Function at 0x100bcdc0
Capabilities:
Check for unmoving mouse cursor
Create thread
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x128
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x124], eax
push esi
push edi
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x6c]
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 0x5c]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x58]
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 0x50]
mov dword [esp + 0xb0], eax
mov eax, dword [ebp + 0x4c]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x48]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x78], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x54]
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x78]
mov dword [esp + 0x48], edx
mov edx, dword [ebp + 0x38]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 0x68]
mov dword [esp + 0x40], edx
mov edx, dword [ebp + 0x3c]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x70]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x6c], eax
mov edi, dword [ebp + 8]
mov dword [esp + 0xc], edi
test esi, esi
jne 0x100bcec3
mov esi, dword [0x10177404]
test esi, esi
cmove esi, esi
test byte [ebp + 0x74], 1
je 0x100bcf11
call fcn.1013aefb
sub eax, dword [0x10177724]
cmp eax, 0x12c
jge 0x100bcf11
cmp esi, dword [0x1017772c]
jne 0x100bcf11
mov dword [0x10177724], 0
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
mov ecx, dword [esp + 0x4c]
call fcn.100f5370
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x74
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
cmp dword [ebp + 0x74], 0
mov dword [0x1017772c], esi
je 0x100bd38e
lea eax, [esp + 0xf0]
xorps xmm0, xmm0
push eax
push dword [esi + 0x28]
movaps xmmword [esp + 0xf8], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x104]
mov dword [esp + 0x104], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp + 0x74]
test al, 4
jne 0x100bd0bb
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10161668]
movd xmm0, edi
lahf
test ah, 0x44
jp 0x100bcf98
cvtdq2pd xmm0, xmm0
jmp 0x100bcfbc
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x10]
mov dword [esp + 0xc], eax
lahf
test ah, 0x44
jp 0x100bcfe5
cvtdq2pd xmm0, xmm0
jmp 0x100bd009
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x18]
mov dword [esp + 0x10], eax
lahf
test ah, 0x44
jp 0x100bd032
cvtdq2pd xmm0, xmm0
jmp 0x100bd056
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si edi, xmm0
movd xmm0, dword [esp + 0x14]
lahf
mov dword [esp + 0x18], edi
test ah, 0x44
jp 0x100bd08a
mov eax, dword [ebp + 0x74]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100bd0c3
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
mov eax, dword [ebp + 0x74]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100bd0c3
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
test eax, 0x4000
je 0x100bd0d1
add edi, dword [esi + 0x50]
mov dword [esp + 0x18], edi
test eax, 0x8000
je 0x100bd0df
add ecx, dword [esi + 0x54]
mov dword [esp + 0x14], ecx
mov edi, dword [sym.imp.USER32.dll_GetCursorPos]
test al, 0x10
je 0x100bd148
lea eax, [esp + 0xbc]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0xc0], xmm0
call edi
mov eax, dword [ebp + 0x74]
test al, 8
je 0x100bd139
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
add eax, edx
mov ecx, dword [esp + 0xbc]
add eax, ecx
cmp eax, dword [esp + 0x120]
mov eax, dword [ebp + 0x74]
jle 0x100bd131
mov edx, ecx
sub edx, dword [esp + 0x18]
mov dword [esp + 0xc], edx
jmp 0x100bd148
add edx, ecx
mov dword [esp + 0xc], edx
jmp 0x100bd148
mov ecx, dword [esp + 0xc]
add ecx, dword [esp + 0xbc]
mov dword [esp + 0xc], ecx
test al, 0x20
je 0x100bd19a
lea eax, [esp + 0x28]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x2c], xmm0
call edi
mov eax, dword [ebp + 0x74]
test al, 8
je 0x100bd18e
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
lea eax, [edx + edi]
add eax, ecx
cmp eax, dword [esp + 0x124]
mov eax, dword [ebp + 0x74]
jle 0x100bd186
sub ecx, edx
sub ecx, edi
jmp 0x100bd196
add edi, ecx
mov dword [esp + 0x10], edi
jmp 0x100bd19a
mov ecx, dword [esp + 0x10]
add ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0xc]
test al, 0x40
je 0x100bd1b7
mov eax, dword [esi + 0x74]
add eax, edx
add ecx, eax
mov eax, dword [ebp + 0x74]
mov dword [esp + 0xc], ecx
mov edi, dword [esp + 0xf4]
test al, al
jns 0x100bd1ce
mov eax, dword [esi + 0x78]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
test eax, 0x100
je 0x100bd1f1
mov eax, dword [esi + 0x74]
sub eax, dword [esp + 0x18]
add eax, dword [esi + 0x50]
mov edx, dword [esp + 0xf0]
add eax, edx
add ecx, eax
mov eax, dword [ebp + 0x74]
mov dword [esp + 0xc], ecx
test eax, 0x200
je 0x100bd20b
mov eax, dword [esi + 0x54]
sub eax, dword [esp + 0x14]
add eax, edi
add eax, dword [esi + 0x78]
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
test eax, 0x400
je 0x100bd26a
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0xf4]
test al, 8
je 0x100bd260
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x18]
add eax, ecx
add eax, edx
jns 0x100bd25d
mov eax, dword [esi + 0x50]
add eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
add eax, edx
cmp eax, dword [esp + 0x120]
jge 0x100bd25d
mov eax, dword [esp + 0x20]
add eax, edx
add dword [esp + 0xc], eax
mov eax, dword [ebp + 0x74]
jmp 0x100bd26a
mov eax, dword [ebp + 0x74]
sub ecx, dword [esp + 0x18]
add ecx, edx
add dword [esp + 0xc], ecx
test eax, 0x800
je 0x100bd2d0
mov ecx, dword [esi + 0x78]
test al, 8
je 0x100bd2c6
mov eax, dword [esp + 0x10]
sub eax, dword [esp + 0x14]
mov edi, dword [esp + 0xf4]
add eax, ecx
add eax, edi
jns 0x100bd2c3
mov eax, dword [esi + 0x54]
mov edx, dword [esp + 0xf0]
add eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x14]
add eax, dword [esp + 0x20]
add eax, edi
cmp eax, dword [esp + 0x124]
jge 0x100bd2c3
mov eax, dword [esp + 0x20]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
jmp 0x100bd2d0
mov eax, dword [ebp + 0x74]
sub ecx, dword [esp + 0x14]
add ecx, edi
add dword [esp + 0x10], ecx
test eax, 0x1000
je 0x100bd324
mov ecx, dword [esi + 0x74]
test al, 8
je 0x100bd319
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x18]
mov edi, dword [esp + 0xf4]
add eax, ecx
add eax, edx
test eax, eax
jle 0x100bd319
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x18]
add eax, ecx
add eax, dword [esi + 0x50]
add eax, edx
cmp eax, dword [esp + 0x120]
jle 0x100bd319
sub ecx, dword [esp + 0x18]
add ecx, edx
add dword [esp + 0xc], ecx
jmp 0x100bd324
mov eax, dword [esi + 0x50]
add eax, ecx
add eax, edx
add dword [esp + 0xc], eax
mov edx, dword [ebp + 0x74]
test edx, 0x2000
je 0x100bd442
mov ecx, dword [esi + 0x78]
test dl, 8
mov edx, dword [esp + 0x10]
je 0x100bd378
mov eax, edx
sub eax, dword [esp + 0x14]
add eax, ecx
add eax, edi
test eax, eax
jle 0x100bd378
mov eax, dword [esp + 0x14]
add eax, edx
add eax, ecx
add eax, edi
add eax, dword [esi + 0x54]
