Function at 0x46cd9f
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 8], ebx
call fcn.00472bf5
mov dword [ebp - 0x10], eax
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x14], eax
test esi, esi
je 0x46dad3
push esi
lea ecx, [ebx + 0x428]
call fcn.004161ec
test eax, eax
jne 0x46da06
lea ecx, [ebx + 0x4a0]
push esi
call fcn.00414ca3
test eax, eax
jne 0x46da06
mov ecx, dword [ebx + 4]
cmp dword [0x4c686c], ecx
jne 0x46ce20
cmp dword [esi + 4], 0xd1d
jne 0x46ce20
push 1
push eax
push ecx
push ecx
mov ecx, esp
push dword [esi + 0xc]
call fcn.0048938d
mov ecx, ebx
call fcn.00472ba2
jmp 0x46dad5
cmp dword [ebp - 0x14], 0
je 0x46dad3
mov eax, dword [esi + 4]
cmp eax, 0x20b
jne 0x46ce8a
mov eax, dword [esi + 0xc]
movzx ecx, ax
shr eax, 0x10
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x3c], ecx
push dword [esi]
call dword [sym.imp.USER32.dll_ClientToScreen]
and dword [ebp - 0x28], 0
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebp - 0x38]
lea eax, [ebp - 0x28]
push dword [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x46ced1
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x46da06
cmp eax, 0x20c
jne 0x46ced1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jne 0x46ced1
mov esi, dword [esi + 8]
mov edi, 0x111
shr esi, 0x10
cmp esi, 2
jne 0x46ceb8
push 0
push 0xa76d
push edi
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, 1
jne 0x46da06
push 0
push 0xa76c
push edi
push dword [ebx + 4]
jmp 0x46d789
mov eax, dword [esi + 8]
lea ecx, [ebx + 0x4a0]
mov dword [ebp - 0xc], eax
call fcn.004150f6
mov edi, 0x100
mov dword [ebp - 0x30], eax
cmp dword [esi + 4], edi
jne 0x46d053
mov eax, dword [ebx + 0xf0]
test eax, eax
je 0x46d053
cmp dword [eax + 0x288], 0
je 0x46d053
cmp dword [ebp - 0xc], 0x71
jne 0x46cf1e
push dword [ebp - 0x14]
mov ecx, ebx
call fcn.0046e4cd
cmp dword [0x4c6838], 0
jne 0x46d053
cmp dword [ebp - 0xc], 0x26
je 0x46cf3b
cmp dword [ebp - 0xc], 0x28
jne 0x46d053
call fcn.0048ea6f
test eax, eax
jne 0x46d053
mov ecx, ebx
call fcn.0046dc6a
and dword [ebp - 0x3c], 0
and dword [ebp - 0x38], 0
test eax, eax
je 0x46d053
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x2c]
cmp dword [ebp - 0x3c], 4
je 0x46cf79
cmp dword [ebp - 0x3c], 3
jne 0x46d053
push 0
push 0
push 0x1042
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
and dword [ebp - 0x18], 0
cmp eax, 0xffffffff
mov dword [ebp - 4], eax
je 0x46d053
cmp dword [ebp - 0xc], 0x26
push 1
pop esi
jne 0x46cfaf
test eax, eax
jle 0x46d04c
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0xc], 0x28
jne 0x46cfd0
push 0
push 0
push 0x1004
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
dec eax
cmp dword [ebp - 4], eax
jge 0x46cfd0
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], 0
je 0x46d04c
mov eax, dword [ebp - 4]
cmp dword [0x4b723c], eax
jne 0x46d006
call fcn.0049d2b7
mov ecx, dword [0x4b7240]
sub ecx, eax
cmp ecx, 0x64
jge 0x46d006
call fcn.0049d2b7
or dword [0x4b723c], 0xffffffff
mov dword [0x4b7240], eax
jmp 0x46d04c
mov eax, dword [ebp - 4]
mov dword [0x4b723c], eax
call fcn.0049d2b7
push dword [ebp - 0x10]
mov dword [0x4b7240], eax
mov eax, dword [ebx + 0xf0]
and dword [eax + 0x288], 0
call dword [sym.imp.USER32.dll_SetFocus]
push 0
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
push dword [ebp - 0xc]
push edi
push dword [ebp - 0x10]
call esi
push 0
push 0x71
push edi
