Function at 0x43b9c0
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x4cf06c]
xor eax, esp
mov dword [esp + 0x38], eax
push ebx
push esi
mov ebx, ecx
mov dword [esp + 0x1c], 0
push edi
mov dword [esp + 0x2c], ebx
call dword [sym.imp.USER32.dll_CreatePopupMenu]
cmp dword [ebx + 0x2330], 0
mov edi, eax
mov dword [esp + 0x14], edi
jne 0x43ba0d
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test al, 1
jne 0x43ba0d
xor edx, edx
jmp 0x43ba12
mov edx, 1
mov eax, dword [ebx + 0x1bf8]
mov dword [ebx + 0x2330], 0
mov dword [esp + 0x24], edx
cmp dword [eax + 8], 0
je 0x43bc31
xor esi, esi
mov dword [esp + 0x1c], 0x238c
mov dword [esp + 0x28], esi
nop
test edx, edx
jne 0x43bb01
mov ecx, dword [esi + eax + 8]
mov dword [esp + 0x18], edx
test ecx, ecx
je 0x43ba60
or edx, 0xffffffff
call fcn.00412220
mov dword [esp + 0x18], eax
mov edi, dword [ebx + 0x1bb8]
mov esi, edi
or dword [esp + 0x20], 1
mov dword [esp + 0x30], edi
mov ebx, dword [esi + 4]
cmp byte [ebx + 0xd], 0
jne 0x43bab3
mov edi, dword [esp + 0x18]
nop
mov eax, dword [ebx + 0x10]
test edi, edi
mov edx, 0x4c2758
mov ecx, 0x4c2758
cmovne edx, edi
test eax, eax
cmovne ecx, eax
call fcn.004122a0
test eax, eax
jns 0x43baa5
mov ebx, dword [ebx + 8]
jmp 0x43baa9
mov esi, ebx
mov ebx, dword [ebx]
cmp byte [ebx + 0xd], 0
je 0x43ba80
mov edi, dword [esp + 0x30]
cmp esi, edi
je 0x43badb
mov eax, dword [esi + 0x10]
mov edx, 0x4c2758
test eax, eax
mov ecx, 0x4c2758
cmovne edx, eax
mov eax, dword [esp + 0x18]
test eax, eax
cmovne ecx, eax
call fcn.004122a0
test eax, eax
jns 0x43badd
mov esi, edi
mov ebx, dword [esp + 0x2c]
cmp esi, edi
mov esi, dword [esp + 0x28]
jne 0x43bb01
mov eax, dword [ebx + 0x1bf8]
mov eax, dword [esi + eax]
cmp eax, 0x1f
je 0x43bb01
mov byte [esp + 0x13], 1
cmp eax, 0x20
jne 0x43bb06
mov byte [esp + 0x13], 0
mov eax, dword [esp + 0x20]
test al, 1
je 0x43bb2e
and eax, 0xfffffffe
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x43bb2e
push eax
call fcn.0047d4ed
add esp, 4
mov dword [esp + 0x18], 0
cmp byte [esp + 0x13], 0
jne 0x43bbff
cmp dword [ebx + 0x14f8], 1
je 0x43bb58
mov ecx, dword [ebx + 0x1bf8]
mov eax, dword [ecx + esi + 0xc]
cmp eax, 4
jne 0x43bb81
cmp dword [ecx + esi + 0x10], 1
je 0x43bb8b
xor edx, edx
mov ecx, dword [ebx + 0x1bf8]
mov edi, dword [esp + 0x14]
mov eax, dword [ecx + esi]
cmp eax, 0x1e
jne 0x43bb92
push 0
push 0
push 0x800
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
jmp 0x43bc03
cmp eax, 9
je 0x43bb8b
cmp eax, 2
jne 0x43bb58
mov edx, 2
jmp 0x43bb5a
cmp eax, 0x1f
jne 0x43bba0
cmp dword [esp + 0x24], 0
jne 0x43bc03
jmp 0x43bbac
cmp eax, 0x20
jne 0x43bbd5
cmp dword [esp + 0x24], 0
je 0x43bc03
push 0
push 0
push 0x800
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
mov eax, dword [ebx + 0x1bf8]
push dword [esi + eax + 4]
push dword [esp + 0x20]
push 0
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
jmp 0x43bc03
push dword [ecx + esi + 4]
mov eax, dword [esp + 0x20]
xor ecx, ecx
push eax
add eax, 0xffffdc74
cmp eax, dword [ebx + 0x1c10]
mov eax, 8
cmove ecx, eax
or ecx, edx
push ecx
push edi
call dword [sym.imp.USER32.dll_AppendMenuW]
jmp 0x43bc03
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [ebx + 0x1bf8]
inc edx
mov dword [esp + 0x1c], edx
add edx, 0xffffdc74
lea esi, [edx + edx*4]
mov edx, dword [esp + 0x24]
shl esi, 2
mov dword [esp + 0x28], esi
cmp dword [eax + esi + 8], 0
jne 0x43ba40
lea eax, [esp + 0x34]
xorps xmm0, xmm0
push eax
push 0xd76
mov ecx, ebx
movups xmmword [esp + 0x3c], xmm0
call fcn.004645e0
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
push dword [ebx + 0x54]
push 0
push dword [esp + 0x4c]
push dword [esp + 0x44]
push 0
push edi
call dword [sym.imp.USER32.dll_TrackPopupMenu]
push edi
call dword [sym.imp.USER32.dll_DestroyMenu]
push 0
push 0
push 0x8069
mov ecx, ebx
call fcn.004646e0
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0047d39f
mov esp, ebp
pop ebp
ret