Function at 0x41ad79
Capabilities:
Open clipboard
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x470867
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
push ebx
push esi
push edi
mov eax, dword [0x498fa4]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
lea ecx, [esp + 0x2c]
call fcn.004039c3
lea eax, [esp + 0x1c]
xor edi, edi
push eax
mov dword [esp + 0xc4], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ebx, dword [ebp + 0xc]
mov byte [esp + 0xc0], 1
cmp ebx, 0xf
je 0x41b1ac
jle 0x41b159
cmp ebx, 0x11
jle 0x41b0c8
cmp ebx, 0x12
je 0x41b086
cmp ebx, 0x13
je 0x41afbe
cmp ebx, 0x14
jne 0x41b159
mov eax, dword [ebp + 0x1c]
cmp eax, edi
je 0x41afce
cmp dword [eax + 8], 1
jne 0x41afde
push dword [eax]
lea ecx, [esp + 0x48]
call fcn.0041b6e3
push 8
pop eax
mov byte [esp + 0xc0], 5
cmp ax, word [esp + 0x44]
je 0x41ae4d
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, 0x80020005
jmp 0x41b0d7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x88]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, edi
je 0x41afb5
push eax
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x41afb5
call dword [sym.imp.USER32.dll_EmptyClipboard]
push dword [esp + 0x4c]
lea ecx, [esp + 0x18]
call fcn.00401b81
mov byte [esp + 0xc0], 6
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], edi
je 0x41afa3
lea ecx, [esp + 0x80]
call fcn.0040a25c
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0xc4], 7
push dword [esp + 0x18]
call fcn.0040ad0d
pop ecx
pop ecx
cmp eax, edi
jne 0x41af8f
cmp dword [esp + 0x9c], edi
je 0x41af8f
cmp dword [esp + 0xa0], edi
je 0x41af8f
xor eax, eax
mov byte [esp + 0x18], 0
lea edi, [esp + 0x19]
stosb byte es:[edi], al
push 2
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x88]
call fcn.0040a2e7
xor esi, esi
push esi
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x88]
call fcn.00413216
mov byte [esp + 0xc0], 8
cmp byte [esp + 0x7c], 0
je 0x41af33
cmp dword [esp + 0x70], esi
je 0x41af7b
cmp dword [esp + 0x78], esi
jne 0x41af3e
jmp 0x41af7b
cmp dword [esp + 0x70], esi
setne al
test al, al
je 0x41af7b
mov edi, dword [esp + 0x70]
lea ecx, [esp + 0x54]
call fcn.0040a7d2
cmp dword [esp + 0x78], esi
je 0x41af5f
push dword [esp + 0x70]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [esp + 0x78], esi
push edi
push 1
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], esi
call dword [sym.imp.USER32.dll_SetClipboardData]
test eax, eax
jne 0x41af7b
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0xc4], 7
call fcn.004132d4
xor edi, edi
lea ecx, [esp + 0x80]
mov byte [esp + 0xc0], 6
call fcn.0040a2c1
call dword [sym.imp.USER32.dll_CloseClipboard]
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402595
lea eax, [esp + 0x44]
jmp 0x41b07d
cmp dword [ebp + 0x20], edi
je 0x41b0cd
mov eax, dword [ebp + 0x1c]
cmp eax, edi
jne 0x41afd8
mov esi, 0x8002000f
jmp 0x41b0d7
cmp dword [eax + 8], 1
je 0x41afe8
mov esi, 0x8002000e
jmp 0x41b0d7
push dword [eax]
lea ecx, [esp + 0xa8]
call fcn.0041b6e3
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0xc8], 2
call fcn.0041b56c
push 0x49ed00
lea ecx, [esp + 0x18]
mov byte [esp + 0xc4], 3
call fcn.00401e4f
mov eax, dword [ebp + 8]
mov byte [esp + 0xc0], 4
mov ecx, dword [eax + 0x88]
mov eax, dword [ecx]
lea edx, [esp + 0x14]
push edx
push dword [esp + 0x1c]
call dword [eax + 4]
push dword [esp + 0x14]
lea esi, [esp + 0x20]
call fcn.00408898
mov eax, esi
push eax
push dword [ebp + 0x20]
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402595
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402595
lea eax, [esp + 0xa4]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x41b0c4
mov edi, dword [ebp + 0x20]
test edi, edi
je 0x41b0cd
push edi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp + 8]
push dword [eax + 0x88]
lea esi, [eax + 0x8c]
mov eax, esi
call fcn.0041ac2f
mov esi, dword [esi]
pop ecx
test esi, esi
je 0x41b0bf
mov eax, dword [esi]
push esi
call dword [eax + 4]
push 9
pop eax
mov dword [edi + 8], esi
jmp 0x41b0c1
xor eax, eax
mov word [edi], ax
xor esi, esi
jmp 0x41b0d7
cmp dword [ebp + 0x20], edi
jne 0x41b0fb
mov eax, dword [ebp + 0x24]
call fcn.0041ac6b
mov esi, eax
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x2c]
call fcn.0041b526
push dword [esp + 0x2c]
call fcn.00457fb9
mov eax, esi
jmp 0x41b1f6
mov esi, dword [ebp + 8]
mov ecx, dword [esi + 0x88]
mov eax, dword [ecx]
lea edx, [esp + 0x1c]
push edx
lea edx, [esp + 0x30]
push edx
push ebx
call dword [eax + 0x14]
mov edi, eax
lea eax, [esp + 0x1c]
push eax
push dword [ebp + 0x20]
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test edi, edi
je 0x41b135
mov ecx, dword [ebp + 0x1c]
push ebx
push edi
push esi
call fcn.0041eda2
xor edi, edi
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x2c]
call fcn.0041b526
push dword [esp + 0x2c]
call fcn.00457fb9
mov eax, edi
jmp 0x41b1f6
mov eax, dword [ebp + 8]
push dword [eax + 0x88]
lea esi, [eax + 0x8c]
mov eax, esi
call fcn.0041ac2f
mov esi, dword [esi]
pop ecx
cmp esi, edi
je 0x41b192
push dword [ebp + 0x28]
mov eax, dword [esi]
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push ebx
push esi
call dword [eax + 0x18]
cmp eax, edi
je 0x41b0d5
mov esi, 0x80020003
cmp eax, esi
jne 0x41b0d5
jmp 0x41b0d7
cmp dword [ebp + 0x20], edi
je 0x41b0cd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp + 8]
sub eax, dword [ecx + 0x90]
lea esi, [esp + 0x1c]
call fcn.0041b708
mov eax, esi
push eax
push dword [ebp + 0x20]
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov eax, esi
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x2c]
call fcn.0041b526
push dword [esp + 0x2c]
call fcn.00457fb9
xor eax, eax
pop ecx
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24