Function at 0x43c2bd
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov edi, dword [ebp + 8]
cmp dword [edi + 4], 0x100
jne 0x43c36e
mov ebx, dword [edi]
test ebx, ebx
je 0x43c36e
mov dword [esp], ebx
call method.IWindow.findWindow_HWND___
mov ecx, eax
test eax, eax
jne 0x43c315
mov dword [esp + 4], 0xfffffff0
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetWindowLongA]
bt eax, 0x1e
push ecx
push ecx
jae 0x43c36e
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetParent]
mov ebx, eax
push edx
jmp 0x43c2d8
call method.IWindow.getTopParent__
mov ebx, eax
test eax, eax
je 0x43c36e
mov eax, dword [edi + 8]
cmp eax, 0xd
je 0x43c375
cmp eax, 9
je 0x43c472
lea edx, [eax - 0x25]
cmp edx, 1
ja 0x43c579
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x87
mov eax, dword [edi]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageA]
sub esp, 0x10
test al, 5
jne 0x43c36e
xor ecx, ecx
xor edx, edx
mov eax, ebx
call fcn.0043c265
xor eax, eax
jmp 0x43c631
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x87
mov eax, dword [edi]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, eax
sub esp, 0x10
xor eax, eax
and dl, 4
jne 0x43c631
lea esi, [ebp - 0x20]
mov ecx, esi
call fcn.004c706c
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x1c]
mov dword [esp], eax
sub edi, eax
sar edi, 2
call fcn.004c99c3
shr eax, 2
cmp edi, eax
jne 0x43c3f2
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov edx, 1
mov ecx, esi
sar eax, 2
mov dword [esp + 4], 4
add eax, eax
cmove eax, edx
shl eax, 2
mov dword [esp], eax
call fcn.004c70ac
push edi
push edi
mov eax, dword [ebp - 0x1c]
mov ecx, ebx
mov dword [eax], ebx
mov dword [esp], esi
add dword [ebp - 0x1c], 4
call method.IWindow.getVisibleChildren_vector_IWindow__
push ebx
xor ebx, ebx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, edx
sar eax, 2
cmp eax, ebx
jbe 0x43c466
mov ecx, dword [edx + ebx*4]
mov eax, dword [ecx]
mov dword [esp], 0xca
call dword [eax + 0x5c]
mov dword [ebp - 0x24], eax
push ecx
mov ecx, eax
test eax, eax
je 0x43c45b
mov eax, dword [eax]
mov edi, dword [eax - 0xc]
add edi, ecx
inc dword [edi + 4]
mov eax, dword [ecx]
call dword [eax + 8]
test al, al
je 0x43c45b
mov ecx, dword [ebp - 0x24]
mov byte [ebp - 0x2c], al
mov edx, dword [ecx]
call dword [edx + 0xc]
lea ecx, [ebp - 0x24]
call fcn.0043c242
mov al, byte [ebp - 0x2c]
jmp 0x43c468
lea ecx, [ebp - 0x24]
inc ebx
call fcn.0043c242
jmp 0x43c408
xor eax, eax
mov byte [ebp - 0x2c], al
mov ecx, esi
jmp 0x43c53c
mov dword [esp], 0x11
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
call esi
push edx
mov edx, dword [edi]
test ax, ax
mov eax, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x87
mov dword [esp], edx
jns 0x43c549
call eax
mov edx, eax
sub esp, 0x10
xor eax, eax
and dl, 6
jne 0x43c631
lea edi, [ebp - 0x20]
mov ecx, edi
call fcn.004c706c
mov dword [esp], edi
mov ecx, ebx
xor ebx, ebx
call method.IWindow.getVisibleChildren_vector_IWindow__
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, edx
sar eax, 2
cmp eax, ebx
jbe 0x43c535
mov ecx, dword [edx + ebx*4]
mov eax, dword [ecx]
mov dword [esp], 0xcb
call dword [eax + 0x5c]
mov dword [ebp - 0x24], eax
mov ecx, eax
push edx
test eax, eax
je 0x43c623
mov eax, dword [eax]
mov dword [ebp - 0x2c], ecx
mov ebx, dword [eax - 0xc]
add ebx, ecx
inc dword [ebx + 4]
mov eax, dword [ecx]
mov ebx, dword [eax + 8]
mov dword [esp], 0x10
call esi
mov ecx, dword [ebp - 0x2c]
push esi
cwde
not eax
shr eax, 0x1f
mov dword [esp], eax
call ebx
lea ecx, [ebp - 0x24]
push eax
call fcn.0043c254
mov al, 1
jmp 0x43c537
xor eax, eax
mov byte [ebp - 0x2c], al
mov ecx, edi
call fcn.0043c154
mov al, byte [ebp - 0x2c]
jmp 0x43c631
call eax
sub esp, 0x10
test al, 6
jne 0x43c36e
mov dword [esp], 0x10
call esi
movsx edx, ax
push ecx
mov eax, ebx
mov ecx, 1
not edx
shr edx, 0x1f
call fcn.0043c265
jmp 0x43c631
lea edx, [eax - 0x27]
cmp edx, 1
ja 0x43c5b7
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x87
mov eax, dword [edi]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageA]
sub esp, 0x10
test al, 5
jne 0x43c36e
xor ecx, ecx
mov edx, 1
jmp 0x43c367
cmp eax, 0x1b
jne 0x43c5c7
mov edx, edi
mov eax, ebx
call fcn.0043c088
jmp 0x43c631
cmp eax, 0x73
jne 0x43c36e
mov dword [esp], 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
push edx
test ax, ax
jns 0x43c5ee
mov edx, edi
mov eax, ebx
call fcn.0043c088
jmp 0x43c631
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x87
mov eax, dword [edi]
mov dword [esp], eax
call dword [sym.imp.USER32.dll_SendMessageA]
sub esp, 0x10
test al, 4
je 0x43c36e
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
jmp 0x43c36e
lea ecx, [ebp - 0x24]
inc ebx
call fcn.0043c254
jmp 0x43c4d2
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret