Function at 0x100966f0
Capabilities:
Check for unmoving mouse cursor
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x98
mov eax, dword [0x10158008]
xor eax, esp
mov dword [esp + 0x94], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x34], eax
push esi
mov esi, dword [ebp + 0x28]
push edi
mov edi, dword [ebp + 0xc]
test ecx, ecx
je 0x100971db
cmp dword [ebp + 0x1c], 0
je 0x1009679d
test edi, edi
je 0x100971db
push 0
push edi
push ecx
call sym.ExuiKrnln_X32.dll_Close_MenuEx
mov esi, dword [edi + 0x188]
xor eax, eax
mov edx, dword [esi + 0x190]
test edx, edx
jle 0x10096771
mov ecx, dword [esi + 0x194]
cmp dword [ecx], edi
je 0x10096774
inc eax
add ecx, 4
cmp eax, edx
jl 0x10096765
or eax, 0xffffffff
push 0
push 0
push 0
push eax
mov edx, 0x282
mov ecx, esi
call fcn.10098000
pop edi
pop esi
mov ecx, dword [esp + 0x94]
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x24
test esi, esi
cmove esi, dword [0x1015a408]
test byte [ebp + 0x24], 1
mov dword [esp + 0x2c], esi
je 0x1009680e
call fcn.1011cc9a
sub eax, dword [0x1015a6bc]
cmp eax, 0x12c
jge 0x1009680a
cmp esi, dword [0x1015a6cc]
jne 0x1009680a
push 0
push dword [0x1015a6b8]
mov dword [0x1015a6cc], 0
push dword [0x1015a6c8]
call sym.ExuiKrnln_X32.dll_Close_MenuEx
push 0
push edi
mov edi, dword [esp + 0x30]
push edi
call sym.ExuiKrnln_X32.dll_Close_MenuEx
pop edi
pop esi
mov ecx, dword [esp + 0x94]
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x24
mov ecx, dword [esp + 0x28]
mov eax, dword [0x1015a6c8]
cmp ecx, eax
jne 0x10096829
push 0
push dword [0x1015a6b8]
push eax
call sym.ExuiKrnln_X32.dll_Close_MenuEx
mov ecx, dword [esp + 0x28]
push 0
push edi
push ecx
call sym.ExuiKrnln_X32.dll_Close_MenuEx
mov eax, dword [ebp + 0x24]
mov dword [0x1015a6cc], esi
mov esi, dword [esp + 0x28]
mov dword [0x1015a6c0], eax
mov dword [0x1015a6c8], esi
mov dword [0x1015a6b8], edi
cmp dword [esi + 0x190], 0
je 0x100971db
test edi, edi
mov eax, esi
cmovne eax, edi
mov ecx, eax
mov dword [esp + 0x30], eax
call fcn.10095bc0
mov eax, dword [esi + 0x1f8]
mov edi, dword [esi + 0x1d4]
mov ecx, dword [esi + 0x1c0]
mov dword [esp + 0x38], 0xf
mov esi, dword [eax]
mov edx, dword [eax + 8]
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0x30]
mov esi, dword [esi + 0x1ac]
add esi, dword [eax + 0xc]
add esi, dword [eax + 4]
test edi, edi
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], esi
mov esi, 0x14
cmovle esi, dword [esp + 0x38]
add esi, ecx
mov ecx, dword [esp + 0x28]
add esi, dword [eax + 0x1a8]
push eax
mov dword [eax + 0x11c], 0x3f800000
add esi, edx
push dword [ecx + 0x17c]
add esi, edi
push dword [eax + 0x17c]
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x40]
add dword [esp + 0x28], esi
push eax
mov eax, dword [ecx + 0x1ec]
push 0x284
push ecx
call eax
cmp eax, 1
jne 0x1009690f
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0x50]
mov eax, dword [eax + 0x54]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], eax
cmp dword [ebp + 0x24], 0
je 0x10096e09
mov esi, dword [esp + 0x2c]
lea eax, [esp + 0x60]
push eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x64], xmm0
push dword [esi + 0x28]
call dword [sym.imp.USER32.dll_GetWindowRect]
sub esp, 8
mov dword [esp + 0x3c], 0
lea edx, [esp + 0x40]
