Function at 0x4037c0
Capabilities:
Create process on windows
Open clipboard
Write clipboard data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x539b28
push eax
mov dword fs:[0], esp
sub esp, 0xe8
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x108]
mov esi, ecx
cmp edi, 0x4020020
ja 0x403c2d
je 0x403c14
lea eax, [edi - 0x4020001]
cmp eax, 0x1e
ja case.0x403ffa.67239985
jmp dword [eax*4 + 0x4041dc]
push 1
push 0
push 0
push 0x5737c0
push 0x5737b4
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
push 1
push 0
push 0
push 0x5737a8
push 0x5737b4
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
push 1
push 0
push 0
push 0
push 0x5737a0
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
push 1
push 0
push 0
push 0
push 0x573798
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
mov ecx, esi
call fcn.004044f0
jmp 0x4041b9
mov eax, dword [esi + 0x8ac]
push 0
push 0x71
push 0x111
mov ecx, dword [eax + 0xdc]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041b9
push 0
push 0
push 0
push 2
mov ecx, esi
call fcn.00433040
jmp 0x4041b9
mov edx, dword [esi + 0x8ac]
push 0
push 0
push 0x87d2
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041b9
mov ecx, dword [esi + 0x8ac]
test ecx, ecx
jne 0x4038ea
xor eax, eax
jmp 0x4041be
push 0x81
call fcn.00471b10
jmp 0x4041b9
mov ecx, dword [esi + 0x8ac]
test ecx, ecx
jne 0x40390a
xor eax, eax
jmp 0x4041be
push 0x82
call fcn.00471b10
jmp 0x4041b9
mov ecx, dword [esi + 0x8ac]
test ecx, ecx
jne 0x40392a
xor eax, eax
jmp 0x4041be
push 0x84
call fcn.00471b30
jmp 0x4041b9
mov eax, dword [esi + 0x8ac]
test eax, eax
jne 0x40394a
xor eax, eax
jmp 0x4041be
mov ecx, esi
call fcn.00457f90
test eax, eax
je 0x4041b9
cmp dword [eax + 0x3c], 5
jne 0x4041b9
mov ecx, dword [esi + 0x8ac]
push 0x6e
call fcn.0053141f
jmp 0x4041b9
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 2
mov ecx, esi
call fcn.00403170
jmp 0x4041b9
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 3
mov ecx, esi
call fcn.00403170
jmp 0x4041b9
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
mov ecx, esi
call fcn.00403170
jmp 0x4041b9
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 6
mov ecx, esi
call fcn.00403170
jmp 0x4041b9
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
mov ecx, esi
call fcn.00403170
jmp 0x4041b9
push 0xffffffffffffffff
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 8
mov ecx, esi
call fcn.00403170
jmp 0x4041b9
mov ebx, dword [esi + 0x398]
mov edx, dword [esi + 0x8ac]
xor ecx, ecx
push 0
test ebx, ebx
sete cl
mov dword [esi + 0x398], ecx
mov eax, dword [edx + 0x664]
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4041b9
push 0
push 0
push 0
push 0x13
mov ecx, esi
call fcn.00433040
jmp 0x4041b9
push 0
push 0
push 0
push 0x18
mov ecx, esi
call fcn.00433040
jmp 0x4041b9
mov eax, dword [esi + 0x8ac]
push 0
add eax, 0x594
push 9
push 0x110a
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, eax
test ebp, ebp
je 0x4041b9
mov edx, dword [0x596a5c]
mov dword [esp + 0x10], edx
cmp edi, 0x4020016
mov dword [esp + 0x100], 0xd
jne 0x403af6
push 0
push 1
push 0x573794
push 0x57377c
lea eax, [esp + 0x20]
push 0x573754
push eax
push 0
mov ecx, esi
call fcn.004356c0
test eax, eax
je 0x403add
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x403af6
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
push 0x573738
lea ecx, [esp + 0x18]
call fcn.004dc190
mov bl, 0xe
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], bl
call fcn.004733a0
lea edx, [esp + 0x1c]
mov ecx, esi
push edx
push ebp
mov byte [esp + 0x108], 0xf
