Function at 0x43f9d1
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
mov ebx, dword [sym.imp.DuiLib.dll_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const]
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
push str.windowinit
mov ecx, edi
call ebx
test al, al
jne 0x43fc4c
push str.click
mov ecx, edi
call ebx
test al, al
je 0x43fc1c
mov eax, dword [edi + 0x108]
cmp eax, dword [esi + 0x344]
jne 0x43fa2d
xor ecx, ecx
cmp dword [esi + 0x3a0], ecx
je 0x43fc4c
push ecx
push ecx
push 2
jmp 0x43fc07
cmp eax, dword [esi + 0x350]
jne 0x43fa4f
push 0
push 0xf020
push 0x112
lea ecx, [esi - 0x10]
call dword [sym.imp.DuiLib.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::SendMessageW_unsigned_int__unsigned_int__long_int_]
jmp 0x43fc4c
cmp eax, dword [esi + 0x348]
jne 0x43fa60
push 0
push 0xf030
jmp 0x43fa3c
cmp eax, dword [esi + 0x34c]
jne 0x43fa71
push 0
push 0xf120
jmp 0x43fa3c
cmp eax, dword [esi + 0x354]
jne 0x43fa94
sub esp, 0x120
mov ecx, esp
push edi
call fcn.0043fc55
lea ecx, [esi - 0x10]
call fcn.0044037d
jmp 0x43fc4c
cmp eax, dword [esi + 0x378]
jne 0x43faa9
lea ecx, [esi - 0x10]
call fcn.0044048d
jmp 0x43fc4c
cmp eax, dword [esi + 0x37c]
jne 0x43fabe
lea ecx, [esi - 0x10]
call fcn.004404f6
jmp 0x43fc4c
cmp eax, dword [esi + 0x384]
jne 0x43fad3
lea ecx, [esi - 0x10]
call fcn.00440642
jmp 0x43fc4c
cmp eax, dword [esi + 0x380]
jne 0x43fae8
lea ecx, [esi - 0x10]
call fcn.00440561
jmp 0x43fc4c
cmp eax, dword [esi + 0x388]
je 0x43fc44
cmp eax, dword [esi + 0x390]
jne 0x43fb17
sub esp, 0x120
mov ecx, esp
push edi
call fcn.0043fc55
lea ecx, [esi - 0x10]
call fcn.004411fc
jmp 0x43fc4c
cmp eax, dword [esi + 0x394]
jne 0x43fb2c
lea ecx, [esi - 0x10]
call fcn.004412f7
jmp 0x43fc4c
cmp eax, dword [esi + 0x398]
jne 0x43fb41
lea ecx, [esi - 0x10]
call fcn.004413b5
jmp 0x43fc4c
xor ecx, ecx
cmp dword [esi + 0x3a0], ecx
je 0x43fc4c
cmp eax, dword [esi + 0x358]
jne 0x43fb5f
push ecx
push 0x5dc05dc
jmp 0x43fbb6
cmp eax, dword [esi + 0x360]
jne 0x43fb6f
push ecx
push 0x5dd05dd
jmp 0x43fbb6
cmp eax, dword [esi + 0x35c]
jne 0x43fba8
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
imul ecx, dword [0x4c8ba4], 0x3a0
shr eax, 0xf
not al
and al, 1
mov byte [esp + 0xc], al
push dword [esp + 0xc]
add ecx, 0x4c8c00
call fcn.00454d7f
jmp 0x43fc4c
cmp eax, dword [esi + 0x364]
jne 0x43fbcd
push ecx
push 0x5de05de
push 0x111
lea ecx, [esi - 0x10]
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [esi + 0x3a0]
jmp 0x43fc17
cmp eax, dword [esi + 0x368]
jne 0x43fbec
imul ecx, dword [0x4c8ba4], 0x3a0
add ecx, 0x4c8c00
call fcn.00453332
jmp 0x43fc4c
cmp eax, dword [esi + 0x36c]
je 0x43fc4c
cmp eax, dword [esi + 0x370]
jne 0x43fc4c
push ecx
push 0x640064
push 0x111
lea ecx, [esi - 0x10]
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [esi + 0x3a0]
add esp, 0x10
jmp 0x43fc4c
push str.itemclick
mov ecx, edi
call ebx
test al, al
jne 0x43fc4c
push str.return
mov ecx, edi
call ebx
test al, al
je 0x43fc4c
mov eax, dword [edi + 0x108]
cmp eax, dword [esi + 0x38c]
jne 0x43fc4c
lea ecx, [esi - 0x10]
call fcn.00441102
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4