Function at 0x444070
Capabilities:
Open clipboard
Read clipboard data
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x200
mov eax, dword [0x641a90]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
push ebx
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x12c], ebx
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x4443fa
push esi
push str.Office_Drawing_Shape_Format
call dword [sym.imp.USER32.dll_RegisterClipboardFormatA]
mov esi, dword [sym.imp.USER32.dll_GetClipboardData]
push 8
mov dword [ebp - 0x120], eax
call esi
test eax, eax
je 0x4440e1
push edi
push eax
call fcn.0044bb40
add esp, 8
test eax, eax
je 0x4441ba
mov ebx, 1
jmp 0x4443f3
push dword [ebp - 0x120]
call esi
mov edi, eax
test edi, edi
je 0x4441ba
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x11c], eax
test eax, eax
je 0x4441aa
push edi
call dword [sym.imp.KERNEL32.dll_GlobalSize]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0045c8f0
lea eax, [ebp - 0x200]
push eax
call fcn.0045a580
lea eax, [ebp - 0x108]
push 0x5c3924
push eax
call fcn.005931b4
add esp, 0x14
mov dword [ebp - 0x124], eax
test eax, eax
je 0x4441aa
push eax
mov eax, dword [ebp - 0x120]
add eax, 0xffffff73
push 1
push eax
mov eax, dword [ebp - 0x11c]
add eax, 0x8d
push eax
call fcn.0059628c
push dword [ebp - 0x124]
call fcn.00593079
push 0
lea eax, [ebp - 0x200]
push eax
push dword [ebp - 0x130]
lea eax, [ebp - 0x108]
push eax
call fcn.0045bc10
add esp, 0x24
test ax, ax
mov eax, 1
cmove ebx, eax
mov dword [ebp - 0x12c], ebx
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
test bx, bx
jne 0x4443f3
push 3
call esi
mov edi, eax
test edi, edi
je 0x4443c5
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov ecx, dword [eax + 0xc]
mov esi, dword [eax + 4]
mov ebx, dword [eax + 8]
mov dword [ebp - 0x13c], ecx
mov ecx, dword [eax]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x11c], esi
mov dword [ebp - 0x124], ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCA]
mov edi, eax
mov dword [ebp - 0x120], edi
test esi, esi
je 0x444268
test ebx, ebx
je 0x444268
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x58
push edi
call esi
mov ecx, eax
mov eax, 0xce69a00d
imul ecx, dword [ebp - 0x11c]
push 0x5a
push edi
add ecx, 0x4f6
mul ecx
mov ebx, edx
shr ebx, 0xb
mov dword [ebp - 0x128], ebx
call esi
mov ecx, eax
mov eax, 0xce69a00d
imul ecx, dword [ebp - 0x124]
add ecx, 0x4f6
mul ecx
mov esi, edx
shr esi, 0xb
jmp 0x444275
mov esi, 0x100
mov ebx, esi
mov dword [ebp - 0x128], ebx
push edi
mov dword [ebp - 0x134], esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push esi
push ebx
push dword [ebp - 0x120]
mov edi, eax
mov dword [ebp - 0x124], edi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push edi
mov dword [ebp - 0x11c], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ebx, eax
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x128]
push 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], esi
call dword [sym.imp.GDI32.dll_GetStockObject]
mov esi, eax
lea eax, [ebp - 0x118]
push esi
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
push esi
call edi
push dword [ebp - 0x138]
mov esi, dword [ebp - 0x124]
push esi
call dword [sym.imp.GDI32.dll_SetMapMode]
push 0
push dword [ebp - 0x134]
push dword [ebp - 0x128]
push esi
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
push 0
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push 0
push dword [ebp - 0x134]
push dword [ebp - 0x128]
push esi
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 0
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
push 7
push 0
push esi
call dword [sym.imp.GDI32.dll_SetBoundsRect]
push dword [ebp - 0x13c]
push esi
call dword [sym.imp.GDI32.dll_PlayMetaFile]
push 0
push dword [ebp - 0x11c]
call fcn.0044bc70
push dword [ebp - 0x130]
mov esi, eax
push esi
call fcn.0044bb40
mov ecx, dword [ebp - 0x12c]
add esp, 0x10
test eax, eax
mov eax, 1
cmovne ecx, eax
push ebx
mov ebx, dword [ebp - 0x124]
push ebx
mov dword [ebp - 0x12c], ecx
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x11c]
call edi
push esi
call edi
push dword [ebp - 0x120]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
call esi
push ebx
call esi
mov ebx, dword [ebp - 0x12c]
jmp 0x4443f3
push 2
call esi
mov edi, eax
test edi, edi
je 0x4443f3
push 9
call esi
push eax
push edi
call fcn.0044bc70
push dword [ebp - 0x130]
push eax
call fcn.0044bb40
add esp, 0x10
test eax, eax
mov eax, 1
cmovne ebx, eax
call dword [sym.imp.USER32.dll_CloseClipboard]
pop esi
mov ecx, dword [ebp - 4]
mov ax, bx
pop edi
xor ecx, ebp
pop ebx
call fcn.005920c1
mov esp, ebp
pop ebp
ret