push dword [ebx + 4]
call esi
push 1
pop esi
mov eax, esi
jmp 0x46dad5
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebx + 0x7c4]
je 0x46d066
cmp eax, dword [0x4c31c8]
jne 0x46d091
call fcn.0048ea6f
push dword [esi + 0xc]
mov dword [ebp - 0x38], eax
call fcn.0048eb34
movzx eax, al
pop ecx
push eax
mov ecx, ebx
push dword [ebp - 0x38]
push esi
call fcn.0046ca8d
test eax, eax
jne 0x46da06
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x30]
je 0x46d0c7
cmp dword [ebp - 0x10], eax
je 0x46d0c7
cmp dword [ebx + 0x264], eax
je 0x46d0c7
lea ecx, [ebx + 0x2b8]
lea edx, [ebx + 0x2bc]
neg ecx
sbb ecx, ecx
and ecx, edx
cmp dword [ecx], eax
je 0x46d0c7
push 0
mov ecx, ebx
call fcn.004721b6
jmp 0x46dad3
push 1
mov ecx, ebx
call fcn.004721b6
mov esi, dword [esi + 4]
cmp esi, edi
jb 0x46d0df
cmp esi, 0x108
jbe 0x46d0f7
cmp esi, 0x200
jb 0x46dad3
cmp esi, 0x20d
ja 0x46dad3
mov eax, dword [ebp - 0x14]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp eax, dword [ebp - 0x30]
mov ebx, 0x8000
jne 0x46d12b
call fcn.0048ea6f
mov eax, dword [ebp + 8]
push dword [eax + 0xc]
call fcn.0048eb34
cmp al, 1
pop ecx
jne 0x46d12b
push 0xd
call esi
test ebx, eax
jne 0x46da06
mov eax, dword [ebp + 8]
push dword [eax + 0xc]
call fcn.0048eb34
movzx edi, al
pop ecx
mov dword [ebp - 0x34], edi
call fcn.0048ea6f
cmp eax, 6
mov dword [ebp - 0x38], eax
jne 0x46d231
cmp edi, 1
jne 0x46d231
mov al, byte [ebp - 0xc]
and byte [ebp - 1], 0
mov byte [ebp - 2], al
lea eax, [ebp - 2]
push eax
lea ecx, [ebp - 0x18]
call fcn.00403927
lea eax, [ebp - 0x18]
mov ecx, 0x4c2bf0
push eax
call fcn.00461c4a
cmp eax, 0xffffffff
je 0x46d1bd
push 0x4b7310
lea ecx, [ebp + 8]
call fcn.00403927
push 0
push ecx
lea ecx, [ebp + 8]
mov eax, esp
push ecx
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00403b20
mov ecx, dword [ebp - 8]
call fcn.0046fd16
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp - 0x18]
call fcn.004038fb
jmp 0x46da06
cmp dword [ebp - 0xc], 0x74
jne 0x46d229
push 0x74
call esi
test ebx, eax
je 0x46d229
mov ecx, dword [0x4af550]
xor eax, eax
cmp dword [0x4c6860], eax
mov dword [ebp - 0x1c], ecx
sete al
xor ecx, ecx
mov dword [0x4c6860], eax
test eax, eax
sete cl
push ecx
lea eax, [ebp - 0x1c]
push str.Ico:_d
push eax
call fcn.00403d66
add esp, 0xc
push 0x1388
push ecx
push ecx
mov ecx, esp
push 0
call fcn.0046dadc
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, dword [ebp - 8]
call fcn.004759e2
lea ecx, [ebp - 0x1c]
call fcn.004038fb
lea ecx, [ebp - 0x18]
call fcn.004038fb
mov ecx, dword [ebp - 8]
lea eax, [ecx + 0x2b8]
add ecx, 0x2bc
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax]
jne 0x46d2e1
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x208
jne 0x46d2e1
cmp dword [0x4b3114], 0
je 0x46d2e1
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 8]
add eax, 0x2bc
push dword [eax]
call dword [sym.imp.USER32.dll_ScreenToClient]
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
push 0
add eax, 0x2bc
push 0x1111
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x46d2e1
mov edi, dword [ebp - 8]
push eax
lea ecx, [edi + 0x2b8]
call fcn.0048d619
test eax, eax
je 0x46d2e1
push 0xffffffffffffffff
push ecx
push ecx
mov ecx, esp
push eax
call fcn.0048938d
mov ecx, edi
call fcn.00477bad
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x10], eax
je 0x46d2fd
cmp eax, dword [ebp - 0x30]
je 0x46d2fd
mov ecx, dword [ebp - 8]
