Function at 0x43afc0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 4], 0
call dword [sym.imp.USER32.dll_InSendMessage]
test eax, eax
je 0x43afdc
jmp 0x43b675
cmp dword [ebp + 8], 0x20
jne 0x43afec
call fcn.0043bb60
jmp 0x43b675
cmp dword [ebp + 8], 0x200
jb 0x43affe
cmp dword [ebp + 8], 0x20a
jbe 0x43b00b
cmp dword [ebp + 8], 0x2a1
jne 0x43b3ae
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
cmp dword [ebp + 8], 0x20a
je 0x43b03e
mov eax, dword [ebp + 0x10]
and eax, 0xffff
movsx ecx, ax
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp + 0x10]
shr edx, 0x10
movsx eax, dx
mov dword [ebp - 0xc], eax
jmp 0x43b050
lea ecx, [ebp - 0xc]
push ecx
lea edx, [ebp - 0x10]
push edx
mov ecx, 0x68f844
call fcn.00425170
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, 0x68f844
call fcn.00425150
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00423fd0
add esp, 0xc
test eax, eax
je 0x43b09b
movzx edx, byte [0x68f8cc]
test edx, edx
je 0x43b096
mov byte [0x68f8cc], 0
mov ecx, 0x68d090
call fcn.0041b000
jmp 0x43b675
cmp dword [0x68f830], 0
je 0x43b0b1
mov eax, dword [0x68f830]
mov dword [ebp - 4], eax
jmp 0x43b162
cmp dword [0x68f834], 0
je 0x43b0c8
mov ecx, dword [0x68f834]
mov dword [ebp - 4], ecx
jmp 0x43b162
cmp dword [ebp + 8], 0x201
je 0x43b0e3
cmp dword [ebp + 8], 0x204
je 0x43b0e3
cmp dword [ebp + 8], 0x207
jne 0x43b14d
cmp dword [0x68f8a0], 0
jne 0x43b14d
call dword [sym.imp.USER32.dll_GetMessagePos]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
and edx, 0xffff
movsx eax, dx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
shr ecx, 0x10
movsx edx, cx
mov dword [ebp - 0x20], edx
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.engine.dll_struct_HWND______cdecl_g_GetDrawHWnd_void_]
push eax
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x10]
jne 0x43b131
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0xc]
je 0x43b136
jmp 0x43b675
push 1
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0043b6c0
add esp, 0xc
mov dword [ebp - 4], eax
jmp 0x43b162
push 0
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x10]
push eax
call fcn.0043b6c0
add esp, 0xc
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], 0
cmp dword [ebp - 4], 0
je 0x43b1bd
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 4]
and edx, 0x4000000
je 0x43b182
jmp 0x43b675
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x43b1bd
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 4]
and ecx, 0x4000000
je 0x43b1bd
cmp dword [ebp + 8], 0x2a1
je 0x43b1bd
mov edx, dword [ebp - 4]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
cmp eax, dword [0x68f82c]
je 0x43b27a
mov ecx, 0x68e0e8
call fcn.00422e00
mov dword [ebp - 0x28], 0
cmp dword [0x68f82c], 0
je 0x43b22e
push 0
push 0
push 0x507
mov ecx, dword [0x68f82c]
mov edx, dword [ecx]
mov ecx, dword [0x68f82c]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [0x68f82c]
mov edx, dword [ecx + 0x60]
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
je 0x43b22e
push 0
mov eax, dword [0x68f82c]
push eax
push 0x509
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
call eax
cmp dword [ebp - 0x18], 0
je 0x43b271
push 0
push 0
push 0x506
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx + 0x60]
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
je 0x43b271
push 0
mov eax, dword [ebp - 0x18]
push eax
push 0x508
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
call eax
mov ecx, dword [ebp - 0x18]
mov dword [0x68f82c], ecx
cmp dword [0x68f828], 0
je 0x43b2b3
mov edx, dword [ebp - 0x18]
cmp edx, dword [0x68f828]
je 0x43b2b3
cmp dword [ebp + 8], 0x201
je 0x43b2a9
cmp dword [ebp + 8], 0x204
je 0x43b2a9
cmp dword [ebp + 8], 0x207
jne 0x43b2b3
push 0
call fcn.0043b850
add esp, 4
mov byte [ebp - 5], 0
mov eax, dword [0x68f82c]
mov dword [ebp - 0x14], eax
cmp dword [0x68f830], 0
je 0x43b2e4
movzx ecx, byte [0x68f8ca]
test ecx, ecx
jne 0x43b2d9
cmp dword [ebp - 0x14], 0
jne 0x43b2e2
mov edx, dword [0x68f830]
mov dword [ebp - 0x14], edx
jmp 0x43b31b
cmp dword [ebp - 0x14], 0
jne 0x43b31b
cmp dword [0x68f834], 0
jne 0x43b31b