mov dword [esp + 0x40], 0
lea ecx, [esp + 0x3c]
call fcn.100d6590
mov eax, dword [ebp + 0x24]
add esp, 8
test al, 4
jne 0x10096acb
movss xmm1, dword [esi + 0x11c]
movss xmm0, dword [0x10142934]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x10096986
movd xmm1, dword [esp + 0x20]
cvtdq2pd xmm1, xmm1
jmp 0x100969b8
movd xmm0, dword [esp + 0x20]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x20]
movsd xmm1, qword [esp + 0x20]
cvttsd2si edi, xmm1
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x100969d9
movd xmm1, dword [esp + 0x14]
cvtdq2pd xmm1, xmm1
jmp 0x10096a0b
movd xmm0, dword [esp + 0x14]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x20]
movsd xmm1, qword [esp + 0x20]
mov eax, dword [esp + 0x2c]
cvttsd2si esi, xmm1
movss xmm1, dword [eax + 0x11c]
ucomiss xmm1, xmm0
mov dword [esp + 0x14], esi
lahf
test ah, 0x44
jp 0x10096a34
movd xmm1, dword [esp + 0x1c]
cvtdq2pd xmm1, xmm1
jmp 0x10096a66
movd xmm0, dword [esp + 0x1c]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x20]
movsd xmm1, qword [esp + 0x20]
cvttsd2si eax, xmm1
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
movss xmm1, dword [eax + 0x11c]
ucomiss xmm1, xmm0
movd xmm0, dword [esp + 0x18]
lahf
test ah, 0x44
jp 0x10096a9a
mov eax, dword [ebp + 0x24]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x18], ecx
jmp 0x10096ad7
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
mov eax, dword [ebp + 0x24]
add esp, 8
fstp qword [esp + 0x20]
movsd xmm0, qword [esp + 0x20]
cvttsd2si ecx, xmm0
mov dword [esp + 0x18], ecx
jmp 0x10096ad7
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, 0x4000
mov eax, dword [esp + 0x2c]
je 0x10096aed
mov edx, dword [esp + 0x1c]
add edx, dword [eax + 0x50]
mov dword [esp + 0x1c], edx
test dword [ebp + 0x24], 0x8000
je 0x10096afd
add ecx, dword [eax + 0x54]
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp + 0x24]
mov eax, dword [sym.imp.USER32.dll_GetCursorPos]
test cl, 0x10
je 0x10096b45
lea ecx, [esp + 0x20]
xorps xmm0, xmm0
push ecx
movlpd qword [esp + 0x24], xmm0
call eax
mov ecx, dword [ebp + 0x24]
add edi, dword [esp + 0x20]
test cl, 8
je 0x10096b40
mov edx, dword [esp + 0x1c]
lea eax, [edi + edx]
cmp eax, dword [esp + 0x34]
mov eax, dword [sym.imp.USER32.dll_GetCursorPos]
jle 0x10096b45
mov edi, dword [esp + 0x20]
sub edi, edx
jmp 0x10096b45
mov eax, dword [sym.imp.USER32.dll_GetCursorPos]
test cl, 0x20
je 0x10096b9d
lea ecx, [esp + 0x20]
xorps xmm0, xmm0
push ecx
movlpd qword [esp + 0x24], xmm0
call eax
test byte [ebp + 0x24], 8
je 0x10096b8f
mov edx, dword [esp + 0x24]
lea eax, [esi + edx]
mov dword [esp + 0x20], eax
add eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x38]
jle 0x10096b85
sub edx, esi
mov esi, dword [esp + 0x18]
sub edx, esi
mov ecx, edx
mov dword [esp + 0x14], ecx
jmp 0x10096ba5
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
jmp 0x10096ba1
mov ecx, dword [esp + 0x14]
add ecx, dword [esp + 0x24]
mov dword [esp + 0x14], ecx
jmp 0x10096ba1
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov eax, dword [ebp + 0x24]
mov edx, dword [esp + 0x2c]
test al, 0x40
je 0x10096bc0
mov eax, dword [edx + 0x74]
add eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x14]
add edi, eax
mov eax, dword [ebp + 0x24]
test al, al
jns 0x10096bd8
mov eax, dword [edx + 0x78]
add eax, dword [esp + 0x64]
mov esi, dword [esp + 0x18]
add ecx, eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x14], ecx
test eax, 0x100
je 0x10096bf6
mov eax, dword [edx + 0x50]
sub eax, dword [esp + 0x1c]
add eax, dword [esp + 0x60]
add eax, dword [edx + 0x74]
mov ecx, dword [esp + 0x14]
add edi, eax
mov eax, dword [ebp + 0x24]
test eax, 0x200
je 0x10096c16
mov eax, dword [edx + 0x54]
sub eax, esi
mov esi, dword [esp + 0x18]
add eax, dword [edx + 0x78]
add eax, dword [esp + 0x64]
add ecx, eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x14], ecx
test eax, 0x400
je 0x10096c6e
mov esi, dword [edx + 0x74]
sub esi, dword [esp + 0x1c]
add esi, edi
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x18]
test al, 8
je 0x10096c66
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], eax
jns 0x10096c62
mov eax, dword [edx + 0x50]
add eax, edi
mov edi, dword [esp + 0x60]
add eax, dword [edx + 0x74]
add edi, eax
mov eax, dword [esp + 0x1c]
add eax, edi
cmp eax, dword [esp + 0x34]
jl 0x10096c6e
mov eax, dword [esp + 0x20]
mov edi, eax
jmp 0x10096c6e
mov edi, dword [esp + 0x20]
add edi, dword [esp + 0x60]
test dword [ebp + 0x24], 0x800
je 0x10096cd0
mov eax, ecx
sub eax, esi
add eax, dword [edx + 0x78]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x24]
test al, 8
je 0x10096cc2
mov eax, dword [esp + 0x64]
add eax, dword [esp + 0x20]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x20], eax
jns 0x10096cba
mov eax, dword [edx + 0x54]
add eax, ecx
mov ecx, dword [esp + 0x64]
add eax, dword [edx + 0x78]
add ecx, eax
mov dword [esp + 0x14], ecx
lea eax, [ecx + esi]
cmp eax, dword [esp + 0x38]
jl 0x10096cd4
mov eax, dword [esp + 0x20]
mov ecx, eax
mov dword [esp + 0x14], ecx
jmp 0x10096cd4
mov ecx, dword [esp + 0x20]
add ecx, dword [esp + 0x64]
mov dword [esp + 0x14], ecx
jmp 0x10096cd4
mov ecx, dword [esp + 0x14]
mov eax, dword [ebp + 0x24]
test eax, 0x1000
je 0x10096d2a
mov ecx, dword [esp + 0x14]
test al, 8
je 0x10096d1b
mov esi, dword [esp + 0x18]
mov eax, edi
sub eax, dword [esp + 0x1c]
add eax, dword [edx + 0x74]
add eax, dword [esp + 0x60]
mov dword [esp + 0x20], eax
test eax, eax
jle 0x10096d1b
mov eax, dword [edx + 0x74]
add eax, edi
add eax, dword [edx + 0x50]
add eax, dword [esp + 0x60]
add eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x34]
jle 0x10096d1b
mov edi, dword [esp + 0x20]
jmp 0x10096d27
mov eax, dword [edx + 0x50]
add eax, dword [edx + 0x74]
add eax, dword [esp + 0x60]
add edi, eax
mov eax, dword [ebp + 0x24]
test eax, 0x2000
je 0x10096d7a
test al, 8
je 0x10096d6a
mov eax, ecx
sub eax, esi
mov esi, dword [esp + 0x18]
add eax, dword [edx + 0x78]
add eax, dword [esp + 0x64]
mov dword [esp + 0x20], eax
test eax, eax
jle 0x10096d6a
mov eax, dword [edx + 0x54]
add eax, ecx
add eax, dword [edx + 0x78]
add eax, dword [esp + 0x64]
add eax, esi
cmp eax, dword [esp + 0x38]
jle 0x10096d6a
mov esi, dword [esp + 0x20]
mov dword [esp + 0x14], esi
jmp 0x10096d7e
mov eax, dword [edx + 0x54]
add eax, dword [edx + 0x78]
add eax, dword [esp + 0x64]
add ecx, eax
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov edx, dword [esp + 0x90]
mov ecx, edx
cmp dword [esp + 0x1c], edx
mov edx, dword [esp + 0x18]
cmovle ecx, dword [esp + 0x1c]
cmp edx, dword [esp + 0x94]
mov dword [esp + 0x1c], ecx
cmovg edx, dword [esp + 0x94]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
add eax, edi
mov dword [esp + 0x18], edx
mov byte [ecx + 0x1a4], 1
cmp eax, dword [esp + 0x90]
jle 0x10096f07
mov eax, dword [esp + 0x1c]
sub edi, eax
test edi, edi
jle 0x10096efe
mov byte [ecx + 0x1a4], 0
jmp 0x10096f07
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x14]
test edi, edi
js 0x10096e19
test esi, esi
jns 0x10096e36
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
test edi, edi
cmovs edi, dword [esp + 0x20]
test esi, esi
cmovs esi, dword [esp + 0x24]
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x10096d7e
movss xmm1, dword [eax + 0x11c]
movss xmm0, dword [0x10142934]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x10096e67
movd xmm1, dword [esp + 0x1c]
cvtdq2pd xmm1, xmm1
jmp 0x10096e99
movd xmm0, dword [esp + 0x1c]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x20]
movsd xmm1, qword [esp + 0x20]
cvttsd2si eax, xmm1
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x2c]
movss xmm1, dword [eax + 0x11c]
ucomiss xmm1, xmm0
movd xmm0, dword [esp + 0x18]
lahf
test ah, 0x44
jp 0x10096ecd
cvtdq2pd xmm0, xmm0
cvttsd2si eax, xmm0
mov dword [esp + 0x18], eax
jmp 0x10096d7e
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
add esp, 8
cvttsd2si eax, xmm0
mov dword [esp + 0x18], eax
jmp 0x10096d7e
mov edi, dword [esp + 0x90]
sub edi, eax
lea eax, [esi + edx]
cmp eax, dword [esp + 0x94]
jle 0x10096f29
mov eax, esi
mov esi, dword [esp + 0x94]
sub eax, edx
sub esi, edx
test eax, eax
cmovg esi, eax
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x28]
push ecx
push dword [eax + 0x17c]
push dword [ecx + 0x17c]
push ecx
push 0x286
push eax
mov eax, dword [eax + 0x1ec]
call eax
cmp eax, 1
je 0x100971db
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x10096f61
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [esp + 0x30]
cmp dword [eax + 0x19c], 0
jne 0x10097043
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ecx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x44]
push 0
push eax
push ecx
push dword [esp + 0x30]
push esi
push edi
push 0x80400000
push str.MenuEx
push str.MenuEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, eax
mov eax, dword [esp + 0x30]
mov dword [eax + 0x28], ecx
test ecx, ecx
je 0x100971db
mov esi, dword [sym.imp.USER32.dll_SetPropW]
push ecx
push str.MainMenu
push ecx
call esi
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx + 0x28]
push eax
push str.MenuWindow
push eax
call esi
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x30]
push 0x90
push dword [esp + 0x1c]
push dword [esp + 0x24]
push esi
push edi
push 0xffffffffffffffff
push dword [eax + 0x28]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0x28]
push 0
push 0x320
push 0
push dword [eax + 0x1e8]
push 0
push 0x320
push dword [eax + 0x1ec]
push 0x10098860
push dword [eax + 0x1e4]
mov eax, dword [esp + 0x54]
push 0
push 1
push 0
push 0
push 0
push 0
push dword [eax + 0x28]
push 0
push eax
call sym.ExuiKrnln_X32.dll_ControlCreate
jmp 0x1009705b
mov ecx, dword [esp + 0x18]
push 0x10
push ecx
push dword [esp + 0x24]
push esi
push edi
push 0xffffffffffffffff
push dword [eax + 0x28]
