Function at 0x46ff00
Capabilities:
Check for unmoving mouse cursor

Disassembly:
sub esp, 0x18
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0x14], eax
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x2c]
mov ebx, ecx
shr edi, 0x10
mov dword [esp + 0x14], edx
test edi, edi
je 0x470389
mov ecx, dword [0x633060]
xor eax, eax
mov edx, dword [ecx]
test edx, edx
je 0x470389
mov ecx, dword [ecx + 8]
nop dword [eax]
mov esi, dword [ecx]
cmp dword [esi + 0x18], edi
je 0x46ff64
inc eax
add ecx, 4
cmp eax, edx
jb 0x46ff40
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
mov ebp, dword [esi + 0x30]
test ebp, ebp
je 0x46ff8a
push dword [esi + 8]
mov ecx, ebp
push dword [esp + 0x30]
push dword [esp + 0x1c]
push esi
call dword [0x5a9914]
nop
call ebp
test al, al
jne 0x470389
mov eax, dword [esp + 0x2c]
movzx eax, ax
cmp eax, 0x201
ja 0x470037
je 0x46ffbe
nop
cmp eax, 0x7b
je 0x470072
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x1e
push eax
mov dword [esp + 0x1c], str.IconSingleClick
call sym.SystemInformer.exe_Ordinal_1886
test eax, eax
je 0x47001b
push 0
push 0
push 0x16
call sym.SystemInformer.exe_Ordinal_1172
mov byte [0x633d1d], 1
push 0x4739c0
push 0x3e8
push 3
push dword [0x633020]
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
mov byte [0x633d1e], 1
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
nop word [eax + eax]
cmp eax, 0x401
ja 0x47028e
je 0x47025d
sub eax, 0x202
je 0x470173
nop dword [eax]
sub eax, 1
je 0x470114
sub eax, 2
jne 0x470389
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x1e
push eax
mov dword [esp + 0x1c], str.IconSingleClick
call sym.SystemInformer.exe_Ordinal_1886
test eax, eax
jne 0x4700a6
cmp byte [0x632e99], al
je 0x4700a6
push 2
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [0x62db64], 0x73
jb 0x4700d1
push 3
push dword [0x633020]
mov dword [0x62e778], 0xffffffff
mov dword [0x634280], 0
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push 0
or edx, 0xffffffff
push 0
push 0
lea ecx, [edx + 2]
call fcn.00458080
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [esp + 0x20]
mov ecx, ebx
push dword [esp + 0x20]
call fcn.0044bdc0
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x1e
push eax
mov dword [esp + 0x24], str.IconSingleClick
call sym.SystemInformer.exe_Ordinal_1886
test eax, eax
jne 0x470389
cmp byte [0x632e99], al
je 0x470153
push 2
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov byte [0x633d1e], 0
call fcn.00473980
push 0
push 0
push 0x16
call sym.SystemInformer.exe_Ordinal_1172
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x1e
push eax
mov dword [esp + 0x24], str.IconSingleClick
call sym.SystemInformer.exe_Ordinal_1886
test eax, eax
jne 0x470389
nop word [eax + eax]
cmp byte [0x632e99], al
je 0x470389
cmp byte [0x633d1e], al
je 0x470389
lea eax, [esp + 0x14]
mov edx, esi
push eax
mov ecx, edi
call fcn.00473880
test al, al
je 0x47023f
push 0x634290
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [0x634288]
nop
test eax, eax
je 0x4701fd
push eax
push 0
push dword [0x633a54]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
mov dword [0x634288], 0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x470210
push eax
call sym.SystemInformer.exe_Ordinal_1346
mov dword [0x634288], eax
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
push 0x473950
add eax, 0x8c
push eax
push 2
push ebx
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
push 2
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
nop dword [eax]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, ebx
je 0x470389
push 0
push 0
push 0x16
call sym.SystemInformer.exe_Ordinal_1172
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
sub eax, 0x405
je 0x470363
sub eax, 1
je 0x4702da
nop
sub eax, 1
jne 0x470389
call fcn.004739e0
push 0
push 0
or edx, 0xffffffff
push 0
push 0x15e
lea ecx, [edx + 2]
call fcn.00458080
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
cmp dword [0x62db64], 0x73
jb 0x4702f9
mov dword [0x62e778], edi
mov dword [0x634280], esi
push 0x473a20
jmp 0x46fff3
cmp byte [0x632e99], 0
je 0x470389
cmp byte [0x633d1d], 0
jne 0x470389
lea eax, ds:[esp + 0x14]
mov edx, esi
push eax
mov ecx, edi
call fcn.00473880
test al, al
je 0x470389
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x1c]
mov edx, 1
push eax
push dword [esp + 0x18]
mov ecx, edx
push 4
push 0
call fcn.00458080
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x2c
push eax
mov dword [esp + 0x24], str.IconIgnoreBalloonClick
call sym.SystemInformer.exe_Ordinal_1886
nop dword [eax]
test eax, eax
jne 0x470389
call fcn.0044c040
mov ecx, dword [esp + 0x24]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00583f9f
add esp, 0x18
ret 4