Function at 0x498010
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
mov ecx, 0x3e8
push esi
push edi
cmp eax, ecx
jne 0x49809f
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
call fcn.00498c36
test eax, eax
jne 0x4985ce
lea esi, [ebx + 0x1130]
xor edi, edi
cmp dword [esi], edi
je 0x49805a
call fcn.0049a8e4
push ecx
mov eax, esp
push 8
push 0x80000003
push ecx
mov dword [eax], edi
mov eax, esp
push edi
push esi
mov dword [eax], edi
call fcn.00488285
push 0x258
push edi
push 0x418
push dword [esi]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x28]
push eax
push dword [ebx + 0x3c]
mov ecx, ebx
mov dword [ebp - 0x28], 1
call fcn.00498c8b
jmp 0x4985ce
cmp eax, 0x7d2
jne 0x4980d6
push 1
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebx + 0x1138]
cmp eax, 0x1f4
jb 0x4985ce
mov eax, ebx
call fcn.0046a694
jmp 0x4985ce
cmp eax, 0x7b
jne 0x4980e1
push eax
jmp 0x49837f
cmp eax, 0x7c
jne 0x4980fc
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, ebx
call fcn.00483bec
jmp 0x4985ce
cmp eax, 0x7d
jne 0x498117
push eax
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
call fcn.004985e1
jmp 0x4985ce
cmp eax, 0x12b
jne 0x49816c
lea edi, [ebp - 0x14]
mov esi, ebx
call fcn.0049063a
and dword [ebp - 0x2c], 0
xor eax, eax
lea edi, [ebp - 0x28]
stosd dword es:[edi], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x4985ce
mov eax, dword [ebp - 0x10]
add eax, 0x1e
cmp dword [ebp - 0x28], eax
jle 0x4985ce
call fcn.004eab9b
test eax, eax
jne 0x4985ce
mov eax, ebx
call fcn.004e9fc3
jmp 0x49824a
mov ecx, 0x12a
cmp eax, ecx
jne 0x498263
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
xor esi, esi
xor eax, eax
mov dword [ebp - 0x2c], esi
lea edi, [ebp - 0x28]
stosd dword es:[edi], eax
lea eax, [ebp - 0x2c]
push eax
mov dword [ebx + 0x116c], esi
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x4985ce
cmp dword [ebp - 0x28], 2
jge 0x4985ce
mov eax, dword [ebx + 0x168]
cmp eax, esi
je 0x498232
cmp dword [ebx + 0x160], esi
je 0x498232
cmp dword [ebx + 0x164], esi
je 0x498232
cmp dword [ebx + 0x16c], esi
je 0x498232
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x160]
mov eax, dword [ebx + 0x160]
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x160]
test byte [0x6d0a2c], 2
je 0x498205
mov eax, dword [ebx + 0x164]
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x160]
cmp dword [ebx + 0xbc], 2
je 0x49821e
call fcn.004626fc
mov ecx, eax
call fcn.0046a2bc
test eax, eax
je 0x498232
mov eax, dword [ebx + 0x170]
cmp eax, esi
je 0x498232
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x160]
mov esi, ebx
call fcn.0047c5e3
mov eax, ebx
mov dword [ebx + 0x1164], 1
call fcn.0047c660
call fcn.004626ed
test eax, eax
je 0x4985ce
mov eax, ebx
call fcn.0048551a
jmp 0x4985ce
mov ecx, 0x128
cmp eax, ecx
jne 0x498293
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push 7
push dword [ebx + 0xb8]
call fcn.00500abc
pop ecx
pop ecx
push 4
push 0
push 0xfa0
jmp 0x498333
mov ecx, 0x12e
cmp eax, ecx
je 0x4982c6
inc ecx
cmp eax, ecx
jne 0x4982bd
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
inc dword [0x6d0a7c]
mov ecx, ebx
call fcn.004ea91a
jmp 0x4985ce
mov ecx, 0x130
cmp eax, ecx
jne 0x4982dc
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, ebx
call fcn.0048659e
jmp 0x4985ce
mov ecx, 0x131
cmp eax, ecx
jne 0x4982fb
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov esi, ebx
call fcn.0049bcec
jmp 0x4985ce
