Function at 0x411f0d
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push esi
mov esi, dword [ebp + 8]
lea eax, [esi - 4]
cmp eax, 7
ja 0x411f31
lea eax, [ebp - 0x20]
push eax
mov eax, dword [0x450a68]
push dword [eax + 0x34]
call dword [sym.imp.USER32.dll_GetWindowRect]
cmp esi, 0x1b
ja case.default.0x411f3f
mov eax, dword [0x450a68]
jmp dword [esi*4 + 0x4120e9]
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0x10]
pop esi
leave
ret
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [ebp - 0xc]
jmp 0x411f53
mov ecx, dword [0x450a60]
call fcn.004162a9
jmp 0x411f53
mov eax, dword [0x450a78]
jmp 0x411f53
mov eax, dword [ebp - 0x20]
jmp 0x411f53
mov eax, dword [ebp - 0x1c]
jmp 0x411f53
mov eax, dword [ebp - 0x18]
jmp 0x411f53
mov eax, dword [ebp - 0x14]
jmp 0x411f53
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x5c]
jmp 0x411f53
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x60]
jmp 0x411f53
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
jmp 0x411f53
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
jmp 0x411f53
mov eax, dword [0x450a68]
cmp dword [eax + 0x44], 1
je case.0x411f3f.26
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.0041638d
mov eax, dword [ebp + 8]
jmp 0x411f53
mov eax, dword [eax + 4]
jmp 0x411f53
cmp dword [eax + 0x44], 1
je case.0x411f3f.27
lea ecx, [ebp - 4]
push ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.0041638d
mov eax, dword [ebp - 4]
jmp 0x411f53
mov eax, dword [eax + 8]
jmp 0x411f53
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x110]
jmp 0x411f53
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x114]
jmp 0x411f53
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa0]
jmp 0x411f53
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa1]
jmp 0x411f53
mov eax, dword [0x450a68]
movzx eax, byte [eax + 0xa2]
jmp 0x411f53
push 0
call dword [sym.imp.USER32.dll_GetDC]
and dword [ebp + 8], 0
mov esi, eax
push 0x26
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, dword [ebp + 8]
test eax, 0x100
push 1
pop eax
push esi
cmovne ecx, eax
push 0
mov dword [ebp + 8], ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x411fcb
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x411f53
push 1
jmp 0x412088
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x6c]
jmp 0x411f53
mov eax, dword [0x450a68]
mov eax, dword [eax + 0x70]
jmp 0x411f53
mov eax, dword [0x450a6c]
mov eax, dword [eax + 0x324]
jmp 0x411f53
mov ecx, dword [0x450a60]
call fcn.004163b4
jmp 0x411f53
push 0x44c354
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x15
push eax
call fcn.0041ec7c
nop dword [eax]
inc esi
pop ds
inc ecx
add byte [esi + 0x1f], dl
inc ecx
add byte [ebp + 0x1f], ah
inc ecx
add byte [edx + 0x1f], dh
inc ecx
add byte [ecx + 0x1f], bh
inc ecx
add byte [esi + 0x1f], bh
inc ecx
add byte [ebx - 0x77ffbee1], al
pop ds
inc ecx
add byte [ebp - 0x68ffbee1], cl
pop ds
inc ecx
add byte [ecx - 0x56ffbee1], ah
pop ds
inc ecx
add byte [ecx - 0x27ffbee1], dh
pop ds
inc ecx
add ch, bh
pop ds
inc ecx
add byte [0x1d004120], cl
and byte [ecx], al
and byte cs:[ecx], al
aas
and byte [ecx], al
push eax
and byte [ecx], al
xchg byte [eax], ah
inc ecx
add byte [ebx - 0x68ffbee0], dl
and byte [ecx], al
movsb byte es:[edi], byte [esi]
and byte [ecx], al
mov cl, 0x20
inc ecx
add cl, al
and byte [ecx], al
rcr byte [edi], 1
inc ecx
add ch, dh
pop ds
inc ecx
invalid