Function at 0x100cddc0
Capabilities:
Check for unmoving mouse cursor
Create thread
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x138
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x134], eax
push esi
push edi
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x78], eax
mov eax, dword [ebp + 0x6c]
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 0x5c]
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 0x58]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x50]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x4c]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 0x48]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x84], eax
mov eax, dword [ebp + 0x28]
mov edx, dword [ebp + 0x18]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x94], eax
mov eax, dword [ebp + 0x38]
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x54]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x9c], eax
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 8]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x68]
mov edi, dword [ebp + 0x78]
mov dword [esp + 0x6c], eax
mov eax, dword [ebp + 0x70]
mov dword [esp + 0x18], esi
mov dword [esp + 0x90], edx
mov dword [esp + 0x98], eax
test edi, edi
jne 0x100cdec9
mov edi, dword [0x1018a564]
test edi, edi
cmove edi, edi
mov eax, dword [ebp + 0x74]
mov dword [esp + 0x28], eax
test al, 1
je 0x100cdf1c
call fcn.1014c86b
sub eax, dword [0x1018a89c]
cmp eax, 0x12c
jge 0x100cdf1c
cmp edi, dword [0x1018a8a4]
jne 0x100cdf1c
mov dword [0x1018a89c], 0
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
mov ecx, dword [esp + 0x54]
call fcn.101041d0
pop edi
pop esi
mov ecx, dword [esp + 0x134]
xor ecx, esp
call fcn.1013eec4
mov esp, ebp
pop ebp
ret 0x74
cmp byte [0x1018a6e1], 0
mov ecx, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xc8], ecx
je 0x100cdf51
mov eax, dword [0x1018a88c]
mov byte [0x1018a6e1], 0
test eax, eax
je 0x100cdf51
push 0
push 0x3125
push 0x3124
push eax
call ecx
cmp dword [esp + 0x28], 0
mov dword [0x1018a8a4], edi
je 0x100ce3e1
lea eax, [esp + 0x100]
xorps xmm0, xmm0
push eax
push dword [edi + 0x28]
movaps xmmword [esp + 0x108], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x114]
mov dword [esp + 0x114], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [esp + 0x28]
test al, 4
jne 0x100ce0fa
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
movd xmm0, esi
lahf
test ah, 0x44
jp 0x100cdfd5
cvtdq2pd xmm0, xmm0
jmp 0x100cdff9
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x14]
mov dword [esp + 0x18], eax
lahf
test ah, 0x44
jp 0x100ce022
cvtdq2pd xmm0, xmm0
jmp 0x100ce046
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x20]
mov dword [esp + 0x14], eax
lahf
test ah, 0x44
jp 0x100ce06f
cvtdq2pd xmm0, xmm0
jmp 0x100ce093
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si esi, xmm0
movd xmm0, dword [esp + 0x1c]
lahf
mov dword [esp + 0x20], esi
test ah, 0x44
jp 0x100ce0c8
mov eax, dword [esp + 0x28]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100ce102
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
mov eax, dword [esp + 0x30]
add esp, 8
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100ce102
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
test eax, 0x4000
je 0x100ce110
add esi, dword [edi + 0x50]
mov dword [esp + 0x20], esi
test eax, 0x8000
je 0x100ce11e
add ecx, dword [edi + 0x54]
mov dword [esp + 0x1c], ecx
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
test al, 0x10
je 0x100ce189
lea eax, [esp + 0xcc]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0xd0], xmm0
