Function at 0x46e680
Capabilities:
Check for unmoving mouse cursor
Check os version
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xe4
push ecx
push edi
lea edi, [esp + 8]
mov eax, 0xcccccccc
mov ecx, 0x39
rep stosd dword es:[edi], eax
pop edi
pop ecx
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp + 8]
mov dword [0x55d674], eax
mov eax, dword [ebp + 0xc]
mov dword [0x55d678], eax
mov eax, dword [ebp + 0x10]
mov dword [0x55d67c], eax
mov eax, dword [ebp + 0x14]
mov dword [0x55d680], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [0x55d684], eax
call dword [sym.imp.USER32.dll_GetMessagePos]
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
and edx, 0xffff
movsx edx, dx
mov dword [0x55d688], edx
mov edx, dword [ebp - 0x58]
shr edx, 0x10
movsx edx, dx
mov dword [0x55d688], edx
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0046e3f0
add esp, 0x14
cmp eax, 0
je 0x46e723
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
sub eax, 3
je 0x46ef6a
sub eax, 2
je 0x46f11a
sub eax, 1
je 0x46e981
sub eax, 9
je 0x46ecd5
sub eax, 1
je 0x46f242
sub eax, 1
je 0x46e8ec
sub eax, 3
je 0x46eb39
sub eax, 4
je 0x46e842
sub eax, 4
je 0x46ea32
sub eax, 4
je 0x46f284
sub eax, 1
je 0x46e953
sub eax, 1
je 0x46f426
sub eax, 0x5c
je 0x46f328
sub eax, 0x94
je 0x46effe
sub eax, 4
je 0x46ed17
sub eax, 0xb
je 0x46f31e
sub eax, 0x14
je 0x46ebdb
sub eax, 3
je 0x46ebdb
sub eax, 0xc8
je 0x46eef2
sub eax, 1
je 0x46ed65
sub eax, 1
je 0x46eeb3
sub eax, 2
je 0x46ed65
sub eax, 1
je 0x46eeb3
sub eax, 5
je 0x46f332
sub eax, 0xa
je 0x46f0d9
sub eax, 0xe
je 0x46ea78
sub eax, 0xf
je 0x46f1e9
sub eax, 1
je 0x46f1f5
sub eax, 0x54
je 0x46e894
sub eax, 0x89
je 0x46e915
sub eax, 0x553
je 0x46e86b
jmp 0x46f426
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 5
jb 0x46f426
push 0
push 0x10002
push 0x127
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x46f426
cmp dword [ebp + 0x10], 1
jne 0x46f426
cmp dword [ebp + 0x14], 2
jne 0x46f426
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
call fcn.00475590
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x46e8bb
push 0
push dword [ebp + 0x14]
push dword [ebp + 0x10]
mov edx, dword [ebp - 0x60]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0xc8]
jmp 0x46e8e7
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x46e8e7
push 0
push dword [ebp + 0x14]
push dword [ebp + 0x10]
mov edx, dword [ebp - 0x64]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0xc8]
jmp 0x46f426
call fcn.00414b30
cmp al, 0
jne 0x46e900
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
jmp 0x46e909
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x50], eax
push 0
call fcn.004717c0
push eax
push dword [ebp - 0x50]
call dword [sym.imp.GDI32.dll_SelectPalette]
push dword [ebp - 0x50]
call dword [sym.imp.GDI32.dll_RealizePalette]
push dword [ebp - 0x50]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
push dword [ebp + 8]
call fcn.004716c0
pop ecx
cmp al, 0
je 0x46f426
mov eax, dword [ebp + 0x18]
mov dword [eax], 4
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov byte [0x55d670], 1
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x46e9d7
mov eax, dword [ebp + 0x10]
and eax, 0xffff
cmp ax, 0
jne 0x46e9bc
mov edx, dword [ebp - 0x68]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x8c]
jmp 0x46e9d7
mov eax, dword [ebp + 0x10]
shr eax, 0x10
cmp ax, 0
jne 0x46e9d7
mov edx, dword [ebp - 0x68]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x88]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
cmp dword [ebp - 0x68], 0
je 0x46ea26
mov eax, dword [ebp - 0x68]
cmp byte [eax + 0x40], 0
jne 0x46ea26
call fcn.00410590
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x6d], 0
cmp dword [ebp - 0x6c], 0
je 0x46ea18
