Function at 0x14000146c
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x3d50
call fcn.140015af0
sub rsp, rax
mov r14, rcx
xor r15d, r15d
lea rcx, [rsp + 0x48]
mov rbx, rdx
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
call qword [sym.imp.ole32.dll_OleGetClipboard]
mov rcx, qword [rsp + 0x48]
cmp rcx, r15
je 0x140001837
mov rax, qword [rcx]
lea r8, [rsp + 0x50]
lea edx, [r15 + 1]
call qword [rax + 0x40]
cmp qword [rsp + 0x50], r15
je 0x140001837
xor edx, edx
mov rcx, rbx
call fcn.140002554
cmp rax, 0xffffffffffffffff
mov rsi, rax
je 0x140001837
lea rcx, [rsp + 0xc8]
xor edx, edx
mov r8d, 0xff8
mov word [rsp + 0xc0], r15w
call sub.msvcrt.dll_memset
mov rcx, qword [rsp + 0x50]
mov dword [rsp + 0x3da0], r15d
mov r10, qword [rcx]
lea r9, [rsp + 0x3da0]
lea r8, [rsp + 0xc0]
mov edx, 0x80
call qword [r10 + 0x18]
lea rcx, [rsp + 0x10c2]
xor edx, edx
mov r8d, 0x2c82
call sub.msvcrt.dll_memset
cmp dword [rsp + 0x3da0], r15d
mov word [rsp + 0x10c0], 0xc350
mov r13d, r15d
mov ebp, r15d
jbe 0x140001621
lea rdi, [rsp + 0xc0]
mov rcx, qword [rsp + 0x48]
xor eax, eax
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
mov rdx, rdi
call qword [rax + 0x18]
cmp eax, r15d
jne 0x1400015f0
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1400013ec
cmp eax, r15d
mov r12d, eax
jbe 0x1400015f0
movzx ebx, word [rsp + 0x10c2]
movzx ecx, word [rdi]
mov r8d, 0x4f
imul rbx, rbx, 0x59
lea rdx, [rsp + rbx + 0x10ce]
call qword [sym.imp.USER32.dll_GetClipboardFormatNameA]
movzx ecx, word [rdi]
mov dword [rsp + rbx + 0x10ca], r13d
mov word [rsp + rbx + 0x10c4], cx
mov dword [rsp + rbx + 0x10c6], r12d
add r13d, r12d
add word [rsp + 0x10c2], 1
mov rcx, qword [rsp + 0x40]
cmp rcx, r15
je 0x140001602
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000160d
lea rcx, [rsp + 0x30]
call qword [sym.imp.ole32.dll_ReleaseStgMedium]
add ebp, 1
add rdi, 0x20
cmp ebp, dword [rsp + 0x3da0]
jb 0x140001568
movzx eax, word [rsp + 0x10c2]
mov edx, r15d
mov r8d, eax
imul r8d, r8d, 0x59
add r8d, 4
cmp eax, r15d
jbe 0x14000165a
lea rcx, [rsp + 0x10ca]
add dword [rcx], r8d
movzx eax, word [rsp + 0x10c2]
add edx, 1
add rcx, 0x59
cmp edx, eax
jb 0x140001644
lea r9, [rsp + 0x3da8]
lea rdx, [rsp + 0x10c0]
mov rcx, rsi
mov dword [rsp + 0x3da8], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [rsp + 0x3da0], r15d
mov edi, r15d
jbe 0x14000182e
mov rcx, qword [rsp + 0x48]
xor eax, eax
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov r9, qword [rcx]
mov eax, edi
lea r8, [rsp + 0x30]
shl rax, 5
lea rdx, [rsp + rax + 0xc0]
call qword [r9 + 0x18]
cmp eax, r15d
jne 0x140001801
lea rdx, [rsp + 0x30]
mov rcx, r14
call fcn.1400013ec
cmp eax, r15d
jbe 0x140001801
cmp dword [rsp + 0x30], 1
jne 0x140001734
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rcx, qword [rsp + 0x38]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GlobalSize]
lea r9, [rsp + 0x3da8]
mov rdx, rbx
mov rcx, rsi
mov r8d, eax
mov dword [rsp + 0x3da8], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x140001801
cmp dword [rsp + 0x30], 4
jne 0x140001801
mov rbx, qword [rsp + 0x38]
cmp rbx, r15
je 0x140001801
xor edx, edx
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x70], r15
lea r8d, [rdx + 0x48]
call sub.msvcrt.dll_memset
mov r11, qword [rbx]
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov rcx, rbx
call qword [r11 + 0x60]
cmp eax, r15d
jne 0x140001801
mov rcx, qword [rsp + 0x80]
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x60], r15d
mov r10, qword [rcx]
mov rbx, rax
xor eax, eax
mov dword [rsp + 0x64], eax
mov rdx, qword [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
call qword [r10 + 0x28]
mov rcx, qword [rsp + 0x38]
mov r8d, dword [rsp + 0x80]
mov dword [rsp + 0x58], r15d
mov r10, qword [rcx]
lea r9, [rsp + 0x58]
mov rdx, rbx
call qword [r10 + 0x18]
mov r8d, dword [rsp + 0x80]
lea r9, [rsp + 0x3da8]
mov rdx, rbx
mov rcx, rsi
mov dword [rsp + 0x3da8], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x40]
cmp rcx, r15
je 0x140001813
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14000181e
lea rcx, [rsp + 0x30]
call qword [sym.imp.ole32.dll_ReleaseStgMedium]
add edi, 1
cmp edi, dword [rsp + 0x3da0]
jb 0x140001691
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x3d90]
add rsp, 0x3d50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret