Function at 0x1005bec
Capabilities:
Delete file
Read clipboard data
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0xd4
mov eax, dword [0x10081b8]
push ebx
push dword [0x1008428]
xor ebx, ebx
mov dword [ebp + 0x68], eax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x3c], ebx
call fcn.01002a52
test eax, eax
jne 0x1005c21
mov eax, 0x58a
jmp 0x1005ea8
cmp dword [ebp + 0x7c], ebx
mov dword [ebp - 0x5c], 0xc
je 0x1005c37
call fcn.0100691e
mov dword [ebp - 0x58], eax
jmp 0x1005c3a
mov dword [ebp - 0x58], ebx
push ebx
push 0x80
push 2
lea eax, [ebp - 0x5c]
push eax
push 3
push 0xc0000000
push dword [ebp + 0x78]
mov dword [ebp - 0x54], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x48], eax
jne 0x1005c7a
push 0x100230c
call fcn.01004bf7
pop ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x3c], eax
jmp 0x1005e92
mov eax, dword [0x1008a6c]
cmp eax, ebx
je 0x1005c92
mov word [ebp - 0x40], 0xc352
mov dword [ebp - 0x44], 0xac
jmp 0x1005c9f
mov word [ebp - 0x40], 0xc350
mov dword [ebp - 0x44], 0x59
cmp eax, ebx
push esi
push edi
push 4
pop edi
mov word [ebp - 0x3e], bx
mov dword [ebp - 0x4c], edi
je 0x1005cb7
call dword [sym.imp.USER32.dll_CountClipboardFormats]
jmp 0x1005cbc
call fcn.0100513b
mov esi, eax
imul esi, dword [ebp - 0x44]
push 0x7f02
push ebx
add esi, edi
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
push 1
mov dword [ebp - 0x60], eax
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
jmp 0x1005da4
mov edi, dword [ebp + 0x7c]
push edi
call fcn.010050ff
test eax, eax
je 0x1005d9f
cmp di, 2
jne 0x1005d1d
push 8
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
je 0x1005d23
push 8
call dword [sym.imp.USER32.dll_GetClipboardData]
test eax, eax
jne 0x1005d9f
jmp 0x1005d23
cmp di, 8
jne 0x1005d2f
cmp dword [ebp - 0x50], ebx
jne 0x1005d9f
mov dword [ebp - 0x50], 1
cmp di, 2
jne 0x1005d3a
push 8
pop eax
jmp 0x1005d3d
movzx eax, di
push 0x4f
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.01005b0b
movzx edi, di
push edi
lea eax, [ebp - 0x38]
push eax
push 0x10022e8
call fcn.01004bf7
add esp, 0xc
push dword [ebp + 0x7c]
push esi
push dword [ebp - 0x48]
call fcn.0100516e
cmp eax, ebx
mov dword [ebp - 0x64], eax
je 0x1005d9f
cmp word [ebp + 0x7c], 2
jne 0x1005d7b
push 8
pop edi
lea ecx, [ebp - 0x38]
push ecx
push edi
push eax
push esi
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
call fcn.01005a48
movzx eax, ax
cmp eax, dword [ebp - 0x44]
jb 0x1005db8
add dword [ebp - 0x4c], eax
add esi, dword [ebp - 0x64]
inc word [ebp - 0x3e]
movzx eax, word [ebp + 0x7c]
push eax
call dword [sym.imp.USER32.dll_EnumClipboardFormats]
cmp ax, bx
mov dword [ebp + 0x7c], eax
jne 0x1005ce8
jmp 0x1005dca
push 0x10022b8
call fcn.01004bf7
pop ecx
mov dword [ebp - 0x3c], 8
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push dword [ebp - 0x60]
call dword [sym.imp.USER32.dll_SetCursor]
call fcn.01002a8e
mov edi, dword [ebp - 0x48]
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
push ebx
push ebx
push edi
call esi
push ebx
lea eax, [ebp - 0x68]
push eax
push 4
lea eax, [ebp - 0x40]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1005e0d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x3c], eax
push ebx
push ebx
push ebx
push edi
call esi
push dword [ebp + 0x78]
mov esi, 0x1008a80
push 0x105
push esi
call fcn.01002d92
push dword [ebp + 0x78]
push esi
push 0x1002288
call fcn.01004bf7
mov eax, dword [0x1008a6c]
add esp, 0xc
cmp dword [ebp - 0x3c], ebx
mov dword [0x1008a78], eax
jne 0x1005e70
push edi
push dword [0x1008428]
call fcn.01004d84
movsx eax, ax
dec eax
je 0x1005e69
dec eax
je 0x1005e60
mov dword [ebp - 0x3c], ebx
jmp 0x1005e70
mov dword [ebp - 0x3c], 0x58a
jmp 0x1005e70
mov dword [ebp - 0x3c], 8
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x3c], ebx
pop edi
pop esi
je 0x1005e92
push 0x1002260
call fcn.01004bf7
pop ecx
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp - 0x58], ebx
je 0x1005ea0
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
call fcn.01002a8e
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp + 0x68]
pop ebx
call fcn.01006d6c
add ebp, 0x6c
leave
ret 0xc