Function at 0x14005a460
Capabilities:
Log keystrokes via polling
Open clipboard
Write clipboard data

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov qword [rbp - 0x31], 0xfffffffffffffffe
mov qword [rsp + 0xe0], rbx
mov rax, qword [0x1402295b8]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rbx, rdx
mov qword [rbp - 0x39], rdx
mov r14, rcx
xor r15d, r15d
cmp qword [rdx + 0x20], 0xd
jne 0x14005a525
lea ecx, [r15 + 0x10]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14005a525
cmp byte [r14 + 0x72a], r15b
je 0x14005a79d
cmp byte [r14 + 0x72b], r15b
je 0x14005a4eb
lea ecx, [r15 + 0x11]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14005a4ff
cmp byte [r14 + 0x72b], r15b
jne 0x14005a79d
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14005a79d
mov rcx, qword [r14 + 0x30]
test rcx, rcx
je 0x14005a7db
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8d, [r9 + 0x2f]
mov rdx, r14
call fcn.14002ad40
jmp 0x14005a7db
cmp byte [r14 + 0x730], r15b
je 0x14005a79d
cmp qword [rbx + 0x20], 0x56
jne 0x14005a79d
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14005a79d
mov qword [rbp - 0x19], r15
mov edi, 7
mov qword [rbp - 0x11], rdi
mov word [rbp - 0x29], r15w
lea rcx, [rbp - 0x29]
call fcn.14005ce80
cmp qword [rbp - 0x19], 0
je 0x14005a75d
mov rsi, r15
mov qword [rbp + 7], r15
mov qword [rbp + 0xf], rdi
mov word [rbp - 9], r15w
lea rbx, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae rbx, qword [rbp - 0x29]
nop word [rax + rax]
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 8
cmovae rcx, qword [rbp - 0x29]
mov rax, qword [rbp - 0x19]
lea rcx, [rcx + rax*2]
cmp rbx, rcx
je 0x14005a613
movzx r9d, word [rbx]
lea eax, [r9 - 0x30]
cmp ax, 9
ja 0x14005a60d
cmp rsi, rdi
jae 0x14005a5fc
lea rax, [rsi + 1]
mov qword [rbp + 7], rax
lea rax, [rbp - 9]
cmp rdi, 8
cmovae rax, qword [rbp - 9]
mov word [rax + rsi*2], r9w
mov word [rax + rsi*2 + 2], r15w
mov rsi, qword [rbp + 7]
mov rdi, qword [rbp + 0xf]
add rbx, 2
jmp 0x14005a5a0
lea rcx, [rbp - 9]
call fcn.140006790
mov rsi, qword [rbp + 7]
mov rdi, qword [rbp + 0xf]
add rbx, 2
jmp 0x14005a5a0
test rsi, rsi
jne 0x14005a6a2
cmp rdi, 8
jb 0x14005a659
lea rdx, [rdi*2 + 2]
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a653
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a814
call fcn.14017b7ac
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14005a7db
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a698
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a81a
call fcn.14017b7ac
jmp 0x14005a7db
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
mov r13, qword [rbp - 9]
test eax, eax
je 0x14005a71e
call qword [sym.imp.USER32.dll_EmptyClipboard]
test eax, eax
je 0x14005a717
lea r12, [rsi + rsi]
lea rdx, [r12 + 2]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rsi, rax
test rax, rax
je 0x14005a717
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rbx, rax
lea rdx, [rbp - 9]
cmp rdi, 8
cmovae rdx, r13
mov r8, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov word [rbx + r12], r15w
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rdx, rsi
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_SetClipboardData]
call qword [sym.imp.USER32.dll_CloseClipboard]
nop
cmp rdi, 8
jb 0x14005a759
lea rdx, [rdi*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x14005a751
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a820
mov rcx, r13
call fcn.14017b7ac
mov rbx, qword [rbp - 0x39]
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14005a79d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a798
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a826
call fcn.14017b7ac
mov r9, qword [rbx + 0x28]
mov r8, qword [rbx + 0x20]
mov rax, qword [r14]
mov r10, qword [rax + 0x418]
lea rcx, vtable.ui::RichEdit.0
cmp rax, rcx
jne 0x14005a802
mov rcx, qword [r14 + 0x720]
test rcx, rcx
je 0x14005a7db
mov rcx, qword [rcx + 0x18]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
mov edx, 0x100
call qword [rax + ILCombine]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1401c4d70
mov rbx, qword [rsp + 0xe0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov qword [rsp + 0x20], r15
mov edx, 0x100
mov rcx, r14
call r10
jmp 0x14005a7db
call fcn.1401b08a0
nop
call fcn.1401b08a0
nop
call fcn.1401b08a0
nop
call fcn.1401b08a0
int3