Function at 0x412599
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 0x18]
push ebx
push esi
push edi
xor edi, edi
sub eax, 0x200
mov dword [ebp - 4], edi
je 0x41278b
dec eax
je 0x41270c
dec eax
je 0x4126dc
dec eax
je 0x4126cf
dec eax
je 0x4125f4
dec eax
je 0x4125e9
dec eax
jne 0x412852
mov eax, dword [ebp + 0x14]
cmp dword [eax + 4], 2
je 0x412852
jmp 0x412715
mov eax, dword [ebp + 0x14]
cmp dword [eax + 4], edi
jmp 0x4126d4
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 4]
cmp eax, edi
je 0x412715
cmp eax, 1
jne 0x412852
mov ebx, dword [ebp + 8]
push edi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call fcn.004dd490
mov edi, eax
test edi, edi
je 0x412852
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x24]
lea ecx, [ebp - 0xc]
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0x1c]
push ecx
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [ebp + 0x10]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0xffff
push dword [edi + 4]
push 0x117
push dword [eax + 0x1c]
call esi
push 0
push ebx
push dword [ebp - 8]
mov ecx, edi
push dword [ebp - 0xc]
push 0x100
call fcn.004d7be0
test eax, eax
je 0x412852
cmp eax, 0x4e39
je 0x4126be
cmp eax, 0x4e3e
je 0x4126be
cmp eax, 0x4e41
jbe 0x4126ab
cmp eax, 0x4e45
jbe 0x4126be
cmp eax, 0x4e46
jbe 0x4126ab
cmp eax, 0x4e4c
jbe 0x4126be
cmp eax, 0x4e4e
je 0x4126be
mov ebx, dword [ebx + 0x1c]
push 0
push eax
push 0x112
push ebx
call esi
jmp 0x412852
mov ecx, dword [ebp + 0x10]
mov ecx, dword [ecx + 0x1c]
push 0
push eax
push 0x111
push ecx
jmp 0x4126b7
mov eax, dword [ebp + 0x14]
cmp dword [eax], edi
jne 0x412852
jmp 0x412715
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, edi
je 0x412715
xor ecx, ecx
inc ecx
cmp eax, ecx
jne 0x412852
mov eax, dword [ebp + 0x10]
mov dword [eax + 0xb4], edi
add eax, 0xc4
cmp dword [eax], edi
je 0x412704
mov dword [eax], edi
mov dword [ebp - 4], ecx
jmp 0x412852
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, edi
jne 0x412721
mov dword [ebp - 4], 1
jmp 0x412852
xor ebx, ebx
inc ebx
cmp eax, ebx
jne 0x412852
mov esi, dword [ebp + 0x10]
mov eax, dword [esi + 0xd8]
cmp eax, edi
je 0x41274a
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push eax
call dword [sym.imp.GDI32.dll_PtInRegion]
test eax, eax
je 0x412783
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [esi + 0xc0], eax
lea eax, [esi + 0xb8]
push eax
mov dword [esi + 0xb4], ebx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp + 8]
add esi, 0xc8
push esi
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
push edi
call dword [sym.imp.USER32.dll_SetCapture]
mov dword [ebp - 4], ebx
jmp 0x412852
mov ecx, dword [ebp + 0x14]
xor eax, eax
inc eax
cmp dword [ecx], eax
mov dword [ebp - 4], eax
jne 0x412852
mov ebx, dword [ebp + 0x10]
cmp dword [ebx + 0xb4], edi
mov esi, dword [sym.imp.USER32.dll_SetCapture]
je 0x4127cc
call dword [sym.imp.USER32.dll_GetCapture]
test eax, eax
jne 0x4127cc
push dword [ebx + 0x1c]
mov dword [ebx + 0xc4], 1
call esi
push eax
call fcn.004d8a40
cmp dword [ebx + 0xc4], edi
mov dword [ebx + 0xb4], edi
je 0x412852
test byte [ebp + 0x1c], 1
je 0x412844
lea esi, [ebx + 0xc8]
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xc]
push eax
movsd dword es:[edi], dword [esi]
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 8]
sub eax, dword [ebx + 0xbc]
push eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebx + 0xb8]
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [ebp + 8]
test eax, eax
je 0x41281f
mov eax, dword [eax + 0x1c]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
push 4
push ecx
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
and dword [ebp - 4], 0
jmp 0x412852
push dword [ebx + 0xc0]
call esi
mov dword [ebx + 0xc4], edi
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret