Function at 0x496e70
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov esi, 0x5148f4
cmp dword [ebp + 8], 0
jl 0x4983e3
cmp dword [ebp + 8], 3
je 0x4983e3
call sub.USER32.dll_GetCapture
test eax, eax
jne 0x4983e3
cmp dword [0x4f9f54], 0
je 0x496ed3
mov eax, dword [0x4fd9ec]
push eax
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4983e3
mov edx, dword [0x4fd9ec]
push edx
call sub.USER32.dll_IsWindowVisible
test eax, eax
je 0x4983e3
mov ecx, edi
sar ecx, 0x1f
test cl, 1
je 0x496fbc
cmp ebx, 0x12
jne 0x496ef7
mov eax, edi
sar eax, 0x18
test al, 1
je 0x496ef7
xor edx, edx
mov dword [0x4f9c68], edx
cmp dword [0x4f9c64], 0
je 0x496fa0
call sub.USER32.dll_GetFocus
mov dword [0x5148f8], eax
cmp dword [0x5148f8], 0
je 0x496f7d
mov ecx, dword [0x5148f8]
cmp ecx, dword [0x4fd9f0]
jne 0x496f2f
mov eax, dword [0x4fd9fc]
mov dword [0x5148f8], eax
mov edx, dword [0x5148f8]
push edx
call fcn.004eae80
mov dword [esi], eax
cmp dword [esi], 0
je 0x496f50
mov ecx, dword [0x5148f8]
mov dword [0x514900], ecx
jmp 0x496f89
mov eax, dword [0x5148f8]
push eax
call sub.USER32.dll_GetParent
mov dword [0x514900], eax
mov edx, dword [0x514900]
push edx
call fcn.004eae80
mov dword [esi], eax
cmp dword [esi], 0
jne 0x496f89
xor ecx, ecx
mov dword [0x514900], ecx
jmp 0x496f89
xor eax, eax
mov dword [esi], eax
xor edx, edx
mov dword [0x514900], edx
mov eax, dword [0x514900]
test eax, eax
je 0x496fa0
push 0
push ebx
push 0x440
push eax
call sub.USER32.dll_PostMessageA
xor edx, edx
mov dword [0x514904], edx
xor ecx, ecx
mov dword [0x4f9c6c], ecx
xor eax, eax
mov dword [0x4f9c64], eax
jmp 0x4983e3
cmp ebx, 0x12
jne 0x496fda
mov edx, edi
sar edx, 0x18
test dl, 1
je 0x496fda
mov dword [0x4f9c68], 1
jmp 0x4983e3
mov ecx, edi
shr ecx, 0x10
and cx, 0xffff
movzx eax, cx
sar eax, 8
and al, 0xff
xor edx, edx
mov dl, al
cmp edx, 0x28
jg 0x49700b
je 0x49701d
sub edx, 2
jb 0x49701d
add edx, 0xfffffffa
sub edx, 2
jb 0x49701d
sub edx, 0x16
je 0x49701d
jmp 0x49703e
add edx, 0xffffffc0
sub edx, 2
jb 0x49701d
add edx, 0xfffffffa
sub edx, 2
jb 0x49701d
jmp 0x49703e
cmp ebx, dword [0x4f9c6c]
sete cl
and ecx, 1
mov dword [0x514904], ecx
mov dword [0x4f9c6c], ebx
xor eax, eax
mov dword [0x4f9c64], eax
jmp 0x49705a
xor edx, edx
mov dword [0x514904], edx
xor ecx, ecx
mov dword [0x4f9c6c], ecx
xor eax, eax
mov dword [0x4f9c64], eax
jmp 0x4983e3
cmp dword [0x4f2a5c], 0
je 0x497094
cmp ebx, 0x30
jb 0x49706d
cmp ebx, 0x39
jbe 0x497094
cmp ebx, 0x4b
jne 0x49707e
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x497094
cmp ebx, 0xbc
je 0x497094
call fcn.0042ca78
cmp ebx, 0x1b
je 0x4983f7
call sub.USER32.dll_GetFocus
mov dword [0x5148f8], eax
cmp dword [0x5148f8], 0
je 0x49710e
mov edx, dword [0x5148f8]
cmp edx, dword [0x4fd9f0]
jne 0x4970c1
mov ecx, dword [0x4fd9fc]
mov dword [0x5148f8], ecx
mov eax, dword [0x5148f8]
push eax
call fcn.004eae80
mov dword [esi], eax
cmp dword [esi], 0
je 0x4970e1
mov edx, dword [0x5148f8]
mov dword [0x514900], edx
jmp 0x497119
mov ecx, dword [0x5148f8]
push ecx
call sub.USER32.dll_GetParent
mov dword [0x514900], eax
mov eax, dword [0x514900]
push eax
call fcn.004eae80
mov dword [esi], eax
cmp dword [esi], 0
jne 0x497119
xor edx, edx
mov dword [0x514900], edx
jmp 0x497119
xor ecx, ecx
mov dword [esi], ecx
xor eax, eax
mov dword [0x514900], eax
mov edx, edi
sar edx, 0x1d
test dl, 1
jne 0x4980ef
mov ecx, ebx
add ecx, 0xfffffff7
cmp ecx, 0x4e
ja case.0x49713b.9
mov cl, byte [ecx + 0x497142]
jmp dword [ecx*4 + 0x497191]
cmp dword [esi], 0
je 0x4983e3
mov eax, dword [esi]
mov edx, dword [eax + 0x5d4]
cmp edx, dword [0x5148f8]
jne 0x497230
cmp dword [0x514904], 0
jne 0x4983f7
push 0
push 0x20425
push 0x111
mov ecx, dword [0x514900]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
mov eax, dword [esi]
mov edx, dword [eax + 0x5d0]
cmp edx, dword [0x5148f8]
jne 0x4983e3
mov dword [0x4f5360], 1
jmp 0x4983e3
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
cmp dword [0x4fc118], 0
je 0x4972ac
mov ecx, dword [0x4fc118]
cmp ecx, dword [0x5148fc]
jne 0x4972ac
push 0x12c
mov eax, dword [0x5148fc]
push eax
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetFocus
pop edx
cmp edx, eax
jne 0x4972ac
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4972ac
mov ecx, dword [0x5148fc]
push ecx
call fcn.004cd690
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
mov eax, dword [esi]
mov edx, dword [eax + 0x5d0]
cmp edx, dword [0x5148f8]
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 0
push 0x2d
push 0x440
mov ecx, dword [0x514900]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
cmp dword [0x4fc118], 0
je 0x49734b
mov eax, dword [0x4fc118]
cmp eax, dword [0x5148fc]
jne 0x49734b
push 0x12c
mov edx, dword [0x5148fc]
push edx
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetFocus
pop ecx
cmp ecx, eax
jne 0x49734b
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x49734b
mov eax, dword [0x5148fc]
push eax
call fcn.004cd690
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
mov edx, dword [0x514900]
cmp edx, dword [0x4fda04]
jne 0x4973a6
mov ecx, dword [esi]
mov eax, dword [ecx + 0x5d4]
cmp eax, dword [0x5148f8]
jne 0x4973a6
cmp dword [0x514904], 0
jne 0x4983f7
mov dword [0x4fa2ac], 6
push 0
push 0x514
push 0x111
mov edx, dword [0x4fd9ec]
push edx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
mov ecx, dword [esi]
mov eax, dword [ecx + 0x5d0]
cmp eax, dword [0x5148f8]
jne 0x4983e3
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 0
push 0x2d
push 0x440
mov edx, dword [0x514900]
push edx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
mov ecx, dword [0x514900]
cmp ecx, dword [0x4fda04]
jne 0x4983e3
mov eax, dword [esi]
mov edx, dword [eax + 0x5d4]
cmp edx, dword [0x5148f8]
jne 0x4983e3
cmp dword [0x514904], 0
jne 0x4983f7
mov dword [0x4fa2ac], 6
push 0
push 0x517
push 0x111
mov ecx, dword [0x4fd9ec]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
cmp dword [0x4fb0c4], 0
je 0x4983e3
mov dword [0x4f9c64], 1
jmp 0x4983e3
cmp dword [esi], 0
je 0x4974ab
mov eax, dword [esi]
mov edx, dword [eax + 0x5d4]
cmp edx, dword [0x5148f8]
jne 0x4974ab
cmp dword [0x514904], 0
jne 0x4983f7
push 0
push 0x204
push 0x210
mov ecx, dword [0x514900]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [0x515ee8], 0
jne 0x4983e3
cmp dword [0x4fab68], 0
je 0x4983e3
push 0x68
mov eax, dword [0x4fab68]
push eax
call sub.USER32.dll_GetDlgItem
mov esi, eax
call sub.USER32.dll_GetFocus
cmp esi, eax
jne 0x4983e3
push 0
push 0
push 0x188
push 0x68
mov eax, dword [0x4fab68]
push eax
call sub.USER32.dll_SendDlgItemMessageA
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
je 0x4983e3
mov edx, dword [ebp - 4]