mov ecx, 0x133
cmp eax, ecx
jne 0x49833f
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
test byte [0x6d0a2c], 2
jne 0x4985ce
push 9
push dword [ebx + 0xb8]
call fcn.00500abc
pop ecx
pop ecx
push 4
push 0
push 0xbb8
push 3
call fcn.00500e0e
jmp 0x4985ce
mov edi, 0x134
cmp eax, edi
jne 0x49836e
dec dword [ebx + 0x111c]
push 0
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [ebx + 0x111c], 0
jg 0x4985ce
push edi
push dword [ebx + 4]
jmp 0x498382
mov edi, 0x135
cmp eax, edi
jne 0x49838d
mov esi, ebx
call fcn.004884ae
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x4985ce
mov ecx, 0x190
cmp eax, ecx
jne 0x498479
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [ebx + 0x1424], 0
je 0x4985ce
and dword [ebp - 0x2c], 0
xor eax, eax
lea edi, [ebp - 0x28]
stosd dword es:[edi], eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
or dword [ebp - 0x1c], 0xffffffff
xor eax, eax
lea edi, [ebp - 0x18]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0xb8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebx + 0xd0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x68]
mov dword [ebp - 0x20], eax
lea esi, [ebx + 0x142c]
lea edi, [ebp - 0x18]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
and dword [ebp - 8], 0
lea esi, [ebx + 0x1428]
push esi
mov ecx, 0x637f28
call fcn.00441a22
test eax, eax
jne 0x498423
mov dword [ebp - 0x1c], 0x3d
mov dword [ebx + 0x1120], 1
jmp 0x49845e
push esi
mov ecx, 0x637f20
call fcn.00441a22
test eax, eax
jne 0x498441
and dword [ebx + 0x1120], eax
mov dword [ebp - 0x1c], 0x3d
jmp 0x49845e
push esi
mov ecx, 0x637f64
call fcn.00441a22
test eax, eax
jne 0x49845e
mov dword [ebp - 8], 3
mov dword [ebp - 0x1c], 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x143c], eax
lea eax, [ebp - 0x24]
push eax
call fcn.004dfac9
pop ecx
jmp 0x4985ce
mov ecx, 0x191
cmp eax, ecx
jne 0x498498
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov byte [ebx + 0x13a4], 1
jmp 0x4985ce
cmp eax, 0x192
jne 0x4984ab
mov ecx, ebx
call fcn.004ee602
jmp 0x4985ce
mov ecx, 0x19d
cmp eax, ecx
jne 0x4984c9
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push ebx
call fcn.004eefc4
jmp 0x4985ce
mov ecx, 0x1f5
cmp eax, ecx
jne 0x498501
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov esi, dword [ebx + 0xb8]
call fcn.00486685
mov dword [eax + 4], esi
call fcn.00486685
mov ecx, eax
call fcn.005401cd
mov dword [ebx + 0x1418], eax
jmp 0x4985ce
mov ecx, 0x1f8
cmp eax, ecx
jne 0x498548
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x4985ce
mov esi, dword [ebx + 0xb8]
call fcn.00486685
mov dword [eax + 4], esi
call fcn.00486685
call fcn.005403e3
mov dword [ebx + 0x1410], eax
jmp 0x4985ce
mov ecx, 0x1f7
cmp eax, ecx
jne 0x498563
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push ebx
call fcn.004ededa
jmp 0x4985ce
mov ecx, 0x1f6
cmp eax, ecx
jne 0x49857e
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push ebx
call fcn.004ee767
jmp 0x4985ce
mov ecx, 0x19a
cmp eax, ecx
jne 0x498595
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push 0
jmp 0x4985aa
mov ecx, 0x19b
cmp eax, ecx
jne 0x4985b3
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push 1
mov edi, ebx
call fcn.004edcc8
jmp 0x4985ce
mov ecx, 0x19e
cmp eax, ecx
jne 0x4985ce
push ecx
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push ebx
call fcn.00495b87
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.00403fc1
leave
ret 8