Function at 0x411ff5
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push esi
mov esi, dword [ebp + 8]
lea eax, [esi - 4]
cmp eax, 7
ja 0x412019
lea eax, [ebp - 0x20]
push eax
mov eax, dword [0x450a68]
push dword [eax + 0x34]
call dword [sym.imp.USER32.dll_GetWindowRect]
cmp esi, 0x1b
ja case.default.0x412027
mov eax, dword [0x450a68]
jmp dword [esi*4 + 0x4121d1]
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x10]
pop esi
leave
ret
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0xc]
jmp 0x41203b
mov ecx, dword [0x450a60]
call fcn.00416396
jmp 0x41203b
mov eax, dword [0x450a78]
jmp 0x41203b
mov eax, dword [ebp - 0x20]
jmp 0x41203b
mov eax, dword [ebp - 0x1c]
jmp 0x41203b
mov eax, dword [ebp - 0x18]
jmp 0x41203b
mov eax, dword [ebp - 0x14]
jmp 0x41203b
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x5c]
jmp 0x41203b
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x60]
jmp 0x41203b
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
jmp 0x41203b
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
jmp 0x41203b
mov eax, dword [0x450a68]
cmp dword [eax + 0x44], 1
je case.0x412027.26
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.0041647a
mov eax, dword [ebp + 8]
jmp 0x41203b
mov eax, dword [eax + 4]
jmp 0x41203b
cmp dword [eax + 0x44], 1
je case.0x412027.27
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.0041647a
mov eax, dword [ebp - 4]
jmp 0x41203b
mov eax, dword [eax + 8]
jmp 0x41203b
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x110]
jmp 0x41203b
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x114]
jmp 0x41203b
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa0]
jmp 0x41203b
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa1]
jmp 0x41203b
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa2]
jmp 0x41203b
push 0
call dword [sym.imp.USER32.dll_GetDC]
and dword [ebp + 8], 0
mov esi, eax
push 0x26
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, dword [ebp + 8]
test eax, 0x100
push 1
pop eax
push esi
cmovne ecx, eax
push 0
mov dword [ebp + 8], ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4120b3
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x41203b
push 1
jmp 0x412170
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x6c]
jmp 0x41203b
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x70]
jmp 0x41203b
mov eax, dword [0x450a6c]
mov eax, dword [eax + 0x324]
jmp 0x41203b
mov ecx, dword [0x450a60]
call fcn.004164a1
jmp 0x41203b
push 0x44c354
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x15
push eax
call fcn.0041ed6c
nop dword [eax]
and byte cs:[ecx], al
and byte ds:[ecx], al
dec ebp
and byte [ecx], al
pop edx
and byte [ecx], al
popal
and byte [ecx], al
and byte [ecx], al
imul esp, dword [eax], 65
add byte [eax + 32], dh
inc ecx
add byte [ebp + 0x20], dh
inc ecx
add byte [edi + 0x20], bh
inc ecx
add byte [ecx - 0x6effbee0], cl
and byte [ecx], al
cdq
and byte [ecx], al
shl byte [eax], 0x41
add ch, ah
and byte [ecx], al
cmc
and byte [ecx], al
add eax, 0x16004121
and dword [ecx], eax
daa
and dword [ecx], eax
cmp byte [ecx], ah
inc ecx
add byte [esi + 0x21], ch
inc ecx
add byte [ebx + 0x21], bh
inc ecx
add byte [edi + 0x21], bh
inc ecx
add byte [ecx + 0x21990041], cl
inc ecx
add byte [ecx - 0x47ffbedf], ch
and byte [ecx], al
frstor dword [eax]
inc ecx
invalid