mov ecx, edx
shl edx, 5
add edx, ecx
test byte [edx*4 + 0x516f34], 4
jne 0x497530
mov eax, dword [ebp - 4]
mov edx, eax
shl eax, 5
add eax, edx
test byte [eax*4 + 0x516f34], 8
je 0x4983e3
push 0
mov ecx, dword [ebp - 4]
push ecx
push 0x446
mov eax, dword [0x4fab68]
push eax
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
mov edx, dword [esi]
mov ecx, dword [edx + 0x5d4]
cmp ecx, dword [0x5148f8]
je 0x4983e3
mov eax, dword [esi]
mov edx, dword [eax + 0x5d0]
cmp edx, dword [0x5148f8]
jne 0x4983e3
mov ecx, dword [esi]
cmp byte [ecx + 0x4e7], 0
je 0x49759c
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 0
push ebx
push 0x440
mov eax, dword [0x514900]
push eax
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
cmp dword [esi], 0
je 0x4983e3
mov edx, dword [esi]
mov ecx, dword [edx + 0x5d4]
cmp ecx, dword [0x5148f8]
jne 0x497603
mov eax, dword [esi]
mov edx, dword [eax + 0x5d4]
push edx
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4983e3
push 0
push ebx
push 0x440
mov ecx, dword [0x514900]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4983e3
cmp dword [esi], 0
je 0x4983e3
mov eax, dword [esi]
mov edx, dword [eax + 0x5d4]
cmp edx, dword [0x5148f8]
jne 0x49765b
mov ecx, dword [esi]
mov eax, dword [ecx + 0x5d4]
push eax
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4983e3
push 0
push ebx
push 0x440
mov edx, dword [0x514900]
push edx
call sub.USER32.dll_PostMessageA
jmp 0x4983e3
cmp dword [0x4fab68], 0
je 0x4983e3
push 0x68
mov ecx, dword [0x4fab68]
push ecx
call sub.USER32.dll_GetDlgItem
mov esi, eax
call sub.USER32.dll_GetFocus
cmp esi, eax
jne 0x4983e3
push 0
push 0
push 0x188
push 0x68
mov eax, dword [0x4fab68]
push eax
call sub.USER32.dll_SendDlgItemMessageA
cmp eax, 0xffffffff
je 0x4983e3
cmp ebx, 0x25
jne 0x4977ca
mov edx, eax
shl edx, 5
add edx, eax
test byte [edx*4 + 0x516f34], 4
je 0x4976f0
push 0
push eax
push 0x446
mov ecx, dword [0x4fab68]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
mov edx, eax
shl edx, 5
add edx, eax
test byte [edx*4 + 0x516f34], 8
je 0x497764
dec eax
mov ecx, eax
shl ecx, 5
add ecx, eax
lea edx, [ecx*4 + 0x516f34]
test eax, eax
jl 0x4983f7
test byte [edx], 4
jne 0x497722
test byte [edx], 8
je 0x497754
push 0
push eax
push 0x186
push 0x68
mov eax, dword [0x4fab68]
push eax
call sub.USER32.dll_SendDlgItemMessageA
push 0x4fb134
push 0x516ec0
push 0
mov ecx, dword [0x4fab68]
push ecx
call fcn.004dd1ec
jmp 0x4983f7
dec eax
add edx, 0xffffff7c
test eax, eax
jge 0x497718
jmp 0x4983f7
mov edx, eax
shl edx, 5
add edx, eax
lea edx, [edx*4 + 0x516f34]
test eax, eax
jl 0x4983e3
test byte [edx], 0x10
jne 0x4977ba
test byte [edx], 4
je 0x4983e3
push 0
push eax
push 0x186
push 0x68
mov eax, dword [0x4fab68]
push eax
call sub.USER32.dll_SendDlgItemMessageA
push 0x4fb134
push 0x516ec0
push 0
mov ecx, dword [0x4fab68]
push ecx
call fcn.004dd1ec
jmp 0x4983f7
dec eax
add edx, 0xffffff7c
test eax, eax
jge 0x49777a
jmp 0x4983e3
mov edx, eax
shl edx, 5
add edx, eax
test byte [edx*4 + 0x516f34], 8
je 0x4983e3
push 0
push eax
push 0x446
mov eax, dword [0x4fab68]
push eax
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x497910
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
push 0x68
mov ecx, dword [0x5148fc]
push ecx
call sub.USER32.dll_GetDlgItem
mov dword [0x5148f8], eax
cmp dword [0x5148fc], 0