cmp eax, dword [ecx + 0x264]
jne 0x46d3f3
push dword [ebp - 0x10]
mov edi, dword [ebp - 0x38]
mov ecx, dword [ebp - 8]
push dword [ebp - 0xc]
push edi
call fcn.00478d2b
cmp dword [ebp - 0x34], 1
jne 0x46d3f6
cmp edi, 2
jne 0x46d358
cmp dword [ebp - 0xc], 0x4d
jne 0x46d33d
push 0x4d
call esi
test ebx, eax
je 0x46d374
push 0
push 0x805e
push 0x111
jmp 0x46d783
cmp dword [ebp - 0xc], 0x46
jne 0x46d35d
push 0x46
call esi
test ebx, eax
je 0x46d374
mov ecx, dword [ebp - 8]
call fcn.00476d6f
jmp 0x46da06
cmp edi, 3
jne 0x46d374
cmp dword [ebp - 0xc], 0x51
jne 0x46d374
push 0x51
call esi
test ebx, eax
je 0x46d374
push 0
push 0x804a
jmp 0x46d333
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x264]
cmp dword [ebp - 0x14], eax
jne 0x46d3f6
test eax, eax
je 0x46d3f6
test edi, edi
jne 0x46d3f6
push dword [ebp - 8]
call fcn.0046ca23
pop ecx
push 0x2e
call esi
test ebx, eax
je 0x46d3ab
mov ecx, dword [ebp - 8]
call fcn.00475340
test eax, eax
jne 0x46da06
push 0x1b
call esi
test ebx, eax
je 0x46d3c3
mov ecx, dword [ebp - 8]
call fcn.004752a0
test eax, eax
jne 0x46da06
cmp dword [ebp - 0xc], 0xd
jne 0x46d3e0
push 0xd
call esi
test ebx, eax
je 0x46d3f6
mov ecx, dword [ebp - 8]
push 1
call fcn.0047557b
jmp 0x46da06
cmp dword [ebp - 0xc], 0x1b
jne 0x46d3f6
push 0x1b
call esi
test ebx, eax
je 0x46d3f6
jmp 0x46d32c
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0x264]
jne 0x46d429
test edi, edi
jne 0x46d429
cmp dword [ebp - 0x34], 1
jne 0x46d429
cmp dword [ebp - 0xc], 0x74
jne 0x46d429
push 0x74
call esi
test ebx, eax
je 0x46d429
mov ecx, dword [ebp - 8]
call fcn.00472b92
jmp 0x46da06
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x10], eax
jne 0x46dad3
cmp dword [ebp - 0x34], 1
jne 0x46dad3
cmp edi, 5
jne 0x46d466
cmp dword [ebp - 0xc], 8
jne 0x46d879
push 8
call esi
test ebx, eax
je 0x46d879
push 0
push 0xa76d
jmp 0x46d333
cmp edi, 4
jne 0x46d5a1
mov eax, dword [ebp - 0xc]
cmp eax, 0x25
jne 0x46d47a
push eax
jmp 0x46d4b2
cmp eax, 0x27
jne 0x46d497
push eax
call esi
test ebx, eax
je 0x46d879
mov ecx, dword [ebp - 8]
call fcn.0046fcd2
jmp 0x46da06
cmp eax, 0x26
jne 0x46d4ac
push eax
call esi
test ebx, eax
je 0x46d879
jmp 0x46d964
cmp eax, 8
jne 0x46d4c9
push eax
call esi
test ebx, eax
je 0x46d879
mov ecx, dword [ebp - 8]
call fcn.0046fca6
jmp 0x46da06
cmp eax, 0x72
jne 0x46d4e6
push eax
call esi
test ebx, eax
je 0x46d879
mov ecx, dword [ebp - 8]
call fcn.00476d64
jmp 0x46da06
cmp eax, 0x53
jne 0x46d4f2
push eax
call esi
test ebx, eax
jne 0x46d504
cmp dword [ebp - 0xc], 0x44
jne 0x46d532
push 0x44
call esi
test ebx, eax
je 0x46d879
push dword [ebp - 0xc]
call fcn.00443375
test eax, eax
pop ecx
jne 0x46d532
xor edi, edi
cmp dword [0x4b7228], edi
je 0x46d534
mov eax, dword [ebp - 8]
lea ecx, [eax + 0x4a0]
call fcn.00415244
test eax, eax
je 0x46d534
jmp 0x46da06
xor edi, edi
mov eax, dword [ebp - 0xc]
cmp eax, 0xd
jne 0x46d567
push eax
call esi
test ebx, eax
je 0x46d879
mov ecx, dword [ebp - 8]
lea eax, [ebp - 0x38]
push eax
push edi
push edi
push edi
mov dword [ebp - 0x38], edi
call fcn.00471187
cmp dword [ebp - 0x38], edi
je 0x46d879
jmp 0x46da06
cmp eax, 0x4b
jne 0x46d573
mov eax, 0x701e
jmp 0x46d586
cmp eax, 0x56
je 0x46d581
cmp eax, 0x4d
jne 0x46d879
mov eax, 0x701f
mov ecx, dword [ebp - 8]
push edi
push eax
push 0x111
call fcn.00472be4
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46dad5
