Function at 0x4ae554
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov esi, 0x57b704
cmp dword [ebp + 8], 0
jl case.0x4af915.48
cmp dword [ebp + 8], 3
je case.0x4af915.48
call sub.USER32.dll_GetCapture
test eax, eax
jne case.0x4af915.48
cmp dword [0x5558fc], 0
je 0x4ae5b6
push dword [0x55b3c8]
call sub.USER32.dll_IsIconic
test eax, eax
jne case.0x4af915.48
push dword [0x55b3c8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
je case.0x4af915.48
mov eax, edi
sar eax, 0x1f
test al, 1
je 0x4ae6dd
cmp ebx, 0x12
jne 0x4ae5da
mov edx, edi
sar edx, 0x18
test dl, 1
je 0x4ae5da
xor ecx, ecx
mov dword [0x555510], ecx
cmp dword [0x55550c], 0
jne 0x4ae5f0
cmp dword [0x558a48], 0
je 0x4ae6c1
call sub.USER32.dll_GetFocus
mov dword [0x57b708], eax
cmp dword [0x57b708], 0
je 0x4ae667
mov eax, dword [0x57b708]
cmp eax, dword [0x55b3cc]
jne 0x4ae61c
mov edx, dword [0x55b3d8]
mov dword [0x57b708], edx
push dword [0x57b708]
call fcn.00516145
mov dword [esi], eax
cmp dword [esi], 0
je 0x4ae63c
mov ecx, dword [0x57b708]
mov dword [0x57b710], ecx
jmp 0x4ae673
push dword [0x57b708]
call sub.USER32.dll_GetParent
mov dword [0x57b710], eax
push dword [0x57b710]
call fcn.00516145
mov dword [esi], eax
cmp dword [esi], 0
jne 0x4ae673
xor eax, eax
mov dword [0x57b710], eax
jmp 0x4ae673
xor edx, edx
mov dword [esi], edx
xor ecx, ecx
mov dword [0x57b710], ecx
cmp dword [0x55550c], 0
je 0x4ae698
cmp dword [0x57b710], 0
je 0x4ae698
push 0
push ebx
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
cmp dword [0x558a48], 0
je 0x4ae6c1
cmp dword [esi], 0
je 0x4ae6c1
mov eax, dword [esi]
cmp byte [eax + 0x64c], 9
jne 0x4ae6c1
push edi
push ebx
push 0x44b
mov edx, dword [esi]
push dword [edx]
call sub.USER32.dll_PostMessageA
xor ecx, ecx
mov dword [0x57b714], ecx
xor eax, eax
mov dword [0x555514], eax
xor edx, edx
mov dword [0x55550c], edx
jmp case.0x4af915.48
cmp ebx, 0x12
jne 0x4ae6fb
mov ecx, edi
sar ecx, 0x18
test cl, 1
je 0x4ae6fb
mov dword [0x555510], 1
jmp case.0x4af915.48
mov eax, edi
shr eax, 0x10
and ax, 0xffff
movzx edx, ax
sar edx, 8
and dl, 0xff
xor ecx, ecx
mov cl, dl
cmp ecx, 0x28
jg 0x4ae72c
je 0x4ae73e
sub ecx, 2
jb 0x4ae73e
add ecx, 0xfffffffa
sub ecx, 2
jb 0x4ae73e
sub ecx, 0x16
je 0x4ae73e
jmp 0x4ae75f
add ecx, 0xffffffc0
sub ecx, 2
jb 0x4ae73e
add ecx, 0xfffffffa
sub ecx, 2
jb 0x4ae73e
jmp 0x4ae75f
cmp ebx, dword [0x555514]
sete al
and eax, 1
mov dword [0x57b714], eax
mov dword [0x555514], ebx
xor edx, edx
mov dword [0x55550c], edx
jmp 0x4ae77b
xor ecx, ecx
mov dword [0x57b714], ecx
xor eax, eax
mov dword [0x555514], eax
xor edx, edx
mov dword [0x55550c], edx
jmp case.0x4af915.48
cmp dword [0x54d340], 0
je 0x4ae7b5
cmp ebx, 0x30
jb 0x4ae78e
cmp ebx, 0x39
jbe 0x4ae7b5
cmp ebx, 0x4b
jne 0x4ae79f
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4ae7b5
cmp ebx, 0xbc
je 0x4ae7b5
call fcn.004311bc
cmp ebx, 0x1b
je case.0x4afbc6.68
call sub.USER32.dll_GetFocus
mov dword [0x57b708], eax
cmp dword [0x57b708], 0
je 0x4ae82c
mov ecx, dword [0x57b708]
cmp ecx, dword [0x55b3cc]
jne 0x4ae7e0
mov eax, dword [0x55b3d8]
mov dword [0x57b708], eax
push dword [0x57b708]
call fcn.00516145
mov dword [esi], eax
cmp dword [esi], 0
je 0x4ae800
mov edx, dword [0x57b708]
mov dword [0x57b710], edx
jmp 0x4ae838
push dword [0x57b708]
call sub.USER32.dll_GetParent
mov dword [0x57b710], eax
push dword [0x57b710]
call fcn.00516145
mov dword [esi], eax
cmp dword [esi], 0
jne 0x4ae838
xor ecx, ecx
mov dword [0x57b710], ecx
jmp 0x4ae838
xor eax, eax
mov dword [esi], eax
xor edx, edx
mov dword [0x57b710], edx
cmp dword [0x558a48], 0
je 0x4ae861
cmp dword [esi], 0
je 0x4ae861
mov ecx, dword [esi]
cmp byte [ecx + 0x64c], 9
jne 0x4ae861
push edi
push ebx
push 0x44a
mov eax, dword [esi]
push dword [eax]
call sub.USER32.dll_PostMessageA
mov edx, edi
sar edx, 0x1d
test dl, 1
jne 0x4af882
mov ecx, ebx
add ecx, 0xfffffff7
cmp ecx, 0x4e
ja case.0x4ae883.9
mov cl, byte [ecx + 0x4ae88a]
jmp dword [ecx*4 + 0x4ae8d9]
cmp dword [esi], 0
je case.0x4af915.48
mov eax, dword [esi]
mov edx, dword [eax + 0x75c]
cmp edx, dword [0x57b708]
jne 0x4ae977
cmp dword [0x57b714], 0
jne case.0x4afbc6.68
push 0
push 0x20425
push 0x111
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
mov ecx, dword [esi]
mov eax, dword [ecx + 0x758]
cmp eax, dword [0x57b708]
jne case.0x4af915.48
mov dword [0x550154], 1
jmp case.0x4af915.48
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
cmp dword [0x5595ec], 0
je 0x4ae9f2
mov edx, dword [0x5595ec]
cmp edx, dword [0x57b70c]
jne 0x4ae9f2
push 0x12c
push dword [0x57b70c]
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetFocus
pop ecx
cmp ecx, eax
jne 0x4ae9f2
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4ae9f2
push dword [0x57b70c]
call fcn.004f3292
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
mov eax, dword [esi]
mov edx, dword [eax + 0x758]
cmp edx, dword [0x57b708]
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4aea44
push 0
push 0
push 0x302
push dword [0x57b708]
call sub.USER32.dll_PostMessageA
jmp case.0x4af915.48
push 0
push 0x2d
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4af915.48
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
cmp dword [0x5595ec], 0
je 0x4aeab5
mov ecx, dword [0x5595ec]
cmp ecx, dword [0x57b70c]
jne 0x4aeab5
push 0x12c
push dword [0x57b70c]
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetFocus
pop edx
cmp edx, eax
jne 0x4aeab5
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4aeab5
push dword [0x57b70c]
call fcn.004f3292
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
mov eax, dword [0x57b710]
cmp eax, dword [0x55b3e0]
jne 0x4aeb0e
mov ecx, dword [esi]
mov eax, dword [ecx + 0x75c]
cmp eax, dword [0x57b708]
jne 0x4aeb0e
cmp dword [0x57b714], 0
jne case.0x4afbc6.68
mov dword [0x555ce0], 6
push 0
push 0x514
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
mov edx, dword [esi]
mov ecx, dword [edx + 0x758]
cmp ecx, dword [0x57b708]
jne case.0x4af915.48
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4aeb57
push 0
push 0
push 0x302
push dword [0x57b708]
call sub.USER32.dll_PostMessageA
jmp case.0x4af915.48
push 0
push 0x2d
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4af915.48
cmp dword [esi], 0
je case.0x4af915.48
mov eax, dword [0x57b710]
cmp eax, dword [0x55b3e0]
jne case.0x4af915.48
mov edx, dword [esi]
mov ecx, dword [edx + 0x75c]
cmp ecx, dword [0x57b708]
jne case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4afbc6.68
mov dword [0x555ce0], 6
push 0
push 0x517
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
cmp dword [0x557954], 0
je case.0x4af915.48
mov dword [0x55550c], 1
jmp case.0x4af915.48
cmp dword [esi], 0
je 0x4aec31
mov eax, dword [esi]
mov edx, dword [eax + 0x75c]
cmp edx, dword [0x57b708]
jne 0x4aec31
cmp dword [0x57b714], 0
jne case.0x4afbc6.68
push 0
push 0
push 0x204
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [0x556164], 0
jne case.0x4af915.48
cmp dword [0x5573c4], 0
je case.0x4af915.48
push 0x68
push dword [0x5573c4]
call sub.USER32.dll_GetDlgItem
mov esi, eax
call sub.USER32.dll_GetFocus
cmp esi, eax
jne case.0x4af915.48
push 0
push 0
push 0x188
push 0x68
push dword [0x5573c4]
call sub.USER32.dll_SendDlgItemMessageA
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
je case.0x4af915.48
imul eax, dword [ebp - 4], 0x17
test byte [eax*4 + 0x57e528], 4
jne 0x4aecaa
imul edx, dword [ebp - 4], 0x17
test byte [edx*4 + 0x57e528], 8
je case.0x4af915.48
push 0
push dword [ebp - 4]
push 0x446
push dword [0x5573c4]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
mov ecx, dword [esi]
mov eax, dword [ecx + 0x75c]
cmp eax, dword [0x57b708]
je case.0x4af915.48
mov edx, dword [esi]
mov ecx, dword [edx + 0x758]
cmp ecx, dword [0x57b708]
jne case.0x4af915.48
mov eax, dword [esi]
cmp dword [eax + 0x770], 0
je 0x4aed15
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 0
push ebx
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
cmp dword [esi], 0
je case.0x4af915.48
mov edx, dword [esi]
mov ecx, dword [edx + 0x75c]
cmp ecx, dword [0x57b708]
jne 0x4aed7b
mov eax, dword [esi]
push dword [eax + 0x75c]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne case.0x4af915.48
push 0
push ebx
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl case.0x4af915.48
cmp dword [esi], 0
je case.0x4af915.48
mov edx, dword [esi]
mov ecx, dword [edx + 0x75c]
cmp ecx, dword [0x57b708]
jne 0x4aedd1
mov eax, dword [esi]
push dword [eax + 0x75c]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne case.0x4af915.48
push 0
push ebx
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4af915.48
cmp dword [0x5573c4], 0
je case.0x4af915.48
push 0x68
push dword [0x5573c4]
call sub.USER32.dll_GetDlgItem
mov esi, eax
call sub.USER32.dll_GetFocus
cmp esi, eax
jne case.0x4af915.48
push 0
push 0
push 0x188
push 0x68
push dword [0x5573c4]
call sub.USER32.dll_SendDlgItemMessageA
cmp eax, 0xffffffff
je case.0x4af915.48
cmp ebx, 0x25
jne 0x4aef25
imul edx, eax, 0x17
test byte [edx*4 + 0x57e528], 4
je 0x4aee5f
push 0
push eax
push 0x446
push dword [0x5573c4]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
imul ecx, eax, 0x17
test byte [ecx*4 + 0x57e528], 8
je 0x4aeec7
dec eax
imul edx, eax, 0x17
lea edx, [edx*4 + 0x57e528]
test eax, eax
jl case.0x4afbc6.68
test byte [edx], 4
jne 0x4aee89
