Function at 0x46d27c
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 8], ebx
call fcn.004730d5
mov dword [ebp - 0x10], eax
call dword [sym.imp.USER32.dll_GetFocus]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x14], eax
test esi, esi
je 0x46dfb0
push esi
lea ecx, [ebx + 0x428]
call fcn.00416273
test eax, eax
jne 0x46dee3
lea ecx, [ebx + 0x4a0]
push esi
call fcn.00414c1d
test eax, eax
jne 0x46dee3
mov ecx, dword [ebx + 4]
cmp dword [0x4c794c], ecx
jne 0x46d2fd
cmp dword [esi + 4], 0xd1d
jne 0x46d2fd
push 1
push eax
push ecx
push ecx
mov ecx, esp
push dword [esi + 0xc]
call fcn.0048994a
mov ecx, ebx
call fcn.00473082
jmp 0x46dfb2
cmp dword [ebp - 0x14], 0
je 0x46dfb0
mov eax, dword [esi + 4]
cmp eax, 0x20b
jne 0x46d367
mov eax, dword [esi + 0xc]
movzx ecx, ax
shr eax, 0x10
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x3c], ecx
push dword [esi]
call dword [sym.imp.USER32.dll_ClientToScreen]
and dword [ebp - 0x28], 0
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [ebp - 0x38]
lea eax, [ebp - 0x28]
push dword [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x46d3ae
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x46dee3
cmp eax, 0x20c
jne 0x46d3ae
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jne 0x46d3ae
mov esi, dword [esi + 8]
mov edi, 0x111
shr esi, 0x10
cmp esi, 2
jne 0x46d395
push 0
push 0xa76d
push edi
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, 1
jne 0x46dee3
push 0
push 0xa76c
push edi
push dword [ebx + 4]
jmp 0x46dc66
mov eax, dword [esi + 8]
lea ecx, [ebx + 0x4a0]
mov dword [ebp - 0xc], eax
call fcn.00415070
mov edi, 0x100
mov dword [ebp - 0x30], eax
cmp dword [esi + 4], edi
jne 0x46d530
mov eax, dword [ebx + 0xf0]
test eax, eax
je 0x46d530
cmp dword [eax + 0x290], 0
je 0x46d530
cmp dword [ebp - 0xc], 0x71
jne 0x46d3fb
push dword [ebp - 0x14]
mov ecx, ebx
call fcn.0046e9aa
cmp dword [0x4c7918], 0
jne 0x46d530
cmp dword [ebp - 0xc], 0x26
je 0x46d418
cmp dword [ebp - 0xc], 0x28
jne 0x46d530
call fcn.0048ef54
test eax, eax
jne 0x46d530
mov ecx, ebx
call fcn.0046e147
and dword [ebp - 0x3c], 0
and dword [ebp - 0x38], 0
test eax, eax
je 0x46d530
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x2c]
cmp dword [ebp - 0x3c], 4
je 0x46d456
cmp dword [ebp - 0x3c], 3
jne 0x46d530
push 0
push 0
push 0x1042
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
and dword [ebp - 0x18], 0
cmp eax, 0xffffffff
mov dword [ebp - 4], eax
je 0x46d530
cmp dword [ebp - 0xc], 0x26
push 1
pop esi
jne 0x46d48c
test eax, eax
jle 0x46d529
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0xc], 0x28
jne 0x46d4ad
push 0
push 0
push 0x1004
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
dec eax
cmp dword [ebp - 4], eax
jge 0x46d4ad
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], 0
je 0x46d529
mov eax, dword [ebp - 4]
cmp dword [0x4b82cc], eax
jne 0x46d4e3
call fcn.0049d807
mov ecx, dword [0x4b82d0]
sub ecx, eax
cmp ecx, 0x64
jge 0x46d4e3
call fcn.0049d807
or dword [0x4b82cc], 0xffffffff
mov dword [0x4b82d0], eax
jmp 0x46d529
mov eax, dword [ebp - 4]
mov dword [0x4b82cc], eax
call fcn.0049d807
push dword [ebp - 0x10]
mov dword [0x4b82d0], eax
mov eax, dword [ebx + 0xf0]
and dword [eax + 0x290], 0
call dword [sym.imp.USER32.dll_SetFocus]
push 0
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
push dword [ebp - 0xc]
push edi
push dword [ebp - 0x10]
call esi
push 0
push 0x71
push edi
push dword [ebx + 4]
call esi
push 1
pop esi
mov eax, esi
jmp 0x46dfb2
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebx + 0x6a4]
je 0x46d543
cmp eax, dword [0x4c4290]
jne 0x46d56e
call fcn.0048ef54
push dword [esi + 0xc]
mov dword [ebp - 0x38], eax
call fcn.0048f019
movzx eax, al
pop ecx
push eax
mov ecx, ebx
push dword [ebp - 0x38]
push esi
call fcn.0046cf6a
test eax, eax
jne 0x46dee3
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x30]
je 0x46d5a4
cmp dword [ebp - 0x10], eax
je 0x46d5a4
cmp dword [ebx + 0x264], eax
je 0x46d5a4
lea ecx, [ebx + 0x2b8]
lea edx, [ebx + 0x2bc]
neg ecx
sbb ecx, ecx
and ecx, edx
cmp dword [ecx], eax
je 0x46d5a4
push 0
mov ecx, ebx
call fcn.00472696
jmp 0x46dfb0
push 1
mov ecx, ebx
call fcn.00472696
mov esi, dword [esi + 4]
cmp esi, edi
jb 0x46d5bc
cmp esi, 0x108
jbe 0x46d5d4
cmp esi, 0x200
jb 0x46dfb0
cmp esi, 0x20d
ja 0x46dfb0
mov eax, dword [ebp - 0x14]
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp eax, dword [ebp - 0x30]
mov ebx, 0x8000
jne 0x46d608
call fcn.0048ef54
mov eax, dword [ebp + 8]
push dword [eax + 0xc]
call fcn.0048f019
cmp al, 1
pop ecx
jne 0x46d608
push 0xd
call esi
test ebx, eax
jne 0x46dee3
mov eax, dword [ebp + 8]
push dword [eax + 0xc]
call fcn.0048f019
movzx edi, al
pop ecx
mov dword [ebp - 0x34], edi
call fcn.0048ef54
cmp eax, 6
mov dword [ebp - 0x38], eax
jne 0x46d70e
cmp edi, 1
jne 0x46d70e
mov al, byte [ebp - 0xc]
and byte [ebp - 1], 0
mov byte [ebp - 2], al
lea eax, [ebp - 2]
push eax
lea ecx, [ebp - 0x18]
call fcn.00403927
lea eax, [ebp - 0x18]
mov ecx, 0x4c3cb8
push eax
call fcn.00479707
cmp eax, 0xffffffff
je 0x46d69a
push 0x4b83a0
lea ecx, [ebp + 8]
call fcn.00403927
push 0
push ecx
lea ecx, [ebp + 8]
mov eax, esp
push ecx
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00403b20
mov ecx, dword [ebp - 8]
call fcn.004701f3
lea ecx, [ebp + 8]
call fcn.004038fb
lea ecx, [ebp - 0x18]
call fcn.004038fb
jmp 0x46dee3
cmp dword [ebp - 0xc], 0x74
jne 0x46d706
push 0x74
call esi
test ebx, eax
je 0x46d706
mov ecx, dword [0x4b0550]
xor eax, eax
cmp dword [0x4c7940], eax
mov dword [ebp - 0x1c], ecx
sete al
xor ecx, ecx
mov dword [0x4c7940], eax
test eax, eax
sete cl
push ecx
lea eax, [ebp - 0x1c]
push str.Ico:_d
push eax
call fcn.00403d66
add esp, 0xc
push 0x1388
push ecx
push ecx
mov ecx, esp
push 0
call fcn.0046dfb9
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
push eax
call fcn.004038b5
mov ecx, dword [ebp - 8]
call fcn.00475ec2
lea ecx, [ebp - 0x1c]
call fcn.004038fb
lea ecx, [ebp - 0x18]
call fcn.004038fb
mov ecx, dword [ebp - 8]
lea eax, [ecx + 0x2b8]
add ecx, 0x2bc
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax]
jne 0x46d7be
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x208
jne 0x46d7be
cmp dword [0x4b4114], 0
je 0x46d7be
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 8]
add eax, 0x2bc
push dword [eax]
call dword [sym.imp.USER32.dll_ScreenToClient]
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
push 0
add eax, 0x2bc
push 0x1111
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x46d7be
mov edi, dword [ebp - 8]
push eax
lea ecx, [edi + 0x2b8]
call fcn.0048dbe3
test eax, eax
je 0x46d7be
push 0xffffffffffffffff
push ecx
push ecx
mov ecx, esp
push eax
call fcn.0048994a
mov ecx, edi
call fcn.0047808d
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x10], eax
je 0x46d7da
cmp eax, dword [ebp - 0x30]
je 0x46d7da
mov ecx, dword [ebp - 8]
cmp eax, dword [ecx + 0x264]
jne 0x46d8d0
push dword [ebp - 0x10]
mov edi, dword [ebp - 0x38]
mov ecx, dword [ebp - 8]
push dword [ebp - 0xc]
push edi
call fcn.00479255
cmp dword [ebp - 0x34], 1
jne 0x46d8d3
cmp edi, 2
jne 0x46d835
cmp dword [ebp - 0xc], 0x4d
jne 0x46d81a
push 0x4d
call esi
test ebx, eax
je 0x46d851
push 0
push 0x805e
push 0x111
jmp 0x46dc60
cmp dword [ebp - 0xc], 0x46
jne 0x46d83a
push 0x46
call esi
test ebx, eax
je 0x46d851
mov ecx, dword [ebp - 8]
call fcn.0047724f
jmp 0x46dee3
cmp edi, 3
jne 0x46d851
cmp dword [ebp - 0xc], 0x51
jne 0x46d851
push 0x51
call esi
test ebx, eax
je 0x46d851
push 0
push 0x804a
jmp 0x46d810
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x264]
cmp dword [ebp - 0x14], eax
jne 0x46d8d3
test eax, eax
je 0x46d8d3
test edi, edi
jne 0x46d8d3
push dword [ebp - 8]
call fcn.0046cf00
pop ecx
push 0x2e
call esi
test ebx, eax
je 0x46d888
mov ecx, dword [ebp - 8]
call fcn.00475820
test eax, eax
jne 0x46dee3
push 0x1b
call esi
test ebx, eax
je 0x46d8a0
mov ecx, dword [ebp - 8]
call fcn.00475780
test eax, eax
jne 0x46dee3
cmp dword [ebp - 0xc], 0xd
jne 0x46d8bd
push 0xd
call esi
test ebx, eax
je 0x46d8d3
mov ecx, dword [ebp - 8]
push 1
call fcn.00475a5b
jmp 0x46dee3
cmp dword [ebp - 0xc], 0x1b
jne 0x46d8d3
push 0x1b
call esi
test ebx, eax
je 0x46d8d3
jmp 0x46d809
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax + 0x264]
jne 0x46d906
test edi, edi
jne 0x46d906
cmp dword [ebp - 0x34], 1
jne 0x46d906
cmp dword [ebp - 0xc], 0x74
jne 0x46d906
push 0x74
call esi
test ebx, eax
je 0x46d906
mov ecx, dword [ebp - 8]
call fcn.00473072
jmp 0x46dee3
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x10], eax
jne 0x46dfb0
cmp dword [ebp - 0x34], 1
jne 0x46dfb0
cmp edi, 5
jne 0x46d943
cmp dword [ebp - 0xc], 8
jne 0x46dd56
push 8
call esi
test ebx, eax
je 0x46dd56
push 0
push 0xa76d
jmp 0x46d810
cmp edi, 4
jne 0x46da7e
mov eax, dword [ebp - 0xc]
cmp eax, 0x25
jne 0x46d957
push eax
jmp 0x46d98f
cmp eax, 0x27
jne 0x46d974
push eax
call esi
test ebx, eax
je 0x46dd56
mov ecx, dword [ebp - 8]
call fcn.004701af
jmp 0x46dee3
cmp eax, 0x26
jne 0x46d989
push eax
call esi
test ebx, eax
je 0x46dd56
jmp 0x46de41
cmp eax, 8
jne 0x46d9a6
push eax
call esi
test ebx, eax
je 0x46dd56
mov ecx, dword [ebp - 8]
call fcn.00470183
jmp 0x46dee3
cmp eax, 0x72
jne 0x46d9c3
push eax
call esi
test ebx, eax
je 0x46dd56
mov ecx, dword [ebp - 8]
call fcn.00477244
jmp 0x46dee3
cmp eax, 0x53
jne 0x46d9cf
push eax
call esi
test ebx, eax
jne 0x46d9e1
cmp dword [ebp - 0xc], 0x44
jne 0x46da0f
push 0x44
call esi
test ebx, eax
je 0x46dd56
push dword [ebp - 0xc]
call fcn.00443425
test eax, eax
pop ecx
jne 0x46da0f
xor edi, edi
cmp dword [0x4b82b8], edi
je 0x46da11
mov eax, dword [ebp - 8]
lea ecx, [eax + 0x4a0]
call fcn.004151be
test eax, eax
je 0x46da11
jmp 0x46dee3
xor edi, edi
mov eax, dword [ebp - 0xc]
cmp eax, 0xd
jne 0x46da44
push eax
call esi
test ebx, eax
je 0x46dd56
mov ecx, dword [ebp - 8]
lea eax, [ebp - 0x38]
push eax
push edi
push edi
push edi
mov dword [ebp - 0x38], edi
call fcn.00471667
cmp dword [ebp - 0x38], edi
je 0x46dd56
jmp 0x46dee3
cmp eax, 0x4b
jne 0x46da50
mov eax, 0x701e
jmp 0x46da63
cmp eax, 0x56
je 0x46da5e
cmp eax, 0x4d
jne 0x46dd56
mov eax, 0x701f
mov ecx, dword [ebp - 8]
push edi
push eax
push 0x111
call fcn.004730c4
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46dfb2
test edi, edi
jne 0x46db6d
mov edi, dword [ebp + 8]
push dword [edi + 0xc]
call fcn.0048f019
movzx eax, al
pop ecx
mov ecx, dword [ebp - 8]
push eax
push 0
push edi
call fcn.0046cf6a
test eax, eax
jne 0x46dee3
cmp dword [ebp - 0xc], 0x28
je 0x46dab5
cmp dword [ebp - 0xc], 0x26
jne 0x46db33
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x1032
push dword [ebp - 0x10]
call edi
test eax, eax
jne 0x46db33
push eax
push eax
push 0x1042
push dword [ebp - 0x10]
call edi
cmp eax, 0xffffffff
mov dword [ebp - 0x34], eax
je 0x46db33
push 2
push eax
push 0x102c
push dword [ebp - 0x10]
call edi
test al, 2
jne 0x46db33
cmp dword [ebp - 0xc], 0x26
jne 0x46db14
mov ecx, dword [ebp - 0x34]
lea eax, [ecx - 1]
test eax, eax
jl 0x46db04
mov ecx, eax
push 3
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x6c]
push eax
push ecx
jmp 0x46db24
push 3
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x34]
push 0x102b
push dword [ebp - 0x10]
call edi
jmp 0x46dee3
cmp dword [ebp - 0xc], 8
jne 0x46db40
push 8
jmp 0x46d97a
cmp dword [ebp - 0xc], 0x2a
jne 0x46db4a
push 0x2a
jmp 0x46db56
cmp dword [ebp - 0xc], 0x79
jne 0x46dd56
push 0x79
call esi
test ebx, eax
je 0x46dd56
mov ecx, dword [ebp - 8]
call fcn.0047783b
jmp 0x46dee3
cmp edi, 1
jne 0x46dbfc
mov eax, dword [ebp - 0xc]
cmp eax, 0x76
jne 0x46db9f
push eax
call esi
test ebx, eax
je 0x46dd56
cmp dword [0x4c39a4], 6
push edi
jb 0x46db97
push 0x57
jmp 0x46db99
push 0x4e
push 0
push 0
jmp 0x46dbcc
cmp eax, 0x77
jne 0x46dbb5
push eax
call esi
test ebx, eax
je 0x46dd56
push 1
push 0x41
jmp 0x46db99
cmp eax, 0x74
jne 0x46dbd9
push eax
call esi
test ebx, eax
je 0x46dd56
xor eax, eax
push 1
push eax
push eax
push eax
mov ecx, dword [ebp - 8]
call fcn.0046e679
jmp 0x46dee3
cmp eax, 0x75
jne 0x46dd56
push eax
call esi
test ebx, eax
je 0x46dd56
mov ecx, dword [ebp - 8]
push 1
call fcn.00475cc1
jmp 0x46dee3
cmp edi, 2
jne 0x46dce2
cmp dword [ebp - 0xc], 0x4e
jne 0x46dc23
push 0x4e
call esi
test ebx, eax
je 0x46dc9c
push 0
push 0xa772
jmp 0x46d810
cmp dword [ebp - 0xc], 0x45
mov edi, 0x111
jne 0x46dc4a
push 0x45
call esi
test ebx, eax
je 0x46dc9c
mov eax, dword [ebp - 8]
push 0
push 0xa773
push edi
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0xc], 0x53
jne 0x46dc71
push 0x53
call esi
test ebx, eax
je 0x46dc9c
push 0
push 0x8069
push edi
mov eax, dword [ebp - 8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46dee3
cmp dword [ebp - 0xc], 0x50
jne 0x46dc87
push 0x50
call esi
test ebx, eax
je 0x46dc9c
mov ecx, dword [ebp - 8]
call fcn.0047783b
cmp dword [ebp - 0xc], 0x54
jne 0x46dc9c
push 0x54
call esi
test ebx, eax
je 0x46dc9c
push 0xb25b
jmp 0x46dcb2
mov eax, dword [ebp + 8]
cmp dword [eax + 8], 0x4b
jne 0x46dcbf
push 0x4b
call esi
test ebx, eax
je 0x46dcbf
push 0xb25a
mov ecx, dword [ebp - 8]
call fcn.00473569
jmp 0x46dee3
cmp dword [ebp - 0xc], 0x57
jne 0x46dd56
push 0x57
call esi
test ebx, eax
je 0x46dd56
mov ecx, dword [ebp - 8]
call fcn.004787e6
jmp 0x46dee3
cmp edi, 3
jne 0x46dd56
cmp dword [ebp - 0xc], 0x41
jne 0x46dd02
push 0x41
call esi
test ebx, eax
je 0x46dd21
mov ecx, dword [ebp - 8]
call fcn.004771fb
jmp 0x46dee3
cmp dword [ebp - 0xc], 0x54
jne 0x46dd21
push 0x54
call esi
test ebx, eax
je 0x46dd21
mov ecx, dword [ebp - 8]
push 0xffffffffffffffff
push 0
call fcn.00478696
jmp 0x46dee3
mov eax, dword [ebp + 8]
push dword [eax + 0xc]
call fcn.0048f019
cmp al, 1
pop ecx
jne 0x46dd56
cmp dword [ebp - 0xc], 0x43
jne 0x46dd56
push 0x43
call esi
test ebx, eax
je 0x46dd56
mov eax, dword [ebp - 8]
push 0
push 0
mov ecx, dword [eax + 0xf0]
call fcn.00455229
jmp 0x46dee3
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x203
jne 0x46de60
xor eax, eax
cmp dword [0x4c793c], eax
je 0x46de60
cmp dword [0x4c7944], eax
je 0x46de60
cmp dword [0x4c7924], eax
je 0x46de60
xor ebx, ebx
lea edi, [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call dword [sym.imp.USER32.dll_GetMessagePos]
movsx esi, ax
shr eax, 0x10
movsx edi, ax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], esi
push eax