test edi, edi
jne 0x46d690
mov edi, dword [ebp + 8]
push dword [edi + 0xc]
call fcn.0048eb34
movzx eax, al
pop ecx
mov ecx, dword [ebp - 8]
push eax
push 0
push edi
call fcn.0046ca8d
test eax, eax
jne 0x46da06
cmp dword [ebp - 0xc], 0x28
je 0x46d5d8
cmp dword [ebp - 0xc], 0x26
jne 0x46d656
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1032
push dword [ebp - 0x10]
call edi
test eax, eax
jne 0x46d656
push eax
push eax
push 0x1042
push dword [ebp - 0x10]
call edi
cmp eax, 0xffffffff
mov dword [ebp - 0x34], eax
je 0x46d656
push 2
push eax
push 0x102c
push dword [ebp - 0x10]
call edi
test al, 2
jne 0x46d656
cmp dword [ebp - 0xc], 0x26
jne 0x46d637
mov ecx, dword [ebp - 0x34]
lea eax, [ecx - 1]
test eax, eax
jl 0x46d627
mov ecx, eax
push 3
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x6c]
push eax
push ecx
jmp 0x46d647
push 3
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x34]
push 0x102b
push dword [ebp - 0x10]
call edi
jmp 0x46da06
cmp dword [ebp - 0xc], 8
jne 0x46d663
push 8
jmp 0x46d49d
cmp dword [ebp - 0xc], 0x2a
jne 0x46d66d
push 0x2a
jmp 0x46d679
cmp dword [ebp - 0xc], 0x79
jne 0x46d879
push 0x79
call esi
test ebx, eax
je 0x46d879
mov ecx, dword [ebp - 8]
call fcn.0047735b
jmp 0x46da06
cmp edi, 1
jne 0x46d71f
mov eax, dword [ebp - 0xc]
cmp eax, 0x76
jne 0x46d6c2
push eax
call esi
test ebx, eax
je 0x46d879
cmp dword [0x4c28dc], 6
push edi
jb 0x46d6ba
push 0x57
jmp 0x46d6bc
push 0x4e
push 0
push 0
jmp 0x46d6ef
cmp eax, 0x77
jne 0x46d6d8
push eax
call esi
test ebx, eax
je 0x46d879
push 1
push 0x41
jmp 0x46d6bc
cmp eax, 0x74
jne 0x46d6fc
push eax
call esi
test ebx, eax
je 0x46d879
xor eax, eax
push 1
push eax
push eax
push eax
mov ecx, dword [ebp - 8]
call fcn.0046e19c
jmp 0x46da06
cmp eax, 0x75
jne 0x46d879
push eax
call esi
test ebx, eax
je 0x46d879
mov ecx, dword [ebp - 8]
push 1
call fcn.004757e1
jmp 0x46da06
cmp edi, 2
jne 0x46d805
cmp dword [ebp - 0xc], 0x4e
jne 0x46d746
push 0x4e
call esi
test ebx, eax
je 0x46d7bf
push 0
push 0xa772
jmp 0x46d333
cmp dword [ebp - 0xc], 0x45
mov edi, 0x111
jne 0x46d76d
push 0x45
call esi
test ebx, eax
je 0x46d7bf
mov eax, dword [ebp - 8]
push 0
push 0xa773
push edi
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0xc], 0x53
jne 0x46d794
push 0x53
call esi
test ebx, eax
je 0x46d7bf
push 0
push 0x8069
push edi
mov eax, dword [ebp - 8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46da06
cmp dword [ebp - 0xc], 0x50
jne 0x46d7aa
push 0x50
call esi
test ebx, eax
je 0x46d7bf
mov ecx, dword [ebp - 8]
call fcn.0047735b
cmp dword [ebp - 0xc], 0x54
jne 0x46d7bf
push 0x54
call esi
test ebx, eax
je 0x46d7bf
push 0xb25b
jmp 0x46d7d5
mov eax, dword [ebp + 8]
cmp dword [eax + 8], 0x4b
jne 0x46d7e2
push 0x4b
call esi
test ebx, eax
je 0x46d7e2
push 0xb25a
mov ecx, dword [ebp - 8]
call fcn.00473089
jmp 0x46da06
cmp dword [ebp - 0xc], 0x57
jne 0x46d879
push 0x57
call esi
test ebx, eax
je 0x46d879
mov ecx, dword [ebp - 8]
call fcn.00478306
jmp 0x46da06
cmp edi, 3
jne 0x46d879
cmp dword [ebp - 0xc], 0x41
jne 0x46d825
push 0x41
call esi
test ebx, eax
je 0x46d844
mov ecx, dword [ebp - 8]
call fcn.00476d1b
jmp 0x46da06
cmp dword [ebp - 0xc], 0x54
jne 0x46d844
push 0x54
call esi
test ebx, eax
je 0x46d844
mov ecx, dword [ebp - 8]
push 0xffffffffffffffff
push 0
call fcn.004781b6
jmp 0x46da06
mov eax, dword [ebp + 8]
push dword [eax + 0xc]
call fcn.0048eb34
cmp al, 1
pop ecx
jne 0x46d879
cmp dword [ebp - 0xc], 0x43
jne 0x46d879
push 0x43
call esi
test ebx, eax
je 0x46d879
mov eax, dword [ebp - 8]
push 0
push 0
mov ecx, dword [eax + 0xf0]
call fcn.004550b5
jmp 0x46da06
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x203
jne 0x46d983
xor eax, eax
cmp dword [0x4c685c], eax
je 0x46d983
cmp dword [0x4c6864], eax
je 0x46d983
cmp dword [0x4c6844], eax
je 0x46d983
xor ebx, ebx
lea edi, [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call dword [sym.imp.USER32.dll_GetMessagePos]
movsx esi, ax
shr eax, 0x10
movsx edi, ax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], esi
push eax
push ebx
push 0x1012
mov dword [ebp - 0x28], edi
push dword [ebp - 0x10]
mov dword [ebp - 0x24], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0x20], ebx
jl 0x46d983
lea eax, [ebp - 0x54]
test eax, eax
je 0x46d902
mov dword [ebp - 0x54], 2
lea eax, [ebp - 0x54]
jmp 0x46d904
xor eax, eax
push eax
mov ebx, 0x100e
push dword [ebp - 0x20]
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x44]
test eax, eax
je 0x46d92a
mov dword [ebp - 0x44], 1
lea eax, [ebp - 0x44]
jmp 0x46d92c
xor eax, eax
push eax
push dword [ebp - 0x20]
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
lea eax, [ebp - 0x54]
push esi
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x46d983
push edi
lea eax, [ebp - 0x44]
push esi
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x46d983
mov eax, dword [0x4c6844]
cmp eax, 1
jne 0x46d971
mov ecx, dword [ebp - 8]
call fcn.0046fcbc
jmp 0x46da06
cmp eax, 2
jne 0x46d983
mov ecx, dword [ebp - 8]
call fcn.00476d4b
jmp 0x46da06
cmp dword [0x4b3110], 0
je 0x46d9ed
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x208
jne 0x46d9ed
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x3c]
xor esi, esi
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x58]
push eax
push esi
push 0x1012
mov dword [ebp - 0x50], esi
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0x4c], esi
jl 0x46d9ed
push dword [ebp - 0x4c]
mov ecx, dword [ebp - 8]
push esi
call fcn.004781b6
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xf0]
test ecx, ecx
je 0x46da0e
push dword [ebp + 8]
call fcn.00459567
test eax, eax
je 0x46da0e
push 1
pop eax
jmp 0x46dad5
cmp dword [0x4c6844], 0
je 0x46dad3
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x203
jne 0x46dad3
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x10]
call edi
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0x38]
mov ebx, dword [sym.imp.USER32.dll_PtInRect]
lea eax, [ebp - 0x54]
push dword [ebp - 0x3c]
push eax
call ebx
test eax, eax
je 0x46dad3
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x101f
push dword [ebp - 0x10]
call esi
test eax, eax
mov dword [ebp + 8], eax
je 0x46da9b
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
call edi
push dword [ebp - 0x38]
lea eax, [ebp - 0x28]
push dword [ebp - 0x3c]
push eax
call ebx
test eax, eax
je 0x46da9b
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x46dad3
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x46dad3
push eax
push eax
push 0x1032
push dword [ebp - 0x10]
call esi
test eax, eax
ja 0x46dad3
mov eax, dword [0x4c6844]
cmp eax, 1
jne 0x46dac6
mov ecx, dword [ebp - 8]
call fcn.0046fcbc
jmp 0x46dad3
cmp eax, 2
jne 0x46dad3
mov ecx, dword [ebp - 8]
call fcn.00476d4b
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4