test byte [edx], 8
je 0x4aeeba
push 0
push eax
push 0x186
push 0x68
push dword [0x5573c4]
call sub.USER32.dll_SendDlgItemMessageA
push 0x557974
push 0x57e4e4
push 0
push dword [0x5573c4]
call fcn.005047ec
jmp case.0x4afbc6.68
dec eax
add edx, 0xffffffa4
test eax, eax
jge 0x4aee7f
jmp case.0x4afbc6.68
imul ecx, eax, 0x17
lea edx, [ecx*4 + 0x57e528]
test eax, eax
jl case.0x4af915.48
test byte [edx], 0x10
jne 0x4aef18
test byte [edx], 4
je case.0x4af915.48
push 0
push eax
push 0x186
push 0x68
push dword [0x5573c4]
call sub.USER32.dll_SendDlgItemMessageA
push 0x557974
push 0x57e4e4
push 0
push dword [0x5573c4]
call fcn.005047ec
jmp case.0x4afbc6.68
dec eax
add edx, 0xffffffa4
test eax, eax
jge 0x4aeed9
jmp case.0x4af915.48
imul ecx, eax, 0x17
test byte [ecx*4 + 0x57e528], 8
je case.0x4af915.48
push 0
push eax
push 0x446
push dword [0x5573c4]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4af060
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
push 0x68
push dword [0x57b70c]
call sub.USER32.dll_GetDlgItem
mov dword [0x57b708], eax
cmp dword [0x57b70c], 0
je case.0x4af915.48
cmp dword [0x57b708], 0
je case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4afbc6.68
push 0
push 0
push 0x188
push dword [0x57b708]
call sub.USER32.dll_SendMessageA
mov dword [0x57b718], eax
cmp dword [0x57b718], 0xffffffff
jne 0x4aefcf
xor eax, eax
mov dword [0x57b718], eax
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4af022
dec dword [0x57b718]
cmp dword [0x57b718], 0
jge 0x4af04a
mov dword [0x57b718], 0x32
jmp 0x4af005
dec dword [0x57b718]
cmp dword [0x57b718], 0
jle 0x4af04a
push 0
push dword [0x57b718]
push 0x187
push dword [0x57b708]
call sub.USER32.dll_SendMessageA
inc eax
je 0x4aeff6
jmp 0x4af04a
inc dword [0x57b718]
push 0
push dword [0x57b718]
push 0x187
push dword [0x57b708]
call sub.USER32.dll_SendMessageA
inc eax
jne 0x4af04a
xor eax, eax
mov dword [0x57b718], eax
push dword [0x57b718]
push dword [0x57b708]
call fcn.00504ba8
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4af121
mov edx, dword [esi]
cmp byte [edx + 0x64c], 1
jne 0x4af0b8
mov ecx, dword [esi]
mov eax, dword [ecx + 0x75c]
cmp eax, dword [0x57b708]
jne 0x4af0a6
mov edx, dword [esi]
push dword [edx + 0x758]
call sub.USER32.dll_SetFocus
jmp case.0x4afbc6.68
mov ecx, dword [esi]
push dword [ecx + 0x75c]
call sub.USER32.dll_SetFocus
jmp case.0x4afbc6.68
mov eax, dword [esi]
cmp byte [eax + 0x64c], 9
jne case.0x4af915.48
cmp dword [eax + 0x75c], 0
je case.0x4af915.48
mov edx, dword [eax + 0x75c]
cmp edx, dword [0x57b708]
jne 0x4af10f
cmp dword [eax + 0x758], 0
je 0x4af0fd
mov ecx, dword [esi]
push dword [ecx + 0x758]
call sub.USER32.dll_SetFocus
jmp case.0x4afbc6.68
mov eax, dword [esi]
push dword [eax + 0x75c]
call sub.USER32.dll_SetFocus
jmp case.0x4afbc6.68
mov edx, dword [esi]
push dword [edx + 0x75c]
call sub.USER32.dll_SetFocus
jmp case.0x4afbc6.68
cmp dword [0x57b710], 0
je 0x4af153
mov ecx, dword [esi]
mov eax, dword [ecx + 0x758]
cmp eax, dword [0x57b708]
jne 0x4af153
push 0
push 9
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
mov edx, dword [esi]
cmp byte [edx + 0x64c], 3
jne case.0x4af915.48
push 0
call sub.USER32.dll_GetFocus
push eax
mov ecx, dword [esi]
push dword [ecx]
call sub.USER32.dll_GetNextDlgTabItem
mov dword [0x57b71c], eax
push dword [0x57b71c]
call sub.USER32.dll_SetFocus
jmp case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
cmp dword [0x57b710], 0
je case.0x4af915.48
push 0
push dword [0x57b710]
call fcn.00502326
test eax, eax
jne case.0x4afbc6.68
jmp case.0x4af915.48
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
cmp dword [0x5595ec], 0
je 0x4af2b1
mov eax, dword [0x5595ec]
cmp eax, dword [0x57b70c]
jne 0x4af2b1
call sub.USER32.dll_GetFocus
push eax
call sub.USER32.dll_GetParent
cmp eax, dword [0x5595ec]
jne 0x4af2b1
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4af2b1
or eax, 0xffffffff
cmp ebx, 0x48
jne 0x4af23b
push 0
push 0x132
push 0x111
push dword [0x5595ec]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp ebx, 0x4c
jne 0x4af290
cmp dword [0x5595f0], 0
jne 0x4af250
mov eax, 0x191
jmp 0x4af295
cmp dword [0x5595f0], 1
jne 0x4af260
mov eax, 0x191
jmp 0x4af295
cmp dword [0x5595f0], 2
jne 0x4af270
mov eax, 0x191
jmp 0x4af295
cmp dword [0x5595f0], 3
jne 0x4af280
mov eax, 0x192
jmp 0x4af295
cmp dword [0x5595f0], 4
jne 0x4af295
mov eax, 0x193
jmp 0x4af295
mov eax, 0x195
test eax, eax
jl 0x4af2b1
push 0
push eax
push 0x111
push dword [0x5595ec]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp ebx, 0x4c
jne case.0x4af915.48
cmp dword [esi], 0
je case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push dword [esi]
call fcn.0041e48f
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
mov edx, dword [esi]
mov dword [0x57b720], edx
mov ecx, dword [0x57b720]
mov eax, dword [ecx + 0x9d8]
mov dword [0x57b720], eax
test eax, eax
jne 0x4af321
mov edx, dword [0x55b3c0]
mov dword [0x57b720], edx
mov eax, dword [0x57b720]
cmp eax, dword [esi]
je 0x4af375
cmp byte [eax + 0x64c], 1
jne 0x4af300
mov edx, dword [0x57b720]
push dword [edx]
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4af355
mov ecx, dword [0x57b720]
push dword [ecx]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4af363
push 1
mov eax, dword [0x57b720]
push dword [eax]
call sub.USER32.dll_ShowWindow
mov edx, dword [0x57b720]
push dword [edx]
call sub.USER32.dll_SetFocus
jmp case.0x4afbc6.68
push 0
call fcn.0041c2be
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
mov ecx, dword [esi]
mov dword [0x57b724], ecx
mov eax, dword [0x57b724]
mov eax, dword [eax + 0x9d8]
mov dword [0x57b724], eax
test eax, eax
jne 0x4af3c7
mov edx, dword [0x55b3c0]
mov dword [0x57b724], edx
mov ecx, dword [0x57b724]
cmp ecx, dword [esi]
je 0x4af42a
mov eax, dword [0x57b724]
cmp byte [eax + 0x64c], 2
jne 0x4af3a7
cmp byte [eax + 0x64d], 2
ja 0x4af3a7
mov edx, dword [0x57b724]
push dword [edx]
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4af40a
mov ecx, dword [0x57b724]
push dword [ecx]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4af418
push 1
mov eax, dword [0x57b724]
push dword [eax]
call sub.USER32.dll_ShowWindow
mov edx, dword [0x57b724]
