Function at 0x100be740
Capabilities:
Check for unmoving mouse cursor
Create thread
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x1c8
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x1c4], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x2c]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 0x4c]
test edi, edi
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x30]
cmove edi, dword [0x10177404]
test byte [ebp + 0x48], 1
mov dword [esp + 0x16c], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp + 0x18], esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x4c], edi
je 0x100be80c
call fcn.1013aefb
sub eax, dword [0x10177734]
cmp eax, 0x12c
jge 0x100be80c
cmp edi, dword [0x1017773c]
jne 0x100be80c
mov dword [0x10177734], 0
call fcn.100be6e0
mov eax, dword [esp + 0x3c]
pop edi
pop esi
mov ecx, dword [esp + 0x1c4]
xor ecx, esp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x48
call fcn.100be6e0
cmp dword [ebp + 0x48], 0
mov dword [0x1017773c], edi
je 0x100bec74
lea eax, [esp + 0x170]
xorps xmm0, xmm0
push eax
push dword [edi + 0x28]
movaps xmmword [esp + 0x178], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x184]
mov dword [esp + 0x184], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ecx, dword [ebp + 0x48]
test cl, 4
jne 0x100be9b7
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
movd xmm0, dword [esp + 0x14]
lahf
test ah, 0x44
jp 0x100be896
cvtdq2pd xmm0, xmm0
jmp 0x100be8ba
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si eax, xmm0
movd xmm0, esi
mov dword [esp + 0x14], eax
lahf
test ah, 0x44
jp 0x100be8e1
cvtdq2pd xmm0, xmm0
jmp 0x100be905
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x1c]
mov dword [esp + 0x18], eax
lahf
test ah, 0x44
jp 0x100be92e
cvtdq2pd xmm0, xmm0
jmp 0x100be952
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si esi, xmm0
movd xmm0, dword [esp + 0x24]
lahf
mov dword [esp + 0x1c], esi
test ah, 0x44
jp 0x100be986
mov ecx, dword [ebp + 0x48]
cvtdq2pd xmm0, xmm0
cvttsd2si eax, xmm0
mov dword [esp + 0x24], eax
jmp 0x100be9bf
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
mov ecx, dword [ebp + 0x48]
add esp, 8
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
cvttsd2si eax, xmm0
mov dword [esp + 0x24], eax
jmp 0x100be9bf
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
test ecx, 0x4000
je 0x100be9ce
add esi, dword [edi + 0x50]
mov dword [esp + 0x1c], esi
test ecx, 0x8000
je 0x100be9dd
add eax, dword [edi + 0x54]
mov dword [esp + 0x24], eax
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
test cl, 0x10
je 0x100bea37
lea eax, [esp + 0x30]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x34], xmm0
call esi
test byte [ebp + 0x48], 8
je 0x100bea2b
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
add eax, edx
mov ecx, dword [esp + 0x30]
add eax, ecx
cmp eax, dword [esp + 0x1a0]
jle 0x100bea23
mov edx, ecx
sub edx, dword [esp + 0x1c]
mov dword [esp + 0x14], edx
jmp 0x100bea37
add edx, ecx
mov dword [esp + 0x14], edx
jmp 0x100bea37
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x30]
mov dword [esp + 0x14], eax
test byte [ebp + 0x48], 0x20
je 0x100bea81
lea eax, [esp + 0x30]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x34], xmm0
call esi
test byte [ebp + 0x48], 8
je 0x100beb3f
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
lea eax, [esi + edx]
add eax, ecx
cmp eax, dword [esp + 0x1a4]
jle 0x100bea7b
sub ecx, esi
sub ecx, edx
mov dword [esp + 0x18], ecx
jmp 0x100bea85
add edx, ecx
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 0x48]
mov esi, dword [esp + 0x170]
test dl, 0x40
je 0x100bea9d
mov eax, dword [edi + 0x74]
add eax, esi
add dword [esp + 0x14], eax
test dl, dl
mov edx, dword [esp + 0x174]
jns 0x100beab3
mov eax, dword [edi + 0x78]
add eax, edx
add ecx, eax
mov dword [esp + 0x18], ecx
mov eax, dword [ebp + 0x48]
test eax, 0x100
je 0x100bead7
mov eax, dword [edi + 0x74]
sub eax, dword [esp + 0x1c]
add eax, dword [edi + 0x50]
mov esi, dword [esp + 0x170]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [ebp + 0x48]
test eax, 0x200
je 0x100beaf1
mov eax, dword [edi + 0x54]
sub eax, dword [esp + 0x24]
add eax, dword [edi + 0x78]
add eax, edx
add dword [esp + 0x18], eax
mov eax, dword [ebp + 0x48]
test eax, 0x400
je 0x100beb5d
mov ecx, dword [edi + 0x74]
test al, 8
je 0x100beb53
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x174]
add eax, ecx
add eax, esi
jns 0x100beb50
mov eax, dword [edi + 0x50]
add eax, ecx
mov dword [esp + 0x30], eax
add eax, dword [esp + 0x1c]
add eax, dword [esp + 0x14]
add eax, esi
cmp eax, dword [esp + 0x1a0]
jge 0x100beb50
mov eax, dword [esp + 0x30]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [ebp + 0x48]
jmp 0x100beb5d
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x34]
mov dword [esp + 0x18], ecx
jmp 0x100bea85
mov eax, dword [ebp + 0x48]
sub ecx, dword [esp + 0x1c]
add ecx, esi
add dword [esp + 0x14], ecx
test eax, 0x800
je 0x100bebb8
mov ecx, dword [edi + 0x78]
test al, 8
je 0x100bebae
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x24]
mov esi, dword [esp + 0x170]
add eax, ecx
add eax, edx
jns 0x100bebab
mov eax, dword [edi + 0x54]
add eax, ecx
mov dword [esp + 0x30], eax
add eax, dword [esp + 0x24]
add eax, dword [esp + 0x18]
add eax, edx
cmp eax, dword [esp + 0x1a4]
jge 0x100bebab
mov eax, dword [esp + 0x30]
add eax, edx
add dword [esp + 0x18], eax
mov eax, dword [ebp + 0x48]
jmp 0x100bebb8
mov eax, dword [ebp + 0x48]
sub ecx, dword [esp + 0x24]
add ecx, edx
add dword [esp + 0x18], ecx
test eax, 0x1000
je 0x100bec08
mov ecx, dword [edi + 0x74]
test al, 8
je 0x100bebfa
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x1c]
add eax, ecx
add eax, esi
test eax, eax
jle 0x100bebfa
mov eax, dword [esp + 0x1c]
add eax, ecx
add eax, dword [esp + 0x14]
add eax, dword [edi + 0x50]
add eax, esi
cmp eax, dword [esp + 0x1a0]
jle 0x100bebfa
sub ecx, dword [esp + 0x1c]
add ecx, esi
add dword [esp + 0x14], ecx
jmp 0x100bec05
mov eax, dword [edi + 0x50]
add eax, ecx
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [ebp + 0x48]
test eax, 0x2000
je 0x100bed16
mov ecx, dword [edi + 0x78]
test al, 8
je 0x100bec64
mov esi, dword [esp + 0x18]
mov eax, esi
sub eax, dword [esp + 0x24]
add eax, ecx
add eax, edx
test eax, eax
jle 0x100bec53
mov eax, dword [esp + 0x24]
add eax, esi
add eax, ecx
add eax, edx
add eax, dword [edi + 0x54]
cmp eax, dword [esp + 0x1a4]
jle 0x100bec53
sub ecx, dword [esp + 0x24]
add ecx, edx
add esi, ecx
mov dword [esp + 0x18], esi
jmp 0x100bed16
lea eax, [ecx + edx]
add eax, dword [edi + 0x54]
add esi, eax
mov dword [esp + 0x18], esi
jmp 0x100bed16
mov eax, dword [edi + 0x54]
add eax, ecx
add eax, edx
add dword [esp + 0x18], eax
jmp 0x100bed16
test edi, edi
je 0x100bed16
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
movd xmm0, dword [esp + 0x1c]
lahf
test ah, 0x44
jp 0x100bec9d
cvtdq2pd xmm0, xmm0
jmp 0x100becc1
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
lahf
test ah, 0x44
jp 0x100becea
cvtdq2pd xmm0, xmm0
jmp 0x100bed0e
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
cvttsd2si eax, xmm0
mov dword [esp + 0x24], eax
cmp dword [0x10178398], 0
jne 0x100bedc2
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x10178398], eax
mov dword [esp + 0x18c], 3
mov dword [esp + 0x190], 0x1005b8c0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0x1a0], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0x19c], eax
lea eax, [esp + 0x184]
push eax
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], str.PopColorPickEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x100be7f2
push 0xd0
lea eax, [esp + 0x74]
push 0
push eax
call fcn.1012f3e0
mov eax, dword [esp + 0x38]
add esp, 0xc
xor esi, esi
test eax, eax
je 0x100bf076
cmp dword [eax + 4], esi
je 0x100bf076
push 0x30
call fcn.1012d684
add esp, 4
mov esi, eax
push 0x30
push 0
push esi
call fcn.1012f3e0
mov eax, dword [esp + 0x38]
add esp, 0xc
push eax
push esi
call sym.ExuiKrnln_X32.dll_RexcUnSkinToSkinInfo
cmp dword [esi + 4], 0x2bc
jne 0x100bf076
cmp dword [esi + 8], 4
jle 0x100bee4b
mov eax, dword [esi + 0x28]
mov edx, dword [eax + 0x140]
lea eax, [esi + 0xc]
test edx, edx
js 0x100bee4e
mov dword [esp + 0x28], eax
cmp edx, dword [eax]
jge 0x100bee4e
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.100f4830
mov edx, eax
jmp 0x100bee54
lea eax, [esi + 0xc]
mov dword [esp + 0x28], eax
xor edx, edx
lea ecx, [esp + 0x7c]
call fcn.100f45a0
cmp dword [esi + 8], 5
jle 0x100bee8c
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x190]
test edx, edx
js 0x100bee8c
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100bee8c
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.100f4830
jmp 0x100bee8e
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x88]
call fcn.100f45a0
cmp dword [esi + 8], 6
jle 0x100beecb
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x1e0]
test edx, edx
js 0x100beecb
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100beecb
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.100f4830
jmp 0x100beecd
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.100f45a0
cmp dword [esi + 8], 0xd
jle 0x100bef0a
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x410]
test edx, edx
js 0x100bef0a
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100bef0a
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.100f4830
jmp 0x100bef0c
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.100f45a0
cmp dword [esi + 8], 0xe
jle 0x100bef46
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x460]
test edx, edx
js 0x100bef46
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100bef46
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.100f4830
jmp 0x100bef48
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x84]
call fcn.100f45a0
cmp dword [esi + 8], 0xf
jle 0x100bef85
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x4b0]
test edx, edx
js 0x100bef85
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100bef85
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.100f4830
jmp 0x100bef87
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x94]
call fcn.100f45a0
cmp dword [esi + 0x10], 7
jg 0x100bef9f
xor eax, eax
jmp 0x100befa5
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0xdc], eax
cmp dword [esi + 0x10], 8
jg 0x100befb6
xor eax, eax
jmp 0x100befbc
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x20]
mov dword [esp + 0xe0], eax
cmp dword [esi + 0x10], 9
jg 0x100befcd
xor eax, eax
jmp 0x100befd3
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x24]
mov dword [esp + 0xe4], eax
cmp dword [esi + 0x10], 0xb
jg 0x100befe4
xor eax, eax
jmp 0x100befea
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0xec], eax
cmp dword [esi + 0x10], 0xd
jg 0x100beffb
xor eax, eax
jmp 0x100bf001
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xa8], eax
cmp dword [esi + 0x10], 0x12
jg 0x100bf012
xor eax, eax
jmp 0x100bf018
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x48]
mov dword [esp + 0xb4], eax
cmp dword [esi + 0x10], 0x1e
jg 0x100bf029
xor eax, eax
jmp 0x100bf02f
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x78]
mov dword [esp + 0xa4], eax
cmp dword [esi + 0x10], 0x1f
jg 0x100bf040
xor eax, eax
jmp 0x100bf046
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x7c]
mov dword [esp + 0xac], eax
cmp dword [esi + 0x10], 0x20
jg 0x100bf061
xor eax, eax
mov dword [esp + 0xb0], eax
jmp 0x100bf23f
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x80]
mov dword [esp + 0xb0], eax
jmp 0x100bf23f
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x100bf095
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bf095
add eax, 1
mov dword [ecx], eax
jne 0x100bf095
push ecx
call fcn.1012d67f
add esp, 4
push 0x10
call fcn.1012d6c2
mov dword [esp + 0x80], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x7c]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x7c]
mov dword [eax + 8], 0x708
mov eax, dword [esp + 0x7c]
mov dword [eax + 0xc], 0x7e3
mov ecx, dword [esp + 0x88]
test ecx, ecx
je 0x100bf0ef
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bf0ef
add eax, 1
mov dword [ecx], eax
jne 0x100bf0ef
push ecx
call fcn.1012d67f
add esp, 4
push 0x10
call fcn.1012d6c2
mov dword [esp + 0x8c], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x88]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x88]
mov dword [eax + 8], 0
mov eax, dword [esp + 0x88]
mov dword [eax + 0xc], 0x7e3
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xdc], 0x20
mov dword [esp + 0xe0], 0xa
mov dword [esp + 0xe4], 0x50
mov dword [esp + 0xec], 0x64
mov dword [esp + 0xa8], 0xfe000000
test ecx, ecx
je 0x100bf186
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bf186
add eax, 1
mov dword [ecx], eax
jne 0x100bf186
push ecx
call fcn.1012d67f
add esp, 4
push 0x10
call fcn.1012d6c2
mov dword [esp + 0x7c], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x78]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x78]
mov dword [eax + 8], 0xd48
mov eax, dword [esp + 0x78]
mov dword [eax + 0xc], 0x7e3
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x100bf1dd
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bf1dd
add eax, 1
mov dword [ecx], eax
jne 0x100bf1dd
push ecx
call fcn.1012d67f
add esp, 4
push 0x10
call fcn.1012d6c2
mov dword [esp + 0x88], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x84]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x84]
mov dword [eax + 8], 0
mov eax, dword [esp + 0x84]
mov dword [eax + 0xc], 0x7e3
mov dword [esp + 0xa4], 0xfe000000
mov dword [esp + 0xac], 0x1a
mov dword [esp + 0xb0], 0x10
test esi, esi
je 0x100bf249
push esi
call sym.ExuiKrnln_X32.dll_RexcDisposeSkinInfo
push 0x5c
call fcn.1012d684
add esp, 4
mov dword [esp + 0x2c], eax
push 0x5c
push 0
push eax
call fcn.1012f3e0
mov eax, dword [esp + 0x48]
add esp, 0xc
movaps xmm0, xmmword [0x10161a60]
mov edx, 0x1015929c
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x12c], eax
lea eax, [esp + 0xbc]
push eax
movups xmmword [esp + 0x1c0], xmm0
call fcn.100f5110
mov dword [esp + 0xb8], eax
test eax, eax
je 0x100bf525
xor ecx, ecx
mov dword [esp + 0xe8], 5
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
mov dword [esp + 0x44], ecx
call fcn.1012d6c2
add esp, 4
mov esi, eax
push dword [esp + 0x40]
push 0
push esi
call fcn.1012f3e0
add esp, 0xc
mov dword [esp + 0xc0], esi
push dword [esp + 0x88]
push dword [esp + 0x30]
call sym.ExuiKrnln_X32.dll_RexLoadFont
mov edi, dword [esp + 0xb8]
xor esi, esi
test edi, edi
jle 0x100bf3cb
nop dword [eax]
nop dword [eax + eax]
push ecx
mov dword [esp], 0x3f800000
lea eax, [esp + 0x1b0]
push dword [esp + 0x30]
push 9
push eax
lea eax, [esp + 0x1cc]
push eax
mov eax, dword [esp + 0xd0]
push 0xffffffffffffffff
push dword [eax + esi*4]
push 0
call sym.ExuiKrnln_X32.dll_MeasureStringRect_CanvasEx
movd xmm0, dword [esp + 0xe0]
mov eax, dword [esp + 0xc0]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [esp + 0x1b4]
cvttss2si ecx, xmm0
mov dword [eax + esi*4], ecx
mov edx, dword [esp + 0xc0]
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x28], edx
cmp dword [edx + esi*4], eax
jge 0x100bf389
mov dword [edx + esi*4], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x28], edx
mov edi, dword [esp + 0xb8]
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0x40], 0
lea eax, [edi - 1]
cmp esi, eax
mov eax, dword [esp + 0xc4]
cmove ecx, dword [esp + 0x40]
add ecx, dword [edx + esi*4]
inc esi
add eax, ecx
mov dword [esp + 0xc4], eax
cmp esi, edi
jl 0x100bf310
mov esi, dword [esp + 0x28]
jmp 0x100bf3d9
mov eax, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0xe8]
add ecx, 0xfffffffb
mov dword [esp + 0x30], ecx
cmp eax, ecx
jle 0x100bf521
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xc4], eax
mov dword [esp + 0x28], ecx
test edi, edi
jle 0x100bf4b9
nop word [eax + eax]
push ecx
mov dword [esp], 0x3f800000
lea eax, [esp + 0x1b0]
push dword [esp + 0x30]
push 9
push eax
lea eax, [esp + 0x1cc]
push eax
mov eax, dword [esp + 0xd0]
push 0xffffffffffffffff
push dword [eax + ecx*4]
push 0
call sym.ExuiKrnln_X32.dll_MeasureStringRect_CanvasEx
movd xmm0, dword [esp + 0xe0]
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0xc0]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x40], 0
addss xmm0, dword [esp + 0x1b4]
cvttss2si ecx, xmm0
mov dword [eax + esi*4], ecx
mov edi, dword [esp + 0xb8]
mov edx, dword [esp + 0xe8]
mov ecx, edx
lea eax, [edi - 1]
cmp esi, eax
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0xc0]
cmove ecx, dword [esp + 0x40]
add ecx, dword [esi + eax*4]
mov eax, dword [esp + 0xc4]
add eax, ecx
mov ecx, dword [esp + 0x28]
inc ecx
mov dword [esp + 0xc4], eax
mov dword [esp + 0x28], ecx
cmp ecx, edi
jl 0x100bf410
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jle 0x100bf521
xor ecx, ecx
mov dword [esp + 0xc4], 0
mov dword [esp + 0x28], ecx
test edi, edi
jle 0x100bf521
mov eax, dword [esp + 0x1c]
imul edx, edi
sub eax, edx
cdq
idiv edi
mov dword [esi + ecx*4], eax
xor esi, esi
mov edi, dword [esp + 0xb8]
mov edx, dword [esp + 0xe8]
mov ecx, edx
lea eax, [edi - 1]
cmp dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
cmove ecx, esi
mov esi, dword [esp + 0xc0]
add ecx, dword [esi + eax*4]
add dword [esp + 0xc4], ecx
mov ecx, eax
inc ecx
mov dword [esp + 0x28], ecx
cmp ecx, edi
jl 0x100bf4d6
mov edi, dword [esp + 0x4c]
push dword [esp + 0x2c]
call sym.ExuiKrnln_X32.dll_RexDisposeFont
mov esi, dword [esp + 0x64]
test esi, esi
je 0x100bf53d
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push dword [0x10178398]
push 0
push esi
push dword [esp + 0x34]
mov esi, dword [esp + 0x2c]
push dword [esp + 0x30]
push esi
push dword [esp + 0x30]
push 0x80400000
push str.PopColorPickEx
push str.PopColorPickEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, eax
mov dword [0x10177720], ecx
test ecx, ecx
je 0x100be7f2
mov eax, dword [ebp + 0x1c]
push 0x93
push dword [esp + 0x28]
mov dword [esp + 0x11c], eax
push dword [esp + 0x24]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x48]
push esi
push dword [esp + 0x24]
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x6c]
push 0xffffffffffffffff
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x80]
push ecx
mov dword [esp + 0x144], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0xdc]
push 0
push 0
add eax, 5
push eax
push dword [esp + 0xbc]
lea eax, [esp + 0x80]
push dword [esp + 0xbc]
push dword [esp + 0x7c]
push dword [esp + 0x68]
push dword [esp + 0x74]
push 1
push dword [esp + 0x60]
push dword [esp + 0xcc]
push dword [esp + 0xb0]
push dword [esp + 0xa8]
push eax
push dword [esp + 0xcc]
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0x10051950
push 0
push 0
push 0
push 0
push dword [0x10177720]
push 0
call sym.ExuiKrnln_X32.dll_CreateControl_ColorPickEx
