Function at 0x100cf990
Capabilities:
Check for unmoving mouse cursor
Create thread
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x1c8
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x1c4], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x2c]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 0x4c]
test edi, edi
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x30]
cmove edi, dword [0x1018a564]
test byte [ebp + 0x48], 1
mov dword [esp + 0x16c], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp + 0x18], esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x4c], edi
je 0x100cfa5c
call fcn.1014c86b
sub eax, dword [0x1018a8b0]
cmp eax, 0x12c
jge 0x100cfa5c
cmp edi, dword [0x1018a8b8]
jne 0x100cfa5c
mov dword [0x1018a8b0], 0
call fcn.100cf930
mov eax, dword [esp + 0x3c]
pop edi
pop esi
mov ecx, dword [esp + 0x1c4]
xor ecx, esp
call fcn.1013eec4
mov esp, ebp
pop ebp
ret 0x48
call fcn.100cf930
cmp dword [ebp + 0x48], 0
mov dword [0x1018a8b8], edi
je 0x100cfedc
lea eax, [esp + 0x170]
xorps xmm0, xmm0
push eax
push dword [edi + 0x28]
movaps xmmword [esp + 0x178], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x184]
mov dword [esp + 0x184], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ecx, dword [ebp + 0x48]
test cl, 4
jne 0x100cfc07
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
movd xmm0, dword [esp + 0x14]
lahf
test ah, 0x44
jp 0x100cfae6
cvtdq2pd xmm0, xmm0
jmp 0x100cfb0a
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si eax, xmm0
movd xmm0, esi
mov dword [esp + 0x14], eax
lahf
test ah, 0x44
jp 0x100cfb31
cvtdq2pd xmm0, xmm0
jmp 0x100cfb55
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x1c]
mov dword [esp + 0x18], eax
lahf
test ah, 0x44
jp 0x100cfb7e
cvtdq2pd xmm0, xmm0
jmp 0x100cfba2
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si esi, xmm0
movd xmm0, dword [esp + 0x24]
lahf
mov dword [esp + 0x1c], esi
test ah, 0x44
jp 0x100cfbd6
mov ecx, dword [ebp + 0x48]
cvtdq2pd xmm0, xmm0
cvttsd2si eax, xmm0
mov dword [esp + 0x24], eax
jmp 0x100cfc0f
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
mov ecx, dword [ebp + 0x48]
add esp, 8
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
cvttsd2si eax, xmm0
mov dword [esp + 0x24], eax
jmp 0x100cfc0f
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
test ecx, 0x4000
je 0x100cfc1e
add esi, dword [edi + 0x50]
mov dword [esp + 0x1c], esi
test ecx, 0x8000
je 0x100cfc2d
add eax, dword [edi + 0x54]
mov dword [esp + 0x24], eax
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
test cl, 0x10
je 0x100cfc87
lea eax, [esp + 0x30]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x34], xmm0
call esi
test byte [ebp + 0x48], 8
je 0x100cfc7b
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
add eax, edx
mov ecx, dword [esp + 0x30]
add eax, ecx
cmp eax, dword [esp + 0x1a0]
jle 0x100cfc73
mov edx, ecx
sub edx, dword [esp + 0x1c]
mov dword [esp + 0x14], edx
jmp 0x100cfc87
add edx, ecx
mov dword [esp + 0x14], edx
jmp 0x100cfc87
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x30]
mov dword [esp + 0x14], eax
test byte [ebp + 0x48], 0x20
je 0x100cfcd1
lea eax, [esp + 0x30]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x34], xmm0
call esi
test byte [ebp + 0x48], 8
je 0x100cfd9e
mov edx, dword [esp + 0x18]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
lea eax, [esi + edx]
add eax, ecx
cmp eax, dword [esp + 0x1a4]
jle 0x100cfccb
sub ecx, esi
sub ecx, edx
mov dword [esp + 0x18], ecx
jmp 0x100cfcd5
add edx, ecx
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp + 0x48]
mov esi, dword [esp + 0x170]
test dl, 0x40
je 0x100cfcf0
mov eax, dword [edi + 0x84]
add eax, esi
add dword [esp + 0x14], eax
test dl, dl
mov edx, dword [esp + 0x174]
jns 0x100cfd09
mov eax, dword [edi + 0x88]
add eax, edx
add ecx, eax
mov dword [esp + 0x18], ecx
mov eax, dword [ebp + 0x48]
test eax, 0x100
je 0x100cfd30
mov eax, dword [edi + 0x84]
sub eax, dword [esp + 0x1c]
add eax, dword [edi + 0x50]
mov esi, dword [esp + 0x170]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [ebp + 0x48]
test eax, 0x200
je 0x100cfd4d
mov eax, dword [edi + 0x54]
sub eax, dword [esp + 0x24]
add eax, dword [edi + 0x88]
add eax, edx
add dword [esp + 0x18], eax
mov eax, dword [ebp + 0x48]
test eax, 0x400
je 0x100cfdbc
mov ecx, dword [edi + 0x84]
test al, 8
je 0x100cfdb2
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x174]
add eax, ecx
add eax, esi
jns 0x100cfdaf
mov eax, dword [edi + 0x50]
add eax, ecx
mov dword [esp + 0x30], eax
add eax, dword [esp + 0x1c]
add eax, dword [esp + 0x14]
add eax, esi
cmp eax, dword [esp + 0x1a0]
jge 0x100cfdaf
mov eax, dword [esp + 0x30]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [ebp + 0x48]
jmp 0x100cfdbc
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x34]
mov dword [esp + 0x18], ecx
jmp 0x100cfcd5
mov eax, dword [ebp + 0x48]
sub ecx, dword [esp + 0x1c]
add ecx, esi
add dword [esp + 0x14], ecx
test eax, 0x800
je 0x100cfe1a
mov ecx, dword [edi + 0x88]
test al, 8
je 0x100cfe10
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x24]
mov esi, dword [esp + 0x170]
add eax, ecx
add eax, edx
jns 0x100cfe0d
mov eax, dword [edi + 0x54]
add eax, ecx
mov dword [esp + 0x30], eax
add eax, dword [esp + 0x24]
add eax, dword [esp + 0x18]
add eax, edx
cmp eax, dword [esp + 0x1a4]
jge 0x100cfe0d
mov eax, dword [esp + 0x30]
add eax, edx
add dword [esp + 0x18], eax
mov eax, dword [ebp + 0x48]
jmp 0x100cfe1a
mov eax, dword [ebp + 0x48]
sub ecx, dword [esp + 0x24]
add ecx, edx
add dword [esp + 0x18], ecx
test eax, 0x1000
je 0x100cfe6d
mov ecx, dword [edi + 0x84]
test al, 8
je 0x100cfe5f
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x1c]
add eax, ecx
add eax, esi
test eax, eax
jle 0x100cfe5f
mov eax, dword [esp + 0x1c]
add eax, ecx
add eax, dword [esp + 0x14]
add eax, dword [edi + 0x50]
add eax, esi
cmp eax, dword [esp + 0x1a0]
jle 0x100cfe5f
sub ecx, dword [esp + 0x1c]
add ecx, esi
add dword [esp + 0x14], ecx
jmp 0x100cfe6a
mov eax, dword [edi + 0x50]
add eax, ecx
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [ebp + 0x48]
test eax, 0x2000
je 0x100cff7e
mov ecx, dword [edi + 0x88]
test al, 8
je 0x100cfecc
mov esi, dword [esp + 0x18]
mov eax, esi
sub eax, dword [esp + 0x24]
add eax, ecx
add eax, edx
test eax, eax
jle 0x100cfebb
mov eax, dword [esp + 0x24]
add eax, esi
add eax, ecx
add eax, edx
add eax, dword [edi + 0x54]
cmp eax, dword [esp + 0x1a4]
jle 0x100cfebb
sub ecx, dword [esp + 0x24]
add ecx, edx
add esi, ecx
mov dword [esp + 0x18], esi
jmp 0x100cff7e
lea eax, [ecx + edx]
add eax, dword [edi + 0x54]
add esi, eax