push dword [edx]
call sub.USER32.dll_SetFocus
jmp case.0x4afbc6.68
push 0
call fcn.0041c2be
jmp case.0x4afbc6.68
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 2
call fcn.004666b1
test eax, eax
jne case.0x4afbc6.68
jmp case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 3
call fcn.004666b1
test eax, eax
jne case.0x4afbc6.68
jmp case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 0xf
call fcn.004666b1
test eax, eax
jne case.0x4afbc6.68
jmp case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 0x1f
call fcn.004666b1
test eax, eax
jne case.0x4afbc6.68
jmp case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
push 0x16
call fcn.004666b1
test eax, eax
jne case.0x4afbc6.68
jmp case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
cmp dword [0x5595ec], 0
je 0x4af58a
mov ecx, dword [0x5595ec]
cmp ecx, dword [0x57b70c]
jne 0x4af58a
push 0
push 0x1a8
push 0x111
push dword [0x5595ec]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
mov eax, dword [0x57b710]
cmp eax, dword [0x55b3e8]
jne 0x4af5ad
cmp dword [0x5558a0], 0
jne case.0x4af915.48
mov edx, dword [0x57b710]
cmp edx, dword [0x55b3dc]
jne 0x4af5d4
push 0
push 0x6a
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
mov ecx, dword [0x57b710]
cmp ecx, dword [0x55b3e0]
jne 0x4af625
mov eax, dword [esi]
mov edx, dword [eax + 0x75c]
cmp edx, dword [0x57b708]
jne 0x4af625
cmp dword [0x57b714], 0
jne case.0x4afbc6.68
mov dword [0x555ce0], 6
push 0
push 0x518
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push ebx
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge case.0x4af915.48
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
cmp dword [0x5595ec], 0
je case.0x4af915.48
mov ecx, dword [0x5595ec]
cmp ecx, dword [0x57b70c]
jne case.0x4af915.48
push 0
push 0x1a7
push 0x111
push dword [0x5595ec]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp ebx, 0x70
jb case.0x4af915.48
cmp ebx, 0x7b
ja case.0x4af915.48
cmp ebx, 0x70
jne 0x4af773
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4af7d4
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jl 0x4af752
push 0
push 0x569f83
push 0x555518
call fcn.004161ae
test eax, eax
jne 0x4af7d4
cmp dword [0x57b714], 0
jne case.0x4afbc6.68
push 0x553318
push str._smirc.hlp
push 0x569f83
call sub.USER32.dll_wsprintfA
add esp, 0xc
cmp dword [0x555508], 0
jne 0x4af735
push 0
push 3
push 0x569f83
push dword [0x55b3c8]
call sub.USER32.dll_WinHelpA
jmp case.0x4afbc6.68
push dword [0x555508]
push 1
push 0x569f83
push dword [0x55b3c8]
call sub.USER32.dll_WinHelpA
jmp case.0x4afbc6.68
push 0
push 0x569f83
push str.sF1
call fcn.004161ae
test eax, eax
jne 0x4af7d4
push 0
call fcn.0041ce33
jmp case.0x4afbc6.68
cmp ebx, 0x72
jne 0x4af79e
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
mov eax, dword [0x5595ec]
test eax, eax
je 0x4af7d4
cmp eax, dword [0x57b70c]
jne 0x4af7d4
push eax
call fcn.00472fb0
jmp case.0x4afbc6.68
cmp ebx, 0x73
jne 0x4af7d4
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4af7d4
mov eax, dword [esi]
test eax, eax
je 0x4af7d4
push dword [eax]
call fcn.00514192
test eax, eax
jne 0x4af7d4
