Function at 0x43fd40
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x4db06c]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
push edi
mov ebx, ecx
mov dword [esp + 0x18], 0
call dword [sym.imp.USER32.dll_CreatePopupMenu]
cmp dword [ebx + 0x2368], 0
mov edi, eax
mov dword [esp + 0x10], edi
jne 0x43fd8d
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov dword [esp + 0x20], 0
test al, 1
je 0x43fd95
mov dword [esp + 0x20], 1
mov eax, dword [ebx + 0x1c30]
mov dword [ebx + 0x2368], 0
cmp dword [eax + 8], 0
je 0x43ff7e
mov edx, dword [esp + 0x28]
xor esi, esi
mov dword [esp + 0x24], esi
mov ecx, eax
mov dword [esp + 0x14], 0x238c
mov dword [esp + 0x1c], edx
cmp dword [esp + 0x20], 0
jne 0x43fe42
mov eax, dword [esi + eax + 8]
xor edx, edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], 0xffffffff
test eax, eax
je 0x43fe02
or edx, 0xffffffff
mov ecx, eax
call fcn.00412580
mov ecx, dword [ebx + 0x1c30]
mov edx, eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x28], edx
or dword [esp + 0x18], 1
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x34]
mov edi, ecx
push eax
lea ecx, [ebx + 0x1bf0]
call fcn.00443170
mov esi, dword [esp + 0x24]
mov ecx, edi
mov eax, dword [eax]
cmp eax, dword [ebx + 0x1bf0]
jne 0x43fe42
mov eax, dword [esi + edi]
cmp eax, 0x21
je 0x43fe42
cmp eax, 0x22
je 0x43fe42
mov byte [esp + 0xf], 1
jmp 0x43fe49
mov byte [esp + 0xf], 0
mov edi, ecx
mov eax, dword [esp + 0x18]
test al, 1
je 0x43fe7d
and eax, 0xfffffffe
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x43fe75
push eax
call fcn.00487954
mov edi, dword [ebx + 0x1c30]
add esp, 4
xor edx, edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], 0xffffffff
cmp byte [esp + 0xf], 0
jne 0x43ff4f
cmp dword [ebx + 0x150c], 1
je 0x43fea7
mov edi, dword [ebx + 0x1c30]
mov eax, dword [esi + edi + 0xc]
cmp eax, 5
jne 0x43fecd
cmp dword [esi + edi + 0x10], 1
je 0x43fedc
xor edx, edx
mov eax, dword [esi + edi]
lea ecx, [esi + edi]
mov edi, dword [esp + 0x10]
cmp eax, 0x20
jne 0x43fee3
push 0
push 0
push 0x800
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
jmp 0x43ff53
cmp eax, 0xa
je 0x43fedc
cmp eax, 2
je 0x43fedc
cmp eax, 3
jne 0x43fea7
mov edx, 2
jmp 0x43fea9
cmp eax, 0x21
jne 0x43fef1
cmp dword [esp + 0x20], 0
jne 0x43ff53
jmp 0x43fefd
cmp eax, 0x22
jne 0x43ff26
cmp dword [esp + 0x20], 0
je 0x43ff53
push 0
push 0
push 0x800
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
mov eax, dword [ebx + 0x1c30]
push dword [esi + eax + 4]
push dword [esp + 0x18]
push 0
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
jmp 0x43ff53
push dword [ecx + 4]
mov eax, dword [esp + 0x18]
xor ecx, ecx
push eax
add eax, 0xffffdc74
cmp eax, dword [ebx + 0x1c48]
mov eax, 8
cmove ecx, eax
or ecx, edx
push ecx
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
jmp 0x43ff53
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
add eax, 0xffffdc74
lea esi, [eax + eax*4]
mov eax, dword [ebx + 0x1c30]
shl esi, 2
mov ecx, eax
mov dword [esp + 0x24], esi
cmp dword [esi + eax + 8], 0
jne 0x43fdc7
lea eax, [esp + 0x34]
xorps xmm0, xmm0
push eax
mov eax, dword [ebx]
mov ecx, ebx
push 0xd76
movups xmmword [esp + 0x3c], xmm0
call dword [eax + 0x110]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
push dword [ebx + 0x48]
push 0
push dword [esp + 0x4c]
push dword [esp + 0x44]
push 0
push edi
call dword [sym.imp.USER32.dll_TrackPopupMenu]
push edi
call dword [sym.imp.USER32.dll_DestroyMenu]
mov eax, dword [ebx]
mov ecx, ebx
push 0
push 0
push 0x8069
call dword [eax + 0x140]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00487555
mov esp, ebp
pop ebp
ret