Function at 0x411eee
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push esi
mov esi, dword [ebp + 8]
lea eax, [esi - 4]
cmp eax, 7
ja 0x411f12
lea eax, [ebp - 0x20]
push eax
mov eax, dword [0x450a68]
push dword [eax + 0x34]
call dword [sym.imp.USER32.dll_GetWindowRect]
cmp esi, 0x1b
ja case.default.0x411f20
mov eax, dword [0x450a68]
jmp dword [esi*4 + 0x4120ca]
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x10]
pop esi
leave
ret
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0xc]
jmp 0x411f34
mov ecx, dword [0x450a60]
call fcn.00416212
jmp 0x411f34
mov eax, dword [0x450a78]
jmp 0x411f34
mov eax, dword [ebp - 0x20]
jmp 0x411f34
mov eax, dword [ebp - 0x1c]
jmp 0x411f34
mov eax, dword [ebp - 0x18]
jmp 0x411f34
mov eax, dword [ebp - 0x14]
jmp 0x411f34
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x5c]
jmp 0x411f34
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x60]
jmp 0x411f34
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
jmp 0x411f34
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
jmp 0x411f34
mov eax, dword [0x450a68]
cmp dword [eax + 0x44], 1
je case.0x411f20.26
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.004162f6
mov eax, dword [ebp + 8]
jmp 0x411f34
mov eax, dword [eax + 4]
jmp 0x411f34
cmp dword [eax + 0x44], 1
je case.0x411f20.27
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.004162f6
mov eax, dword [ebp - 4]
jmp 0x411f34
mov eax, dword [eax + 8]
jmp 0x411f34
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x110]
jmp 0x411f34
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x114]
jmp 0x411f34
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa0]
jmp 0x411f34
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa1]
jmp 0x411f34
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa2]
jmp 0x411f34
push 0
call dword [sym.imp.USER32.dll_GetDC]
and dword [ebp + 8], 0
mov esi, eax
push 0x26
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, dword [ebp + 8]
test eax, 0x100
push 1
pop eax
push esi
cmovne ecx, eax
push 0
mov dword [ebp + 8], ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x411fac
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x411f34
push 1
jmp 0x412069
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x6c]
jmp 0x411f34
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x70]
jmp 0x411f34
mov eax, dword [0x450a6c]
mov eax, dword [eax + 0x324]
jmp 0x411f34
mov ecx, dword [0x450a60]
call fcn.0041631d
jmp 0x411f34
push 0x44c354
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x15
push eax
call fcn.0041ebdc
nop dword [eax]
daa
pop ds
inc ecx
add byte [edi], dh
pop ds
inc ecx
add byte [esi + 0x1f], al
inc ecx
add byte [ebx + 0x1f], dl
inc ecx
add byte [edx + 0x1f], bl
inc ecx
add byte [edi + 0x1f], bl
inc ecx
add byte [edi + ebx + 0x41], ah
add byte [ecx + 0x1f], ch
inc ecx
add byte [esi + 0x1f], ch
inc ecx
add byte [eax + 0x1f], bh
inc ecx
add byte [edx - 0x75ffbee1], al
pop ds
inc ecx
add byte [edx - 0x46ffbee1], dl
pop ds
inc ecx
add dh, bl
pop ds
inc ecx
add dh, ch
pop ds
inc ecx
add dh, bh
pop ds
inc ecx
add byte [edi], cl
and byte [ecx], al
and byte [eax], ah
inc ecx
add byte [ecx], dh
and byte [ecx], al
and byte [bx + di], al
je 4268352
inc ecx
add byte [eax + 0x20], bh
inc ecx
add byte [ebp - 0x6dffbee0], al
and byte [ecx], al
mov byte [0xb1004120], al
pop ds
inc ecx
add dh, dl
pop ds
inc ecx
add byte [ebx + 0x450a600d], cl
mov ecx, dword [0x450a60]
push esi
invalid
int3
push esi
call fcn.00416212
mov esi, eax
test esi, esi
js 0x412186
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
and ax, cx
mov ecx, dword [0x450a60]
mov ecx, dword [ecx + 0x324]
mov ecx, dword [ecx + esi*4]
cmp dword [ecx + 0x108], 0
je 0x412186
xor esi, esi
or edx, 0xffffffff
inc esi
test ax, ax
cmove edx, esi
push edx
call fcn.00414a0d
pop esi
ret