Function at 0x140006b50
Capabilities:
Check for unmoving mouse cursor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r12, qword [0x140068d20]
xor edi, edi
mov r14d, r9d
mov esi, r8d
mov ebp, edx
mov r13, rcx
mov r15d, edi
mov ebx, edi
test r12, r12
je 0x140006e7e
cmp dword [0x1400673f0], ebx
je 0x140006bac
test byte [0x140065cf4], 0x20
jne 0x140006bac
lea rcx, str.CaptureStartSound
call qword [sym.imp.CrlUtl.dll_int___cdecl_CMNUIPlaySound_wchar_t_const____ptr64_]
test ebp, ebp
jne 0x140006dae
test esi, esi
je 0x140006c7d
cmp dword [0x1400671a4], ebx
je 0x140006c70
mov eax, dword [0x140065f1c]
cmp eax, 1
jbe 0x140006bdf
add eax, 0xfffffffa
cmp eax, 1
ja 0x140006c70
mov rbx, qword [0x140065ac8]
test rbx, rbx
jne 0x140006c04
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rbx, rax
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140006c70
mov rcx, qword [0x140065ad0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140006c70
cmp dword [0x1400671a4], edi
je 0x140006c70
mov eax, dword [0x140065f1c]
cmp eax, 1
jbe 0x140006c3d
add eax, 0xfffffffa
cmp eax, 1
ja 0x140006c70
mov rcx, qword [0x140065ad0]
call qword [sym.imp.CAPHK.dll_CAPXORWindow]
mov rcx, qword [0x140065ad0]
mov r9d, 0x581
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov qword [0x140065ad0], rdi
mov qword [0x140065ac8], rdi
mov rdx, rbx
call fcn.140022e40
jmp 0x140006dcf
mov ecx, dword [0x140065f1c]
mov esi, edi
cmp ecx, 1
sete sil
cmp ecx, 7
jne 0x140006cb8
mov eax, esi
or eax, 8
cmp dword [0x1400673d4], ebx
cmove eax, esi
mov esi, eax
or esi, 0x40
cmp dword [0x1400673d8], ebx
cmove esi, eax
cmp dword [0x1400673d0], ebx
je 0x140006cb8
or esi, 0x10
cmp dword [0x1400671a4], ebx
je 0x140006d78
cmp ecx, 1
jbe 0x140006cd5
lea eax, [rcx - 6]
cmp eax, 1
ja 0x140006d78
mov rbx, qword [0x140065ac8]
test rbx, rbx
jne 0x140006cfa
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.USER32.dll_WindowFromPoint]
mov rbx, rax
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140006d66
mov rcx, qword [0x140065ad0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140006d66
cmp dword [0x1400671a4], edi
je 0x140006d66
mov eax, dword [0x140065f1c]
cmp eax, 1
jbe 0x140006d33
add eax, 0xfffffffa
cmp eax, 1
ja 0x140006d66
mov rcx, qword [0x140065ad0]
call qword [sym.imp.CAPHK.dll_CAPXORWindow]
mov rcx, qword [0x140065ad0]
mov r9d, 0x581
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov qword [0x140065ad0], rdi
mov qword [0x140065ac8], rdi
test rbx, rbx
je 0x140006d78
mov rcx, rbx
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x140006d81
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rbx, rbx
jne 0x140006d94
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x140006d86
mov r8d, esi
mov dword [rsp + 0x20], edi
or r8d, 4
mov rdx, rbx
cmp dword [0x1400671a8], edi
cmove r8d, esi
jmp 0x140006dc4
mov eax, dword [0x1400671a8]
neg eax
mov dword [rsp + 0x20], r14d
sbb r8d, r8d
and r8d, 4
xor edx, edx
xor r9d, r9d
mov rcx, r12
call fcn.140022280
mov qword [0x140067a30], rax
test rax, rax
je 0x140006e93
mov rdx, rbx
call fcn.1400234b0
mov rbx, qword [0x1400673f8]
mov r15, rax
test rbx, rbx
je 0x140006e2a
mov rcx, rbx
call qword [sym.imp.CdrRip.dll_struct___RPALETTE____ptr64___cdecl_RIPGetPalette_struct__RIMAGE____ptr64_]
test rax, rax
je 0x140006e21
mov rcx, rbx
call qword [sym.imp.CdrRip.dll_struct___RPALETTE____ptr64___cdecl_RIPGetPalette_struct__RIMAGE____ptr64_]
mov rcx, rax
call qword [sym.imp.CdrRip.dll_int___cdecl_RIPDestroyPalette_struct___RPALETTE____ptr64_]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.CdrRip.dll_void___cdecl_RIPSetPalette_struct__RIMAGE____ptr64__struct___RPALETTE____ptr64_]
mov rcx, rbx
call qword [sym.imp.CdrRip.dll_int___cdecl_RIPDestroyImage_struct__RIMAGE____ptr64_]
mov rdx, qword [0x140067a30]
mov r8, r15
mov rcx, r12
mov qword [0x1400673f8], rdi
call fcn.140021700
mov qword [0x1400673f8], rax
test rax, rax
je 0x140006e7e
mov rcx, r13
call fcn.1400070c0
test eax, eax
je 0x140006e7e
cmp dword [0x1400673f0], edi
je 0x140006e79
test byte [0x140065cf4], 0x20
jne 0x140006e79
lea rcx, str.CaptureStartEnd
call qword [sym.imp.CrlUtl.dll_int___cdecl_CMNUIPlaySound_wchar_t_const____ptr64_]
mov edi, 1
mov rax, qword [0x140067a30]
test rax, rax
je 0x140006e93
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
test r15, r15
je 0x140006ea1
mov rcx, r15
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x140065ad0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140006eca
mov rcx, qword [0x140065ad0]
mov r9d, 0x581
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rbx, qword [rsp + 0x70]
mov eax, edi
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret