Function at 0x180041254
Capabilities:
Delete file
Read clipboard data

Disassembly:
mov r11, rsp
push rdi
sub rsp, 0x320
mov qword [rsp + 0xc8], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov rax, qword [0x18009a658]
xor rax, rsp
mov qword [rsp + 0x310], rax
xor edi, edi
mov word [rsp + 0x100], di
xor edx, edx
mov r8d, 0x206
lea rcx, [r11 - 0x226]
call fcn.180055bd0
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.180002678
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rdx, str..jpg
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea esi, [rdi + 2]
mov ecx, esi
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
cmp rax, rdi
jne 0x180041303
mov ecx, esi
call fcn.1800400d4
mov ecx, eax
call qword [sym.imp.USER32.dll_GetClipboardData]
mov rbx, rax
cmp rax, rdi
je 0x180041598
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, 0xf
mov ecx, esi
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rdx, rax
mov rcx, rbx
call fcn.18000d740
mov rbx, rax
cmp rax, rdi
je 0x180041351
lea r8d, [rsi + 0x23]
lea rdx, [rsp + 0x100]
mov rcx, rax
call fcn.18000d868
mov r11, qword [rbx]
lea edx, [rsi - 0xe]
mov rcx, rbx
call qword [r11]
lea rcx, [rsp + 0x100]
call fcn.180001f84
cmp rax, 0x400
ja 0x180041379
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x180041598
xor edx, edx
lea rcx, [rsp + 0xa0]
call fcn.180015738
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x98], 7
mov qword [rsp + 0x90], rdi
mov word [rsp + 0x80], di
lea rcx, [0x180075020]
call fcn.180054a5c
mov r8, rax
lea rdx, [0x180075020]
lea rcx, [rsp + 0x78]
call fcn.180007250
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x28]
call fcn.18000d990
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1800158fc
mov rbx, rax
lea rdx, str.cl_type
lea rcx, [rsp + 0xa0]
call fcn.180016e68
mov rcx, rax
mov rdx, rbx
call fcn.180015b88
nop
cmp qword [rsp + 0x48], 0x10
jb 0x180041422
mov rcx, qword [rsp + 0x30]
call fcn.180054958
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rdi
mov byte [rsp + 0x30], dil
cmp qword [rsp + 0x98], 8
jb 0x180041449
mov rcx, qword [rsp + 0x80]
call fcn.180054958
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, str.__image__
lea rcx, [rsp + 0x50]
call fcn.180015854
mov rbx, rax
lea rdx, str.cl_content
lea rcx, [rsp + 0xa0]
call fcn.180016e68
mov rcx, rax
mov rdx, rbx
call fcn.180015b88
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xe8], rdi
mov byte [rsp + 0xd8], dil
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x28]
call fcn.1800410a4
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1800158fc
mov rbx, rax
lea rdx, str.cl_procname
lea rcx, [rsp + 0xa0]
call fcn.180016e68
mov rcx, rax
mov rdx, rbx
call fcn.180015b88
nop
cmp qword [rsp + 0x48], 0x10
jb 0x1800414fd
mov rcx, qword [rsp + 0x30]
call fcn.180054958
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.1800158fc
mov rbx, rax
lea rdx, str.cl_hash4k
lea rcx, [rsp + 0xa0]
call fcn.180016e68
mov rcx, rax
mov rdx, rbx
call fcn.180015b88
xor r9d, r9d
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0xa0]
lea rcx, str.t_clipboard_log
call fcn.180025614
nop
cmp qword [rsp + 0xf0], 0x10
jb 0x180041573
mov rcx, qword [rsp + 0xd8]
call fcn.180054958
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xe8], rdi
mov byte [rsp + 0xd8], dil
lea rcx, [rsp + 0xa0]
call fcn.180015af0
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.180055580
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret