Function at 0x100f7cd
Capabilities:
Delete file
Read clipboard data
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xdc
mov eax, dword [0x10133a4]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push dword [0x1013ba4]
xor ebx, ebx
mov dword [ebp - 4], eax
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xa8], ebx
call fcn.01004ddb
test eax, eax
jne 0x100f812
mov eax, 0x58a
jmp 0x100fb2b
cmp dword [ebp + 0x10], ebx
mov dword [ebp - 0xd0], 0xc
je 0x100f82e
call fcn.01010768
mov dword [ebp - 0xcc], eax
jmp 0x100f834
mov dword [ebp - 0xcc], ebx
push ebx
push 0x80
push 2
lea eax, [ebp - 0xd0]
push eax
push 3
push 0xc0000000
push esi
mov dword [ebp - 0xc8], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0xc0], eax
jne 0x100f87e
push 0x10033b8
call fcn.0100eda2
pop ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xa8], eax
jmp 0x100fb0c
mov eax, dword [0x1014188]
cmp eax, ebx
je 0x100f89c
mov word [ebp - 0xac], 0xc352
mov dword [ebp - 0xb4], 0xac
jmp 0x100f8af
mov word [ebp - 0xac], 0xc350
mov dword [ebp - 0xb4], 0x59
cmp eax, ebx
push edi
push 4
pop edi
mov word [ebp - 0xaa], bx
mov dword [ebp - 0xbc], edi
je 0x100f8cc
call dword [sym.imp.USER32.dll_CountClipboardFormats]
jmp 0x100f8d1
call fcn.0100f2bd
mov esi, eax
imul esi, dword [ebp - 0xb4]
push 0x7f02
push ebx
add esi, edi
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
push 1
mov dword [ebp - 0xd4], eax
call dword [sym.imp.USER32.dll_ShowCursor]
push ebx
jmp 0x100f9f6
mov edi, dword [ebp - 0xb0]
push edi
call fcn.0100f277
test eax, eax
je 0x100f9ee
cmp di, 2
jne 0x100f93b
push 8
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
je 0x100f941
push 8
call dword [sym.imp.USER32.dll_GetClipboardData]
test eax, eax
jne 0x100f9ee
jmp 0x100f941
cmp di, 8
jne 0x100f957
cmp dword [ebp - 0xc4], ebx
jne 0x100f9ee
mov dword [ebp - 0xc4], 1
cmp di, 2
jne 0x100f962
push 8
pop eax
jmp 0x100f965
movzx eax, di
push 0x4f
lea ecx, [ebp - 0xa4]
push ecx
push eax
call fcn.0100f6e7
movzx edi, di
push edi
lea eax, [ebp - 0xa4]
push eax
push 0x1003394
call fcn.0100eda2
add esp, 0xc
push dword [ebp - 0xb0]
push esi
push dword [ebp - 0xc0]
call fcn.0100f3e9
cmp eax, ebx
mov dword [ebp - 0xd8], eax
je 0x100f9ee
cmp word [ebp - 0xb0], 2
jne 0x100f9b5
push 8
pop edi
lea ecx, [ebp - 0xa4]
push ecx
push edi
push eax
push esi
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
call fcn.0100f2f7
movzx eax, ax
cmp eax, dword [ebp - 0xb4]
jb 0x100fa0d
add dword [ebp - 0xbc], eax
add esi, dword [ebp - 0xd8]
inc word [ebp - 0xaa]
movzx eax, word [ebp - 0xb0]
push eax
call dword [sym.imp.USER32.dll_EnumClipboardFormats]
cmp ax, bx
mov dword [ebp - 0xb0], eax
jne 0x100f903
jmp 0x100fa22
push 0x1003364
call fcn.0100eda2
pop ecx
mov dword [ebp - 0xa8], 8
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
push dword [ebp - 0xd4]
call dword [sym.imp.USER32.dll_SetCursor]
call fcn.01004e45
mov edi, dword [ebp - 0xc0]
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
push ebx
push ebx
push edi
call esi
push ebx
lea eax, [ebp - 0xdc]
push eax
push 4
lea eax, [ebp - 0xac]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x100fa74
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xa8], eax
push ebx
push ebx
push ebx
push edi
call esi
push dword [ebp - 0xb8]
mov esi, 0x10141a0
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0xb8]
push esi
push 0x1003334
call fcn.0100eda2
mov eax, dword [0x1014188]
add esp, 0xc
cmp dword [ebp - 0xa8], ebx
mov dword [0x101418c], eax
jne 0x100fae5
push edi
push dword [0x1013ba4]
call fcn.0100ef0e
movsx eax, ax
dec eax
je 0x100fadb
dec eax
je 0x100facf
mov dword [ebp - 0xa8], ebx
jmp 0x100fae5
mov dword [ebp - 0xa8], 0x58a
jmp 0x100fae5
mov dword [ebp - 0xa8], 8
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xa8], ebx
pop edi
je 0x100fb0c
push 0x100330c
call fcn.0100eda2
pop ecx
push dword [ebp - 0xb8]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp - 0xcc], ebx
je 0x100fb20
push dword [ebp - 0xcc]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
call fcn.01004e45
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 4]
pop esi
pop ebx
call fcn.0100ec8a
leave
ret 0xc