Function at 0x1004a0e0
Capabilities:
Check for unmoving mouse cursor
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x98
mov eax, dword [0x10158008]
xor eax, esp
mov dword [esp + 0x94], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x2c]
test edi, edi
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x14]
cmove edi, dword [0x1015a408]
test byte [ebp + 0x28], 1
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x34], eax
je 0x1004a181
call fcn.1011cc9a
sub eax, dword [0x1015a694]
cmp eax, 0x12c
jge 0x1004a181
cmp edi, dword [0x1015a690]
jne 0x1004a181
mov eax, dword [0x1015a68c]
mov dword [0x1015a690], 0
test eax, eax
je 0x1004acab
push eax
call sym.ExuiKrnln_X32.dll_Close_DownlistEx
pop edi
pop esi
mov ecx, dword [esp + 0x94]
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x28
mov eax, dword [0x1015a68c]
test eax, eax
je 0x1004a190
push eax
call sym.ExuiKrnln_X32.dll_Close_DownlistEx
cmp dword [esi + 0x1a8], 0
jne 0x1004acab
mov eax, dword [esi + 0x198]
push esi
push eax
push eax
mov eax, dword [esi + 0x194]
push esi
push 0x284
push esi
mov dword [0x1015a690], edi
mov dword [0x1015a68c], esi
mov dword [esi + 0x11c], 0x3f800000
call eax
cmp eax, 1
jne 0x1004a27c
movss xmm1, dword [esi + 0x11c]
movss xmm0, dword [0x10142934]
mov ecx, dword [esi + 0x50]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1004a1fa
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
jmp 0x1004a22a
movd xmm0, ecx
sub esp, 8
cvtdq2ps xmm0, xmm0
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x18]
movsd xmm1, qword [esp + 0x18]
mov ecx, dword [esi + 0x54]
cvttsd2si eax, xmm1
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, xmm0
mov dword [esp + 0x18], eax
movd xmm0, ecx
lahf
test ah, 0x44
jp 0x1004a250
cvtdq2pd xmm0, xmm0
jmp 0x1004a274
cvtdq2ps xmm0, xmm0
sub esp, 8
divss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
cvttsd2si eax, xmm0
mov dword [esp + 0x38], eax
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ecx, dword [esp + 0x90]
cmp dword [esp + 0x18], ecx
mov edx, dword [esp + 0x94]
cmovle ecx, dword [esp + 0x18]
cmp dword [esp + 0x38], edx
mov dword [esp + 0x18], ecx
cmovle edx, dword [esp + 0x38]
cmp dword [ebp + 0x28], 0
mov dword [esp + 0x38], edx
je 0x1004a7cb
lea eax, [esp + 0x60]
xorps xmm0, xmm0
push eax
push dword [edi + 0x28]
movaps xmmword [esp + 0x68], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov ecx, dword [ebp + 0x28]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
test cl, 4
jne 0x1004a489
movss xmm1, dword [edi + 0x11c]
movss xmm0, dword [0x10142934]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x1004a351
movd xmm1, dword [esp + 0x14]
cvtdq2pd xmm1, xmm1
jmp 0x1004a383
movd xmm0, dword [esp + 0x14]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm1, qword [esp + 0x28]
cvttsd2si eax, xmm1
movss xmm1, dword [edi + 0x11c]
ucomiss xmm1, xmm0
mov dword [esp + 0x14], eax
lahf
test ah, 0x44
jp 0x1004a3a8
movd xmm1, dword [esp + 0x10]
cvtdq2pd xmm1, xmm1
jmp 0x1004a3da
movd xmm0, dword [esp + 0x10]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm1, qword [esp + 0x28]
cvttsd2si eax, xmm1
movss xmm1, dword [edi + 0x11c]
ucomiss xmm1, xmm0
mov dword [esp + 0x10], eax
lahf
test ah, 0x44
jp 0x1004a3ff
movd xmm1, dword [esp + 0x18]
cvtdq2pd xmm1, xmm1
jmp 0x1004a431
movd xmm0, dword [esp + 0x18]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm0, dword [0x10142934]
add esp, 8
fstp qword [esp + 0x18]
movsd xmm1, qword [esp + 0x18]
cvttsd2si edx, xmm1
movss xmm1, dword [edi + 0x11c]
ucomiss xmm1, xmm0
mov dword [esp + 0x24], edx
movd xmm0, dword [esp + 0x38]
lahf
test ah, 0x44
jp 0x1004a456
cvtdq2pd xmm0, xmm0
jmp 0x1004a47e
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
mov edx, dword [esp + 0x2c]