push 0
push 0
push 0x10
mov edx, dword [esi]
push dword [edx]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [esi], 0
je case.0x4af915.48
mov ecx, ebx
sub ecx, 0x6f
mov dword [0x57b718], ecx
push 0x10
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4af80e
push dword [0x57b718]
push 0x55552f
push 0x57b728
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4af84c
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jge 0x4af834
push dword [0x57b718]
push 0x555536
push 0x57b728
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x4af84c
push dword [0x57b718]
push 0x55553d
push 0x57b728
call sub.USER32.dll_wsprintfA
add esp, 0xc
push 0
push 0x57c4a0
push 0x57b728
call fcn.004161ae
test eax, eax
je case.0x4af915.48
push 0
push ebx
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp ebx, 0xd
jne 0x4af8d7
mov eax, dword [esi]
test eax, eax
je case.0x4af915.48
mov edx, dword [eax + 0x758]
cmp edx, dword [0x57b708]
jne case.0x4af915.48
push 2
push dword [0x57b710]
call fcn.00465ef8
mov esi, eax
mov dword [0x57b718], esi
dec esi
jne case.0x4af915.48
push 0
push ebx
push 0x440
push dword [0x57b710]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [0x555510], 0
jne case.0x4af915.48
cmp dword [0x57b714], 0
jne case.0x4af915.48
push 0x11
call sub.USER32.dll_GetKeyState
test ax, ax
jl case.0x4af915.48
mov eax, ebx
add eax, 0xffffffd0
cmp eax, 0x2a
ja case.0x4af915.48
mov al, byte [eax + 0x4af91c]
jmp dword [eax*4 + 0x4af947]
call sub.USER32.dll_GetActiveWindow
mov dword [0x57b70c], eax
mov eax, dword [0x5595ec]
test eax, eax
je 0x4af990
cmp eax, dword [0x57b70c]
jne 0x4af990
push 0
mov edx, ebx
sub edx, 0x31
add edx, 0x1f4
push edx
push 0x111
push eax
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
cmp dword [esi], 0
je 0x4af9a0
mov ecx, dword [esi]
mov eax, dword [ecx]
mov dword [0x57b708], eax
jmp 0x4af9a8
xor edx, edx
mov dword [0x57b708], edx
cmp dword [0x55a3c0], 0
je 0x4afa43
mov ecx, dword [0x55b3c0]
mov dword [esi], ecx
mov eax, ebx
sub eax, 0x31
mov dword [0x57b718], eax
jmp 0x4af9f7
mov eax, dword [esi]
cmp byte [eax + 0x664], 0
je 0x4af9ed
push eax
call fcn.00500b2d
test eax, eax
je 0x4af9ed
dec dword [0x57b718]
cmp dword [0x57b718], 0
jl 0x4af9fc
mov edx, dword [esi]
mov ecx, dword [edx + 0x9d8]
mov dword [esi], ecx
cmp dword [esi], 0
jne 0x4af9c9
cmp dword [0x57b718], 0
jl 0x4afa74
mov eax, dword [0x55b3c0]
mov dword [esi], eax
jmp 0x4afa3c
mov eax, dword [esi]
cmp byte [eax + 0x664], 0
je 0x4afa23
push eax
call fcn.00500b2d
test eax, eax
jne 0x4afa32
dec dword [0x57b718]
cmp dword [0x57b718], 0
jl 0x4afa74
mov edx, dword [esi]
mov ecx, dword [edx + 0x9d8]
mov dword [esi], ecx
cmp dword [esi], 0
jne 0x4afa0e
jmp 0x4afa74
mov eax, dword [0x55b3c0]
mov dword [esi], eax
mov edx, ebx
sub edx, 0x31
mov dword [0x57b718], edx
jmp 0x4afa6e
dec dword [0x57b718]
cmp dword [0x57b718], 0
jl 0x4afa74
mov ecx, dword [eax + 0x9d8]
mov dword [esi], ecx
mov eax, dword [esi]
test eax, eax
jne 0x4afa57
cmp dword [esi], 0
je case.0x4af915.48
mov edx, dword [esi]
mov ecx, dword [edx]
cmp ecx, dword [0x57b708]
jne 0x4afabd
