Function at 0xbca326
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push 0xe0
mov eax, 0xb04b58
call fcn.00af8e2b
mov ebx, ecx
mov eax, dword [ebp + 8]
dec eax
sub eax, 1
je 0xbca3db
sub eax, 1
jne 0xbca5e5
cmp dword [ebx + 0x28], eax
jne 0xbca5e5
test byte [ebx + 0xa8], 1
je 0xbca5e5
push 3
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
test byte [ebx + 0xa8], 2
mov eax, 0xfffff001
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x48], eax
je 0xbca5e5
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetCursorPos]
lea eax, [ebp - 0x20]
push eax
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowRect]
push dword [ebp - 0xe8]
lea eax, [ebp - 0x20]
push dword [ebp - 0xec]
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_PtInRect]
test eax, eax
je 0xbca5e5
call fcn.00a3d9d4
test al, al
jne 0xbca5e5
push 0xf
push 0
mov ecx, ebx
call fcn.00bcb341
jmp 0xbca5e5
push ecx
push 0xa18944
lea ecx, [ebp - 0xe0]
call fcn.00a49d15
push dword [ebx + 0x30]
xor edi, edi
mov dword [ebp - 0xe0], 0x9d6438
push edi
lea ecx, [ebp - 0xe0]
call fcn.00ba7717
mov dword [ebp - 4], edi
cmp dword [ebx + 0x28], edi
je 0xbca417
push edi
push dword [ebx + 0x30]
push 1
jmp 0xbca487
mov eax, dword [ebx + 0xa8]
test al, 1
jne 0xbca429
push edi
push dword [ebx + 0x30]
push 2
jmp 0xbca487
test al, 2
je 0xbca435
push edi
push dword [ebx + 0x30]
push 3
jmp 0xbca487
mov eax, dword [ebx + 0x40]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xec]
mov ecx, esi
call dword [0xc99200]
call esi
test eax, eax
jne 0xbca457
push edi
push dword [ebx + 0x30]
push 4
jmp 0xbca487
cmp dword [ebx + 0xe4], edi
jle 0xbca467
push edi
push dword [ebx + 0x30]
push 5
jmp 0xbca487
cmp byte [ebx + 0xdd], 0
je 0xbca478
push edi
push dword [ebx + 0x30]
push 6
jmp 0xbca487
cmp byte [ebx + 0xde], 0
je 0xbca497
push edi
push dword [ebx + 0x30]
push 7
lea ecx, [ebp - 0xe0]
call fcn.00ba35d5
jmp 0xbca565
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetForegroundWindow]
mov esi, eax
cmp dword [ebx + 4], esi
je 0xbca556
push 4
push esi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindow]
cmp eax, dword [ebx + 4]
je 0xbca556
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetCursorPos]
mov esi, dword [ebx + 0x2c]
lea edi, [ebp - 0x20]
mov eax, dword [0xc9598c]
add esi, 5
shl esi, 4
add esi, ebx
shl eax, 2
push eax
mov eax, dword [0xc95988]
shl eax, 2
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x20]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_InflateRect]
call fcn.00a3d9d4
push dword [ebp - 0xe8]
mov byte [ebp - 0xe1], al
lea eax, [ebp - 0x20]
push dword [ebp - 0xec]
push eax
call dword [sym.imp.api_ms_win_ntuser_rectangle_l1_1_0.dll_PtInRect]
test eax, eax
je 0xbca541
cmp byte [ebp - 0xe1], 0
jne 0xbca541
xor edi, edi
lea eax, [ebp - 0x20]
push edi
push eax
lea eax, [ebp - 0xec]
push eax
push dword [ebx + 0x30]
lea ecx, [ebp - 0xe0]
call fcn.00ba36ac
jmp 0xbca565
push 1
mov ecx, ebx
call fcn.00bc8c24
xor edi, edi
push edi
push dword [ebx + 0x30]
push edi
jmp 0xbca487
push esi
push dword [ebx + 0x30]
lea ecx, [ebp - 0xe0]
call fcn.00ba37eb
push edi
lea ecx, [ebp - 0xe0]
call fcn.00a581ed
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xe0], 0x9d6438
call fcn.00a587ba
lea ecx, [ebp - 0x28]
call fcn.00a4aca5
lea ecx, [ebp - 0x34]
call fcn.00a48c27
lea ecx, [ebp - 0x9c]
call fcn.00a7d7ad
cmp dword [ebp - 0xc4], 1
jne 0xbca5c7
mov dword [ebp - 0xc4], 2
call fcn.00ab6005
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 4]
call fcn.00b5d2a9
cmp dword [ebp - 0xd0], 0
mov dword [ebp - 0xc4], 3
je 0xbca5e5
lea ecx, [ebp - 0xdc]
call fcn.00a59db6
call fcn.00af8dd5
ret 4