push ebx
push 0x1012
mov dword [ebp - 0x28], edi
push dword [ebp - 0x10]
mov dword [ebp - 0x24], ebx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0x20], ebx
jl 0x46de60
lea eax, [ebp - 0x54]
test eax, eax
je 0x46dddf
mov dword [ebp - 0x54], 2
lea eax, [ebp - 0x54]
jmp 0x46dde1
xor eax, eax
push eax
mov ebx, 0x100e
push dword [ebp - 0x20]
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x44]
test eax, eax
je 0x46de07
mov dword [ebp - 0x44], 1
lea eax, [ebp - 0x44]
jmp 0x46de09
xor eax, eax
push eax
push dword [ebp - 0x20]
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
lea eax, [ebp - 0x54]
push esi
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x46de60
push edi
lea eax, [ebp - 0x44]
push esi
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x46de60
mov eax, dword [0x4c7924]
cmp eax, 1
jne 0x46de4e
mov ecx, dword [ebp - 8]
call fcn.00470199
jmp 0x46dee3
cmp eax, 2
jne 0x46de60
mov ecx, dword [ebp - 8]
call fcn.0047722b
jmp 0x46dee3
cmp dword [0x4b4110], 0
je 0x46deca
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x208
jne 0x46deca
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_ScreenToClient]
xor eax, eax
lea edi, [ebp - 0x54]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x3c]
xor esi, esi
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x58]
push eax
push esi
push 0x1012
mov dword [ebp - 0x50], esi
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [ebp - 0x4c], esi
jl 0x46deca
push dword [ebp - 0x4c]
mov ecx, dword [ebp - 8]
push esi
call fcn.00478696
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xf0]
test ecx, ecx
je 0x46deeb
push dword [ebp + 8]
call fcn.004596eb
test eax, eax
je 0x46deeb
push 1
pop eax
jmp 0x46dfb2
cmp dword [0x4c7924], 0
je 0x46dfb0
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x203
jne 0x46dfb0
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x10]
call edi
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0x38]
mov ebx, dword [sym.imp.USER32.dll_PtInRect]
lea eax, [ebp - 0x54]
push dword [ebp - 0x3c]
push eax
call ebx
test eax, eax
je 0x46dfb0
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x101f
push dword [ebp - 0x10]
call esi
test eax, eax
mov dword [ebp + 8], eax
je 0x46df78
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
call edi
push dword [ebp - 0x38]
lea eax, [ebp - 0x28]
push dword [ebp - 0x3c]
push eax
call ebx
test eax, eax
je 0x46df78
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x46dfb0
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x46dfb0
push eax
push eax
push 0x1032
push dword [ebp - 0x10]
call esi
test eax, eax
ja 0x46dfb0
mov eax, dword [0x4c7924]
cmp eax, 1
jne 0x46dfa3
mov ecx, dword [ebp - 8]
call fcn.00470199
jmp 0x46dfb0
cmp eax, 2
jne 0x46dfb0
mov ecx, dword [ebp - 8]
call fcn.0047722b
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4