je 0x4983e3
cmp dword [0x5148f8], 0
je 0x4983e3
cmp dword [0x514904], 0
jne 0x4983f7
push 0
push 0
push 0x188
mov eax, dword [0x5148f8]
push eax
call sub.USER32.dll_SendMessageA
mov dword [0x514908], eax
cmp dword [0x514908], 0xffffffff
jne 0x49787a
xor edx, edx
mov dword [0x514908], edx
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4978ce
dec dword [0x514908]
cmp dword [0x514908], 0
jge 0x4978f8
mov dword [0x514908], 0x32
jmp 0x4978b0
dec dword [0x514908]
cmp dword [0x514908], 0
jle 0x4978f8
push 0
mov ecx, dword [0x514908]
push ecx
push 0x187
mov eax, dword [0x5148f8]
push eax
call sub.USER32.dll_SendMessageA
inc eax
je 0x4978a1
jmp 0x4978f8
inc dword [0x514908]
push 0
mov edx, dword [0x514908]
push edx
push 0x187
mov ecx, dword [0x5148f8]
push ecx
call sub.USER32.dll_SendMessageA
inc eax
jne 0x4978f8
xor eax, eax
mov dword [0x514908], eax
mov edx, dword [0x514908]
push edx
mov ecx, dword [0x5148f8]
push ecx
call fcn.004dd5e4
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4979dc
mov eax, dword [esi]
cmp byte [eax + 0x4cc], 1
jne 0x49796a
mov edx, dword [esi]
mov ecx, dword [edx + 0x5d4]
cmp ecx, dword [0x5148f8]
jne 0x497957
mov eax, dword [esi]
mov edx, dword [eax + 0x5d0]
push edx
call sub.USER32.dll_SetFocus
jmp 0x4983f7
mov ecx, dword [esi]
mov eax, dword [ecx + 0x5d4]
push eax
call sub.USER32.dll_SetFocus
jmp 0x4983f7
mov edx, dword [esi]
cmp byte [edx + 0x4cc], 9
jne 0x4983e3
mov ecx, dword [esi]
cmp dword [ecx + 0x5d4], 0
je 0x4983e3
mov eax, dword [esi]
mov edx, dword [eax + 0x5d4]
cmp edx, dword [0x5148f8]
jne 0x4979c9
mov ecx, dword [esi]
cmp dword [ecx + 0x5d0], 0
je 0x4979b6
mov eax, dword [esi]
mov edx, dword [eax + 0x5d0]
push edx
call sub.USER32.dll_SetFocus
jmp 0x4983f7
mov ecx, dword [esi]
mov eax, dword [ecx + 0x5d4]
push eax
call sub.USER32.dll_SetFocus
jmp 0x4983f7
mov edx, dword [esi]
mov ecx, dword [edx + 0x5d4]
push ecx
call sub.USER32.dll_SetFocus
jmp 0x4983f7
cmp dword [0x514900], 0
je 0x4983e3
mov eax, dword [esi]
mov edx, dword [eax + 0x5d0]
cmp edx, dword [0x5148f8]
jne 0x4983e3
push 0
push 9
push 0x440
mov ecx, dword [0x514900]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
cmp dword [0x514900], 0
je 0x4983e3
mov eax, dword [0x514900]
push eax
call fcn.004dafc0
test eax, eax
jne 0x4983f7
jmp 0x4983e3
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
cmp dword [0x4fc118], 0
je 0x4983e3
mov edx, dword [0x4fc118]
cmp edx, dword [0x5148fc]
jne 0x4983e3
call sub.USER32.dll_GetFocus
push eax
call sub.USER32.dll_GetParent
cmp eax, dword [0x4fc118]
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
or eax, 0xffffffff
cmp ebx, 0x48
jne 0x497ac1
push 0
push 0x132
push 0x111
mov edx, dword [0x4fc118]
push edx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp ebx, 0x4c
jne 0x497b16
cmp dword [0x4fc11c], 0
jne 0x497ad6
mov eax, 0x191
jmp 0x497b1b
cmp dword [0x4fc11c], 1
jne 0x497ae6
mov eax, 0x191
jmp 0x497b1b
cmp dword [0x4fc11c], 2
jne 0x497af6
mov eax, 0x191
jmp 0x497b1b
cmp dword [0x4fc11c], 3
jne 0x497b06
mov eax, 0x192
jmp 0x497b1b
cmp dword [0x4fc11c], 4
jne 0x497b1b
mov eax, 0x193
jmp 0x497b1b
mov eax, 0x195
test eax, eax
jl 0x4983e3
push 0
push eax
push 0x111
mov edx, dword [0x4fc118]
push edx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
mov ecx, dword [esi]
mov dword [0x51490c], ecx
mov eax, dword [0x51490c]
mov eax, dword [eax + 0x828]
mov dword [0x51490c], eax
test eax, eax
jne 0x497b82
mov edx, dword [0x4fd9e4]
mov dword [0x51490c], edx
mov eax, dword [0x51490c]
cmp eax, dword [esi]
je 0x497bda
cmp byte [eax + 0x4cc], 1
jne 0x497b62
mov edx, dword [0x51490c]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x497bb7
mov eax, dword [0x51490c]
mov edx, dword [eax]
push edx
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x497bc7
push 1
mov ecx, dword [0x51490c]
mov eax, dword [ecx]
push eax
call sub.USER32.dll_ShowWindow
mov edx, dword [0x51490c]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_SetFocus
jmp 0x4983f7
push 0
call sub.USER32.dll_MessageBeep
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
mov eax, dword [esi]
mov dword [0x514910], eax
mov edx, dword [0x514910]
mov eax, dword [edx + 0x828]
mov dword [0x514910], eax
test eax, eax
jne 0x497c2c
mov edx, dword [0x4fd9e4]
mov dword [0x514910], edx
mov ecx, dword [0x514910]
cmp ecx, dword [esi]
je 0x497c93
mov eax, dword [0x514910]
cmp byte [eax + 0x4cc], 2
jne 0x497c0b
cmp byte [eax + 0x4cd], 2
ja 0x497c0b
mov edx, dword [0x514910]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x497c70
mov eax, dword [0x514910]
mov edx, dword [eax]
push edx
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x497c80
push 1
mov ecx, dword [0x514910]
mov eax, dword [ecx]
push eax
call sub.USER32.dll_ShowWindow
mov edx, dword [0x514910]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_SetFocus
jmp 0x4983f7
push 0
call sub.USER32.dll_MessageBeep
jmp 0x4983f7
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 2
call fcn.0045b4f8
test eax, eax
jne 0x4983f7
jmp 0x4983e3
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 3
call fcn.0045b4f8
test eax, eax
jne 0x4983f7
jmp 0x4983e3
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 0xf
call fcn.0045b4f8
test eax, eax
jne 0x4983f7
jmp 0x4983e3
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 0x1f
call fcn.0045b4f8
test eax, eax
jne 0x4983f7
jmp 0x4983e3
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
push 0x16
call fcn.0045b4f8
test eax, eax
jne 0x4983f7
jmp 0x4983e3
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
cmp dword [0x4fc118], 0
je 0x497df3
mov eax, dword [0x4fc118]
cmp eax, dword [0x5148fc]
jne 0x497df3
push 0
push 0x1a8
push 0x111
mov edx, dword [0x4fc118]
push edx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
mov ecx, dword [0x514900]
cmp ecx, dword [0x4fda0c]
jne 0x497e17
cmp dword [0x4f9ef8], 0
jne 0x4983e3
mov eax, dword [0x514900]
cmp eax, dword [0x4fda00]
jne 0x497e3e
push 0
push 0x6a
push 0x111
mov edx, dword [0x4fd9ec]
push edx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
mov ecx, dword [0x514900]
cmp ecx, dword [0x4fda04]
jne 0x497e90
mov eax, dword [esi]
mov edx, dword [eax + 0x5d4]
cmp edx, dword [0x5148f8]
jne 0x497e90
cmp dword [0x514904], 0
jne 0x4983f7
mov dword [0x4fa2ac], 6
push 0
push 0x518
push 0x111
mov ecx, dword [0x4fd9ec]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
push 0
push ebx
push 0x440
mov eax, dword [0x514900]
push eax
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4983e3
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
cmp dword [0x4fc118], 0
je 0x4983e3
mov edx, dword [0x4fc118]
cmp edx, dword [0x5148fc]
jne 0x4983e3
push 0
push 0x1a7
push 0x111
mov ecx, dword [0x4fc118]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp ebx, 0x70
jb 0x4983e3
cmp ebx, 0x7b
ja 0x4983e3
cmp ebx, 0x70
jne 0x497fdd
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x498040
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x497fbe
push 0x504a33
push 0x4f9c70
call fcn.00419870
test eax, eax
jne 0x498040
cmp dword [0x514904], 0
jne 0x4983f7
push 0x4f7cec
push 0x4f9c75
push 0x504a33
call sub.USER32.dll_wsprintfA
add esp, 0xc
cmp dword [0x4f9c60], 0
jne 0x497f9f
push 0
push 3
push 0x504a33
mov eax, dword [0x4fd9ec]
push eax
call sub.USER32.dll_WinHelpA
jmp 0x4983f7
mov edx, dword [0x4f9c60]
push edx
push 1
push 0x504a33
mov ecx, dword [0x4fd9ec]
push ecx
call sub.USER32.dll_WinHelpA
jmp 0x4983f7
push 0x504a33
push 0x4f9c81
call fcn.00419870
test eax, eax
jne 0x498040
push 0
call fcn.0041f7ac
jmp 0x4983f7
cmp ebx, 0x72
jne 0x498008
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
mov eax, dword [0x4fc118]
test eax, eax
je 0x498040
cmp eax, dword [0x5148fc]
jne 0x498040
push eax
call fcn.00464e94
jmp 0x4983f7
cmp ebx, 0x73
jne 0x498040
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x498040
mov eax, dword [esi]
test eax, eax
je 0x498040
mov edx, dword [eax]
push edx
call fcn.004e8a90
test eax, eax
jne 0x498040
push 0
push 0
push 0x10
mov ecx, dword [esi]
mov eax, dword [ecx]
push eax
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [esi], 0
je 0x4983e3
mov edx, ebx
sub edx, 0x6f
mov dword [0x514908], edx
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x49807b
mov ecx, dword [0x514908]
push ecx
push 0x4f9c87
push 0x514914
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4980ba
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4980a1
mov eax, dword [0x514908]
push eax
push 0x4f9c8e
push 0x514914
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4980ba
mov edx, dword [0x514908]
push edx
push 0x4f9c95
push 0x514914
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0x515718
push 0x514914
call fcn.00419870
test eax, eax
je 0x4983e3
push 0
push ebx
push 0x440
mov ecx, dword [0x514900]
push ecx
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp ebx, 0xd
jne 0x498145
mov eax, dword [esi]
test eax, eax
je 0x4983e3
mov edx, dword [eax + 0x5d0]
cmp edx, dword [0x5148f8]
jne 0x4983e3
push 3
mov ecx, dword [0x514900]
push ecx
call fcn.0045accc
mov esi, eax
mov dword [0x514908], esi
dec esi
jne 0x4983e3
push 0
push ebx
push 0x440
mov eax, dword [0x514900]
push eax
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [0x4f9c68], 0
jne 0x4983e3
cmp dword [0x514904], 0
jne 0x4983e3
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4983e3
mov edx, ebx
sub edx, 0x30
je 0x4983dc
dec edx
sub edx, 9
jb 0x498185
jmp 0x4983e3
call sub.USER32.dll_GetActiveWindow
mov dword [0x5148fc], eax
mov eax, dword [0x4fc118]
test eax, eax
je 0x4981be
cmp eax, dword [0x5148fc]
jne 0x4981be
push 0
mov edx, ebx
sub edx, 0x31
add edx, 0x1f4
push edx
push 0x111
push eax
call sub.USER32.dll_PostMessageA
jmp 0x4983f7
cmp dword [esi], 0
je 0x4981ce
mov ecx, dword [esi]
mov eax, dword [ecx]
mov dword [0x5148f8], eax
jmp 0x4981d6
xor edx, edx
mov dword [0x5148f8], edx
cmp dword [0x4fccb4], 0
je 0x498271
mov ecx, dword [0x4fd9e4]
mov dword [esi], ecx
mov eax, ebx
sub eax, 0x31
mov dword [0x514908], eax
jmp 0x498225
mov eax, dword [esi]
cmp byte [eax + 0x4e4], 0
je 0x49821b
push eax
call fcn.004d98c8
test eax, eax
je 0x49821b
dec dword [0x514908]
cmp dword [0x514908], 0
jl 0x49822a
mov edx, dword [esi]
mov ecx, dword [edx + 0x828]
mov dword [esi], ecx
cmp dword [esi], 0
jne 0x4981f7
cmp dword [0x514908], 0
jl 0x4982a2
mov eax, dword [0x4fd9e4]
mov dword [esi], eax
jmp 0x49826a
mov eax, dword [esi]
cmp byte [eax + 0x4e4], 0
je 0x498251
push eax
call fcn.004d98c8
test eax, eax
jne 0x498260
dec dword [0x514908]
cmp dword [0x514908], 0
jl 0x4982a2
mov edx, dword [esi]
mov ecx, dword [edx + 0x828]
mov dword [esi], ecx
cmp dword [esi], 0
jne 0x49823c
jmp 0x4982a2
mov eax, dword [0x4fd9e4]
mov dword [esi], eax
mov edx, ebx
sub edx, 0x31
mov dword [0x514908], edx
jmp 0x49829c
dec dword [0x514908]
cmp dword [0x514908], 0
jl 0x4982a2
mov ecx, dword [eax + 0x828]
mov dword [esi], ecx
mov eax, dword [esi]
test eax, eax
jne 0x498285
cmp dword [esi], 0
je 0x4983e3
mov edx, dword [esi]
mov ecx, dword [edx]
cmp ecx, dword [0x5148f8]
jne 0x4982ee
mov eax, dword [esi]
mov edx, dword [eax]
push edx
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4982ee
mov ecx, dword [esi]
mov eax, dword [ecx]
push eax
call sub.USER32.dll_IsWindowVisible
test eax, eax
je 0x4982ee
push 0
push 0xf020
push 0x112
mov edx, dword [esi]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_SendMessageA
jmp 0x4983f7
mov eax, dword [esi]
mov edx, dword [eax]
push edx
call fcn.004e8a90
test eax, eax
je 0x498379
cmp dword [0x4fd514], 0
je 0x49831a
push 2
call fcn.004e4198
push 5
mov ecx, dword [0x4fd9ec]
push ecx
call sub.USER32.dll_ShowWindow
mov eax, dword [0x4fd9ec]
push eax
call sub.USER32.dll_IsIconic
test eax, eax
je 0x498339
push 9
mov edx, dword [0x4fd9ec]
push edx
call sub.USER32.dll_ShowWindow
jmp 0x498356
mov ecx, dword [0x4fd9ec]
push ecx
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x498356
push 5
mov eax, dword [0x4fd9ec]
push eax
call sub.USER32.dll_ShowWindow
mov edx, dword [0x4fd9ec]
push edx
call sub.USER32.dll_BringWindowToTop
mov ecx, dword [0x4fd9ec]
push ecx
call sub.USER32.dll_SetActiveWindow
mov eax, dword [0x4fd9ec]
push eax
call sub.USER32.dll_SetForegroundWindow
mov edx, dword [esi]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x498395
mov eax, dword [esi]
mov edx, dword [eax]
push edx
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4983a1
push 4
mov ecx, dword [esi]
mov eax, dword [ecx]
push eax
call sub.USER32.dll_ShowWindow
mov edx, dword [esi]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_BringWindowToTop
mov eax, dword [esi]
mov edx, dword [eax]
push edx
call sub.USER32.dll_SetActiveWindow
mov ecx, dword [esi]
mov eax, dword [ecx]
push eax
call sub.USER32.dll_SetForegroundWindow
mov edx, dword [esi]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_UpdateWindow
cmp dword [0x4fccb4], 0
je 0x4983f7
mov eax, dword [esi]
push eax
call fcn.004d9d04
jmp 0x4983f7
call fcn.004e3ac8
jmp 0x4983f7
push edi
push ebx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [0x4f9c5c]
push ecx
call sub.USER32.dll_CallNextHookEx
jmp 0x49840e
push edi
push ebx
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x4f9c5c]
push edx
call sub.USER32.dll_CallNextHookEx
mov eax, 1
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0xc