Function at 0x101daf0
Capabilities:
Open clipboard
Read clipboard data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov edi, ecx
push dword [edi + 0x1c4]
lea ecx, [ebp - 0x24]
call fcn.01012c2f
xor ebx, ebx
xor esi, esi
inc esi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [edi + 0xa8], esi
je 0x101db3a
mov esi, 0x834503ea
jmp 0x101de47
movzx eax, byte [edi + 0x50]
movzx ecx, byte [eax + 0x1005fa8]
sub ecx, ebx
je 0x101db61
dec ecx
je 0x101de47
dec ecx
dec ecx
je 0x101db57
dec ecx
jne 0x101db7b
mov esi, 0x834503e8
jmp 0x101de47
push dword [eax*4 + 0x1028070]
push dword [0x1028044]
push 0x1006648
call fcn.0101b821
add esp, 0xc
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
lea edx, [ebp - 0x20]
push edx
call dword [eax + 0x18]
mov esi, eax
cmp esi, ebx
jge 0x101dbc8
mov eax, dword [0x1028018]
cmp eax, 0x1028018
je 0x101de34
test byte [eax + 0x1c], 4
je 0x101de34
push esi
push 0x1006620
push 0x1005f70
push 0x4f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100a697
jmp 0x101de34
movzx edx, byte [edi + 0x50]
lea ecx, [edi + 0x18]
mov eax, dword [ecx]
push 5
push edx
call dword [eax + 0x14]
mov al, byte [edi + 0x50]
cmp al, 4
je 0x101dc0e
cmp al, 3
je 0x101dc0e
mov eax, dword [0x1028018]
cmp eax, 0x1028018
je 0x101dc06
test byte [eax + 0x1c], 4
je 0x101dc06
push 0x1005f70
push 0x50
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100a63f
xor esi, esi
inc esi
jmp 0x101de04
mov eax, dword [ebp - 0x14]
cmp dword [eax + 4], 4
jae 0x101dc45
mov eax, dword [0x1028018]
cmp eax, 0x1028018
je 0x101dc3b
test byte [eax + 0x1c], 4
je 0x101dc3b
push 0x1005f70
push 0x51
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100a63f
mov esi, 0x834503e9
jmp 0x101de04
mov ebx, dword [eax + 8]
mov eax, dword [0x1028018]
cmp eax, 0x1028018
je 0x101dc6d
test byte [eax + 0x1c], 1
je 0x101dc6d
push ebx
push 0x1005f70
push 0x52
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100bf8e
cmp dword [edi + 0x80], 0
mov esi, 0x102a93c
je 0x101dc9b
mov ecx, esi
call fcn.0101b5b6
cmp ebx, eax
jne 0x101dc9b
push ebx
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x101dc9b
push 0xf
pop ebx
mov dword [ebp - 0x18], 1
cmp ebx, 0xf
je 0x101dcba
mov ecx, esi
call fcn.0101b4d8
cmp ebx, eax
je 0x101dcba
mov ecx, esi
call fcn.0101b520
cmp ebx, eax
je 0x101dcba
xor esi, esi
jmp 0x101dcbd
xor esi, esi
inc esi
push dword [edi + 0x70]
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
jne 0x101dce7
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jg 0x101dcdb
mov esi, eax
jmp 0x101de02
and eax, 0xffff
or eax, 0x80070000
jmp 0x101dcd4
push ebx
mov dword [ebp + 8], 1
call dword [sym.imp.USER32.dll_GetClipboardData]
mov dword [ebp - 0xc], eax
test eax, eax
je 0x101ddcc
test esi, esi
je 0x101dd23
push eax
lea eax, [ebp - 4]
push eax
call fcn.01018c83
mov esi, eax
mov dword [ebp - 0x1c], 1
call dword [sym.imp.USER32.dll_CloseClipboard]
and dword [ebp + 8], 0
jmp 0x101dd28
mov dword [ebp - 4], eax
xor esi, esi
xor eax, eax
cmp esi, eax
mov dword [ebp - 0xc], eax
jge 0x101dd63
mov eax, dword [0x1028018]
cmp eax, 0x1028018
je 0x101ddf6
test byte [eax + 0x1c], 4
je 0x101ddf6
push esi
push 0x1005f70
push 0x53
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100bf8e
jmp 0x101ddf6
cmp dword [ebp - 0x18], eax
je 0x101dd89
cmp ebx, 0xf
jne 0x101dd89
push eax
push dword [ebp - 4]
lea eax, [ebp - 8]
push eax
lea ecx, [edi + 0x98]
call fcn.01017715
mov dword [ebp - 0x10], 1
jmp 0x101dda0
push dword [ebp - 4]
mov ecx, dword [edi + 0x1b4]
push ebx
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0101ed93
mov esi, eax
test esi, esi
jge 0x101ddc2
mov eax, dword [0x1028018]
cmp eax, 0x1028018
je 0x101ddf6
test byte [eax + 0x1c], 4
je 0x101ddf6
push esi
push 0x1005f70
push 0x54
jmp 0x101dd53
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
xor esi, esi
jmp 0x101ddf6
mov eax, dword [0x1028018]
cmp eax, 0x1028018
je 0x101ddf1
test byte [eax + 0x1c], 4
je 0x101ddf1
push ebx
push 0x1005f70
push 0x55
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0100bf8e
mov esi, 0x800700e8
cmp dword [ebp + 8], 0
je 0x101de02
call dword [sym.imp.USER32.dll_CloseClipboard]
xor ebx, ebx
xor eax, eax
cmp esi, ebx
setl al
mov ecx, edi
inc eax
push eax
push dword [ebp - 0xc]
call fcn.0101cca1
cmp esi, ebx
jl 0x101de21
cmp eax, ebx
jge 0x101de21
mov esi, eax
cmp dword [ebp - 0x1c], ebx
je 0x101de34
cmp dword [ebp - 4], ebx
je 0x101de34
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 8], ebx
je 0x101de47
cmp dword [ebp - 0x10], ebx
je 0x101de47
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea ecx, [ebp - 0x24]
call fcn.01012c57
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 8