mov dword [esp + 0x18], esi
jmp 0x100cff7e
mov eax, dword [edi + 0x54]
add eax, ecx
add eax, edx
add dword [esp + 0x18], eax
jmp 0x100cff7e
test edi, edi
je 0x100cff7e
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
movd xmm0, dword [esp + 0x1c]
lahf
test ah, 0x44
jp 0x100cff05
cvtdq2pd xmm0, xmm0
jmp 0x100cff29
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
lahf
test ah, 0x44
jp 0x100cff52
cvtdq2pd xmm0, xmm0
jmp 0x100cff76
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
add esp, 8
cvttsd2si eax, xmm0
mov dword [esp + 0x24], eax
cmp dword [0x1018bb80], 0
jne 0x100d002a
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x1018bb80], eax
mov dword [esp + 0x18c], 3
mov dword [esp + 0x190], 0x10065b40
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0x1a0], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0x19c], eax
lea eax, [esp + 0x184]
push eax
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], str.PopColorPickEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x100cfa42
push 0xd0
lea eax, [esp + 0x74]
push 0
push eax
call fcn.10140d50
mov eax, dword [esp + 0x38]
add esp, 0xc
xor esi, esi
test eax, eax
je 0x100d02de
cmp dword [eax + 4], esi
je 0x100d02de
push 0x30
call fcn.1013eed7
add esp, 4
mov esi, eax
push 0x30
push 0
push esi
call fcn.10140d50
mov eax, dword [esp + 0x38]
add esp, 0xc
push eax
push esi
call sym.ExuiKrnln_X32.dll_RexcUnSkinToSkinInfo
cmp dword [esi + 4], 0x2bc
jne 0x100d02de
cmp dword [esi + 8], 4
jle 0x100d00b3
mov eax, dword [esi + 0x28]
mov edx, dword [eax + 0x140]
lea eax, [esi + 0xc]
test edx, edx
js 0x100d00b6
mov dword [esp + 0x28], eax
cmp edx, dword [eax]
jge 0x100d00b6
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.10017240
mov edx, eax
jmp 0x100d00bc
lea eax, [esi + 0xc]
mov dword [esp + 0x28], eax
xor edx, edx
lea ecx, [esp + 0x7c]
call fcn.10017020
cmp dword [esi + 8], 5
jle 0x100d00f4
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x190]
test edx, edx
js 0x100d00f4
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100d00f4
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.10017240
jmp 0x100d00f6
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x88]
call fcn.10017020
cmp dword [esi + 8], 6
jle 0x100d0133
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x1e0]
test edx, edx
js 0x100d0133
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100d0133
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.10017240
jmp 0x100d0135
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.10017020
cmp dword [esi + 8], 0xd
jle 0x100d0172
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x410]
test edx, edx
js 0x100d0172
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100d0172
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.10017240
jmp 0x100d0174
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.10017020
cmp dword [esi + 8], 0xe
jle 0x100d01ae
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x460]
test edx, edx
js 0x100d01ae
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100d01ae
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.10017240
jmp 0x100d01b0
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x84]
call fcn.10017020
cmp dword [esi + 8], 0xf
jle 0x100d01ed
mov eax, esi
mov ecx, 0x28