call esi
mov eax, dword [esp + 0x28]
test al, 8
je 0x100ce17a
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
add eax, edx
mov ecx, dword [esp + 0xcc]
add eax, ecx
cmp eax, dword [esp + 0x130]
mov eax, dword [esp + 0x28]
jle 0x100ce172
mov edx, ecx
sub edx, dword [esp + 0x20]
mov dword [esp + 0x18], edx
jmp 0x100ce189
add edx, ecx
mov dword [esp + 0x18], edx
jmp 0x100ce189
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0xcc]
mov dword [esp + 0x18], ecx
test al, 0x20
je 0x100ce1dd
lea eax, [esp + 0x38]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x3c], xmm0
call esi
mov eax, dword [esp + 0x28]
test al, 8
je 0x100ce1d1
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x3c]
lea eax, [edx + esi]
add eax, ecx
cmp eax, dword [esp + 0x134]
mov eax, dword [esp + 0x28]
jle 0x100ce1c9
sub ecx, edx
sub ecx, esi
jmp 0x100ce1d9
add esi, ecx
mov dword [esp + 0x14], esi
jmp 0x100ce1dd
mov ecx, dword [esp + 0x14]
add ecx, dword [esp + 0x3c]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x100]
mov ecx, dword [esp + 0x18]
test al, 0x40
je 0x100ce1fe
mov eax, dword [edi + 0x84]
add eax, edx
add ecx, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], ecx
mov esi, dword [esp + 0x104]
test al, al
jns 0x100ce219
mov eax, dword [edi + 0x88]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
test eax, 0x100
je 0x100ce23e
sub edx, dword [esp + 0x20]
add edx, dword [edi + 0x84]
add edx, dword [edi + 0x50]
mov eax, dword [esp + 0x28]
add ecx, edx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x18], ecx
test eax, 0x200
je 0x100ce25c
mov eax, dword [edi + 0x54]
sub eax, dword [esp + 0x1c]
add eax, dword [edi + 0x88]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
test eax, 0x400
je 0x100ce2c0
mov ecx, dword [edi + 0x84]
mov esi, dword [esp + 0x104]
test al, 8
je 0x100ce2b6
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x20]
add eax, ecx
add eax, edx
jns 0x100ce2b2
mov eax, dword [edi + 0x50]
add eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
add eax, dword [esp + 0x30]
add eax, edx
cmp eax, dword [esp + 0x130]
jge 0x100ce2b2
mov eax, dword [esp + 0x30]
add eax, edx
add dword [esp + 0x18], eax
mov eax, dword [esp + 0x28]
jmp 0x100ce2c0
mov eax, dword [esp + 0x28]
sub ecx, dword [esp + 0x20]
add ecx, edx
add dword [esp + 0x18], ecx
test eax, 0x800
je 0x100ce324
mov ecx, dword [edi + 0x88]
test al, 8
je 0x100ce31a
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x100]
add eax, ecx
add eax, esi
jns 0x100ce316
mov eax, dword [edi + 0x54]
add eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x1c]
add eax, dword [esp + 0x30]
add eax, esi
cmp eax, dword [esp + 0x134]
jge 0x100ce316
mov eax, dword [esp + 0x30]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
jmp 0x100ce324
mov eax, dword [esp + 0x28]
sub ecx, dword [esp + 0x1c]
add ecx, esi
add dword [esp + 0x14], ecx
test eax, 0x1000
je 0x100ce37b
mov ecx, dword [edi + 0x84]
test al, 8
je 0x100ce370
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x20]
mov esi, dword [esp + 0x104]
add eax, ecx
add eax, edx
test eax, eax
jle 0x100ce370
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
add eax, ecx
add eax, dword [edi + 0x50]
add eax, edx
cmp eax, dword [esp + 0x130]
jle 0x100ce370
sub ecx, dword [esp + 0x20]
add ecx, edx
add dword [esp + 0x18], ecx
jmp 0x100ce37b
mov eax, dword [edi + 0x50]
add eax, ecx
add eax, edx
add dword [esp + 0x18], eax
mov edx, dword [esp + 0x28]
test edx, 0x2000
je 0x100ce495
mov ecx, dword [edi + 0x88]
test dl, 8
mov edx, dword [esp + 0x14]
je 0x100ce3cf
mov eax, edx
