Function at 0x140023eb6
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
xor rax, rax
push rax
push rax
push rax
push rax
sub rsp, 0x28
call fcn.1400bd990
push 1
pop rcx
call fcn.1400166fb
mov qword [rsp + 0x28], 0
push reloc.WS2_32.dll_recv
pop rcx
call sub.USER32.dll_GetKeyState
mov r15, rax
cmp r15, 1
jle 0x140023f11
call fcn.1400a6dec
mov r15, rax
and r15, r15
jne 0x140023f11
call fcn.14002bd10
mov qword [rsp + 0x28], 1
movabs rdx, 0x140273064
lea rcx, [rsp + 0x30]
call fcn.1400bd510
lea rbp, [0x1404baa64]
mov r15, qword [rbp + 8]
cmp r15, 4
jne 0x140023f7e
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0x4c
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14009cdb4
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bd6c0
jmp 0x1400241f4
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push reloc.SHELL32.dll_IsNetDrive
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14009cdb4
add rsp, 0x28
call fcn.1400bd860
mov rcx, qword [0x1404ba654]
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.1400bd890
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.1400bd7a0
or rax, rax
je 0x1400241ac
mov qword [rsp + 0x38], 0
jmp 0x140023ff1
push 0x4d
pop rcx
call fcn.1400a3a84
cmp rax, qword [rsp + 0x38]
jl 0x1400241aa
push qword [rsp + 0x38]
push 0x4d
pop rcx
pop rdx
call fcn.14009d0bc
mov r15, rax
and r15, 1
and r15, r15
je 0x14002419f
mov r15, qword [rsp + 0x28]
and r15, r15
jle 0x140024119
mov rcx, qword [rsp + 0x30]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
push qword [rsp + 0x58]
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400a3acc
add rsp, 0x20
pop rax
movabs rcx, 0x1402737bc
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 1
push qword [rsp + 0x58]
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400a3acc
add rsp, 0x20
pop rax
movabs rcx, reloc.ODBC32.dll_SQLFetch
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bd6c0
jmp 0x14002419f
mov rcx, qword [rsp + 0x30]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
push qword [rsp + 0x58]
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400a3acc
add rsp, 0x20
pop rax
movabs rcx, reloc.ODBC32.dll_SQLFetch
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bd6c0
inc qword [rsp + 0x38]
jno 0x140023ff1
jmp 0x1400241e9
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
push qword [rsp + 0x38]
pop rcx
sub rsp, 0x20
call fcn.14000dbd9
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.1400bd6c0
push 0x4d
pop rcx
call fcn.14009ce7c
mov r15, qword [rsp + 0x60]
and r15, r15
jne 0x14002420a
push qword [rsp + 0x30]
pop rcx
call fcn.1400ad9e4
jmp 0x140024214
push qword [rsp + 0x30]
pop rcx
call fcn.14009a2a4
push 0
pop rcx
call fcn.1400166fb
xor rax, rax
push rax
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
pop rax
add rsp, 0x48
pop r15
pop rbp
ret