Function at 0x43ee90
Capabilities:
Log keystrokes via polling

Disassembly:
sub esp, 0x18
push esi
mov esi, ecx
mov eax, dword [esi + 0x3c]
cmp dword [eax + 0x894], 1
jne 0x43f17b
mov edx, dword [esi + 0x1c]
push ebx
lea ecx, [esp + 0x10]
push edi
push ecx
push edx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [sym.imp.USER32.dll_GetKeyState]
push 0x11
xor ebx, ebx
call edi
test ah, 0x80
je 0x43eecd
mov ebx, 1
push 0x10
call edi
test ah, 0x80
je 0x43eed9
or ebx, 2
mov eax, dword [esi + 0xf8]
test eax, eax
je 0x43eefb
test ebx, ebx
jne 0x43eefb
mov eax, dword [esi + 0x110]
mov dword [esi + 0x108], ebx
neg eax
mov dword [esi + 0x110], eax
lea ecx, [esp + 0xc]
mov dword [esi + 0xf8], ebx
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
push edx
lea ecx, [esp + 0x18]
push eax
push ecx
call dword [sym.imp.USER32.dll_PtInRect]
mov ecx, dword [esi + 0xa8]
mov dword [esi + 0x100], eax
test ecx, ecx
jne 0x43ef3f
mov ecx, dword [esi + 0xc0]
test ecx, ecx
jne 0x43ef3f
xor edx, edx
jmp 0x43ef44
mov edx, 1
and edx, eax
mov eax, dword [esi + 0x108]
test eax, eax
mov dword [esi + 0x100], edx
je 0x43ef5d
dec eax
mov dword [esi + 0x108], eax
mov eax, dword [esi + 0x108]
test eax, eax
jne 0x43f118
mov ecx, dword [esi + 0x3c]
cmp dword [ecx + 0x894], 1
jne 0x43f118
mov edi, dword [esi + 0x114]
test edi, edi
jne 0x43f027
test edx, edx
je 0x43f002
test bl, 1
je 0x43f002
mov ebx, dword [0x62d71c]
xor edx, edx
cmp ebx, 0xffffffff
je 0x43efd1
mov edi, dword [esi + 0xcc]
mov eax, ebx
mov ecx, 0x62d71c
cmp eax, edi
je 0x43efbe
mov eax, dword [ecx + 4]
add ecx, 4
inc edx
cmp eax, 0xffffffff
jne 0x43efac
jmp 0x43efd1
mov eax, dword [edx*4 + 0x62d720]
mov dword [esi + 0xcc], eax
mov ebx, dword [0x62d71c]
cmp dword [edx*4 + 0x62d71c], 0xffffffff
je 0x43efe4
cmp dword [esi + 0xcc], 0xffffffff
jne 0x43efea
mov dword [esi + 0xcc], ebx
mov ecx, dword [esi + 0x1c]
push 0
push 0
push ecx
mov dword [esi + 0x108], 0xa
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esi + 0x104]
test eax, eax
je 0x43f118
mov edx, dword [esi + 0x1c]
push 0
push 0
mov dword [esi + 0x104], 0
push edx
jmp 0x43f112
mov eax, dword [esi + 0x118]
cmp edi, dword [ecx + eax*4 + 0xbac]
jne 0x43f096
lea eax, [eax + eax*2]
mov ecx, dword [ecx + eax*4 + 0xc2c]
push ecx
call fcn.004e0730
mov dword [esi + 0x114], eax
mov eax, dword [esi + 0x124]
add esp, 4
test eax, eax
jne 0x43f090
mov ecx, dword [esi + 0x3c]
mov eax, dword [ecx + 0xb0c]
cmp eax, 1
jne 0x43f073
mov dword [esi + 0x120], 0x21
jmp 0x43f096
cmp eax, 2
jne 0x43f084
mov dword [esi + 0x120], 0x19
jmp 0x43f096
mov dword [esi + 0x120], 0x32
jmp 0x43f096
mov dword [esi + 0x120], eax
test ebx, ebx
je 0x43f118
mov ecx, dword [esi + 0x120]
mov eax, ecx
test bl, 1
cdq
je 0x43f0ba
and edx, 7
add eax, edx
sar eax, 3
sub ecx, eax
mov dword [esi + 0x120], ecx
jmp 0x43f0ca
and edx, 7
add eax, edx
sar eax, 3
add eax, ecx
mov dword [esi + 0x120], eax
mov ecx, dword [esi + 0x120]
mov eax, 0x10
cmp ecx, eax
jge 0x43f0df
mov dword [esi + 0x120], eax
mov ecx, dword [esi + 0x120]
mov eax, 0x64
cmp ecx, eax
jle 0x43f0f4
mov dword [esi + 0x120], eax
mov edx, dword [esi + 0x120]
push 0
mov dword [esi + 0x124], edx
mov eax, dword [esi + 0x1c]
push 0
mov dword [esi + 0x108], 4
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esi + 0xc0]
pop edi
test eax, eax
pop ebx
je 0x43f17b
mov eax, dword [0x63fc20]
cmp eax, 2
jge 0x43f137
inc eax
mov dword [0x63fc20], eax
cmp eax, 2
jne 0x43f151
mov ecx, dword [esi + 0x1c]
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov dword [0x63fc20], 3
mov edx, dword [0x63fc24]
mov eax, dword [esi + 0x100]
cmp edx, eax
je 0x43f16f
mov eax, dword [esi + 0x1c]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [esi + 0x100]
mov dword [0x63fc24], ecx
pop esi
add esp, 0x18
ret