Function at 0xc81862
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push 0xe0
mov eax, 0xbcef08
call fcn.00bc132b
mov ebx, ecx
mov eax, dword [ebp + 8]
dec eax
sub eax, 1
je 0xc81917
sub eax, 1
jne 0xc81b26
cmp dword [ebx + 0x28], eax
jne 0xc81b26
test byte [ebx + 0xa8], 1
je 0xc81b26
push 3
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
test byte [ebx + 0xa8], 2
mov eax, 0xfffff001
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x48], eax
je 0xc81b26
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetCursorPos]
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowRect]
push dword [ebp - 0xe8]
lea eax, [ebp - 0x20]
push dword [ebp - 0xec]
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_PtInRect]
test eax, eax
je 0xc81b26
call fcn.00c753ee
test al, al
jne 0xc81b26
push 0xf
push 0
mov ecx, ebx
call fcn.00c824b5
jmp 0xc81b26
push ecx
push 0xb3fbd4
lea ecx, [ebp - 0xe0]
call fcn.00b80bc1
push dword [ebx + 0x30]
xor edi, edi
mov dword [ebp - 0xe0], 0xb16774
push edi
lea ecx, [ebp - 0xe0]
call fcn.00c64087
mov dword [ebp - 4], edi
cmp dword [ebx + 0x28], edi
je 0xc81953
push edi
push dword [ebx + 0x30]
push 1
jmp 0xc819c3
mov eax, dword [ebx + 0xa8]
test al, 1
jne 0xc81965
push edi
push dword [ebx + 0x30]
push 2
jmp 0xc819c3
test al, 2
je 0xc81971
push edi
push dword [ebx + 0x30]
push 3
jmp 0xc819c3
mov eax, dword [ebx + 0x40]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xe4]
mov ecx, esi
call dword [0xd0cffc]
call esi
test eax, eax
jne 0xc81993
push edi
push dword [ebx + 0x30]
push 4
jmp 0xc819c3
cmp dword [ebx + 0xd8], edi
jle 0xc819a3
push edi
push dword [ebx + 0x30]
push 5
jmp 0xc819c3
cmp byte [ebx + 0xd1], 0
je 0xc819b4
push edi
push dword [ebx + 0x30]
push 6
jmp 0xc819c3
cmp byte [ebx + 0xd2], 0
je 0xc819d3
push edi
push dword [ebx + 0x30]
push 7
lea ecx, [ebp - 0xe0]
call fcn.00c6057c
jmp 0xc81aa1
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetForegroundWindow]
mov esi, eax
cmp dword [ebx + 4], esi
je 0xc81a92
push 4
push esi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindow]
cmp eax, dword [ebx + 4]
je 0xc81a92
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetCursorPos]
mov esi, dword [ebx + 0x2c]
lea edi, [ebp - 0x20]
mov eax, dword [0xd0a200]
add esi, 5
shl esi, 4
add esi, ebx
shl eax, 2
push eax
mov eax, dword [0xd0a204]
shl eax, 2
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x20]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_InflateRect]
call fcn.00c753ee
push dword [ebp - 0xe8]
mov byte [ebp - 0xe1], al
lea eax, [ebp - 0x20]
push dword [ebp - 0xec]
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_PtInRect]
test eax, eax
je 0xc81a7d
cmp byte [ebp - 0xe1], 0
jne 0xc81a7d
xor edi, edi
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0xec]
push eax
push dword [ebx + 0x30]
lea ecx, [ebp - 0xe0]
call fcn.00c606b6
jmp 0xc81aa1
push 1
mov ecx, ebx
call fcn.00c80022
xor edi, edi
push edi
push dword [ebx + 0x30]
push edi
jmp 0xc819c3
push esi
push dword [ebx + 0x30]
lea ecx, [ebp - 0xe0]
call fcn.00c6092e
push edi
lea ecx, [ebp - 0xe0]
call fcn.00b80b25
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xe0], 0xb16774
call fcn.00b80a8a
lea ecx, [ebp - 0x28]
call fcn.00b84d89
lea ecx, [ebp - 0x34]
call fcn.00b845a1
lea ecx, [ebp - 0x9c]
call fcn.00b8458c
cmp dword [ebp - 0xc4], 1
jne 0xc81b08
push 0xc21420
mov dword [ebp - 0xc4], 2
call fcn.00b63419
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 4]
call fcn.00c22b6a
cmp dword [ebp - 0xd0], 0
mov dword [ebp - 0xc4], 3
je 0xc81b26
lea ecx, [ebp - 0xdc]
call fcn.00b54a44
call fcn.00bc12da
ret 4