mov edx, dword [ebp - 0x6c]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1b8]
cmp al, 0
setne dl
mov byte [ebp - 0x6d], dl
push 0
movzx eax, byte [ebp - 0x6d]
push eax
call fcn.00473ad0
pop ecx
pop ecx
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
cmp dword [ebp + 0x10], 0
je 0x46ea4b
call fcn.00474a60
push dword [ebp + 8]
call fcn.0046dde0
pop ecx
jmp 0x46f426
call fcn.0046de80
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x46ea73
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x40], 0
jne 0x46ea73
call fcn.00474ab0
jmp 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x46ea99
mov eax, 0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
cmp dword [ebp + 0x14], eax
jne 0x46eb1d
mov edx, dword [ebp - 0x78]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x88]
push dword [ebp + 8]
call fcn.0046d810
pop ecx
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x46eb1b
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 0x100]
mov eax, dword [edx + 0x7c]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x46eb1b
call fcn.004a7620
push eax
call dword [sym.imp.USER32.dll_GetMenu]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x80]
mov edx, dword [eax + 0x18]
mov eax, dword [edx + 0x50]
cmp dword [ebp - 0x84], eax
je 0x46eb1b
mov eax, dword [ebp - 0x80]
mov edx, dword [eax + 0x18]
push dword [edx + 0x50]
call fcn.004a7620
push eax
call dword [sym.imp.USER32.dll_SetMenu]
call fcn.004a7620
push eax
call dword [sym.imp.USER32.dll_DrawMenuBar]
jmp 0x46eb34
mov eax, dword [ebp + 8]
cmp dword [ebp + 0x10], eax
jne 0x46eb34
mov edx, dword [ebp - 0x78]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x8c]
jmp 0x46f426
push dword [ebp + 8]
call fcn.00410750
pop ecx
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x46ebd6
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x88]
cmp byte [eax + 0x99], 0
je 0x46eb8b
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax + 0x9c]
mov dword [ebp - 0x8c], ecx
jmp 0x46eb99
push 0xf
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x8c]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x5c]
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x50]
call dword [sym.imp.USER32.dll_FillRect]
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
jmp 0x46f426
push 0x55d708
push dword [ebp + 0x14]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x46ecd0
mov edx, dword [ebp - 0x90]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x17c]
cmp al, 0
jne 0x46ecd0
mov byte [ebp - 0x91], 0
mov edx, dword [ebp - 0x90]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x78]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x30]
push eax
mov edx, dword [ebp - 0x98]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x4c]
cmp al, 0
je 0x46ec52
mov byte [ebp - 0x91], 1
jmp 0x46ec89
push dword [ebp - 0x90]
call fcn.004993d0
pop ecx
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
cmp byte [eax + 0x99], 0
je 0x46ec89
mov eax, dword [ebp - 0x9c]
mov edx, dword [eax + 0x9c]
mov dword [ebp - 0x30], edx
mov byte [ebp - 0x91], 1
cmp byte [ebp - 0x91], 0
je 0x46ecd0
cmp dword [0x59f1ec], 0
je 0x46eca7
push dword [0x59f1ec]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x30]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x59f1ec], eax
push dword [0x59f1ec]
push dword [ebp + 0x10]
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [0x59f1ec]
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
jmp 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x46ed02
mov edx, dword [ebp - 0xa0]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0xe0]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
call fcn.00410590
mov dword [ebp - 0xa4], eax
mov byte [ebp - 0xa5], 0