sub eax, dword [esp + 0x1c]
add eax, ecx
add eax, esi
test eax, eax
jle 0x100ce3cf
mov eax, dword [esp + 0x1c]
add eax, edx
add eax, dword [edi + 0x54]
add eax, ecx
add eax, esi
cmp eax, dword [esp + 0x134]
jle 0x100ce3cf
sub ecx, dword [esp + 0x1c]
add ecx, esi
add edx, ecx
mov dword [esp + 0x14], edx
jmp 0x100ce499
mov eax, dword [edi + 0x54]
add eax, ecx
add eax, esi
add edx, eax
mov dword [esp + 0x14], edx
jmp 0x100ce499
test edi, edi
je 0x100ce495
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
movd xmm0, dword [esp + 0x20]
lahf
test ah, 0x44
jp 0x100ce40a
cvtdq2pd xmm0, xmm0
jmp 0x100ce42e
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x10173b08]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
lahf
test ah, 0x44
jp 0x100ce463
mov edx, dword [esp + 0x14]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100ce49d
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101427a0
mov edx, dword [esp + 0x1c]
add esp, 8
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100ce49d
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x1018a88c]
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0x18]
test eax, eax
je 0x100ce4c7
push 0x90
push ecx
push dword [esp + 0x28]
push edx
push esi
push 0xffffffffffffffff
push eax
call dword [esp + 0x68]
mov ecx, dword [esp + 0x54]
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
test ecx, ecx
je 0x100ce534
mov esi, dword [ecx + 4]
cmp esi, 4
jl 0x100ce534
mov eax, dword [ecx]
cmp eax, 1
jge 0x100ce4f7
dec eax
mov dword [ecx], eax
mov eax, ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
jmp 0x100ce534
add esi, 8
push esi
call fcn.1013ef15
add esp, 4
mov dword [esp + 0x2c], eax
push esi
mov esi, eax
push 0
push esi
call fcn.10140d50
mov eax, dword [esp + 0x60]
add esp, 0xc
mov dword [esp + 0x30], esi
mov ecx, dword [eax + 4]
add ecx, 8
push ecx
push eax
push esi
call fcn.101421e0
add esp, 0xc
mov dword [esi], 0xffffffff
xor esi, esi
xor eax, eax
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0x68]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
test esi, esi
je 0x100ce59d
mov ecx, dword [esi + 4]
cmp ecx, 1
jl 0x100ce597
mov eax, dword [esi]
cmp eax, 1
jge 0x100ce564
dec eax
mov dword [esp + 0x40], esi
mov dword [esi], eax
jmp 0x100ce59d
lea eax, [ecx + 8]
push eax
call fcn.1013ef15
add esp, 4
mov dword [esp + 0x40], eax
mov dword [eax], 0xffffffff
mov ecx, dword [esi + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100ce59d
push ecx
lea ecx, [esi + 8]
add eax, 8
push ecx
push eax
call fcn.101421e0
add esp, 0xc
jmp 0x100ce59d
xor eax, eax
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0x64]
test esi, esi
je 0x100ce5f6
mov ecx, dword [esi + 4]
cmp ecx, 1
jl 0x100ce5f0
mov eax, dword [esi]
cmp eax, 1
jge 0x100ce5bd
dec eax
mov dword [esp + 0x44], esi
mov dword [esi], eax
jmp 0x100ce5f6
lea eax, [ecx + 8]
push eax
call fcn.1013ef15
add esp, 4
mov dword [esp + 0x44], eax
mov dword [eax], 0xffffffff
mov ecx, dword [esi + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100ce5f6
push ecx
lea ecx, [esi + 8]
add eax, 8
push ecx
push eax
call fcn.101421e0
add esp, 0xc
jmp 0x100ce5f6
xor eax, eax
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x100ce659
mov esi, dword [ecx + 4]
cmp esi, 4
jl 0x100ce653
mov eax, dword [ecx]
cmp eax, 1
jge 0x100ce616
dec eax
mov dword [esp + 0x34], ecx
mov dword [ecx], eax
jmp 0x100ce659
add esi, 8
push esi
call fcn.1013ef15
add esp, 4
mov dword [esp + 0x34], eax
push esi
push 0
push eax
call fcn.10140d50
mov eax, dword [esp + 0x5c]
add esp, 0xc
mov esi, dword [esp + 0x34]
