobalAlloc]
mov edi, eax
cmp edi, ebx
jne 0x6d17b834
xor eax, eax
lea edi, [ebp + 0x1b]
stosb byte es:[edi], al
mov al, byte [ebp + 0x1b]
mov byte [ebp - 0x14], al
push 0x6d1e6500
lea eax, [ebp - 0x14]
jmp 0x6d17b6ce
push edi
call dword [sym.imp.kernel32.dll_GlobalLock]
cmp dword [ebp + 0x10], 0xf
jne 0x6d17b854
cmp dword [ebp + 0x14], ebx
jne 0x6d17b854
push 0x14
pop ecx
mov dword [eax], ecx
mov dword [eax + 0x10], 1
add eax, ecx
mov ecx, dword [esi]
push eax
push dword [ebp + 8]
push ebx
push dword [ebp + 0x18]
push esi
call dword [ecx + 0x320]
push edi
call dword [sym.imp.kernel32.dll_GlobalUnlock]
push edi
push dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_SetClipboardData]
jmp 0x6d17b769