Function at 0x404e60
Capabilities:
Create process on windows
Open clipboard
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x264
push ebx
push esi
add eax, 0xffffffe0
push edi
mov esi, ecx
cmp eax, 5
ja case.default.0x404e7a
jmp dword [eax*4 + 0x40508c]
lea ebx, [esi + 0x14]
mov ecx, ebx
call dword [sym.imp.Ngs3.dll_public:_void___thiscall_C2bString::ToClipboard_void_const]
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je case.default.0x404e7a
mov ecx, ebx
call dword [sym.imp.Ngs3.dll_public:_unsigned_int___thiscall_C2bString::GetLength_void_const]
lea edi, [eax + eax + 0x18]
push edi
push 2
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov esi, eax
push 0
push esi
call sub.MSVCRT.dll_memset
mov al, byte [0x425800]
xor ecx, ecx
add esp, 0xc
test al, al
sete cl
mov dword [esi], 0x14
mov dword [esi + 0x10], ecx
test al, al
je 0x404ef8
push 0
push 0xffffffffffffffff
push 0
add esi, 0x14
push esi
mov ecx, ebx
call dword [sym.imp.Ngs3.dll_public:_int___thiscall_C2bString::CodeTo_void___int__int__int__const]
jmp 0x404f11
mov ecx, dword [ebx]
lea edx, [esi + 0x14]
lea ecx, [ecx]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x404f00
mov esi, dword [ebp - 0x18]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
push 0xf
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x420354
lea edx, [ebp - 0xc]
push edx
lea eax, [esi + 0x14]
push eax
lea ecx, [ebp - 8]
push str._select__
push ecx
call dword [sym.imp.Ngs3.dll_class_C2bString___cdecl_operator_wchar_t_const___class_C2bString_const__]
add esp, 0xc
mov ecx, eax
call dword [sym.imp.Ngs3.dll_public:_class_C2bString___thiscall_C2bString::operator_wchar_t_const__]
mov edx, dword [eax]
mov eax, dword [esi + 4]
push 5
push 0
push edx
push 0x420358
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov esi, dword [sym.imp.Ngs3.dll_public:_void___thiscall_C2bString::destructor_void_]
lea ecx, [ebp - 0xc]
call esi
lea ecx, [ebp - 8]
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esi + 0x14]
lea eax, [ebp - 0x260]
call fcn.00405b00
lea ecx, [ebp - 0x260]
push 0x5c
push ecx
call dword [sym.imp.MSVCRT.dll_wcsrchr]
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
add esp, 8
xor edx, edx
push 5
mov word [eax + 2], dx
mov ecx, dword [esi + 4]
lea eax, [ebp - 0x260]
push eax
push edx
push str.cmd.exe
push str.open
push ecx
call edi
cmp eax, 0x20
jg case.default.0x404e7a
mov eax, dword [esi + 4]
push 5
lea edx, [ebp - 0x260]
push edx
push 0
push str.command
push str.open
push eax
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x38
lea ecx, [ebp - 0x50]
push 0
push ecx
call sub.MSVCRT.dll_memset
mov edx, dword [esi + 4]
mov eax, dword [esi + 0x14]
add esp, 0xc
lea ecx, [ebp - 0x54]
push ecx
mov dword [ebp - 0x54], 0x3c
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x50], 0x10c
mov dword [ebp - 0x48], str.properties
mov dword [ebp - 0x44], eax
call dword [0x4256cc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [esi + 0x14]
push edx
lea ecx, [ebp - 4]
call dword [sym.imp.Ngs3.dll_public:_void___thiscall_C2bString::constructor_class_C2bString_const__]
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
mov edx, dword [ebp - 4]
push eax
mov eax, dword [0x4257fc]
push 0
and ecx, 0xfffffffe
push ecx
push edx
push eax
call fcn.0040f1c0
lea ecx, [ebp - 4]
call dword [sym.imp.Ngs3.dll_public:_void___thiscall_C2bString::destructor_void_]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push esi
call fcn.00403490
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret