Function at 0x4310a0
Capabilities:
Open clipboard
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x453487
mov eax, dword fs:[0]
push eax
sub esp, 0x208
mov eax, dword [0x4650c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [ebp - 4], 0
call fcn.0043af06
add esp, 4
push eax
call fcn.0043a044
mov ecx, dword [ebp + 8]
mov eax, dword [ecx - 0xc]
add esp, 4
test eax, eax
js 0x431946
push str.8985b77d_8f79_4596_844e_6482e70c3d14
push ecx
call fcn.00439fad
mov ecx, dword [ebp + 8]
add esp, 8
test eax, eax
je 0x431946
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x431946
push str.ClientClientProcess_9c00dc50_f39a_4917_8fd9_37125ccecced
push 0x14
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x431919
mov eax, dword [section..data]
mov edx, dword [eax + 0xc]
mov ecx, section..data
call edx
add eax, 0x10
mov dword [ebp - 0x1c0], eax
push 1
mov byte [ebp - 4], 1
call dword [sym.imp.USER32.dll_GetClipboardData]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
jne 0x431176
xor ecx, ecx
jmp 0x43118f
mov ecx, eax
lea edi, [ecx + 2]
jmp 0x431180
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x431180
sub ecx, edi
sar ecx, 1
push eax
lea eax, [ebp - 0x1c0]
push eax
mov ebx, ecx
call fcn.00402080
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
call dword [sym.imp.USER32.dll_CloseClipboard]
mov ebx, dword [ebp - 0x1c0]
push ecx
add ebx, 0xfffffff0
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 2
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.1URL
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
add esp, 0xc
mov edi, 0x468d38
mov byte [ebp - 4], 3
call fcn.004138d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431228
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 4
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.2IELE
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
add esp, 0xc
mov edi, 0x468d3c
mov byte [ebp - 4], 5
call fcn.004138d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43129c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 6
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.3ELEName
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
add esp, 0xc
mov edi, 0x468d40
mov byte [ebp - 4], 7
call fcn.004138d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431310
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 8
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.4INPUTNAME
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
add esp, 0xc
mov edi, 0x468d44
mov byte [ebp - 4], 9
call fcn.004138d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431384
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.5BTNTYPE
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
add esp, 0xc
mov edi, 0x468d48
mov byte [ebp - 4], 0xb
call fcn.004138d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4313f8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.6BTNNAME
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
add esp, 0xc
mov edi, 0x468d4c
mov byte [ebp - 4], 0xd
call fcn.004138d0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43146c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.7SPROB
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
mov eax, dword [eax]
add esp, 0xc
push eax
call fcn.0043a023
mov dword [0x468d50], eax
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4314de
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.8MONEYLINK
call fcn.00401e30
lea edx, [ebp - 0x1c4]
push edx
mov byte [ebp - 4], 1
call fcn.0040a090
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x1c4]
add esp, 8
add eax, 0xfffffff0
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
push 0x468d54
mov dword [esi], eax
call fcn.0040a220
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov byte [ebp - 4], 0x11
mov eax, esp
mov dword [ebp - 0x1b8], esp
push eax
mov ecx, str.9CBTNPROB
call fcn.00401e30
lea ecx, [ebp - 0x1b0]
push ecx
mov byte [ebp - 4], 0x10
call fcn.0040a090
mov eax, dword [eax]
add esp, 0xc
push eax
call fcn.0043a023
mov dword [0x468d64], eax
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
add esp, 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4315b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.10UVSUPPORT
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 0x10
call fcn.0040a090
mov eax, dword [eax]
add esp, 0xc
push eax
call fcn.0043a023
mov dword [0x468d70], eax
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43162b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.11SKEYWORD
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 0x10
call fcn.0040a090
add esp, 0xc
mov edi, 0x468d68
mov byte [ebp - 4], 0x14
call fcn.004138d0
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43169f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ecx
mov eax, ebx
mov dword [ebp - 0x1b4], esp
mov esi, esp
call fcn.00401a60
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, str.12DEF_XY_MOVE
call fcn.00401e30
lea edx, [ebp - 0x1b0]
push edx
mov byte [ebp - 4], 0x10
call fcn.0040a090
mov eax, dword [eax]
add esp, 0xc
push eax
call fcn.0043a023
mov dword [0x468d6c], eax
mov eax, dword [ebp - 0x1b0]
add eax, 0xfffffff0
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431711
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor esi, esi
cmp dword [0x468d70], esi
je 0x431735
call fcn.00414290
call fcn.0043a056
cdq
mov ecx, 0x3e8
idiv ecx
lea ecx, [edx + 1]
call fcn.00413ac0
push esi
call dword [sym.imp.ole32.dll_OleInitialize]
push str.riched20.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push esi
mov dword [ebp - 0x1b4], eax
call dword [sym.imp.ole32.dll_CoInitialize]
push esi
lea edx, [ebp - 0x1d8]
push edx
lea eax, [ebp - 0x1c8]
push eax
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x1d0], esi
mov dword [ebp - 0x1cc], esi
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push esi
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea ecx, [ebp - 0x1bc]
push ecx
mov dword [ebp - 0x1bc], 8
mov dword [ebp - 0x1b8], 0x37ff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call fcn.004322f0
mov dword [ebp - method.WTL::CMessageLoop.virtual_0], vtable.WTL::CMessageLoop.0
mov dword [ebp - 0x20c], esi
mov dword [ebp - 0x208], esi
mov dword [ebp - 0x204], esi
mov dword [ebp - 0x200], esi
mov dword [ebp - 0x1fc], esi
mov dword [ebp - 0x1f8], esi
mov byte [ebp - 4], 0x16
mov edi, dword [0x468d78]
lea edx, [ebp - 0x210]
add edi, 0x10
push edi
mov dword [ebp - 0x1b0], edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [0x468a84]
mov dword [ebp - 0x1b8], eax
lea eax, [ebp - 0x1b0]
push eax
lea ecx, [ebp - 0x1b8]
push ecx
call fcn.00432240
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea edx, [ebp - 0x1ac]
push edx
call fcn.0042cf40
lea edi, [ebp - 0x1ac]
mov byte [ebp - 4], 0x17
call fcn.00431e00
lea edi, [ebp - 0x210]
call fcn.004321a0
call fcn.00432090
mov eax, dword [ebp - 0x1b4]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call dword [sym.imp.ole32.dll_OleUninitialize]
mov ecx, dword [ebp - 0x1c8]
push ecx
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
lea edx, [ebp - 0x1ac]
push edx
mov byte [ebp - 4], 0x16
call fcn.0042d170
mov eax, dword [ebp - 0x200]
xor esi, esi
cmp eax, esi
je 0x4318a5
push eax
call fcn.0043b981
add esp, 4
mov dword [ebp - 0x200], esi
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1fc], esi
mov dword [ebp - 0x1f8], esi
cmp eax, esi
je 0x4318ca
push eax
call fcn.0043b981
add esp, 4
mov dword [ebp - 0x20c], esi
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x1c4]
add eax, 0xfffffff0
mov dword [ebp - 0x208], esi
mov dword [ebp - 0x204], esi
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4318fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
lea ecx, [ebx + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431919
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43193f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x43196b
lea eax, [ecx - 0x10]
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x431969
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004397ee
mov esp, ebp
pop ebp
ret