add esp, 8
fstp qword [esp + 0x18]
movsd xmm0, qword [esp + 0x18]
mov ecx, dword [ebp + 0x28]
cvttsd2si eax, xmm0
mov dword [esp + 0x28], eax
test ecx, 0x4000
je 0x1004a498
add edx, dword [edi + 0x50]
mov dword [esp + 0x24], edx
test ecx, 0x8000
je 0x1004a4a7
add eax, dword [edi + 0x54]
mov dword [esp + 0x28], eax
mov eax, dword [sym.imp.USER32.dll_GetCursorPos]
test cl, 0x10
je 0x1004a505
lea ecx, [esp + 0x18]
xorps xmm0, xmm0
push ecx
movlpd qword [esp + 0x1c], xmm0
call eax
test byte [ebp + 0x28], 8
je 0x1004a4f1
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
lea eax, [edx + ecx]
add eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x90]
jle 0x1004a4e7
mov eax, dword [esp + 0x18]
sub eax, edx
jmp 0x1004a4f9
add ecx, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
jmp 0x1004a4fd
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
mov ecx, dword [ebp + 0x28]
mov eax, dword [sym.imp.USER32.dll_GetCursorPos]
test cl, 0x20
je 0x1004a553
lea ecx, [esp + 0x18]
xorps xmm0, xmm0
push ecx
movlpd qword [esp + 0x1c], xmm0
call eax
test byte [ebp + 0x28], 8
mov ecx, dword [esp + 0x10]
je 0x1004a549
mov edx, dword [esp + 0x28]
mov eax, ecx
add eax, edx
add eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x94]
jle 0x1004a549
mov eax, dword [esp + 0x1c]
sub eax, edx
sub eax, ecx
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x1004a557
add ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], ecx
jmp 0x1004a557
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp + 0x28]
mov edx, dword [esp + 0x14]
test al, 0x40
je 0x1004a572
mov eax, dword [edi + 0x74]
add eax, dword [esp + 0x60]
add edx, eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x14], edx
test al, al
jns 0x1004a58a
mov eax, dword [edi + 0x78]
add eax, dword [esp + 0x64]
mov edx, dword [esp + 0x14]
add ecx, eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x10], ecx
test eax, 0x100
je 0x1004a5ac
mov eax, dword [edi + 0x74]
sub eax, dword [esp + 0x24]
add eax, dword [edi + 0x50]
add eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x10]
add edx, eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x14], edx
test eax, 0x200
je 0x1004a5ce
mov eax, dword [edi + 0x54]
sub eax, dword [esp + 0x28]
add eax, dword [edi + 0x78]
add eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x10]
add ecx, eax
mov eax, dword [ebp + 0x28]
mov dword [esp + 0x10], ecx
test eax, 0x400
je 0x1004a639
mov ecx, dword [edi + 0x74]
sub ecx, dword [esp + 0x24]
add ecx, edx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x10]
test al, 8
je 0x1004a70c
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x38], eax
jns 0x1004a701
mov ecx, dword [edi + 0x74]
add ecx, dword [edi + 0x50]
mov eax, dword [esp + 0x24]
add eax, ecx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x10]
add eax, edx
add eax, dword [esp + 0x60]
cmp eax, dword [esp + 0x90]
jge 0x1004a6fd
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x18]
add edx, eax
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 0x28]
test eax, 0x800
je 0x1004a6ab
mov edx, ecx
sub edx, dword [esp + 0x28]
add edx, dword [edi + 0x78]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x14]
test al, 8
je 0x1004a729
mov eax, dword [esp + 0x64]
add eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], eax
jns 0x1004a721
mov edx, dword [edi + 0x78]
add edx, dword [edi + 0x54]
mov eax, dword [esp + 0x28]
add eax, edx
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x14]
add eax, ecx
add eax, dword [esp + 0x64]
cmp eax, dword [esp + 0x94]
jge 0x1004a71d
mov eax, dword [esp + 0x64]
add eax, dword [esp + 0x18]
add ecx, eax
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp + 0x28]
test eax, 0x1000
je 0x1004a74a
test al, 8
je 0x1004a73a
mov eax, dword [edi + 0x74]
sub eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
add eax, edx
add eax, dword [esp + 0x60]
mov dword [esp + 0x18], eax
test eax, eax
jle 0x1004a73a
mov eax, dword [edi + 0x50]
add eax, dword [edi + 0x74]
add eax, dword [esp + 0x24]
add eax, edx
add eax, dword [esp + 0x60]
cmp eax, dword [esp + 0x90]
jle 0x1004a73a
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
jmp 0x1004a74a
mov eax, dword [esp + 0x38]
mov edx, eax
mov dword [esp + 0x14], edx
jmp 0x1004a63d
mov edx, dword [esp + 0x18]
add edx, dword [esp + 0x60]
mov dword [esp + 0x14], edx
jmp 0x1004a63d
mov eax, dword [esp + 0x38]
mov ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x1004a6af
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x64]
mov dword [esp + 0x10], ecx
jmp 0x1004a6af
mov eax, dword [edi + 0x50]
add eax, dword [edi + 0x74]
add eax, dword [esp + 0x60]
add edx, eax
mov dword [esp + 0x14], edx
mov edx, dword [ebp + 0x28]
test edx, 0x2000
je 0x1004a8db
mov eax, dword [edi + 0x78]
test dl, 8
je 0x1004a7b6
mov edx, dword [esp + 0x28]
sub eax, edx
add eax, ecx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x64]
mov dword [esp + 0x18], eax
test eax, eax
jle 0x1004a79f
mov eax, dword [edi + 0x78]
add eax, edx
mov edx, dword [esp + 0x64]
add eax, ecx
add eax, edx
add eax, dword [edi + 0x54]
cmp eax, dword [esp + 0x94]
jle 0x1004a7a3
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
jmp 0x1004a8db
mov edx, dword [esp + 0x64]
mov eax, dword [edi + 0x54]
add eax, dword [edi + 0x78]
add eax, edx
add ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x1004a8db
mov eax, dword [edi + 0x54]
add eax, dword [edi + 0x78]
add eax, dword [esp + 0x64]
add ecx, eax
mov dword [esp + 0x10], ecx
jmp 0x1004a8db
cmp dword [esp + 0x14], 0
jl 0x1004a7f8
cmp dword [esp + 0x10], 0
jl 0x1004a7f8
movss xmm1, dword [0x10142934]
test edi, edi
je 0x1004a831
movss xmm0, dword [edi + 0x11c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x1004a831
jmp 0x1004a841
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edx, dword [esp + 0x14]
test edx, edx
mov eax, dword [esp + 0x10]
cmovs edx, dword [esp + 0x28]
test eax, eax
movss xmm1, dword [0x10142934]
cmovs eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edx
test edi, edi
je 0x1004a8db
movss xmm2, dword [edi + 0x11c]
ucomiss xmm2, xmm1
movd xmm0, ecx
lahf
test ah, 0x44
jp 0x1004a85c
cvtdq2pd xmm0, xmm0
jmp 0x1004a88c
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
movss xmm1, dword [0x10142934]
add esp, 8
mov edx, dword [esp + 0x38]
fstp qword [esp + 0x18]
movsd xmm0, qword [esp + 0x18]
movss xmm2, dword [edi + 0x11c]
cvttsd2si eax, xmm0
ucomiss xmm2, xmm1
mov dword [esp + 0x24], eax
movd xmm0, edx
lahf
test ah, 0x44
jp 0x1004a8af
cvtdq2pd xmm0, xmm0
jmp 0x1004a8d3
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm2
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
fstp qword [esp + 0x20]
movsd xmm0, qword [esp + 0x20]
add esp, 8
cvttsd2si eax, xmm0
mov dword [esp + 0x28], eax
cmp dword [0x1015bf9c], 0
jne 0x1004a981
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x1015bf9c], eax
mov dword [esp + 0x7c], 3
mov dword [esp + 0x80], 0x100488e0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0x90], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x74]
push eax
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], str.DownlistEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x1004acab
mov eax, dword [esi + 0x198]
push esi
push eax
push eax
mov eax, dword [esi + 0x194]
push esi
push 0x286
push esi
call eax
cmp eax, 1
je 0x1004acab
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x1004a9b9
test edi, edi
je 0x1004a9c4
mov eax, dword [edi + 0x28]
mov dword [esp + 0x34], eax
test eax, eax
je 0x1004a9c4
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [esp + 0x34]
push 0
push dword [0x1015bf9c]
push 0
push eax
push dword [esp + 0x38]
push dword [esp + 0x38]
push dword [esp + 0x28]
push dword [esp + 0x30]
push 0xc0400000
push str.DownlistEx
push str.DownlistEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [esi + 0x1a8], eax
test eax, eax
je 0x1004acab
push 0x90
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push dword [esp + 0x1c]
push dword [esp + 0x24]
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
push 0x384
push 0
push dword [esi + 0x190]
mov dword [esi + 0x1e4], 0xffffffff
push 0
push 0x384
push 0x10048900
push fcn.10048ab0
push dword [esi + 0x18c]
mov dword [esi + 0x1e8], 0xffffffff
push 0
push 1
push 0
push 0
push 0
push 0
push dword [esi + 0x1a8]
mov dword [esi + 0x1e0], 0xffffffff
push 0
push esi
mov dword [esi + 0x40], 0x10048900
call sym.ExuiKrnln_X32.dll_ControlCreate
test byte [ebp + 0x28], 2
je 0x1004aaaa
test edi, edi
je 0x1004aaaa
movss xmm0, dword [edi + 0x11c]
mulss xmm0, dword [0x10142aec]
cvttss2si eax, xmm0
jmp 0x1004aaaf
mov eax, 0x64
push eax
push esi
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
push 0x50
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push dword [esp + 0x1c]
push dword [esp + 0x24]
push 0xffffffffffffffff
push dword [esi + 0x1a8]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esi + 0x198]
push esi
push eax
push eax
mov eax, dword [esi + 0x194]
push esi
push 0x287
push esi
call eax
cmp eax, 1
je 0x1004acab
xorps xmm0, xmm0
mov dword [esi + 0x1ec], 1
movaps xmmword [esp + 0x40], xmm0
movq qword [esp + 0x50], xmm0
mov dword [esp + 0x58], 0
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0
mov edi, eax
push str.Shell_TrayWnd
mov dword [esp + 0x3c], edi
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, edi
jne 0x1004ab4a
push dword [esi + 0x1a8]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [esp + 0x34], eax
cmp dword [esi + 0x1a8], 0
je 0x1004ac7d
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
nop dword [eax]
push 0
push 0
push 0
push 0
lea eax, [esp + 0x50]
push eax
call edi
test eax, eax
je 0x1004ac54
mov ecx, dword [esp + 0x44]
cmp ecx, 0x12
je 0x1004ac7d
cmp ecx, 0x201
je 0x1004abb9
cmp ecx, 0x204
je 0x1004abb9
cmp ecx, 0xa1
je 0x1004abb9
cmp ecx, 0xa4
je 0x1004abb9
cmp ecx, 0x7b
je 0x1004abb9
cmp ecx, 0x206
je 0x1004abb9
cmp ecx, 0x203
jne 0x1004abcf
mov eax, dword [esi + 0x1a8]
cmp eax, dword [esp + 0x40]
je 0x1004abcf
push esi
call sym.ExuiKrnln_X32.dll_Close_DownlistEx
mov ecx, dword [esp + 0x44]
cmp ecx, 0x20a
jne 0x1004ac13
mov eax, dword [esi + 0x1a8]
cmp eax, dword [esp + 0x40]
je 0x1004ac13
mov edx, dword [esi + 0x44]
cmp edx, 0x1003f880
je 0x1004ac02
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
push ecx
push eax
push ecx
push eax
push 0x29e
push esi
call edx
push 1
push 0
push 0
push 0
lea eax, [esp + 0x50]
push eax
call edi
jmp 0x1004ac68
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [esi + 0x1a8]
je 0x1004ac2d
cmp dword [esp + 0x34], eax
je 0x1004ac2d
push esi
call sym.ExuiKrnln_X32.dll_Close_DownlistEx
push 1
push 0
push 0
push 0
lea eax, [esp + 0x50]
push eax
call edi
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x1004ac68
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [esi + 0x1a8]
je 0x1004ac68
cmp dword [esp + 0x34], eax
jne 0x1004ac77
cmp dword [esi + 0x1a8], 0
jne 0x1004ab60
jmp 0x1004ac7d
push esi
call sym.ExuiKrnln_X32.dll_Close_DownlistEx
push esi
call sym.ExuiKrnln_X32.dll_Close_DownlistEx
mov dword [0x1015a68c], 0
mov dword [esi + 0x1a8], 0
mov dword [esi + 0x1ec], 0
call fcn.1011cc9a
mov dword [0x1015a694], eax
mov ecx, dword [esp + 0x9c]
pop edi
pop esi
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x28