call fcn.0045d950
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x403bd2
cmp edi, 0x4020016
push 0
jne 0x403b53
lea eax, [esp + 0x14]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x28]
call fcn.00473ab0
jmp 0x403bd2
call dword [sym.imp.USER32.dll_OpenClipboard]
cmp eax, 1
jne 0x403bd2
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
mov eax, ecx
neg eax
sbb eax, eax
and eax, esi
mov dl, byte [eax + ecx - 1]
test dl, dl
je 0x403b81
push 0
lea ecx, [esp + 0x20]
call fcn.004736e0
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov ecx, dword [esp + 0x2c]
push ecx
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x403bcc
mov ecx, dword [esp + 0x2c]
mov edi, dword [esp + 0x24]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
and eax, edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push eax
call fcn.00474210
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
push 1
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], bl
mov dword [esp + 0x1c], 0x54d7d0
call fcn.004735a0
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 0xd
call fcn.004dc240
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
push 1
push 0
push 0
push 0
push 0x573730
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
cmp edi, 0x402002f
ja 0x403fd9
je 0x403f0c
lea eax, [edi - 0x4020021]
cmp eax, 0xc
ja case.0x403ffa.67239985
jmp dword [eax*4 + 0x404258]
push 1
push 0
push 0
push 0
push 0x573728
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
push 1
push 0
push 0
push 0x57371c
push 0x5737b4
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
push 1
push 0
push 0
push 0
push 0x573714
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
push 1
push 0
push 0
push 0
push 0x573710
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
add esi, 0x894
push 0x573708
lea edx, [esp + 0x48]
push esi
push edx
call fcn.00519c4f
push 0x5736fc
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x108], 4
push eax
call fcn.00519c4f
mov bl, 6
lea ecx, [esp + 0x44]
mov byte [esp + 0x100], bl
call fcn.00519a06
mov ecx, dword [esp + 0x10]
push ecx
call fcn.004dea60
add esp, 4
test eax, eax
jne 0x403d60
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x40]
push edx
push 0x57369c
push eax
call fcn.004e0190
mov eax, dword [eax]
mov byte [esp + 0x10c], 7
push eax
call fcn.004dc5d0
add esp, 0x10
lea ecx, [esp + 0x40]
mov byte [esp + 0x100], bl
call fcn.00519a06
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
mov ecx, dword [esp + 0x10]
push 5
push ecx
call fcn.0046b710
add esp, 8
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
mov eax, dword [0x596a5c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x100], 0xa
mov dword [esp + 0x14], eax
mov eax, dword [0x59a554]
mov bl, 0xb
cmp eax, 2
mov byte [esp + 0x100], bl
jl 0x403dc8
mov edx, dword [0x59a550]
lea ecx, [esp + 0x10]
add edx, 4
push edx
call fcn.00519af3
jmp 0x403e00
lea eax, [esi + 0x894]
push 0x573694
lea ecx, [esp + 0x34]
push eax
push ecx
call fcn.00519c4f
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x104], 0xc
call fcn.00519af3
lea ecx, [esp + 0x30]
mov byte [esp + 0x100], bl
call fcn.00519a06
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push edx
push 0
push 0x573690
push 0x573678
push 0x57365c
push eax
push 0
mov ecx, esi
call fcn.004356c0
test eax, eax
je 0x403e6a
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x403e6a
cmp dword [0x59a554], 2
jge 0x403e4a
push 0xffffffffffffffff
push 2
mov ecx, 0x59a54c
call fcn.00518684
mov eax, dword [0x59a550]
lea edx, [esp + 0x10]
push edx