mov esi, eax
push 0x64
push esi
mov dword [esp + 0x44], esi
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
mov ecx, dword [esp + 0xb8]
test ecx, ecx
je 0x100bf8ef
mov eax, dword [esi + 0x190]
cmp dword [eax + 0xc], 2
jg 0x100bf68b
xor eax, eax
jmp 0x100bf691
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x1c]
xor esi, esi
sub edx, eax
sub edx, dword [esp + 0xc4]
mov dword [esp + 0x2c], edx
test ecx, ecx
jle 0x100bf8eb
mov ecx, dword [esp + 0xc0]
nop dword [eax]
nop word [eax + eax]
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
lahf
test ah, 0x44
jp 0x100bf6e6
mov edx, dword [esp + 0xdc]
movd xmm0, edx
cvtdq2pd xmm0, xmm0
jmp 0x100bf721
movd xmm0, dword [esp + 0xdc]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
mov edx, dword [esp + 0xe4]
add esp, 8
mov ecx, dword [esp + 0xc0]
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
movsd qword [esp + 0x40], xmm0
movd xmm0, dword [ecx + esi*4]
lahf
test ah, 0x44
jp 0x100bf747
cvtdq2pd xmm0, xmm0
jmp 0x100bf772
cvtdq2ps xmm0, xmm0
sub esp, 8
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
mov edx, dword [esp + 0xe4]
add esp, 8
fstp qword [esp + 0x58]
movsd xmm0, qword [esp + 0x58]
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
mov ecx, dword [esp + 0x3c]
mov ecx, dword [ecx + 0x190]
movsd qword [esp + 0x58], xmm0
lahf
test ah, 0x44
jp 0x100bf7c9
cmp dword [ecx + 0xc], 3
jg 0x100bf7b1
mov eax, dword [esp + 0x24]
xor ecx, ecx
sub eax, ecx
sub eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
jmp 0x100bf809
mov eax, dword [ecx + 0x10]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x24]
sub eax, ecx
sub eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
jmp 0x100bf809
cmp dword [ecx + 0xc], 3
jg 0x100bf7d3
xor ecx, ecx
jmp 0x100bf7d9
mov eax, dword [ecx + 0x10]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x24]
sub esp, 8
sub eax, ecx
sub eax, edx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x58]
movsd xmm0, qword [esp + 0x58]
add esp, 8
movss xmm1, dword [edi + 0x10c]
ucomiss xmm1, dword [0x10161668]
movsd qword [esp + 0x50], xmm0
movd xmm0, dword [esp + 0x2c]
lahf
test ah, 0x44
jp 0x100bf830
cvtdq2pd xmm0, xmm0
jmp 0x100bf854
cvtdq2ps xmm0, xmm0
sub esp, 8
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [esp + 0x70]
movsd xmm0, qword [esp + 0x70]
add esp, 8
mov eax, dword [esp + 0xbc]
push 0
push 0
push dword [esp + 0xbc]
push dword [esp + 0xb4]
push dword [esp + 0x98]
push dword [eax + esi*4]
cvttsd2si eax, qword [esp + 0x58]
push dword [esp + 0x94]
push esi
push dword [esp + 0xb0]
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0x100be660
push eax
cvttsd2si eax, qword [esp + 0x9c]
push eax
cvttsd2si eax, qword [esp + 0x98]
push eax
cvttsd2si eax, xmm0
push eax
push 0
push dword [esp + 0x90]
call sym.ExuiKrnln_X32.dll_CreateControl_ButtonEx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x2c]
add edx, 5
add edx, dword [ecx + esi*4]
inc esi
mov dword [esp + 0x2c], edx
cmp esi, dword [esp + 0xb8]
jl 0x100bf6c0
mov esi, dword [esp + 0x3c]
test byte [ebp + 0x48], 2
jne 0x100bf90f
test edi, edi
je 0x100bf90f
movss xmm0, dword [edi + 0x10c]
mulss xmm0, dword [0x10161858]
cvttss2si eax, xmm0
jmp 0x100bf914
mov eax, 0x64
push eax
push esi
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
push 0x50
push dword [esp + 0x28]
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
push 0xffffffffffffffff
push dword [0x10177720]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
xorps xmm0, xmm0
movaps xmmword [esp + 0x140], xmm0
movq qword [esp + 0x150], xmm0
mov dword [esp + 0x158], 0
call edi
push 0
push str.Shell_TrayWnd
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x100bf989
test esi, esi
je 0x100bf99a
push str.Tab_Control
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100bf99a
push dword [0x10177718]
mov eax, dword [sym.imp.USER32.dll_SetForegroundWindow]
call eax
call edi
mov esi, eax
push 0
push 0
push 0
lea eax, [esp + 0x14c]
mov byte [0x10177715], 1
push eax
mov byte [esp + 0x33], 0
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x100bfa98
cmp eax, 0xffffffff
je 0x100bfa98
cmp dword [0x10177720], 0
je 0x100bfa93
cmp byte [0x10177715], 0
je 0x100bfa8c
cmp dword [esp + 0x144], 0x3124
jne 0x100bfa03
cmp dword [esp + 0x148], 0x3125
je 0x100bfa98
call edi
mov ecx, dword [0x10177720]
cmp eax, esi
je 0x100bfa13
cmp eax, ecx
jne 0x100bfa8c
mov eax, dword [esp + 0x144]
cmp eax, 0x201
je 0x100bfa49
cmp eax, 0x204
je 0x100bfa49
cmp eax, 0xa1
je 0x100bfa49
cmp eax, 0xa4
je 0x100bfa49
cmp eax, 0x7b
je 0x100bfa49
cmp eax, 0x206
je 0x100bfa49
cmp eax, 0x203
jne 0x100bfa52
cmp ecx, dword [esp + 0x140]
jne 0x100bfa8c
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0x14c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x100bf9c2
jmp 0x100bfa98
mov byte [esp + 0x23], 1
jmp 0x100bfa98
mov byte [esp + 0x23], 0
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x100bfab7
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bfab7
add eax, 1
mov dword [ecx], eax
jne 0x100bfab7
push ecx
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x88]
test ecx, ecx
je 0x100bfad9
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bfad9
add eax, 1
mov dword [ecx], eax
jne 0x100bfad9
push ecx
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x90]
test ecx, ecx
je 0x100bfafb
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bfafb
add eax, 1
mov dword [ecx], eax
jne 0x100bfafb
push ecx
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x100bfb1a
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bfb1a
add eax, 1
mov dword [ecx], eax
jne 0x100bfb1a
push ecx
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x100bfb3c
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bfb3c
add eax, 1
mov dword [ecx], eax
jne 0x100bfb3c
push ecx
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x94]
test ecx, ecx
je 0x100bfb5e
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bfb5e
add eax, 1
mov dword [ecx], eax
jne 0x100bfb5e
push ecx
call fcn.1012d67f
add esp, 4
mov edi, dword [esp + 0xbc]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x2c], ecx
test edi, edi
je 0x100bfbb0
xor esi, esi
test ecx, ecx
jle 0x100bfba7
mov eax, ecx
nop dword [eax]
mov ecx, dword [edi + esi*4]
test ecx, ecx
je 0x100bfba2
mov eax, dword [ecx]
cmp eax, 1
jge 0x100bfb9e
add eax, 1
mov dword [ecx], eax
jne 0x100bfb9e
push ecx
call fcn.1012d67f
add esp, 4
mov eax, dword [esp + 0x2c]
inc esi
cmp esi, eax
jl 0x100bfb80
push edi
call fcn.1012d67f
add esp, 4
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x100bfbc4
push eax
call fcn.1012d67f
add esp, 4
mov ecx, dword [esp + 0x16c]
test ecx, ecx
je 0x100bfbd8
mov eax, dword [esp + 0x134]
mov dword [ecx], eax
mov byte [0x10177715], 0
call fcn.1013aefb
cmp byte [esp + 0x23], 0
mov dword [0x10177734], eax
mov eax, dword [0x10177720]
je 0x100bfc4b
cmp dword [esp + 0x140], eax
je 0x100bfc4b
push 0x1c
call fcn.1012d684
movups xmm0, xmmword [esp + 0x144]
add esp, 4
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x150]
push 0
push 0
push eax
push 0x100bcd40
movq qword [eax + 0x10], xmm0
mov ecx, dword [esp + 0x168]
push 0
push 0
mov dword [eax + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10177720]
test eax, eax
je 0x100bfc60
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x10177720], 0
mov ecx, dword [esp + 0x1cc]
mov eax, dword [esp + 0x12c]
pop edi
pop esi
xor ecx, esp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x48