Function at 0x567320
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
push ebx
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x12
mov dword [esp + 0x14], ecx
call edi
cwde
shr eax, 0x1f
push 0x11
lea ebx, [eax*4]
call edi
cwde
shr eax, 0x1f
push 0x10
lea esi, [eax + eax]
call edi
mov edi, dword [ebp + 8]
cwde
shr eax, 0x1f
or eax, esi
or eax, ebx
ret
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [eax + 0x890]
test ecx, ecx
je 0x56738a
mov eax, dword [ecx]
push ebx
push edi
mov eax, dword [eax + 0x5c]
call eax
test al, al
jne 0x567436
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x668]
mov esi, dword [eax + 0x664]
sub ecx, esi
mov eax, 0x38e38e39
mov dword [esp + 0x14], 0
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x567444
xor eax, eax
mov dword [esp + 0x18], eax
lea ecx, [ecx]
lea ecx, [eax + 0x18]
add ecx, esi
cmp dword [ecx + 0x14], 0x10
jb 0x5673cd
mov ecx, dword [ecx]
call fcn.00560ff0
test eax, eax
je 0x5673e9
test edi, 0xffff0000
jne 0x5673e9
mov ecx, ebx
shl ecx, 0x10
or ecx, edi
cmp eax, ecx
je 0x567421
mov eax, dword [esp + 0x10]
inc dword [esp + 0x14]
add dword [esp + 0x18], 0x48
mov ecx, dword [eax + 0x668]
mov esi, dword [eax + 0x664]
sub ecx, esi
mov eax, 0x38e38e39
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x14], eax
jae 0x567444
mov eax, dword [esp + 0x18]
jmp 0x5673c0
mov eax, dword [esp + 0x14]
push 0
add eax, 0x578
push eax
mov ecx, dword [esp + 0x18]
call fcn.00539b00
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esp + 0x10]
push dword [eax + 0x7b0]
call dword [sym.imp.USER32.dll_GetMenu]
push 4
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
mov ecx, eax
xor esi, esi
mov dword [esp + 0x18], ecx
jmp 0x567470
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x30
push eax
push 0
lea eax, [esi + 0x44c]
mov dword [esp + 0x2c], 0x20
push eax
push ecx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
test eax, eax
je 0x5674b4
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x5674b4
test edi, 0xffff0000
jne 0x5674b4
mov eax, ebx
shl eax, 0x10
or eax, edi
cmp ecx, eax
je 0x5674c0
inc esi
cmp esi, 0x32
jge 0x5674e0
mov ecx, dword [esp + 0x18]
jmp 0x567470
mov ecx, dword [esp + 0x10]
lea eax, [esi + 0x44c]
push 0
push eax
call fcn.00539b00
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esp + 0x10]
mov esi, dword [eax + 0x670]
mov eax, dword [eax + 0x674]
mov dword [esp + 0x14], eax
cmp esi, eax
je 0x5675ea
lea esp, [esp]
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x56750a
mov ecx, dword [esi]
call fcn.00560ff0
test eax, eax
je 0x567573
test edi, 0xffff0000
jne 0x567573
mov ecx, ebx
shl ecx, 0x10
or ecx, edi
cmp eax, ecx
jne 0x567573
cmp dword [esi + 0x2c], 0x10
lea edx, [esi + 0x18]
jb 0x567531
mov edx, dword [edx]
sub esp, 0x18
mov ecx, edx
mov ebx, esp
lea eax, [ecx + 1]
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
mov dword [esp + 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x567550
sub ecx, dword [esp + 0x30]
push ecx
push edx
mov ecx, ebx
call fcn.0040af10
call fcn.0055b4f0
mov ebx, eax
add esp, 0x18
cmp ebx, 0xffffffff
jne 0x567585
add esi, 0x30
cmp esi, dword [esp + 0x14]
je 0x5675ea
mov ebx, dword [esp + 0x1c]
jmp 0x567500
cmp ebx, 0x7d0
jge 0x567595
push 0
push ebx
jmp 0x56742d
call dword [sym.imp.USER32.dll_GetFocus]
mov ecx, dword [esp + 0x10]
sub eax, dword [ecx + 0x7d4]
lea esi, [ecx + 0x7d8]
neg eax
sbb eax, eax
and eax, 0xffffffec
add esi, eax
mov eax, dword [esi]
test eax, eax
je 0x5675f5
push 0
push 0
push ebx
push dword [esi + 4]
call eax
mov eax, dword [esi]
push 0
push 0
push 0x94f
push dword [esi + 4]
call eax
add esp, 0x20
mov dword [esi + 8], eax
lea ecx, [eax - 1]
cmp ecx, 0x3e6
jbe 0x56760d
jmp 0x567436
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4
push 1
lea ecx, [esp + 0x20]
call fcn.004026e0
push 0x5ee81c
mov eax, ecx
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push eax
lea ecx, [esp + 0x20]
call fcn.004026e0
push 0x5ee81c
mov eax, ecx
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3