mov ecx, dword [eax + 4]
add ecx, 8
push ecx
push eax
push esi
call fcn.101421e0
add esp, 0xc
mov dword [esi], 0xffffffff
jmp 0x100ce659
xor esi, esi
mov dword [esp + 0x34], esi
mov edx, dword [esp + 0x40]
test edx, edx
je 0x100ce67e
cmp dword [edx + 4], 0
jne 0x100ce6a9
mov eax, dword [edx]
cmp eax, 1
jge 0x100ce67e
add eax, 1
mov dword [edx], eax
jne 0x100ce67e
push edx
call fcn.1013eed2
add esp, 4
push 0x10
call fcn.1013ef15
mov edx, eax
add esp, 4
mov dword [esp + 0x40], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 8
mov dword [edx + 8], 0x9c4
mov dword [edx + 0xc], 0x7e3
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x100ce6ce
cmp dword [ecx + 4], 4
jge 0x100ce6f9
mov eax, dword [ecx]
cmp eax, 1
jge 0x100ce6ce
add eax, 1
mov dword [ecx], eax
jne 0x100ce6ce
push ecx
call fcn.1013eed2
add esp, 4
push 0x10
call fcn.1013ef15
mov ecx, eax
add esp, 4
mov dword [esp + 0x44], ecx
mov dword [ecx], 0xffffffff
mov dword [ecx + 4], 8
mov dword [ecx + 8], 0xa27
mov dword [ecx + 0xc], 0x7e3
mov edx, dword [esp + 0x34]
test edx, edx
je 0x100ce722
cmp dword [edx + 4], 0
jne 0x100ce754
mov eax, dword [edx]
test eax, eax
jns 0x100ce722
add eax, 1
mov dword [edx], eax
jne 0x100ce722
push 0xac
push edx
call fcn.1013ef07
add esp, 8
push 0xe
call fcn.1013ef15
mov edx, eax
add esp, 4
xor eax, eax
mov dword [esp + 0x34], edx
mov dword [edx + 8], 0
mov word [edx + 0xc], ax
mov dword [edx], 0xffffffff
mov dword [edx + 4], 4
mov eax, dword [0x1016b6a0]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x60]
or eax, 0xffffffff
test ecx, ecx
mov edx, 0xe60088ff
cmovne eax, ecx
mov ecx, dword [esp + 0x5c]
test ecx, ecx
mov dword [esp + 0x64], eax
mov eax, edx
cmovne eax, ecx
mov ecx, dword [esp + 0x58]
test ecx, ecx
mov dword [esp + 0x60], eax
mov eax, 0x64
cmovne eax, ecx
mov ecx, dword [esp + 0xd4]
test ecx, ecx
mov dword [esp + 0x5c], eax
mov eax, 0x23
cmovne eax, ecx
mov ecx, dword [esp + 0xc4]
test ecx, ecx
mov dword [esp + 0x58], eax
mov eax, 0xfe000000
mov esi, eax
cmovne esi, ecx
cmp dword [esp + 0x70], 0
mov ecx, 0xff
cmove esi, edx
cmp dword [esp + 0x6c], 0
mov edx, dword [esp + 0x74]
cmove esi, eax
test edx, edx
cmovne ecx, edx
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x78]
test ecx, ecx
cmovne eax, ecx
mov dword [esp + 0x68], eax
mov eax, dword [0x1018a88c]
test eax, eax
je 0x100ce899
push 0x90
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push eax
call dword [esp + 0x68]
push dword [esp + 0x98]
mov eax, dword [esp + 0x44]
push dword [esp + 0x54]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x74]
mov ecx, dword [0x1018a8a0]
push dword [esp + 0x7c]
push dword [esp + 0xac]
push dword [esp + 0x6c]
push dword [esp + 0x74]
push dword [esp + 0x98]
push dword [esp + 0xb4]
push dword [esp + 0x6c]
push dword [esp + 0x88]
push dword [esp + 0x90]
push dword [esp + 0x98]
push dword [esp + 0xb4]
push esi
mov esi, dword [esp + 0x70]
push esi
push dword [esp + 0xc4]
mov esi, dword [esp + 0x70]
push dword [esp + 0xcc]
push dword [esp + 0xd4]
push esi
push eax
call fcn.10071670
mov ecx, dword [0x1018a8a0]
jmp 0x100cea82
cmp dword [0x1018bb78], 0
jne 0x100ce94a
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x1018bb78], eax
mov dword [esp + 0xe0], 0xb
mov dword [esp + 0xe4], 0x100cef30
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0xf4], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xd8]
push eax
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], str.LiteInputEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x100ce94a
mov ecx, dword [esp + 0x54]
call fcn.101041d0
push 0
push dword [0x1018bb78]
push 0
push 0
push dword [esp + 0x2c]
push dword [esp + 0x34]
push dword [esp + 0x2c]
push dword [esp + 0x34]
push 0x80400000
push str.LiteInputEx
push str.LiteInputEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 1
push str.Isunicode
push eax
mov dword [0x1018a88c], eax
call dword [sym.imp.USER32.dll_SetPropW]
push 0x93
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push dword [0x1018a88c]
call dword [esp + 0x68]
push 0
push 0
push dword [esp + 0xa0]
cmp dword [esp + 0xa0], 0
push dword [esp + 0x5c]
setne al
cmp dword [esp + 0x58], 0
push dword [esp + 0x7c]
movzx eax, al
push dword [esp + 0x84]
push dword [esp + 0xb4]
push dword [esp + 0x74]
push dword [esp + 0x7c]
push dword [esp + 0xa0]
push eax
setne al
movzx eax, al
push eax
push 0
push 0
push dword [esp + 0x98]
mov eax, dword [esp + 0x7c]
push dword [esp + 0xa0]
push dword [esp + 0xa8]
push dword [esp + 0xc4]
push esi
mov esi, dword [esp + 0x80]
push esi
push dword [esp + 0xd4]
mov esi, dword [esp + 0x80]
push dword [esp + 0xdc]
push dword [esp + 0xe4]
push esi
push eax
mov eax, dword [esp + 0xa8]
push 0
push eax
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push dword [0x1018a88c]
push 0
call sym.ExuiKrnln_X32.dll_CreateControl_EditboxEx
mov ecx, eax
mov dword [0x1018a8a0], ecx
mov eax, dword [0x1018a894]
inc eax
test byte [esp + 0x28], 2
mov dword [esp + 0x78], eax
mov dword [0x1018a894], eax
jne 0x100ceab3
test edi, edi
je 0x100ceab3
movss xmm0, dword [edi + 0x120]
mulss xmm0, dword [0x10173cfc]
cvttss2si eax, xmm0
push eax
jmp 0x100ceab5
push 0x64
push ecx
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
mov eax, dword [0x1018a56c]
push dword [0x1018a8a0]
mov dword [esp + 0x78], eax
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
push 0x50
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push dword [0x1018a88c]
call dword [esp + 0x68]
mov eax, dword [esp + 0x90]
test eax, eax
je 0x100ceb0d
push esi
push dword [0x1018a884]
push 0
push 0
push 1
push dword [0x1018a8a0]
call eax
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call edi
push 0
push str.Shell_TrayWnd
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x100ceb3c
test esi, esi
je 0x100ceb4c
push str.Tab_Control
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100ceb4c
push dword [0x1018a88c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call edi
mov esi, eax
mov byte [0x1018a6e1], 1
mov byte [0x1018a6e3], 1
mov byte [esp + 0x27], 0
call fcn.1014c86b
push 0
push 0
mov dword [0x1018a89c], eax
xorps xmm0, xmm0
push 0
lea eax, [esp + 0xac]
movaps xmmword [esp + 0xac], xmm0
push eax
movq qword [esp + 0xc0], xmm0
mov dword [esp + 0xc8], 0
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x100ced00
cmp eax, 0xffffffff
je 0x100ced00
cmp byte [0x1018a6e1], 0
je 0x100cecfb
cmp dword [esp + 0xa4], 0x3124
jne 0x100cebd8
cmp dword [esp + 0xa8], 0x3125
je 0x100ced00
call edi
mov ecx, dword [0x1018a88c]
cmp eax, esi
je 0x100cebec
cmp eax, ecx
jne 0x100cece3
mov eax, dword [esp + 0xa4]
cmp eax, 0x20a
jne 0x100cec3a
cmp dword [esp + 0x48], 0
je 0x100cece3
cmp ecx, dword [esp + 0xa0]
je 0x100ceca9
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0xa8]
mov edx, dword [0x1018a8a0]
push ecx
push eax
push ecx
push eax
mov eax, dword [edx + 0x44]
push 0x29e
push edx
call eax
jmp 0x100cecc5
cmp eax, 0x201
je 0x100cec69
cmp eax, 0x204
je 0x100cec69
cmp eax, 0xa1
je 0x100cec69
cmp eax, 0xa4
je 0x100cec69
cmp eax, 0x7b
je 0x100cec69
cmp eax, 0x206
je 0x100cec69
cmp eax, 0x203
jne 0x100cec72
cmp ecx, dword [esp + 0xa0]
jne 0x100cece3
cmp eax, 0x100
jne 0x100ceca9
mov eax, dword [esp + 0xa8]
cmp eax, 0xd
jne 0x100cec8c
cmp dword [esp + 0x48], 0
jmp 0x100ceca7
cmp eax, 0x26
jne 0x100cec98
cmp dword [esp + 0x48], 0
jmp 0x100ceca7
cmp eax, 0x28
jne 0x100ceca4
cmp dword [esp + 0x48], 0
jmp 0x100ceca7
cmp eax, 9
je 0x100cecea
lea eax, [esp + 0xa0]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0xa0]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0xac]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x100ceba4
jmp 0x100ced00
mov byte [esp + 0x27], 1
jmp 0x100ced06
cmp esi, ecx
je 0x100ced06
test esi, esi
je 0x100ced06
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x100ced00
mov byte [esp + 0x27], 1
mov ecx, dword [0x1018a88c]
push 0x93
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push ecx
call dword [esp + 0x68]
mov eax, dword [esp + 0x78]
cmp dword [0x1018a894], eax
mov eax, dword [0x1018a8a0]
jne 0x100ceda7
test eax, eax
je 0x100ceda7
cmp dword [eax + 0x2c], 0
jle 0x100ceda7
cmp dword [eax + 0x1dc], 0
jne 0x100ced53
mov ecx, dword [eax + 0x188]
call fcn.101041d0
jmp 0x100ced78
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], 9
push ecx
push eax
push 0x3fa
push dword [eax + 0x28]
mov dword [esp + 0x4c], 0
call dword [esp + 0xd8]
mov edx, eax
lea ecx, [esp + 0x30]
call fcn.10103a60
mov eax, dword [0x1018a8a0]
push 0
mov eax, dword [eax + 0x1e4]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax + 0x38]
mov ecx, dword [esp + 0x30]
mov eax, dword [0x1018a8a0]
mov dword [esp + 0x2c], ecx
jmp 0x100cedab
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x90]
test edx, edx
je 0x100cedc5
push ecx
push 0x3124
push 0
push 0
push 2
push eax
call edx
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100cede0
add eax, 1
mov dword [ecx], eax
jne 0x100cede0
push ecx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100cedfb
add eax, 1
mov dword [ecx], eax
jne 0x100cedfb
push ecx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100cee16
add eax, 1
mov dword [ecx], eax
jne 0x100cee16
push ecx
call fcn.1013eed2
add esp, 4
push dword [esp + 0x74]
mov byte [0x1018a6e1], 0
mov byte [0x1018a6e3], 0
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
cmp byte [esp + 0x27], 0
je 0x100cee8b
mov eax, dword [esp + 0xa0]
cmp eax, dword [0x1018a88c]
je 0x100cee8b
push 0x1c
call fcn.1013eed7
movups xmm0, xmmword [esp + 0xa4]
add esp, 4
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0xb0]
push 0
push 0
push eax
push 0x100cdd90
movq qword [eax + 0x10], xmm0
mov ecx, dword [esp + 0xc8]
push 0
push 0
mov dword [eax + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [esp + 0x2c]
mov esi, edx
mov edi, esi
test edi, edi
je 0x100ceef9
cmp dword [edi + 4], 1
jl 0x100ceef9
mov eax, dword [edx]
cmp eax, 1
jge 0x100ceeb7
push esi
sub esp, 8
dec eax
mov dword [edx], eax
call fcn.101037f0
add esp, 0xc
mov edx, esi
jmp 0x100ceeff
mov eax, dword [edi + 4]
add eax, 8
push eax
call fcn.1013ef15
add esp, 4
mov esi, eax
lea eax, [edi + 8]
push dword [edi + 4]
push eax
lea eax, [esi + 8]
push eax
call fcn.101421e0
mov eax, dword [edi + 4]
add esp, 0xc
mov dword [esi + 4], eax
mov dword [esi], 0xffffffff
push esi
sub esp, 8
call fcn.101037f0
mov edx, dword [esp + 0x38]
add esp, 0xc
jmp 0x100ceeff
xor esi, esi
test edi, edi
je 0x100cef16
mov ecx, dword [edx]
cmp ecx, 1
jge 0x100cef16
add ecx, 1
mov dword [edx], ecx
jne 0x100cef16
push edx
call fcn.1013eed2
add esp, 4
mov ecx, dword [esp + 0x13c]
mov eax, esi
pop edi
pop esi
xor ecx, esp
call fcn.1013eec4
mov esp, ebp
pop ebp
ret 0x74