call dword [sym.imp.USER32.dll_SetWindowPos]
test byte [ebp + 0x24], 2
mov ecx, dword [esp + 0x30]
mov dword [ecx + 0x19c], 1
mov dword [ecx + 0x1a0], 1
mov dword [ecx + 0x1b4], 0xffffffff
mov dword [ecx + 0x1bc], 0xffffffff
mov dword [ecx + 0x1b8], 0xffffffff
mov dword [ecx + 0x198], 0
jne 0x100970bf
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x100970bf
movss xmm0, dword [eax + 0x11c]
mulss xmm0, dword [0x10142aec]
cvttss2si eax, xmm0
jmp 0x100970c4
mov eax, 0x64
push eax
push ecx
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
push 0x50
push dword [esp + 0x1c]
push dword [esp + 0x24]
push esi
mov esi, dword [esp + 0x40]
push edi
push 0xffffffffffffffff
push dword [esi + 0x28]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [ebp + 0x20]
mov dword [0x1015a6d0], eax
mov eax, dword [esp + 0x28]
push esi
push dword [eax + 0x17c]
push dword [esi + 0x17c]
push esi
push 0x287
push eax
mov eax, dword [eax + 0x1ec]
call eax
xorps xmm0, xmm0
mov dword [esp + 0x58], 0
movaps xmmword [esp + 0x40], xmm0
movq qword [esp + 0x50], xmm0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0
mov edi, eax
push str.Shell_TrayWnd
mov dword [esp + 0x28], edi
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, edi
jne 0x10097154
push dword [esi + 0x28]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [esp + 0x20], eax
cmp dword [esi + 0x19c], 0
jle 0x1009719c
mov edi, dword [sym.imp.USER32.dll_GetPropW]
push 0
push 0
push 0
push 0
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x10097291
mov eax, dword [esp + 0x44]
cmp eax, 0x12
je 0x1009719c
cmp eax, 0x3124
jne 0x100971f1
cmp dword [esp + 0x48], 0x3125
jne 0x1009725f
mov edi, dword [esp + 0x28]
push 0
push esi
push edi
call sym.ExuiKrnln_X32.dll_Close_MenuEx
mov dword [0x1015a6c8], 0
mov dword [0x1015a6b8], 0
mov dword [0x1015a6d0], 0
call fcn.1011cc9a
mov dword [0x1015a6bc], eax
mov dword [esi + 0x1a0], 0
mov ecx, dword [esp + 0x9c]
pop edi
pop esi
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x24
cmp eax, 0x200
jne 0x10097230
push str.MenuWindow
push dword [esp + 0x44]
call edi
test eax, eax
jne 0x1009725f
mov eax, dword [ebp + 0x20]
test eax, eax
je 0x10097217
mov eax, dword [eax + 0x28]
cmp eax, dword [esp + 0x40]
je 0x1009725f
push 1
push 0
push 0
push 0
lea eax, [esp + 0x50]
push eax
mov eax, dword [sym.imp.USER32.dll_PeekMessageW]
call eax
jmp 0x100972db
cmp eax, 0x201
je 0x10097271
cmp eax, 0x204
je 0x10097271
cmp eax, 0xa1
je 0x10097271
cmp eax, 0xa4
je 0x10097271
cmp eax, 0x7b
je 0x10097271
cmp eax, 0x206
je 0x10097271
cmp eax, 0x203
je 0x10097271
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x100972b1
cmp eax, dword [esp + 0x20]
je 0x100972b1
jmp 0x100972a1
push str.MenuWindow
push dword [esp + 0x44]
call edi
test eax, eax
jne 0x100972b1
mov edi, dword [esp + 0x28]
push eax
push eax
push edi
call sym.ExuiKrnln_X32.dll_Close_MenuEx
jmp 0x100971a0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x100972db
cmp eax, dword [esp + 0x20]
je 0x100972db
push str.ChildMenu
push eax
call edi
test eax, eax
je 0x1009719c
push 1
push 0
push 0
push 0
lea eax, [esp + 0x50]
push eax
mov eax, dword [sym.imp.USER32.dll_PeekMessageW]
call eax
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [esi + 0x19c], 0
jg 0x10097163
jmp 0x1009719c