mov eax, dword [esi]
push dword [eax]
call sub.USER32.dll_IsIconic
test eax, eax
jne 0x4afabd
mov edx, dword [esi]
push dword [edx]
call sub.USER32.dll_IsWindowVisible
test eax, eax
je 0x4afabd
push 0
push 0xf020
push 0x112
mov ecx, dword [esi]
push dword [ecx]
call sub.USER32.dll_SendMessageA
jmp case.0x4afbc6.68
mov eax, dword [esi]
push dword [eax]
call fcn.00514192
test eax, eax
je 0x4afb39
push 2
call fcn.0050d634
push 5
push dword [0x55b3c8]
call sub.USER32.dll_ShowWindow
push dword [0x55b3c8]
call sub.USER32.dll_IsIconic
test eax, eax
je 0x4afafc
push 9
push dword [0x55b3c8]
call sub.USER32.dll_ShowWindow
jmp 0x4afb18
push dword [0x55b3c8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
jne 0x4afb18
push 5
push dword [0x55b3c8]
call sub.USER32.dll_ShowWindow
push dword [0x55b3c8]
call sub.USER32.dll_BringWindowToTop
push dword [0x55b3c8]
call sub.USER32.dll_SetActiveWindow
push dword [0x55b3c8]
call sub.USER32.dll_SetForegroundWindow
push 0
mov edx, dword [esi]
push dword [edx]
call fcn.005167a6
mov ecx, dword [esi]
push dword [ecx]
call sub.USER32.dll_BringWindowToTop
mov eax, dword [esi]
push dword [eax]
call sub.USER32.dll_SetActiveWindow
mov edx, dword [esi]
push dword [edx]
call sub.USER32.dll_SetForegroundWindow
mov ecx, dword [esi]
push dword [ecx]
call sub.USER32.dll_UpdateWindow
cmp dword [0x55a3c0], 0
je case.0x4afbc6.68
push dword [esi]
call fcn.005010e4
jmp case.0x4afbc6.68
push 0
call fcn.0050cddb
jmp case.0x4afbc6.68
push dword [0x55b3c8]
call sub.USER32.dll_IsWindowVisible
test eax, eax
je 0x4afbaf
push dword [0x55b3c8]
call sub.USER32.dll_IsIconic
test eax, eax
je case.0x4af915.48
cmp dword [esi], 0
je case.0x4af915.48
mov eax, ebx
add eax, 0xffffffbf
cmp eax, 0x19
ja case.0x4afbc6.68
jmp dword [eax*4 + 0x4afbcd]
push 0
push 0x66
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x67
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x69
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x6a
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x6b
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x6c
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x6d
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x74
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x70
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x71
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x73
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x72
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x75
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x76
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x79
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x78
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push 0
push 0x7d
push 0x111
push dword [0x55b3c8]
call sub.USER32.dll_PostMessageA
jmp case.0x4afbc6.68
push edi
push ebx
push dword [ebp + 8]
push dword [0x555504]
call sub.USER32.dll_CallNextHookEx
jmp 0x4afdf6
push edi
push ebx
push dword [ebp + 8]
push dword [0x555504]
call sub.USER32.dll_CallNextHookEx
mov eax, 1
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret 0xc