lea ecx, [eax + 4]
call fcn.00519af3
mov ecx, dword [esp + 0x10]
push 1
push ecx
mov ecx, esi
call fcn.00465bb0
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 0xa
call fcn.00519a06
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
mov ecx, esi
call fcn.004572d0
jmp 0x4041b9
mov edx, dword [esi + 0x928]
mov eax, dword [esi + 0x890]
xor edx, eax
jne 0x403eb7
push 0x573610
jmp 0x403ebc
push 0x573560
lea ecx, [esi + 0x908]
call fcn.00519b43
mov eax, dword [esi + 0x8ac]
mov dword [esi + 0x90c], 0x40
push 0
push 0x73
mov ecx, dword [eax + 0x1c]
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4041b9
push 0x599360
mov ecx, esi
call fcn.004350c0
jmp 0x4041b9
mov ecx, esi
call fcn.00435170
jmp 0x4041b9
lea edx, [esi + 0x894]
push 0x573554
lea eax, [esp + 0x40]
push edx
push eax
call fcn.00519c4f
push 0x573544
lea ecx, [esp + 0x14]
push eax
push ecx
mov dword [esp + 0x10c], 0
call fcn.00519c4f
lea ecx, [esp + 0x3c]
mov byte [esp + 0x100], 2
call fcn.00519a06
mov edx, dword [esp + 0x10]
push edx
call fcn.004dea60
add esp, 4
test eax, eax
jne 0x403fb0
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x34]
push eax
push 0x5734f0
push ecx
call fcn.004e0190
mov eax, dword [eax]
mov byte [esp + 0x10c], 3
push eax
call fcn.004dc5d0
add esp, 0x10
lea ecx, [esp + 0x34]
mov byte [esp + 0x100], 2
call fcn.00519a06
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
push 1
lea edx, [esp + 0x14]
push 0
push edx
mov ecx, esi
call fcn.004036c0
lea ecx, [esp + 0x10]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
cmp edi, 0x4020037
ja 0x4040c5
je 0x4040b7
lea eax, [edi - 0x4020030]
cmp eax, 6
ja case.0x403ffa.67239985
jmp dword [eax*4 + 0x40428c]
mov ecx, dword [0x599b20]
xor eax, eax
test ecx, ecx
mov ecx, dword [0x59a3dc]
sete al
mov dword [0x599b20], eax
call fcn.0046fa90
jmp 0x4041b9
mov ecx, esi
call fcn.004043a0
jmp 0x4041b9
mov ecx, esi
call fcn.00404320
jmp 0x4041b9
push 0
lea ecx, [esp + 0x4c]
call fcn.004464f0
lea ecx, [esp + 0x48]
mov dword [esp + 0x100], 0x10
call fcn.0051a4af
lea ecx, [esp + 0xe0]
mov dword [esp + 0x100], 0x12
mov dword [esp + 0xe0], 0x54d7d0
call fcn.004735a0
lea ecx, [esp + 0xa4]
mov byte [esp + 0x100], 0x11
call fcn.0051744e
lea ecx, [esp + 0x48]
mov dword [esp + 0x100], 0xffffffff
call fcn.0051a0e5
jmp 0x4041b9
push 0xffffffffffffffff
mov ecx, esi
call fcn.004b7450
jmp 0x4041b9
push 1
mov ecx, esi
call fcn.004b7450
jmp 0x4041b9
cmp edi, 0x402003a
ja 0x40419a
je 0x404107
sub edi, 0x4020038
je 0x4040ee
dec edi
jne case.0x403ffa.67239985
mov ecx, esi
call fcn.0046a9b0
jmp 0x4041b9
push 1
push 0
push 0
push 0
push 0x5734e4
mov ecx, esi
call fcn.00403480
jmp 0x4041b9
add esi, 0x894
push 0x5734d0
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.00519c4f
mov eax, dword [0x59a3dc]
mov edx, dword [esp + 0x14]
push 1
push 0
mov ecx, dword [eax + 0x1c]
push 0
push edx
mov ebx, 8
push 0x5734c8
push ecx
mov dword [esp + 0x118], ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jg 0x404184
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x38]
push edx
push 0x573498
push eax
call fcn.004e0190
mov eax, dword [eax]
mov byte [esp + 0x10c], 9
push eax
call fcn.004dc5d0
add esp, 0x10
lea ecx, [esp + 0x38]
mov byte [esp + 0x100], bl
call fcn.00519a06
lea ecx, [esp + 0x14]
mov dword [esp + 0x100], 0xffffffff
call fcn.00519a06
jmp 0x4041b9
cmp edi, 0x84020006
je 0x4041a6
xor eax, eax
jmp 0x4041be
mov ecx, dword [esi + 0x8ac]
push 0
add ecx, 0x558
call fcn.00401a30
mov eax, 1
mov ecx, dword [esp + 0xf8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xf4
ret 0x10