movzx eax, byte [0x68f8c8]
test eax, eax
jne 0x43b31b
cmp dword [0x68f8c4], 0
je 0x43b31b
mov ecx, dword [0x68f8c4]
mov dword [ebp - 0x14], ecx
mov byte [0x68f8cc], 1
mov byte [ebp - 5], 1
cmp dword [ebp - 0x14], 0
je 0x43b33a
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x10]
call edx
movzx eax, byte [ebp - 5]
test eax, eax
jne 0x43b35e
movzx ecx, byte [0x68f8cc]
test ecx, ecx
je 0x43b35e
mov byte [0x68f8cc], 0
mov ecx, 0x68d090
call fcn.0041b000
mov ecx, 0x68d090
call fcn.0041add0
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
and edx, 0x10000
je 0x43b3a9
cmp dword [ebp + 8], 0x201
jne 0x43b3a9
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [0x6de314]
call fcn.0053a4c0
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jle 0x43b3a9
lea edx, [ebp - 0x30]
push edx
mov ecx, 0x68d090
call fcn.0041aea0
jmp 0x43b675
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00423fd0
add esp, 0xc
test eax, eax
je 0x43b3cb
jmp 0x43b675
cmp dword [0x68f828], 0
je 0x43b3fb
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [0x68f828]
mov edx, dword [eax]
mov ecx, dword [0x68f828]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
je 0x43b3fb
jmp 0x43b675
cmp dword [0x68f834], 0
je 0x43b428
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [0x68f834]
mov edx, dword [ecx]
mov ecx, dword [0x68f834]
mov eax, dword [edx + 0x10]
call eax
jmp 0x43b675
cmp dword [0x68f828], 0
je 0x43b43f
cmp dword [ebp + 0xc], 0xc0
jne 0x43b43f
jmp 0x43b675
cmp dword [ebp + 8], 0x100
je 0x43b45f
cmp dword [ebp + 8], 0x101
jne 0x43b4f9
cmp dword [ebp + 0xc], 0x2c
jne 0x43b4f9
mov ecx, dword [ebp + 0x10]
and ecx, 0xffff
movzx edx, cx
test edx, edx
jne 0x43b474
jmp 0x43b675
mov eax, dword [0x68f524]
add eax, 2
mov dword [0x68f524], eax
mov dword [ebp - 0x38], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x43b4a4
mov edx, dword [ebp - 0x38]
or edx, 2
mov dword [ebp - 0x38], edx
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
je 0x43b4bf
mov ecx, dword [ebp - 0x38]
or ecx, 1
mov dword [ebp - 0x38], ecx
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x8000
je 0x43b4db
mov eax, dword [ebp - 0x38]
or eax, 4
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0040afe0
add esp, 8
test eax, eax
je 0x43b4f4
jmp 0x43b675
jmp 0x43b599
cmp dword [ebp + 8], 0x104
je 0x43b519
cmp dword [ebp + 8], 0x105
jne 0x43b599
cmp dword [ebp + 0xc], 0x12
jne 0x43b599
mov eax, dword [0x68f524]
add eax, 2
mov dword [0x68f524], eax
mov dword [ebp - 0x3c], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx ecx, ax
and ecx, 0x8000
je 0x43b549
mov edx, dword [ebp - 0x3c]
or edx, 2
mov dword [ebp - 0x3c], edx
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
and eax, 0x8000
je 0x43b564
mov ecx, dword [ebp - 0x3c]
or ecx, 1
mov dword [ebp - 0x3c], ecx
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx edx, ax
and edx, 0x8000
je 0x43b580
mov eax, dword [ebp - 0x3c]
or eax, 4
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.0040afe0
add esp, 8
test eax, eax
je 0x43b599
jmp 0x43b675
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x40], 0
jmp 0x43b5b2
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x43b63c
cmp dword [ebp - 0x34], 0
jne 0x43b63c
cmp dword [ebp - 0x40], 0
jne 0x43b5d3
mov ecx, dword [0x68f780]
mov dword [ebp - 4], ecx
jmp 0x43b5ec
cmp dword [ebp - 0x40], 1
jne 0x43b5e4
mov edx, dword [0x68f680]
mov dword [ebp - 4], edx
jmp 0x43b5ec
mov eax, dword [0x68f580]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x43b637
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
and ecx, 0x80000000
je 0x43b62f
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x10]
call edx
test eax, eax
je 0x43b62f
mov dword [ebp - 0x34], 1
jmp 0x43b637
mov eax, dword [ebp - 0x44]
mov dword [ebp - 4], eax
jmp 0x43b5ec
jmp 0x43b5a9
cmp dword [ebp - 0x34], 0
jne 0x43b675
cmp dword [0x68f8c4], 0
je 0x43b675
movzx ecx, byte [0x68f8c8]
test ecx, ecx
jne 0x43b675
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [0x68f8c4]
mov eax, dword [edx]
mov ecx, dword [0x68f8c4]
mov edx, dword [eax + 0x10]
call edx
mov esp, ebp
pop ebp
ret