cmp eax, dword [esp + 0x124]
jle 0x100bd378
sub ecx, dword [esp + 0x14]
add ecx, edi
mov edi, dword [esp + 0xc]
add edx, ecx
mov dword [esp + 0x10], edx
jmp 0x100bd44a
mov eax, dword [esi + 0x54]
add eax, ecx
add eax, edi
mov edi, dword [esp + 0xc]
add edx, eax
mov dword [esp + 0x10], edx
jmp 0x100bd44a
test esi, esi
je 0x100bd446
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10161668]
movd xmm0, dword [esp + 0x18]
lahf
test ah, 0x44
jp 0x100bd3b7
cvtdq2pd xmm0, xmm0
jmp 0x100bd3db
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x14]
mov dword [esp + 0x18], eax
lahf
test ah, 0x44
jp 0x100bd410
mov edx, dword [esp + 0x10]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100bd44e
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
mov edx, dword [esp + 0x18]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100bd44e
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov eax, dword [0x10177718]
test eax, eax
je 0x100bd46c
push 0x90
push ecx
push dword [esp + 0x20]
push edx
push edi
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [esp + 0x4c]
xor edi, edi
mov dword [esp + 0x20], edi
test edx, edx
je 0x100bd4c1
mov ecx, dword [edx + 4]
cmp ecx, 4
jl 0x100bd4c1
mov eax, dword [edx]
cmp eax, 1
jge 0x100bd494
dec eax
mov edi, edx
mov dword [edx], eax
mov dword [esp + 0x20], edi
jmp 0x100bd4c1
lea eax, [ecx + 8]
push eax
call fcn.1012d6c2
mov ecx, dword [esp + 0x50]
mov edi, eax
add esp, 4
mov dword [esp + 0x20], edi
mov eax, dword [ecx + 4]
add eax, 8
push eax
push ecx
push edi
call fcn.10130870
add esp, 0xc
mov dword [edi], 0xffffffff
mov edx, dword [esp + 0x40]
xor eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x24], eax
test edx, edx
je 0x100bd52c
mov ecx, dword [edx + 4]
cmp ecx, 1
jl 0x100bd526
mov eax, dword [edx]
cmp eax, 1
jge 0x100bd4ef
dec eax
mov dword [esp + 0x34], edx
mov dword [edx], eax
jmp 0x100bd52c
lea eax, [ecx + 8]
push eax
call fcn.1012d6c2
mov edx, dword [esp + 0x44]
add esp, 4
mov dword [esp + 0x34], eax
mov dword [eax], 0xffffffff
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100bd52c
push ecx
lea ecx, [edx + 8]
add eax, 8
push ecx
push eax
call fcn.10130870
add esp, 0xc
jmp 0x100bd52c
xor eax, eax
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x44]
test edx, edx
je 0x100bd589
mov ecx, dword [edx + 4]
cmp ecx, 1
jl 0x100bd583
mov eax, dword [edx]
cmp eax, 1
jge 0x100bd54c
dec eax
mov dword [esp + 0x38], edx
mov dword [edx], eax
jmp 0x100bd589
lea eax, [ecx + 8]
push eax
call fcn.1012d6c2
mov edx, dword [esp + 0x48]
add esp, 4
mov dword [esp + 0x38], eax
mov dword [eax], 0xffffffff
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100bd589
push ecx
lea ecx, [edx + 8]
add eax, 8
push ecx
push eax
call fcn.10130870
add esp, 0xc
jmp 0x100bd589
xor eax, eax
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x48]
test edx, edx
je 0x100bd5e0
mov ecx, dword [edx + 4]
cmp ecx, 4
jl 0x100bd5da
mov eax, dword [edx]
cmp eax, 1
jge 0x100bd5a9
dec eax
mov dword [esp + 0x24], edx
mov dword [edx], eax
jmp 0x100bd5e0
lea eax, [ecx + 8]
push eax
call fcn.1012d6c2
mov edx, dword [esp + 0x4c]
add esp, 4
mov dword [esp + 0x24], eax
mov ecx, dword [edx + 4]
add ecx, 8
push ecx
push edx
push eax
call fcn.10130870
mov eax, dword [esp + 0x30]
add esp, 0xc
mov dword [eax], 0xffffffff
jmp 0x100bd5e0
xor eax, eax
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x34]
test edx, edx
je 0x100bd605
cmp dword [edx + 4], 0
