Function at 0x140023ee4
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
xor rax, rax
push rax
push rax
push rax
push rax
sub rsp, 0x28
call fcn.1400bc5a0
push 1
pop rcx
call fcn.1400165a3
mov qword [rsp + 0x28], 0
push reloc.WS2_32.dll_recv
pop rcx
call sub.USER32.dll_GetKeyState
mov r15, rax
cmp r15, 1
jle 0x140023f3f
call fcn.1400a6d8c
mov r15, rax
and r15, r15
jne 0x140023f3f
call fcn.14002bcda
mov qword [rsp + 0x28], 1
movabs rdx, 0x140271064
lea rcx, [rsp + 0x30]
call fcn.1400bc120
lea rbp, [0x1404bc530]
mov r15, qword [rbp + 8]
cmp r15, 4
jne 0x140023fac
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0x4c
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14009cd54
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bc2d0
jmp 0x140024222
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push reloc.SHELL32.dll_IsNetDrive
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14009cd54
add rsp, 0x28
call fcn.1400bc470
mov rcx, qword [0x1404bc118]
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.1400bc4a0
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.1400bc3b0
or rax, rax
je 0x1400241da
mov qword [rsp + 0x38], 0
jmp 0x14002401f
push 0x4d
pop rcx
call fcn.1400a3a24
cmp rax, qword [rsp + 0x38]
jl 0x1400241d8
push qword [rsp + 0x38]
push 0x4d
pop rcx
pop rdx
call fcn.14009d05c
mov r15, rax
and r15, 1
and r15, r15
je 0x1400241cd
mov r15, qword [rsp + 0x28]
and r15, r15
jle 0x140024147
mov rcx, qword [rsp + 0x30]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
push qword [rsp + 0x58]
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400a3a6c
add rsp, 0x20
pop rax
movabs rcx, 0x1402717bc
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 1
push qword [rsp + 0x58]
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400a3a6c
add rsp, 0x20
pop rax
movabs rcx, 0x14027dad4
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bc2d0
jmp 0x1400241cd
mov rcx, qword [rsp + 0x30]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
push qword [rsp + 0x58]
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400a3a6c
add rsp, 0x20
pop rax
movabs rcx, 0x14027dad4
sub rsp, 0x28
call fcn.1400bc260
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bc2d0
inc qword [rsp + 0x38]
jno 0x14002401f
jmp 0x140024217
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push qword [rsp + 0x38]
pop rcx
sub rsp, 0x20
call fcn.14000dbd2
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bc2d0
push 0x4d
pop rcx
call fcn.14009ce1c
mov r15, qword [rsp + 0x60]
and r15, r15
jne 0x140024238
push qword [rsp + 0x30]
pop rcx
call fcn.1400ac5f0
jmp 0x140024242
push qword [rsp + 0x30]
pop rcx
call fcn.14009a244
push 0
pop rcx
call fcn.1400165a3
xor rax, rax
push rax
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.1400bc6b0
add rsp, 0x28
pop rax
add rsp, 0x48
pop r15
pop rbp
ret