Function at 0x4af9f0
Capabilities:
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
push 0xffffffffffffffff
push 0x572b21
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
mov eax, dword [0x5e2320]
xor eax, esp
mov dword [esp + 0x174], eax
push esi
push edi
mov eax, dword [0x5e2320]
xor eax, esp
push eax
lea eax, [esp + 0x188]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0x14]
xor esi, esi
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x24], eax
mov eax, edx
and eax, 0x40000000
mov dword [esp + 0x20], esi
mov dword [esp + 0x30], eax
mov eax, edx
sar eax, 0x10
and eax, 0xfff
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
cmp eax, 0x100
je 0x4afcb6
cmp eax, 0x104
je 0x4afcb6
cmp eax, 0x101
je 0x4afb8d
cmp eax, 0x105
je 0x4afb8d
cmp eax, 0x204
jne 0x4afa9d
mov esi, 2
jmp 0x4afd14
cmp eax, 0x205
jne 0x4afab1
mov dword [esp + 0x20], 2
jmp 0x4afd14
cmp eax, 0x207
jne 0x4afac2
mov esi, 4
jmp 0x4afd14
cmp eax, 0x208
jne 0x4afad6
mov dword [esp + 0x20], 4
jmp 0x4afd14
cmp eax, 0x20b
jne 0x4afb0a
xor esi, esi
test cl, 0x20
je 0x4afaf4
mov esi, 5
mov dword [esp + 0x1c], esi
mov eax, esi
jmp 0x4afcde
test cl, 0x40
mov eax, 6
cmovne esi, eax
mov dword [esp + 0x1c], esi
mov eax, esi
jmp 0x4afcde
cmp eax, 0x20c
jne 0x4afb59
movzx eax, word [edi + 0x79c]
mov dword [esp + 0x20], esi
cmp eax, 5
je 0x4afb4b
cmp word [edi + 0x79e], 5
mov edx, dword [ebp + 0x10]
je 0x4afb4b
cmp eax, 6
je 0x4afb3d
cmp word [edi + 0x79e], 6
jne 0x4afb53
mov dword [esp + 0x20], 6
mov eax, dword [esp + 0x20]
jmp 0x4afbb7
mov dword [esp + 0x20], 5
mov eax, dword [esp + 0x20]
jmp 0x4afbb7
cmp eax, 0x20a
jne 0x4afbbf
mov eax, ecx
shr eax, 0x10
movsx ecx, ax
mov eax, 0x88888889
imul ecx
add edx, ecx
mov ecx, dword [ebp + 0xc]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov eax, esi
setns al
add eax, 0x9a
jmp 0x4afcd7
push 0
push ecx
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
test eax, eax
jne 0x4afbab
push 1
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MapVirtualKeyW]
mov ecx, dword [ebp + 0xc]
jmp 0x4afbb0
mov ecx, dword [ebp + 0xc]
mov eax, ecx
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x20], eax
test eax, eax
jne 0x4afd14
mov eax, dword [esp + 0x24]
mov esi, dword [ebp + 8]
cmp esi, 0x201
jne 0x4b007e
mov eax, dword [ebp + 0x10]
movzx ecx, ax
shr eax, 0x10
push eax
mov dword [esp + 0x30], ecx
push ecx
lea ecx, [edi + 8]
mov dword [esp + 0x38], eax
call fcn.0051a560
mov dword [esp + 0x1c], eax
test eax, eax
je 0x4b0089
mov edx, dword [eax]
lea ecx, [esp + 0xf4]
push ecx
mov ecx, eax
call dword [edx + 8]
lea eax, [esp + 0xf4]
mov dword [esp + 0x190], 2
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.004b6b50
mov esi, dword [esp + 0x28]
mov eax, dword [0x5fc260]
cmp esi, eax
je 0x4aff9d
cmp dword [esi + 0xb0], 0
je 0x4aff95
cmp dword [edi + 0x788], 0
jne 0x4aff95
lea eax, [esi + 0xa0]
push eax
lea ecx, [esp + 0x58]
call fcn.004b6a10
push 0x16c8
mov byte [esp + 0x194], 3
call dword [sym.imp.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
mov dword [esp + 0x28], eax
mov byte [esp + 0x190], 4
test eax, eax
je 0x4afecd
mov ecx, dword [edi + 0x77c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x40]
call eax
sub esp, 0x10
mov ecx, esp
push eax
call fcn.00516df0
mov ecx, dword [esp + 0x38]
call fcn.004a70a0
mov edx, eax
mov dword [esp + 0x20], eax
jmp 0x4afed3
mov esi, dword [sym.imp.USER32.dll_MapVirtualKeyW]
push 0
push ecx
call esi
test eax, eax
jne 0x4afcd2
push 1
push dword [esp + 0x20]
call esi
mov ecx, dword [ebp + 0xc]
jmp 0x4afcd7
mov ecx, dword [ebp + 0xc]
mov eax, ecx
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x1c], eax
cmp eax, 0x1b
jne 0x4afcf7
mov eax, dword [esp + 0x24]
lea ecx, [edi - 0x24]
mov byte [eax], 1
call fcn.004b5f00
jmp 0x4afbbf
cmp eax, 0x5d
jne 0x4afd08
mov eax, dword [esp + 0x24]
mov byte [eax], 0
jmp 0x4afbc3
test eax, eax
je 0x4afbbf
mov esi, dword [esp + 0x1c]
call fcn.00410f30
cmp eax, dword [edi + 0x630]
jne 0x4afd70
cmp dx, word [edi + 0x634]
jne 0x4afd70
mov eax, dword [ebp + 8]
cmp eax, 0x100
je 0x4afd3b
cmp eax, 0x104
jne 0x4afd70
cmp dword [esp + 0x30], 0
jne 0x4afd70
mov eax, dword [edi + 0x628]
cmp eax, 2
je 0x4afd52
cmp eax, 1
jne 0x4afd70
lea ecx, [edi - 0x24]
call fcn.004b5f00
push 1
lea ecx, [edi - 0x24]
call fcn.005219d0
mov eax, dword [esp + 0x24]
mov byte [eax], 1
jmp 0x4afbc3
mov eax, dword [edi + 0x79c]
mov ecx, eax
shr ecx, 0x10
mov dword [esp + 0x30], eax
mov dword [esp + 0x1c], eax
cmp ecx, 0x9b
je 0x4afd9a
cmp ecx, 0x9a
je 0x4afd9a
mov dx, word [esp + 0x1e]
jmp 0x4afda1
xor edx, edx
mov word [esp + 0x1e], dx
mov cx, word [esp + 0x1c]
movzx eax, cx
mov dword [esp + 0x28], eax
cmp eax, 0x9b
mov eax, dword [esp + 0x30]
je 0x4afdc2
cmp dword [esp + 0x28], 0x9a
jne 0x4afdd1
mov cx, dx
xor edx, edx
mov word [esp + 0x1c], cx
mov word [esp + 0x1e], dx
test esi, esi
je 0x4afe04
movzx ecx, cx
cmp ecx, esi
je 0x4afe04
movzx ecx, dx
cmp ecx, esi
je 0x4afe04
cmp word [esp + 0x1c], 0
jne 0x4afdf2
mov word [esp + 0x1c], si
jmp 0x4afe09
test dx, dx
je 0x4afdfc
mov word [esp + 0x1c], dx
mov dx, si
mov word [esp + 0x1e], dx
mov si, word [esp + 0x1c]
cmp si, dx
jne 0x4afe15
xor edx, edx
mov word [esp + 0x1e], dx
cmp dword [esp + 0x20], 0
je 0x4afe3f
movzx ecx, si
cmp ecx, dword [esp + 0x20]
jne 0x4afe2f
mov word [esp + 0x1c], dx
mov si, dx
jmp 0x4afe38
movzx ecx, dx
cmp ecx, dword [esp + 0x20]
jne 0x4afe3f
xor edx, edx
mov word [esp + 0x1e], dx
cmp word [edi + 0x79c], si
jne 0x4afe51
cmp word [edi + 0x79e], dx
je 0x4afea3
sub esp, 0x18
mov ecx, esp
mov dword [ecx], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_7a59145a947dd1be69abb080cb416928___0___class_std::allocator_class_std::_Func_class_void__class_view::CKeyboardMappingUI_____void__class_view::CKeyboardMappingUI__.0
mov dword [ecx + 4], eax
mov dword [ecx + 0x10], ecx
lea ecx, [edi - 0x24]
mov dword [esp + 0x1a8], 0xffffffff
call fcn.004af710
mov eax, dword [esp + 0x1c]
sub esp, 0x18
mov dword [edi + 0x79c], eax
mov edx, esp
mov dword [edx], vtable.std::_Func_impl_struct_std::_Callable_obj_class__lambda_9838e1fdfd29cfa35bf799132c2fd1c0___0___class_std::allocator_class_std::_Func_class_void__class_view::CKeyboardMappingUI_____void__class_view::CKeyboardMappingUI__.0
lea ecx, [edi - 0x24]
mov dword [edx + 4], eax
mov dword [edx + 0x10], edx
mov dword [esp + 0x1a8], 0xffffffff
call fcn.004af710
cmp dword [edi + 0x628], 2
jne 0x4afec1
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [edi + 0x7d0]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [esp + 0x24]
mov byte [eax], 1
jmp 0x4afbc3
xor edx, edx
mov dword [esp + 0x20], edx
mov byte [esp + 0x190], 3
mov ecx, dword [edi + 0x778]
add ecx, 0x760
mov dword [esp + 0x28], edx
push edx
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
lea eax, [ecx + 0x12]
push eax
lea eax, [edx + 0x12]
push eax
lea eax, [ecx - 0x12]
push eax
lea eax, [edx - 0x12]
push eax
lea ecx, [esp + 0x44]
call fcn.00516e20
mov edx, dword [esp + 0x20]
push 1
sub esp, 0x10
movdqu xmm0, xmmword [eax]
mov edx, dword [edx]
mov ecx, esp
movdqu xmmword [ecx], xmm0
mov ecx, dword [esp + 0x34]
call dword [edx + 0x4c]
push dword [esi + 0x9c]
mov ecx, dword [esp + 0x24]
call fcn.00525050
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [edi - 0x24]
push eax
lea ecx, [esp + 0x40]
call fcn.004b00d0
mov ecx, dword [esp + 0x20]
push eax
mov byte [esp + 0x194], 5
lea ecx, [ecx + 0x1640]
call fcn.004b75d0
lea ecx, [esp + 0x34]
call fcn.0049c030
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x54]
mov dword [edi + 0x788], eax
mov byte [esp + 0x190], 2
call fcn.0040b840
mov eax, dword [0x5fc260]
cmp esi, eax
jne 0x4b0062
mov eax, dword [edi + 0x628]
cmp eax, 1
je 0x4affb1
cmp eax, 2
jne 0x4b0062
mov eax, dword [edi + 0x78c]
mov esi, dword [esp + 0x1c]
test eax, eax
je 0x4affd0
cmp esi, eax
je 0x4affd0
lea ecx, [edi - 0x24]
call fcn.004b2720
jmp 0x4b0062
push 0
push str.noticelabel
lea ecx, [esp + 0xfc]
call fcn.00517600
test eax, eax
jne 0x4b0062
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax + 0xcc]
call eax
push eax
lea ecx, [esp + 0x70]
call fcn.00516f20
mov byte [esp + 0x190], 6
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 0x40]
call eax
lea ecx, [esp + 0x6c]
movdqu xmm0, xmmword [eax]
movdqu xmmword [esp + 0x34], xmm0
call fcn.00517a50
test al, al
jne 0x4b0051
sub esp, 0x10
lea eax, [esp + 0x44]
mov ecx, esp
push eax
call fcn.00516df0
sub esp, 0x84
lea eax, [esp + 0x100]
mov ecx, esp
push eax
call fcn.00516f20
lea ecx, [edi - 0x24]
call fcn.004b23f0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x190], 2
call fcn.00517040
lea ecx, [esp + 0xf4]
mov dword [esp + 0x190], 0xffffffff
call fcn.00517040
mov esi, dword [ebp + 8]
jmp 0x4b0089
cmp esi, 0x20a
jne 0x4b0089
mov byte [eax], 0
mov eax, dword [esp + 0x24]
mov ecx, edi
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.005162b0
mov ecx, dword [esp + 0x188]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x174]
xor ecx, esp
call fcn.005600c0
mov esp, ebp
pop ebp
ret 0x10