jne 0x100bd630
mov eax, dword [edx]
cmp eax, 1
jge 0x100bd605
add eax, 1
mov dword [edx], eax
jne 0x100bd605
push edx
call fcn.1012d67f
add esp, 4
push 0x10
call fcn.1012d6c2
mov edx, eax
add esp, 4
mov dword [esp + 0x34], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 8
mov dword [edx + 8], 0x9c4
mov dword [edx + 0xc], 0x7e3
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x100bd655
cmp dword [ecx + 4], 4
jge 0x100bd680
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bd655
add eax, 1
mov dword [ecx], eax
jne 0x100bd655
push ecx
call fcn.1012d67f
add esp, 4
push 0x10
call fcn.1012d6c2
mov ecx, eax
add esp, 4
mov dword [esp + 0x38], ecx
mov dword [ecx], 0xffffffff
mov dword [ecx + 4], 8
mov dword [ecx + 8], 0xa27
mov dword [ecx + 0xc], 0x7e3
mov edx, dword [esp + 0x24]
test edx, edx
je 0x100bd6a9
cmp dword [edx + 4], 0
jne 0x100bd6ce
mov eax, dword [edx]
test eax, eax
jns 0x100bd6a9
add eax, 1
mov dword [edx], eax
jne 0x100bd6a9
push 0xac
push edx
call fcn.1012d6b4
add esp, 8
push 0xc
call fcn.1012d6c2
mov edx, eax
add esp, 4
mov dword [esp + 0x24], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 4
mov eax, dword [0x101594f4]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x54]
or eax, 0xffffffff
mov edx, dword [esp + 0xb0]
test ecx, ecx
cmovne eax, ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x68], eax
test ecx, ecx
mov eax, 0xe60088ff
cmovne eax, ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x64], eax
test ecx, ecx
mov eax, 0x64
cmovne eax, ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x40], eax
test ecx, ecx
mov eax, 0x23
cmovne eax, ecx
test edx, edx
mov dword [esp + 0x44], eax
mov ecx, 0xfe000000
mov eax, ecx
cmovne eax, edx
cmp dword [esp + 0x5c], 0
mov edx, 0xe60088ff
cmove eax, edx
cmp dword [esp + 0x58], 0
mov edx, dword [esp + 0xb4]
cmove eax, ecx
test edx, edx
mov dword [esp + 0x54], eax
mov eax, 0xff
cmovne eax, edx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x60]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x10177718]
mov dword [esp + 0x50], ecx
test eax, eax
je 0x100bd821
push 0x90
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push dword [esp + 0x6c]
mov eax, dword [esp + 0x28]
push dword [esp + 0x4c]
mov edx, dword [esp + 0x40]
push dword [esp + 0x60]
mov ecx, dword [0x10177728]
push dword [esp + 0x68]
push dword [esp + 0x84]
push dword [esp + 0x58]
push dword [esp + 0x58]
push dword [esp + 0xa4]
push dword [esp + 0xac]
push dword [esp + 0x60]
push dword [esp + 0x8c]
push dword [esp + 0x94]
push dword [esp + 0x80]
push dword [esp + 0xa4]
push dword [esp + 0x8c]
push eax
push dword [esp + 0xb8]
mov eax, dword [esp + 0x78]
push dword [esp + 0xc0]
push dword [esp + 0xc8]
push edi
push eax
call fcn.10068950
mov ecx, dword [0x10177728]
jmp 0x100bda05
cmp dword [0x10178390], 0
jne 0x100bd8d2
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x10178390], eax
mov dword [esp + 0xd0], 0xb
mov dword [esp + 0xd4], 0x100bdf00
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0xe4], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0xe0], eax
lea eax, [esp + 0xc8]
push eax
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], str.LiteInputEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x100bd8d2
mov ecx, dword [esp + 0x4c]
call fcn.100f5370
push 0
push dword [0x10178390]
push 0
push 0
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x28]
push dword [esp + 0x28]
push 0x80400000
push str.LiteInputEx
push str.LiteInputEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 1
push str.Isunicode
push eax
mov dword [0x10177718], eax
call dword [sym.imp.USER32.dll_SetPropW]
push 0x93
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push dword [0x10177718]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
push 0
push dword [esp + 0x74]
cmp dword [esp + 0x98], 0
push dword [esp + 0x54]
setne al
cmp dword [esp + 0x4c], 0
push dword [esp + 0x68]
movzx eax, al
push dword [esp + 0x70]
push dword [esp + 0x8c]
push dword [esp + 0x60]
push dword [esp + 0x60]
push dword [esp + 0xac]
push eax
setne al
movzx eax, al
push eax
push 0
push 0
push dword [esp + 0x9c]
mov eax, dword [esp + 0x60]
push dword [esp + 0xa4]
push dword [esp + 0x90]
push dword [esp + 0xb4]
push dword [esp + 0x9c]
push eax
push dword [esp + 0xc8]
mov eax, dword [esp + 0x88]
push dword [esp + 0xd0]
push dword [esp + 0xd8]
push edi
push eax
mov eax, dword [esp + 0x9c]
push 0
push eax
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push dword [0x10177718]
push 0
call sym.ExuiKrnln_X32.dll_CreateControl_EditboxEx
mov ecx, eax
mov dword [0x10177728], ecx
test byte [ebp + 0x74], 2
jne 0x100bda26
test esi, esi
je 0x100bda26
movss xmm0, dword [esi + 0x10c]
mulss xmm0, dword [0x10161858]
cvttss2si eax, xmm0
push eax
jmp 0x100bda28
push 0x64
push ecx
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
mov eax, dword [0x10177408]
push dword [0x10177728]
mov dword [esp + 0x64], eax
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
push 0x50
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push dword [0x10177718]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0x84]
test eax, eax
je 0x100bda82
push edi
push dword [0x1017770c]
push 0
push 0
push 1
push dword [0x10177728]
call eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0
push str.Shell_TrayWnd
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x100bdaaf
test esi, esi
je 0x100bdac4
push str.Tab_Control
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100bdac4
push dword [0x10177718]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [sym.imp.USER32.dll_GetForegroundWindow]
call eax
mov esi, eax
mov byte [0x10177714], 1
mov byte [0x10177716], 1
mov byte [esp + 0x1f], 0
call fcn.1013aefb
push 0
push 0
mov dword [0x10177724], eax
xorps xmm0, xmm0
push 0
lea eax, [esp + 0x9c]
movaps xmmword [esp + 0x9c], xmm0
push eax
movq qword [esp + 0xb0], xmm0
mov dword [esp + 0xb8], 0
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x100bdc80
nop dword [eax]
cmp eax, 0xffffffff
je 0x100bdc80
cmp byte [0x10177714], 0
je 0x100bdc7b
cmp dword [esp + 0x94], 0x3124
jne 0x100bdb54
cmp dword [esp + 0x98], 0x3125
je 0x100bdc80
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x10177718]
cmp eax, esi
je 0x100bdb6c
cmp eax, ecx
jne 0x100bdc63
mov eax, dword [esp + 0x94]
cmp eax, 0x20a
jne 0x100bdbba
cmp dword [esp + 0x3c], 0
je 0x100bdc63
cmp ecx, dword [esp + 0x90]
je 0x100bdc29
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0x98]
mov edx, dword [0x10177728]
push ecx
push eax
push ecx
push eax
mov eax, dword [edx + 0x44]
push 0x29e
push edx
call eax
jmp 0x100bdc45
cmp eax, 0x201
je 0x100bdbe9
cmp eax, 0x204
je 0x100bdbe9
cmp eax, 0xa1
je 0x100bdbe9
cmp eax, 0xa4
je 0x100bdbe9
cmp eax, 0x7b
je 0x100bdbe9
cmp eax, 0x206
je 0x100bdbe9
cmp eax, 0x203
jne 0x100bdbf2
cmp ecx, dword [esp + 0x90]
jne 0x100bdc63
cmp eax, 0x100
jne 0x100bdc29
mov eax, dword [esp + 0x98]
cmp eax, 0xd
jne 0x100bdc0c
cmp dword [esp + 0x3c], 0
jmp 0x100bdc27
cmp eax, 0x26
jne 0x100bdc18
cmp dword [esp + 0x3c], 0
jmp 0x100bdc27
cmp eax, 0x28
jne 0x100bdc24
cmp dword [esp + 0x3c], 0
jmp 0x100bdc27
cmp eax, 9
je 0x100bdc6a
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x100bdb20
jmp 0x100bdc80
mov byte [esp + 0x1f], 1
jmp 0x100bdc86
cmp esi, ecx
je 0x100bdc86
test esi, esi
je 0x100bdc86
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x100bdc80
mov byte [esp + 0x1f], 1
mov ecx, dword [0x10177718]
push 0x93
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x10177728]
test eax, eax
je 0x100bdd16
cmp dword [eax + 0x2c], 0
jle 0x100bdd16
cmp dword [eax + 0x1bc], 0
jne 0x100bdcc9
mov ecx, dword [eax + 0x168]
call fcn.100f5370
jmp 0x100bdced
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 9
push ecx
push eax
push 0x3fa
push dword [eax + 0x28]
mov dword [esp + 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, eax
lea ecx, [esp + 0x20]
call fcn.100f5270
mov eax, dword [0x10177728]
push 0
mov eax, dword [eax + 0x1c4]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax + 0x38]
mov eax, dword [0x10177728]
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x100bdd30
push edi
push 0x3124
push 0
push 0
push 2
push eax
call ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bdd4b
add eax, 1
mov dword [ecx], eax
jne 0x100bdd4b
push ecx
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bdd66
add eax, 1
mov dword [ecx], eax
jne 0x100bdd66
push ecx
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bdd81
add eax, 1
mov dword [ecx], eax
jne 0x100bdd81
push ecx
call fcn.1012d67f
add esp, 4
push dword [esp + 0x60]
mov byte [0x10177714], 0
mov byte [0x10177716], 0
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
cmp byte [esp + 0x1f], 0
je 0x100bddf6
mov eax, dword [esp + 0x90]
cmp eax, dword [0x10177718]
je 0x100bddf6
push 0x1c
call fcn.1012d684
movups xmm0, xmmword [esp + 0x94]
add esp, 4
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0xa0]
push 0
push 0
push eax
push 0x100bcd40
movq qword [eax + 0x10], xmm0
mov ecx, dword [esp + 0xb8]
push 0
push 0
mov dword [eax + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
je 0x100bdee5
cmp dword [edi + 4], 1
jl 0x100bdee5
mov edx, dword [0x10177eb0]
cmp edx, 0x9600000
jle 0x100bde74
mov ecx, dword [0x101779e8]
nop dword [eax]
mov eax, dword [ecx*4 + 0x101779f0]
test eax, eax
je 0x100bde59
sub edx, dword [eax + 4]
add dword [eax], 1
mov dword [0x10177eb0], edx
jne 0x100bde4e
push eax
call fcn.1012d67f
mov edx, dword [0x10177eb0]
add esp, 4
mov ecx, dword [0x101779e8]
mov dword [ecx*4 + 0x101779f0], 0
inc ecx
xor esi, esi
mov eax, ecx
cmp eax, 0x96
cmovg ecx, esi
mov dword [0x101779e8], ecx
cmp edx, 0x9600000
jg 0x100bde20
mov esi, dword [0x101779e0]
inc esi
mov dword [0x101779e0], esi
cmp esi, 0x96
jle 0x100bde95
mov dword [0x101779e0], 0
xor esi, esi
mov eax, dword [esi*4 + 0x101779f0]
test eax, eax
je 0x100bdebd
sub edx, dword [eax + 4]
add dword [eax], 1
mov dword [0x10177eb0], edx
jne 0x100bdebd
push eax
call fcn.1012d67f
mov edx, dword [0x10177eb0]
add esp, 4
add edx, dword [edi + 4]
mov eax, edi
mov dword [esi*4 + 0x101779f0], edi
mov dword [0x10177eb0], edx
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x74
mov ecx, dword [esp + 0x12c]
xor edi, edi
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x74