mov eax, dword [eax + ecx]
mov edx, dword [eax + 0x4b0]
test edx, edx
js 0x100d01ed
mov eax, dword [esp + 0x28]
cmp edx, dword [eax]
jge 0x100d01ed
mov ecx, dword [esi + 0x2c]
mov ecx, dword [ecx + edx*4]
call fcn.10017240
jmp 0x100d01ef
xor eax, eax
mov edx, eax
lea ecx, [esp + 0x94]
call fcn.10017020
cmp dword [esi + 0x10], 7
jg 0x100d0207
xor eax, eax
jmp 0x100d020d
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0xdc], eax
cmp dword [esi + 0x10], 8
jg 0x100d021e
xor eax, eax
jmp 0x100d0224
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x20]
mov dword [esp + 0xe0], eax
cmp dword [esi + 0x10], 9
jg 0x100d0235
xor eax, eax
jmp 0x100d023b
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x24]
mov dword [esp + 0xe4], eax
cmp dword [esi + 0x10], 0xb
jg 0x100d024c
xor eax, eax
jmp 0x100d0252
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0xec], eax
cmp dword [esi + 0x10], 0xd
jg 0x100d0263
xor eax, eax
jmp 0x100d0269
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xa8], eax
cmp dword [esi + 0x10], 0x12
jg 0x100d027a
xor eax, eax
jmp 0x100d0280
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x48]
mov dword [esp + 0xb4], eax
cmp dword [esi + 0x10], 0x1e
jg 0x100d0291
xor eax, eax
jmp 0x100d0297
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x78]
mov dword [esp + 0xa4], eax
cmp dword [esi + 0x10], 0x1f
jg 0x100d02a8
xor eax, eax
jmp 0x100d02ae
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x7c]
mov dword [esp + 0xac], eax
cmp dword [esi + 0x10], 0x20
jg 0x100d02c9
xor eax, eax
mov dword [esp + 0xb0], eax
jmp 0x100d04a7
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x80]
mov dword [esp + 0xb0], eax
jmp 0x100d04a7
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x100d02fd
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d02fd
add eax, 1
mov dword [ecx], eax
jne 0x100d02fd
push ecx
call fcn.1013eed2
add esp, 4
push 0x10
call fcn.1013ef15
mov dword [esp + 0x80], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x7c]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x7c]
mov dword [eax + 8], 0x708
mov eax, dword [esp + 0x7c]
mov dword [eax + 0xc], 0x7e3
mov ecx, dword [esp + 0x88]
test ecx, ecx
je 0x100d0357
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0357
add eax, 1
mov dword [ecx], eax
jne 0x100d0357
push ecx
call fcn.1013eed2
add esp, 4
push 0x10
call fcn.1013ef15
mov dword [esp + 0x8c], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x88]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x88]
mov dword [eax + 8], 0
mov eax, dword [esp + 0x88]
mov dword [eax + 0xc], 0x7e3
mov ecx, dword [esp + 0x78]
mov dword [esp + 0xdc], 0x20
mov dword [esp + 0xe0], 0xa
mov dword [esp + 0xe4], 0x50
mov dword [esp + 0xec], 0x64
mov dword [esp + 0xa8], 0xfe000000
test ecx, ecx
je 0x100d03ee
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d03ee
add eax, 1
mov dword [ecx], eax
jne 0x100d03ee
push ecx
call fcn.1013eed2
add esp, 4
push 0x10
call fcn.1013ef15
mov dword [esp + 0x7c], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x78]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x78]
mov dword [eax + 8], 0xd48
mov eax, dword [esp + 0x78]
mov dword [eax + 0xc], 0x7e3
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x100d0445
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0445
