Function at 0x18001cc90
Capabilities:
Read clipboard data

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
xor ebx, ebx
lea r13, [rcx + 0x38]
mov qword [rdx], rbx
mov rsi, rdx
mov r15, rcx
mov r14d, ebx
mov edi, ebx
cmp qword [r13], rbx
jne 0x18001cdc2
cmp dword [rcx + 0x40], 1
je 0x18001cda4
movzx ecx, word [0x180123340]
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
je 0x18001cda4
xor r8d, r8d
mov byte [rbp + 0x48], bl
lea rcx, [rbp + 0x48]
call fcn.180010fbc
mov edi, eax
test eax, eax
jne 0x1800392a8
movzx ecx, word [0x180123340]
call qword [sym.imp.USER32.dll_GetClipboardData]
mov r12, rax
test rax, rax
je 0x18001cd29
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
test rax, rax
je 0x18001cd29
mov r14, qword [rax]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea rcx, [rbp + 0x48]
call fcn.180011038
test r14, r14
je 0x18001cd43
cmp byte [0x180123391], bl
jne 0x1800392b7
mov qword [rbp + 0x58], rbx
test edi, edi
js 0x18001cd8e
test r14, r14
je 0x18001cd8e
cmp qword [rsi], rbx
lea r9, [rbp + 0x58]
mov r8d, ebx
mov rcx, r14
setne r8b
call fcn.180013e04
mov edi, eax
cmp eax, 0x8004c001
je 0x180039325
mov rax, qword [rbp + 0x58]
test rax, rax
je 0x18001cd8e
cmp byte [r15 + 0x44], bl
jne 0x1800393a8
mov qword [r13], rax
mov qword [rbp + 0x58], rbx
mov r8, qword [rsi]
mov ecx, edi
mov rdx, qword [r13]
call fcn.18001cfc0
test edi, edi
js 0x18003948d
cmp qword [rsi], rbx
mov rax, rsi
sete bl
mov dword [r15 + 0x40], ebx
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rdx, [rcx + 0x48]
cmp dword [rdx], ebx
je 0x18001cda4
jmp 0x18003947f
lea rcx, [rbp + 0x48]
call fcn.180011038
nop
jmp 0x18001cd9c
lea r9, [rbp + 0x48]
mov qword [rbp + 0x60], rbx
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], ebx
lea rdx, [rbp + 0x60]
mov byte [rbp + 0x48], bl
mov rcx, r14
call fcn.18008200c
mov edi, eax
test eax, eax
js 0x18001cd43
cmp qword [rbp + 0x60], rbx
je 0x18001cd43
cmp byte [rbp + 0x48], bl
je 0x18001cd43
mov eax, dword [rbp + 0x50]
mov dword [r15 + 0x48], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x180039309
mov qword [rsi], rbx
call fcn.180084aa0
lea rdx, [rbp + 0x50]
mov rcx, rsi
call fcn.180085d58
mov rcx, qword [rbp + 0x60]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop
jmp 0x18001cd43
lea r9, [rbp + 0x48]
mov qword [rbp + 0x60], rbx
lea r8, [rbp + 0x50]
mov dword [rbp + 0x50], ebx
lea rdx, [rbp + 0x60]
mov byte [rbp + 0x48], bl
mov rcx, r14
call fcn.18008200c
mov edi, eax
test eax, eax
js 0x18001cd73
cmp qword [rbp + 0x60], rbx
je 0x180039387
cmp byte [rbp + 0x48], bl
je 0x180039387
mov eax, dword [rbp + 0x50]
mov dword [r15 + 0x48], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x18003936f
mov qword [rsi], rbx
call fcn.180084aa0
lea rdx, [rbp + 0x50]
mov rcx, rsi
call fcn.180085d58
mov rcx, qword [rbp + 0x60]
mov edi, eax
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
test edi, edi
js 0x18001cd73
lea r9, [rbp + 0x58]
mov r8d, 1
mov rcx, r14
call fcn.180013e04
mov edi, eax
jmp 0x18001cd73
lea rdx, str.ClipboardDataObjectInterfaceMTA
mov rcx, r14
call qword [sym.imp.USER32.dll_GetPropW]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x180039422
lea rcx, [rbp - 0x28]
call fcn.18007b448
lea rax, [rbp + 0x50]
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x18]
lea rax, [rbp - 0x28]
mov qword [rbp - 0x10], rax
movaps xmm0, xmmword [rbp - 0x18]
movdqa xmmword [rbp - 0x18], xmm0
call fcn.180082880
mov edi, eax
test eax, eax
js 0x180039407
mov r8, r13
lea rdx, [0x1800f3de0]
lea rcx, [rbp - 0x28]
call fcn.18007d4d8
mov edi, eax
lea rax, [0x1800ca3e8]
mov qword [rbp - 0x28], rax
cmp dword [rbp - 0x20], ebx
je 0x180039468
lea rcx, [rbp - 0x28]
call fcn.18007df7c
jmp 0x180039468
lea rdx, [rbp + 0x48]
mov qword [rbp + 0x48], rbx
mov rcx, r14
call fcn.180082448
cmp eax, 0x80070005
mov edi, eax
cmove edi, ebx
test edi, edi
js 0x180039459
mov rcx, qword [rbp + 0x58]
lea r9, [rbp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x20], r13
xor edx, edx
call fcn.18008748c
mov edi, eax
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x180039468
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1800248fe.0]
nop
jmp 0x18001cd8e
mov rcx, rsi
call fcn.180085d58
nop
jmp 0x18001cd9c
mov rcx, qword [rsi]
test rcx, rcx
je 0x18001cda4
mov qword [rsi], rbx
call fcn.180084aa0
nop
jmp 0x18001cda4