Function at 0x401150
Capabilities:
Check for unmoving mouse cursor
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1034
call fcn.00402be0
mov eax, dword [0x405040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x1018]
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x1028], edi
push eax
xor esi, esi
mov dword [ebp - 0x101c], ebx
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0xf0
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [0x4054b0], eax
mov dword [0x4054ac], 0x14
push 0xf0
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x4054b4], ebx
nop dword [eax + eax]
lea eax, [ebp - 0x1010]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x1018]
cmp eax, dword [ebp - 0x1010]
jne 0x4012bd
mov eax, dword [ebp - 0x1014]
cmp eax, dword [ebp - 0x100c]
jne 0x4012bd
test esi, esi
je 0x401290
mov eax, dword [0x4054ac]
lea eax, [eax + eax*2]
shl eax, 2
test eax, eax
je 0x401219
push eax
push 0
push dword [0x4054b0]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x4054b4], 0
test ebx, ebx
je 0x401297
mov eax, dword [ebp - 0x1008]
mov ecx, 1
cmp ebx, ecx
jbe 0x401255
nop word [eax + eax]
mov edx, dword [ebp + ecx*4 - 0x1008]
add eax, 5
cmp eax, edx
jl 0x401297
inc ecx
mov eax, edx
cmp ecx, ebx
jb 0x401240
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x403204
call fcn.00401910
push 0x401b30
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x1000
lea eax, [ebp - 0x1008]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x101c], eax
xor esi, esi
jmp 0x401472
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x403208
call fcn.00401910
push 0x401b30
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
inc edi
mov dword [ebp - 0x1028], edi
jmp 0x401272
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [ebp - 0x1010]
mov ebx, eax
mov edi, dword [ebp - 0x100c]
push 0xc
call fcn.00401df3
mov edx, dword [0x4054b4]
add esp, 4
mov dword [eax + 4], edi
mov edi, dword [0x4054b0]
lea ecx, [edx + edx*2]
mov dword [eax], esi
mov dword [eax + 8], ebx
movq xmm0, qword [eax]
movq qword [edi + ecx*4], xmm0
mov eax, dword [eax + 8]
mov dword [edi + ecx*4 + 8], eax
lea eax, [edx + 1]
xor edx, edx
div dword [0x4054ac]
mov esi, edx
mov dword [0x4054b4], esi
cmp esi, 1
jbe 0x401467
xor eax, eax
lea ebx, [esi - 1]
add edi, 0x10
mov esi, eax
nop dword [eax + eax]
mov eax, dword [edi - 0x10]
lea edi, [edi + 0xc]
sub eax, dword [edi - 0x10]
cdq
mov ecx, eax
mov eax, dword [edi - 0x18]
sub eax, dword [edi - 0xc]
xor ecx, edx
sub ecx, edx
cdq
xor eax, edx
sub eax, edx
add eax, esi
lea esi, [ecx - 1]
add esi, eax
sub ebx, 1
jne 0x401330
mov ebx, dword [0x4054b0]
xor edi, edi
mov dword [ebp - 0x1020], esi
mov esi, dword [0x4054b4]
lea edx, [ebx + 8]
mov dword [ebp - 0x1024], edx
lea eax, [edi + edi*2]
xor ecx, ecx
lea ebx, [ebx + eax*4]
nop dword [eax]
cmp edi, ecx
je 0x40138b
mov eax, dword [ebx + 8]
cmp eax, dword [edx]
jb 0x4013e0
inc ecx
add edx, 0xc
cmp ecx, esi
jb 0x401380
mov eax, dword [ebx + 8]
mov dword [ebp - 0x1030], eax
mov ebx, dword [0x4054b0]
xor edi, edi
lea edx, [ebx + 8]
mov dword [ebp - 0x1024], edx
nop dword [eax]
lea ecx, [edi + edi*2]
xor eax, eax
lea ebx, [ebx + ecx*4]
cmp edi, eax
je 0x4013c3
mov ecx, dword [ebx + 8]
cmp ecx, dword [edx]
ja 0x4013f4
inc eax
add edx, 0xc
cmp eax, esi
jb 0x4013b8
lea eax, [edi + edi*2]
mov edi, dword [0x4054b0]
mov eax, dword [edi + eax*4 + 8]
mov dword [ebp - 0x102c], eax
jmp 0x40140e
mov edx, dword [ebp - 0x1024]
mov edi, ecx
mov ebx, dword [0x4054b0]
cmp ecx, esi
jb 0x401374
jmp 0x40139c
mov edi, eax
cmp eax, esi
jae 0x401408
mov edx, dword [ebp - 0x1024]
mov ebx, dword [0x4054b0]
jmp 0x4013b0
mov eax, dword [ebp - 0x102c]
mov ecx, dword [ebp - 0x1030]
sub ecx, eax
jne 0x40141d
or esi, 0xffffffff
jmp 0x401439
mov eax, 0x66666667
imul ecx
mov eax, dword [ebp - 0x1020]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cdq
idiv ecx
mov esi, eax
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x401b30
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [ebp - 0x101c]
mov dword [ebp + eax*4 - 0x1008], esi
inc eax
mov dword [ebp - 0x101c], eax
mov edi, dword [ebp - 0x1028]
mov esi, 1
mov eax, dword [ebp - 0x1010]
mov ecx, dword [ebp - 0x100c]
push 0x32
mov dword [ebp - 0x1018], eax
mov dword [ebp - 0x1014], ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [ebp - 0x101c]
cmp edi, 4
jl 0x4011c0
mov ecx, dword [ebp - 4]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401de5
mov esp, ebp
pop ebp
ret