cmp dword [ebp - 0xa4], 0
je 0x46ed4f
mov edx, dword [ebp - 0xa4]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1b8]
cmp al, 0
setne dl
mov byte [ebp - 0xa5], dl
push 0
movzx eax, byte [ebp - 0xa5]
push eax
call fcn.00473ad0
pop ecx
pop ecx
jmp 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
je 0x46ee9e
mov word [0x5661f4], 0
push 0x11
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x46eda8
or word [0x5661f4], 0x1000
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x46edc3
or word [0x5661f4], 0x200
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
movsx eax, ax
test eax, 0x8000
je 0x46edde
or word [0x5661f4], 0x800
mov byte [0x5661da], 0
cmp dword [ebp + 0xc], 0x201
jne 0x46ee1e
movsx eax, word [0x5661f4]
push eax
mov edx, dword [ebp + 0x14]
shr edx, 0x10
movsx eax, dx
push eax
mov edx, dword [ebp + 0x14]
and edx, 0xffff
movsx eax, dx
push eax
mov edx, dword [ebp - 0xac]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x24]
jmp 0x46ee4c
movsx eax, word [0x5661f4]
push eax
mov edx, dword [ebp + 0x14]
shr edx, 0x10
movsx eax, dx
push eax
mov edx, dword [ebp + 0x14]
and edx, 0xffff
movsx eax, dx
push eax
mov edx, dword [ebp - 0xac]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x28]
call fcn.004755a0
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x46ee9e
cmp byte [0x5661da], 0
je 0x46ee9e
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0xac]
push dword [eax + 0x58]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov byte [0x5661da], 0
call fcn.00475600
push dword [ebp - 0x34]
push dword [ebp - 0x38]
mov edx, dword [ebp - 0x54]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x38]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
call fcn.004755a0
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x46f426
call fcn.00475600
mov edx, dword [ebp + 0x14]
shr edx, 0x10
movsx eax, dx
push eax
mov edx, dword [ebp + 0x14]
and edx, 0xffff
movsx eax, dx
push eax
mov edx, dword [ebp - 0x54]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x38]
jmp 0x46f426
call fcn.004a75f0
cmp al, 0
je 0x46f426
call fcn.004755a0
cmp eax, 0
jne 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
je 0x46ef65
mov edx, dword [ebp - 0x58]
and edx, 0xffff
movsx edx, dx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x58]
shr edx, 0x10
movsx edx, dx
mov dword [ebp - 0x20], edx
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x20]
push dword [ebp - 0x24]
mov edx, dword [ebp - 0xb0]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x34]
jmp 0x46f426
cmp byte [0x55d670], 0
je 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x46eff9
mov ecx, dword [ebp - 0xb4]
call fcn.00411d30
mov edx, dword [ebp - 0xb4]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1d0]
mov eax, fcn.00493ff0
cmp eax, 0
je 0x46eff9
cmp dword [0x5661f8], 0
je 0x46eff9
mov eax, dword [0x5661f8]
mov dword [ebp - 0xb8], eax
jmp 0x46efec
mov eax, dword [ebp - 0xb8]
push dword [eax + 0x10]
call fcn.00494c70
pop ecx
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], 0
jne 0x46efcf
jmp 0x46f426
mov edx, dword [ebp + 0x10]
and edx, 0xfff0
mov dword [ebp - 0xbc], edx
cmp dword [ebp - 0xbc], 0xf030
jne 0x46f052
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
je 0x46f046
mov edx, dword [ebp - 0xc0]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1f4]
mov byte [0x59f1ea], 1
jmp 0x46f426
cmp dword [ebp - 0xbc], 0xf120
jne 0x46f097
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
je 0x46f08b
mov edx, dword [ebp - 0xc4]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1f8]
mov byte [0x59f1ea], 1
jmp 0x46f426
cmp dword [ebp - 0xbc], 0xf020
jne 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
je 0x46f0d4