add eax, 1
mov dword [ecx], eax
jne 0x100d0445
push ecx
call fcn.1013eed2
add esp, 4
push 0x10
call fcn.1013ef15
mov dword [esp + 0x88], eax
add esp, 4
mov dword [eax], 0xffffffff
mov eax, dword [esp + 0x84]
mov dword [eax + 4], 8
mov eax, dword [esp + 0x84]
mov dword [eax + 8], 0
mov eax, dword [esp + 0x84]
mov dword [eax + 0xc], 0x7e3
mov dword [esp + 0xa4], 0xfe000000
mov dword [esp + 0xac], 0x1a
mov dword [esp + 0xb0], 0x10
test esi, esi
je 0x100d04b1
push esi
call sym.ExuiKrnln_X32.dll_RexcDisposeSkinInfo
push 0x5c
call fcn.1013eed7
add esp, 4
mov dword [esp + 0x2c], eax
push 0x5c
push 0
push eax
call fcn.10140d50
mov eax, dword [esp + 0x48]
add esp, 0xc
movaps xmm0, xmmword [0x10173f00]
mov edx, 0x1016b43c
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x12c], eax
lea eax, [esp + 0xbc]
push eax
movups xmmword [esp + 0x1c0], xmm0
call fcn.10103f90
mov dword [esp + 0xb8], eax
test eax, eax
je 0x100d0785
xor ecx, ecx
mov dword [esp + 0xe8], 5
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
mov dword [esp + 0x44], ecx
call fcn.1013ef15
add esp, 4
mov esi, eax
push dword [esp + 0x40]
push 0
push esi
call fcn.10140d50
add esp, 0xc
mov dword [esp + 0xc0], esi
push dword [esp + 0x88]
push dword [esp + 0x30]
call sym.ExuiKrnln_X32.dll_RexLoadFont
mov edi, dword [esp + 0xb8]
xor esi, esi
test edi, edi
jle 0x100d062b
nop dword [eax]
push ecx
mov dword [esp], 0x3f800000
lea eax, [esp + 0x1b0]
push dword [esp + 0x30]
push 9
push eax
lea eax, [esp + 0x1cc]
push eax
mov eax, dword [esp + 0xd0]
push 0xffffffffffffffff
push dword [eax + esi*4]
push 0
call sym.ExuiKrnln_X32.dll_MeasureStringRect_CanvasEx
movd xmm0, dword [esp + 0xe0]
mov eax, dword [esp + 0xc0]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [esp + 0x1b4]
cvttss2si ecx, xmm0
mov dword [eax + esi*4], ecx
mov edx, dword [esp + 0xc0]
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x28], edx
cmp dword [edx + esi*4], eax
jge 0x100d05e9
mov dword [edx + esi*4], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x28], edx
mov edi, dword [esp + 0xb8]
mov ecx, dword [esp + 0xe8]
mov dword [esp + 0x40], 0
lea eax, [edi - 1]
cmp esi, eax
mov eax, dword [esp + 0xc4]
cmove ecx, dword [esp + 0x40]
add ecx, dword [edx + esi*4]
inc esi
add eax, ecx
mov dword [esp + 0xc4], eax
cmp esi, edi
jl 0x100d0570
mov esi, dword [esp + 0x28]
jmp 0x100d0639
mov eax, dword [esp + 0xc4]
mov esi, dword [esp + 0xc0]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0xe8]
add ecx, 0xfffffffb
mov dword [esp + 0x30], ecx
cmp eax, ecx
jle 0x100d0781
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xc4], eax
mov dword [esp + 0x28], ecx
test edi, edi
jle 0x100d0719
nop word [eax + eax]
push ecx
mov dword [esp], 0x3f800000
lea eax, [esp + 0x1b0]
push dword [esp + 0x30]
push 9
push eax
lea eax, [esp + 0x1cc]
push eax
mov eax, dword [esp + 0xd0]
push 0xffffffffffffffff
push dword [eax + ecx*4]
push 0
call sym.ExuiKrnln_X32.dll_MeasureStringRect_CanvasEx
movd xmm0, dword [esp + 0xe0]
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0xc0]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0x40], 0
addss xmm0, dword [esp + 0x1b4]
cvttss2si ecx, xmm0
mov dword [eax + esi*4], ecx
mov edi, dword [esp + 0xb8]
mov edx, dword [esp + 0xe8]
mov ecx, edx
lea eax, [edi - 1]
cmp esi, eax
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0xc0]
cmove ecx, dword [esp + 0x40]
add ecx, dword [esi + eax*4]
mov eax, dword [esp + 0xc4]
add eax, ecx
mov ecx, dword [esp + 0x28]
inc ecx
mov dword [esp + 0xc4], eax
mov dword [esp + 0x28], ecx
cmp ecx, edi
jl 0x100d0670
mov ecx, dword [esp + 0x30]
cmp eax, ecx
jle 0x100d0781
xor ecx, ecx
mov dword [esp + 0xc4], 0
mov dword [esp + 0x28], ecx
test edi, edi
jle 0x100d0781
mov eax, dword [esp + 0x1c]
imul edx, edi
sub eax, edx
cdq
idiv edi
mov dword [esi + ecx*4], eax
xor esi, esi
mov edi, dword [esp + 0xb8]
mov edx, dword [esp + 0xe8]
mov ecx, edx
lea eax, [edi - 1]
cmp dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
cmove ecx, esi
mov esi, dword [esp + 0xc0]
add ecx, dword [esi + eax*4]
add dword [esp + 0xc4], ecx
mov ecx, eax
inc ecx
mov dword [esp + 0x28], ecx
cmp ecx, edi
jl 0x100d0736
mov edi, dword [esp + 0x4c]
push dword [esp + 0x2c]
call sym.ExuiKrnln_X32.dll_RexDisposeFont
mov esi, dword [esp + 0x64]
test esi, esi
je 0x100d079d
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push 0
push dword [0x1018bb80]
push 0
push esi
push dword [esp + 0x34]
mov esi, dword [esp + 0x2c]
push dword [esp + 0x30]
push esi
push dword [esp + 0x30]
push 0x80400000
push str.PopColorPickEx
push str.PopColorPickEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, eax
mov dword [0x1018a898], ecx
test ecx, ecx
je 0x100cfa42
mov eax, dword [ebp + 0x1c]
push 0x93
push dword [esp + 0x28]
mov dword [esp + 0x11c], eax
push dword [esp + 0x24]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x48]
push esi
push dword [esp + 0x24]
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x134], eax
mov eax, dword [esp + 0x6c]
push 0xffffffffffffffff
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x80]
push ecx
mov dword [esp + 0x144], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0xdc]
push 0
push 0
add eax, 5
push eax
push dword [esp + 0xbc]
lea eax, [esp + 0x80]
push dword [esp + 0xbc]
push dword [esp + 0x7c]
push dword [esp + 0x68]
push dword [esp + 0x74]
push 1
push dword [esp + 0x60]
push dword [esp + 0xcc]
push dword [esp + 0xb0]
push dword [esp + 0xa8]
push eax
push dword [esp + 0xcc]
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0x1005b620
push 0
push 0
push 0
push 0
push dword [0x1018a898]
push 0
call sym.ExuiKrnln_X32.dll_CreateControl_ColorPickEx
mov esi, eax
push 0x64
push esi
mov dword [esp + 0x44], esi
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
mov ecx, dword [esp + 0xb8]
test ecx, ecx
je 0x100d0b4f
mov eax, dword [esi + 0x1b0]
cmp dword [eax + 0xc], 2
jg 0x100d08eb
xor eax, eax
jmp 0x100d08f1
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 8]
mov edx, dword [esp + 0x1c]
xor esi, esi
sub edx, eax
sub edx, dword [esp + 0xc4]
mov dword [esp + 0x2c], edx
test ecx, ecx
jle 0x100d0b4b
mov ecx, dword [esp + 0xc0]
nop dword [eax]
nop word [eax + eax]
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
lahf
test ah, 0x44
jp 0x100d0946
mov edx, dword [esp + 0xdc]
movd xmm0, edx
cvtdq2pd xmm0, xmm0
jmp 0x100d0981
movd xmm0, dword [esp + 0xdc]
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
mov edx, dword [esp + 0xe4]
add esp, 8
mov ecx, dword [esp + 0xc0]
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
movsd qword [esp + 0x40], xmm0
movd xmm0, dword [ecx + esi*4]
lahf
test ah, 0x44
jp 0x100d09a7
cvtdq2pd xmm0, xmm0
jmp 0x100d09d2
cvtdq2ps xmm0, xmm0
sub esp, 8
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
mov edx, dword [esp + 0xe4]
add esp, 8
fstp qword [esp + 0x58]
movsd xmm0, qword [esp + 0x58]
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
mov ecx, dword [esp + 0x3c]
mov ecx, dword [ecx + 0x1b0]
movsd qword [esp + 0x58], xmm0
lahf
test ah, 0x44
jp 0x100d0a29
cmp dword [ecx + 0xc], 3
jg 0x100d0a11
mov eax, dword [esp + 0x24]
xor ecx, ecx
sub eax, ecx
sub eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
jmp 0x100d0a69
mov eax, dword [ecx + 0x10]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x24]
sub eax, ecx
sub eax, edx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
jmp 0x100d0a69
cmp dword [ecx + 0xc], 3
jg 0x100d0a33
xor ecx, ecx
jmp 0x100d0a39
mov eax, dword [ecx + 0x10]
mov ecx, dword [eax + 0xc]
mov eax, dword [esp + 0x24]
sub esp, 8
sub eax, ecx
sub eax, edx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x58]
movsd xmm0, qword [esp + 0x58]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
movsd qword [esp + 0x50], xmm0
movd xmm0, dword [esp + 0x2c]
lahf
test ah, 0x44
jp 0x100d0a90
cvtdq2pd xmm0, xmm0
jmp 0x100d0ab4
cvtdq2ps xmm0, xmm0
sub esp, 8
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x70]
movsd xmm0, qword [esp + 0x70]
add esp, 8
mov eax, dword [esp + 0xbc]
push 0
push 0
push dword [esp + 0xbc]
push dword [esp + 0xb4]
push dword [esp + 0x98]
push dword [eax + esi*4]
cvttsd2si eax, qword [esp + 0x58]
push dword [esp + 0x94]
push esi
push dword [esp + 0xb0]
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0x100cf8b0
push eax
cvttsd2si eax, qword [esp + 0x9c]
push eax
cvttsd2si eax, qword [esp + 0x98]
push eax
cvttsd2si eax, xmm0
push eax
push 0
push dword [esp + 0x90]
call sym.ExuiKrnln_X32.dll_CreateControl_ButtonEx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x2c]
add edx, 5
add edx, dword [ecx + esi*4]
inc esi
mov dword [esp + 0x2c], edx
cmp esi, dword [esp + 0xb8]
jl 0x100d0920
mov esi, dword [esp + 0x3c]
test byte [ebp + 0x48], 2
jne 0x100d0b6f
test edi, edi
je 0x100d0b6f
movss xmm0, dword [edi + 0x120]
mulss xmm0, dword [0x10173cfc]
cvttss2si eax, xmm0
jmp 0x100d0b74
mov eax, 0x64
push eax
push esi
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
push 0x50
push dword [esp + 0x28]
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
push 0xffffffffffffffff
push dword [0x1018a898]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
xorps xmm0, xmm0
movaps xmmword [esp + 0x140], xmm0
movq qword [esp + 0x150], xmm0
mov dword [esp + 0x158], 0
call edi
push 0
push str.Shell_TrayWnd
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x100d0be9
test esi, esi
je 0x100d0bfa
push str.Tab_Control
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100d0bfa
push dword [0x1018a88c]
mov eax, dword [sym.imp.USER32.dll_SetForegroundWindow]
call eax
call edi
mov esi, eax
push 0
push 0
push 0
lea eax, [esp + 0x14c]
mov byte [0x1018a6e2], 1
push eax
mov byte [esp + 0x33], 0
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x100d0cf8
cmp eax, 0xffffffff
je 0x100d0cf8
cmp dword [0x1018a898], 0
je 0x100d0cf3
cmp byte [0x1018a6e2], 0
je 0x100d0cec
cmp dword [esp + 0x144], 0x3124
jne 0x100d0c63
cmp dword [esp + 0x148], 0x3125
je 0x100d0cf8
call edi
mov ecx, dword [0x1018a898]
cmp eax, esi
je 0x100d0c73
cmp eax, ecx
jne 0x100d0cec
mov eax, dword [esp + 0x144]
cmp eax, 0x201
je 0x100d0ca9
cmp eax, 0x204
je 0x100d0ca9
cmp eax, 0xa1
je 0x100d0ca9
cmp eax, 0xa4
je 0x100d0ca9
cmp eax, 0x7b
je 0x100d0ca9
cmp eax, 0x206
je 0x100d0ca9
cmp eax, 0x203
jne 0x100d0cb2
cmp ecx, dword [esp + 0x140]
jne 0x100d0cec
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0x14c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x100d0c22
jmp 0x100d0cf8
mov byte [esp + 0x23], 1
jmp 0x100d0cf8
mov byte [esp + 0x23], 0
mov ecx, dword [esp + 0x7c]
test ecx, ecx
je 0x100d0d17
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0d17
add eax, 1
mov dword [ecx], eax
jne 0x100d0d17
push ecx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x88]
test ecx, ecx
je 0x100d0d39
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0d39
add eax, 1
mov dword [ecx], eax
jne 0x100d0d39
push ecx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x90]
test ecx, ecx
je 0x100d0d5b
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0d5b
add eax, 1
mov dword [ecx], eax
jne 0x100d0d5b
push ecx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x78]
test ecx, ecx
je 0x100d0d7a
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0d7a
add eax, 1
mov dword [ecx], eax
jne 0x100d0d7a
push ecx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x100d0d9c
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0d9c
add eax, 1
mov dword [ecx], eax
jne 0x100d0d9c
push ecx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x94]
test ecx, ecx
je 0x100d0dbe
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0dbe
add eax, 1
mov dword [ecx], eax
jne 0x100d0dbe
push ecx
call fcn.1013eed2
add esp, 4
mov edi, dword [esp + 0xbc]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x2c], ecx
test edi, edi
je 0x100d0e10
xor esi, esi
test ecx, ecx
jle 0x100d0e07
mov eax, ecx
nop dword [eax]
mov ecx, dword [edi + esi*4]
test ecx, ecx
je 0x100d0e02
mov eax, dword [ecx]
cmp eax, 1
jge 0x100d0dfe
add eax, 1
mov dword [ecx], eax
jne 0x100d0dfe
push ecx
call fcn.1013eed2
add esp, 4
mov eax, dword [esp + 0x2c]
inc esi
cmp esi, eax
jl 0x100d0de0
push edi
call fcn.1013eed2
add esp, 4
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x100d0e24
push eax
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x16c]
test ecx, ecx
je 0x100d0e38
mov eax, dword [esp + 0x134]
mov dword [ecx], eax
mov byte [0x1018a6e2], 0
call fcn.1014c86b
cmp byte [esp + 0x23], 0
mov dword [0x1018a8b0], eax
mov eax, dword [0x1018a898]
je 0x100d0eab
cmp dword [esp + 0x140], eax
je 0x100d0eab
push 0x1c
call fcn.1013eed7
movups xmm0, xmmword [esp + 0x144]
add esp, 4
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0x150]
push 0
push 0
push eax
push 0x100cdd90
movq qword [eax + 0x10], xmm0
mov ecx, dword [esp + 0x168]
push 0
push 0
mov dword [eax + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1018a898]
test eax, eax
je 0x100d0ec0
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x1018a898], 0
mov ecx, dword [esp + 0x1cc]
mov eax, dword [esp + 0x12c]
pop edi
pop esi
xor ecx, esp
call fcn.1013eec4
mov esp, ebp
pop ebp
ret 0x48