mov edx, dword [ebp - 0xc8]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1f0]
jmp 0x46f426
cmp byte [0x55d670], 0
je 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x46f115
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp - 0xcc]
call fcn.004712d0
add esp, 0xc
jmp 0x46f426
cmp byte [0x55d670], 0
je 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x46f1e4
mov eax, dword [ebp - 0xd0]
cmp byte [eax + 0x40], 0
jne 0x46f1e4
mov ecx, dword [ebp - 0xd0]
call fcn.00411d30
cmp byte [0x59f1ea], 0
je 0x46f185
mov byte [0x59f1ea], 0
mov edx, dword [ebp - 0xd0]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1e4]
jmp 0x46f1e4
mov eax, dword [ebp - 0xd0]
push dword [eax + 0x58]
call dword [sym.imp.USER32.dll_IsIconic]
cmp eax, 0
jne 0x46f1e4
cmp byte [0x59f1e8], 0
je 0x46f1d2
mov byte [0x59f1e9], 1
lea eax, [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0xd0]
call fcn.00411b80
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
mov edx, dword [ebp - 0xd0]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1d4]
jmp 0x46f1e4
mov edx, dword [ebp - 0xd0]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1e4]
jmp 0x46f426
mov byte [0x59f1e8], 1
jmp 0x46f426
mov byte [0x59f1e8], 0
cmp byte [0x59f1e9], 0
je 0x46f426
mov byte [0x59f1e9], 0
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x46f23d
mov edx, dword [ebp - 0xd4]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1e4]
jmp 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
je 0x46f26f
mov edx, dword [ebp - 0xd8]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x1ec]
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0x14]
and eax, 0xffffffff
cmp ax, 1
je 0x46f29c
mov eax, 0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x46f319
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [ebp - 0x58]
and edx, 0xffff
movsx edx, dx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x58]
shr edx, 0x10
movsx edx, dx
mov dword [ebp - 0x2c], edx
push 0x7f00
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push dword [ebp - 0xdc]
call fcn.004a78a0
add esp, 0x10
mov byte [ebp - 0xdd], al
cmp byte [ebp - 0xdd], 0
je 0x46f319
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
jmp 0x46f426
call fcn.00494ba0
jmp 0x46f426
call sym.X86RunHoudini.exe_RemoveCachedScreenInfo
jmp 0x46f426
push 0
push dword [ebp + 8]
call fcn.00530070
pop ecx
pop ecx
mov dword [ebp - 0xe4], eax
push 0
lea eax, [ebp - 0x44]
push eax
push 0
push 0x68
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
cmp dword [ebp - 0x44], 0
je 0x46f426
mov edx, dword [ebp + 0x10]
shr edx, 0x10
neg edx
mov dword [ebp - 0xe8], edx
movsx edx, word [ebp - 0xe8]
mov eax, 0x88888889
mov ecx, edx
imul edx
add edx, ecx
shr ecx, 0x1f
sar edx, 6
add ecx, edx
imul ecx, dword [ebp - 0x44]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp + 0x14]
and edx, 0xffff
movzx edx, dx
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp + 0x14]
shr edx, 0x10
movzx edx, dx
mov dword [ebp - 0x48], edx
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0xe4]
push dword [eax + 0x58]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebp - 0x4c], 0
jl 0x46f426
cmp dword [ebp - 0x48], 0
jl 0x46f426
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax + 0x14]
cmp ebx, edx
jg 0x46f426
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax + 0x18]
cmp ebx, edx
jg 0x46f426
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
mov edx, dword [ebp - 0xe4]
mov ecx, edx
mov esi, dword [ecx]
mov ecx, edx
call dword [esi + 0x194]
mov byte [ebp - 0xe9], al
cmp byte [ebp - 0xe9], 0
je 0x46f426
mov eax, dword [ebp + 0x18]
mov dword [eax], 0
mov eax, 1
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, 0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret