Function at 0x100c9c00
Capabilities:
Check for unmoving mouse cursor
Create thread
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x138
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x134], eax
push esi
push edi
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x78], eax
mov eax, dword [ebp + 0x6c]
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 0x5c]
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 0x58]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x50]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x4c]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 0x48]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x84], eax
mov eax, dword [ebp + 0x28]
mov edx, dword [ebp + 0x18]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x48], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x94], eax
mov eax, dword [ebp + 0x38]
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 0x3c]
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x54]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x9c], eax
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 8]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x68]
mov edi, dword [ebp + 0x78]
mov dword [esp + 0x6c], eax
mov eax, dword [ebp + 0x70]
mov dword [esp + 0x18], esi
mov dword [esp + 0x90], edx
mov dword [esp + 0x98], eax
test edi, edi
jne 0x100c9d09
mov edi, dword [0x10184474]
test edi, edi
cmove edi, edi
mov eax, dword [ebp + 0x74]
mov dword [esp + 0x28], eax
test al, 1
je 0x100c9d5c
call fcn.10147a7b
sub eax, dword [0x101847b0]
cmp eax, 0x12c
jge 0x100c9d5c
cmp edi, dword [0x101847b8]
jne 0x100c9d5c
mov dword [0x101847b0], 0
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
mov ecx, dword [esp + 0x54]
call fcn.100ff840
pop edi
pop esi
mov ecx, dword [esp + 0x134]
xor ecx, esp
call fcn.1013a1f3
mov esp, ebp
pop ebp
ret 0x74
cmp byte [0x101845f1], 0
mov ecx, dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xc8], ecx
je 0x100c9d91
mov eax, dword [0x101847a0]
mov byte [0x101845f1], 0
test eax, eax
je 0x100c9d91
push 0
push 0x3125
push 0x3124
push eax
call ecx
cmp dword [esp + 0x28], 0
mov dword [0x101847b8], edi
je 0x100ca221
lea eax, [esp + 0x100]
xorps xmm0, xmm0
push eax
push dword [edi + 0x28]
movaps xmmword [esp + 0x108], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x114]
mov dword [esp + 0x114], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [esp + 0x28]
test al, 4
jne 0x100c9f3a
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x1016e6e8]
movd xmm0, esi
lahf
test ah, 0x44
jp 0x100c9e15
cvtdq2pd xmm0, xmm0
jmp 0x100c9e39
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.1013d9b0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x1016e6e8]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x14]
mov dword [esp + 0x18], eax
lahf
test ah, 0x44
jp 0x100c9e62
cvtdq2pd xmm0, xmm0
jmp 0x100c9e86
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.1013d9b0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x1016e6e8]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x20]
mov dword [esp + 0x14], eax
lahf
test ah, 0x44
jp 0x100c9eaf
cvtdq2pd xmm0, xmm0
jmp 0x100c9ed3
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.1013d9b0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x1016e6e8]
cvttsd2si esi, xmm0
movd xmm0, dword [esp + 0x1c]
lahf
mov dword [esp + 0x20], esi
test ah, 0x44
jp 0x100c9f08
mov eax, dword [esp + 0x28]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100c9f42
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.1013d9b0
mov eax, dword [esp + 0x30]
add esp, 8
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100c9f42
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
test eax, 0x4000
je 0x100c9f50
add esi, dword [edi + 0x50]
mov dword [esp + 0x20], esi
test eax, 0x8000
je 0x100c9f5e
add ecx, dword [edi + 0x54]
mov dword [esp + 0x1c], ecx
mov esi, dword [sym.imp.USER32.dll_GetCursorPos]
test al, 0x10
je 0x100c9fc9
lea eax, [esp + 0xcc]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0xd0], xmm0
call esi
mov eax, dword [esp + 0x28]
test al, 8
je 0x100c9fba
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
add eax, edx
mov ecx, dword [esp + 0xcc]
add eax, ecx
cmp eax, dword [esp + 0x130]
mov eax, dword [esp + 0x28]
jle 0x100c9fb2
mov edx, ecx
sub edx, dword [esp + 0x20]
mov dword [esp + 0x18], edx
jmp 0x100c9fc9
add edx, ecx
mov dword [esp + 0x18], edx
jmp 0x100c9fc9
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0xcc]
mov dword [esp + 0x18], ecx
test al, 0x20
je 0x100ca01d
lea eax, [esp + 0x38]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x3c], xmm0
call esi
mov eax, dword [esp + 0x28]
test al, 8
je 0x100ca011
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x3c]
lea eax, [edx + esi]
add eax, ecx
cmp eax, dword [esp + 0x134]
mov eax, dword [esp + 0x28]
jle 0x100ca009
sub ecx, edx
sub ecx, esi
jmp 0x100ca019
add esi, ecx
mov dword [esp + 0x14], esi
jmp 0x100ca01d
mov ecx, dword [esp + 0x14]
add ecx, dword [esp + 0x3c]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x100]
mov ecx, dword [esp + 0x18]
test al, 0x40
je 0x100ca03e
mov eax, dword [edi + 0x84]
add eax, edx
add ecx, eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], ecx
mov esi, dword [esp + 0x104]
test al, al
jns 0x100ca059
mov eax, dword [edi + 0x88]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
test eax, 0x100
je 0x100ca07e
sub edx, dword [esp + 0x20]
add edx, dword [edi + 0x84]
add edx, dword [edi + 0x50]
mov eax, dword [esp + 0x28]
add ecx, edx
mov edx, dword [esp + 0x100]
mov dword [esp + 0x18], ecx
test eax, 0x200
je 0x100ca09c
mov eax, dword [edi + 0x54]
sub eax, dword [esp + 0x1c]
add eax, dword [edi + 0x88]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
test eax, 0x400
je 0x100ca100
mov ecx, dword [edi + 0x84]
mov esi, dword [esp + 0x104]
test al, 8
je 0x100ca0f6
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x20]
add eax, ecx
add eax, edx
jns 0x100ca0f2
mov eax, dword [edi + 0x50]
add eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
add eax, dword [esp + 0x30]
add eax, edx
cmp eax, dword [esp + 0x130]
jge 0x100ca0f2
mov eax, dword [esp + 0x30]
add eax, edx
add dword [esp + 0x18], eax
mov eax, dword [esp + 0x28]
jmp 0x100ca100
mov eax, dword [esp + 0x28]
sub ecx, dword [esp + 0x20]
add ecx, edx
add dword [esp + 0x18], ecx
test eax, 0x800
je 0x100ca164
mov ecx, dword [edi + 0x88]
test al, 8
je 0x100ca15a
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x100]
add eax, ecx
add eax, esi
jns 0x100ca156
mov eax, dword [edi + 0x54]
add eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
add eax, dword [esp + 0x1c]
add eax, dword [esp + 0x30]
add eax, esi
cmp eax, dword [esp + 0x134]
jge 0x100ca156
mov eax, dword [esp + 0x30]
add eax, esi
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
jmp 0x100ca164
mov eax, dword [esp + 0x28]
sub ecx, dword [esp + 0x1c]
add ecx, esi
add dword [esp + 0x14], ecx
test eax, 0x1000
je 0x100ca1bb
mov ecx, dword [edi + 0x84]
test al, 8
je 0x100ca1b0
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x20]
mov esi, dword [esp + 0x104]
add eax, ecx
add eax, edx
test eax, eax
jle 0x100ca1b0
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
add eax, ecx
add eax, dword [edi + 0x50]
add eax, edx
cmp eax, dword [esp + 0x130]
jle 0x100ca1b0
sub ecx, dword [esp + 0x20]
add ecx, edx
add dword [esp + 0x18], ecx
jmp 0x100ca1bb
mov eax, dword [edi + 0x50]
add eax, ecx
add eax, edx
add dword [esp + 0x18], eax
mov edx, dword [esp + 0x28]
test edx, 0x2000
je 0x100ca2d5
mov ecx, dword [edi + 0x88]
test dl, 8
mov edx, dword [esp + 0x14]
je 0x100ca20f
mov eax, edx
sub eax, dword [esp + 0x1c]
add eax, ecx
add eax, esi
test eax, eax
jle 0x100ca20f
mov eax, dword [esp + 0x1c]
add eax, edx
add eax, dword [edi + 0x54]
add eax, ecx
add eax, esi
cmp eax, dword [esp + 0x134]
jle 0x100ca20f
sub ecx, dword [esp + 0x1c]
add ecx, esi
add edx, ecx
mov dword [esp + 0x14], edx
jmp 0x100ca2d9
mov eax, dword [edi + 0x54]
add eax, ecx
add eax, esi
add edx, eax
mov dword [esp + 0x14], edx
jmp 0x100ca2d9
test edi, edi
je 0x100ca2d5
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x1016e6e8]
movd xmm0, dword [esp + 0x20]
lahf
test ah, 0x44
jp 0x100ca24a
cvtdq2pd xmm0, xmm0
jmp 0x100ca26e
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.1013d9b0
fstp qword [esp + 0x40]
movsd xmm0, qword [esp + 0x40]
add esp, 8
movss xmm1, dword [edi + 0x120]
ucomiss xmm1, dword [0x1016e6e8]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
lahf
test ah, 0x44
jp 0x100ca2a3
mov edx, dword [esp + 0x14]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100ca2dd
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.1013d9b0
mov edx, dword [esp + 0x1c]
add esp, 8
fstp qword [esp + 0x38]
movsd xmm0, qword [esp + 0x38]
cvttsd2si ecx, xmm0
mov dword [esp + 0x1c], ecx
jmp 0x100ca2dd
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x101847a0]
mov dword [esp + 0x4c], esi
mov esi, dword [esp + 0x18]
test eax, eax
je 0x100ca307
push 0x90
push ecx
push dword [esp + 0x28]
push edx
push esi
push 0xffffffffffffffff
push eax
call dword [esp + 0x68]
mov ecx, dword [esp + 0x54]
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
test ecx, ecx
je 0x100ca374
mov esi, dword [ecx + 4]
cmp esi, 4
jl 0x100ca374
mov eax, dword [ecx]
cmp eax, 1
jge 0x100ca337
dec eax
mov dword [ecx], eax
mov eax, ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
jmp 0x100ca374
add esi, 8
push esi
call fcn.1013a244
add esp, 4
mov dword [esp + 0x2c], eax
push esi
mov esi, eax
push 0
push esi
call fcn.1013bf60
mov eax, dword [esp + 0x60]
add esp, 0xc
mov dword [esp + 0x30], esi
mov ecx, dword [eax + 4]
add ecx, 8
push ecx
push eax
push esi
call fcn.1013d3f0
add esp, 0xc
mov dword [esi], 0xffffffff
xor esi, esi
xor eax, eax
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0x68]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
test esi, esi
je 0x100ca3dd
mov ecx, dword [esi + 4]
cmp ecx, 1
jl 0x100ca3d7
mov eax, dword [esi]
cmp eax, 1
jge 0x100ca3a4
dec eax
mov dword [esp + 0x40], esi
mov dword [esi], eax
jmp 0x100ca3dd
lea eax, [ecx + 8]
push eax
call fcn.1013a244
add esp, 4
mov dword [esp + 0x40], eax
mov dword [eax], 0xffffffff
mov ecx, dword [esi + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100ca3dd
push ecx
lea ecx, [esi + 8]
add eax, 8
push ecx
push eax
call fcn.1013d3f0
add esp, 0xc
jmp 0x100ca3dd
xor eax, eax
mov dword [esp + 0x40], eax
mov esi, dword [esp + 0x64]
test esi, esi
je 0x100ca436
mov ecx, dword [esi + 4]
cmp ecx, 1
jl 0x100ca430
mov eax, dword [esi]
cmp eax, 1
jge 0x100ca3fd
dec eax
mov dword [esp + 0x44], esi
mov dword [esi], eax
jmp 0x100ca436
lea eax, [ecx + 8]
push eax
call fcn.1013a244
add esp, 4
mov dword [esp + 0x44], eax
mov dword [eax], 0xffffffff
mov ecx, dword [esi + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100ca436
push ecx
lea ecx, [esi + 8]
add eax, 8
push ecx
push eax
call fcn.1013d3f0
add esp, 0xc
jmp 0x100ca436
xor eax, eax
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x100ca499
mov esi, dword [ecx + 4]
cmp esi, 4
jl 0x100ca493
mov eax, dword [ecx]
cmp eax, 1
jge 0x100ca456
dec eax
mov dword [esp + 0x34], ecx
mov dword [ecx], eax
jmp 0x100ca499
add esi, 8
push esi
call fcn.1013a244
add esp, 4
mov dword [esp + 0x34], eax
push esi
push 0
push eax
call fcn.1013bf60
mov eax, dword [esp + 0x5c]
add esp, 0xc
mov esi, dword [esp + 0x34]
mov ecx, dword [eax + 4]
add ecx, 8
push ecx
push eax
push esi
call fcn.1013d3f0
add esp, 0xc
mov dword [esi], 0xffffffff
jmp 0x100ca499
xor esi, esi
mov dword [esp + 0x34], esi
mov edx, dword [esp + 0x40]
test edx, edx
je 0x100ca4be
cmp dword [edx + 4], 0
jne 0x100ca4e9
mov eax, dword [edx]
cmp eax, 1
jge 0x100ca4be
add eax, 1
mov dword [edx], eax
jne 0x100ca4be
push edx
call fcn.1013a201
add esp, 4
push 0x10
call fcn.1013a244
mov edx, eax
add esp, 4
mov dword [esp + 0x40], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 8
mov dword [edx + 8], 0x9c4
mov dword [edx + 0xc], 0x7e3
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x100ca50e
cmp dword [ecx + 4], 4
jge 0x100ca539
mov eax, dword [ecx]
cmp eax, 1
jge 0x100ca50e
add eax, 1
mov dword [ecx], eax
jne 0x100ca50e
push ecx
call fcn.1013a201
add esp, 4
push 0x10
call fcn.1013a244
mov ecx, eax
add esp, 4
mov dword [esp + 0x44], ecx
mov dword [ecx], 0xffffffff
mov dword [ecx + 4], 8
mov dword [ecx + 8], 0xa27
mov dword [ecx + 0xc], 0x7e3
mov edx, dword [esp + 0x34]
test edx, edx
je 0x100ca562
cmp dword [edx + 4], 0
jne 0x100ca594
mov eax, dword [edx]
test eax, eax
jns 0x100ca562
add eax, 1
mov dword [edx], eax
jne 0x100ca562
push 0xac
push edx
call fcn.1013a236
add esp, 8
push 0xe
call fcn.1013a244
mov edx, eax
add esp, 4
xor eax, eax
mov dword [esp + 0x34], edx
mov dword [edx + 8], 0
mov word [edx + 0xc], ax
mov dword [edx], 0xffffffff
mov dword [edx + 4], 4
mov eax, dword [0x10166560]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x60]
or eax, 0xffffffff
test ecx, ecx
mov edx, 0xe60088ff
cmovne eax, ecx
mov ecx, dword [esp + 0x5c]
test ecx, ecx
mov dword [esp + 0x64], eax
mov eax, edx
cmovne eax, ecx
mov ecx, dword [esp + 0x58]
test ecx, ecx
mov dword [esp + 0x60], eax
mov eax, 0x64
cmovne eax, ecx
mov ecx, dword [esp + 0xd4]
test ecx, ecx
mov dword [esp + 0x5c], eax
mov eax, 0x23
cmovne eax, ecx
mov ecx, dword [esp + 0xc4]
test ecx, ecx
mov dword [esp + 0x58], eax
mov eax, 0xfe000000
mov esi, eax
cmovne esi, ecx
cmp dword [esp + 0x70], 0
mov ecx, 0xff
cmove esi, edx
cmp dword [esp + 0x6c], 0
mov edx, dword [esp + 0x74]
cmove esi, eax
test edx, edx
cmovne ecx, edx
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x78]
test ecx, ecx
cmovne eax, ecx
mov dword [esp + 0x68], eax
mov eax, dword [0x101847a0]
test eax, eax
je 0x100ca6d9
push 0x90
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push eax
call dword [esp + 0x68]
push dword [esp + 0x98]
mov eax, dword [esp + 0x44]
push dword [esp + 0x54]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x74]
mov ecx, dword [0x101847b4]
push dword [esp + 0x7c]
push dword [esp + 0xac]
push dword [esp + 0x6c]
push dword [esp + 0x74]
push dword [esp + 0x98]
push dword [esp + 0xb4]
push dword [esp + 0x6c]
push dword [esp + 0x88]
push dword [esp + 0x90]
push dword [esp + 0x98]
push dword [esp + 0xb4]
push esi
mov esi, dword [esp + 0x70]
push esi
push dword [esp + 0xc4]
mov esi, dword [esp + 0x70]
push dword [esp + 0xcc]
push dword [esp + 0xd4]
push esi
push eax
call fcn.10070a60
mov ecx, dword [0x101847b4]
jmp 0x100ca8c2
cmp dword [0x10185a84], 0
jne 0x100ca78a
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x10185a84], eax
mov dword [esp + 0xe0], 0xb
mov dword [esp + 0xe4], 0x100cad70
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0xf4], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xd8]
push eax
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], str.LiteInputEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x100ca78a
mov ecx, dword [esp + 0x54]
call fcn.100ff840
push 0
push dword [0x10185a84]
push 0
push 0
push dword [esp + 0x2c]
push dword [esp + 0x34]
push dword [esp + 0x2c]
push dword [esp + 0x34]
push 0x80400000
push str.LiteInputEx
push str.LiteInputEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 1
push str.Isunicode
push eax
mov dword [0x101847a0], eax
call dword [sym.imp.USER32.dll_SetPropW]
push 0x93
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push dword [0x101847a0]
call dword [esp + 0x68]
push 0
push 0
push dword [esp + 0xa0]
cmp dword [esp + 0xa0], 0
push dword [esp + 0x5c]
setne al
cmp dword [esp + 0x58], 0
push dword [esp + 0x7c]
movzx eax, al
push dword [esp + 0x84]
push dword [esp + 0xb4]
push dword [esp + 0x74]
push dword [esp + 0x7c]
push dword [esp + 0xa0]
push eax
setne al
movzx eax, al
push eax
push 0
push 0
push dword [esp + 0x98]
mov eax, dword [esp + 0x7c]
push dword [esp + 0xa0]
push dword [esp + 0xa8]
push dword [esp + 0xc4]
push esi
mov esi, dword [esp + 0x80]
push esi
push dword [esp + 0xd4]
mov esi, dword [esp + 0x80]
push dword [esp + 0xdc]
push dword [esp + 0xe4]
push esi
push eax
mov eax, dword [esp + 0xa8]
push 0
push eax
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push dword [0x101847a0]
push 0
call sym.ExuiKrnln_X32.dll_CreateControl_EditboxEx
mov ecx, eax
mov dword [0x101847b4], ecx
mov eax, dword [0x101847a8]
inc eax
test byte [esp + 0x28], 2
mov dword [esp + 0x78], eax
mov dword [0x101847a8], eax
jne 0x100ca8f3
test edi, edi
je 0x100ca8f3
movss xmm0, dword [edi + 0x120]
mulss xmm0, dword [0x1016e8dc]
cvttss2si eax, xmm0
push eax
jmp 0x100ca8f5
push 0x64
push ecx
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
mov eax, dword [0x1018447c]
push dword [0x101847b4]
mov dword [esp + 0x78], eax
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
push 0x50
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push dword [0x101847a0]
call dword [esp + 0x68]
mov eax, dword [esp + 0x90]
test eax, eax
je 0x100ca94d
push esi
push dword [0x10184798]
push 0
push 0
push 1
push dword [0x101847b4]
call eax
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call edi
push 0
push str.Shell_TrayWnd
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x100ca97c
test esi, esi
je 0x100ca98c
push str.Tab_Control
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100ca98c
push dword [0x101847a0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call edi
mov esi, eax
mov byte [0x101845f1], 1
mov byte [0x101845f3], 1
mov byte [esp + 0x27], 0
call fcn.10147a7b
push 0
push 0
mov dword [0x101847b0], eax
xorps xmm0, xmm0
push 0
lea eax, [esp + 0xac]
movaps xmmword [esp + 0xac], xmm0
push eax
movq qword [esp + 0xc0], xmm0
mov dword [esp + 0xc8], 0
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x100cab40
cmp eax, 0xffffffff
je 0x100cab40
cmp byte [0x101845f1], 0
je 0x100cab3b
cmp dword [esp + 0xa4], 0x3124
jne 0x100caa18
cmp dword [esp + 0xa8], 0x3125
je 0x100cab40
call edi
mov ecx, dword [0x101847a0]
cmp eax, esi
je 0x100caa2c
cmp eax, ecx
jne 0x100cab23
mov eax, dword [esp + 0xa4]
cmp eax, 0x20a
jne 0x100caa7a
cmp dword [esp + 0x48], 0
je 0x100cab23
cmp ecx, dword [esp + 0xa0]
je 0x100caae9
mov ecx, dword [esp + 0xac]
mov eax, dword [esp + 0xa8]
mov edx, dword [0x101847b4]
push ecx
push eax
push ecx
push eax
mov eax, dword [edx + 0x44]
push 0x29e
push edx
call eax
jmp 0x100cab05
cmp eax, 0x201
je 0x100caaa9
cmp eax, 0x204
je 0x100caaa9
cmp eax, 0xa1
je 0x100caaa9
cmp eax, 0xa4
je 0x100caaa9
cmp eax, 0x7b
je 0x100caaa9
cmp eax, 0x206
je 0x100caaa9
cmp eax, 0x203
jne 0x100caab2
cmp ecx, dword [esp + 0xa0]
jne 0x100cab23
cmp eax, 0x100
jne 0x100caae9
mov eax, dword [esp + 0xa8]
cmp eax, 0xd
jne 0x100caacc
cmp dword [esp + 0x48], 0
jmp 0x100caae7
cmp eax, 0x26
jne 0x100caad8
cmp dword [esp + 0x48], 0
jmp 0x100caae7
cmp eax, 0x28
jne 0x100caae4
cmp dword [esp + 0x48], 0
jmp 0x100caae7
cmp eax, 9
je 0x100cab2a
lea eax, [esp + 0xa0]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0xa0]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0xac]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x100ca9e4
jmp 0x100cab40
mov byte [esp + 0x27], 1
jmp 0x100cab46
cmp esi, ecx
je 0x100cab46
test esi, esi
je 0x100cab46
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x100cab40
mov byte [esp + 0x27], 1
mov ecx, dword [0x101847a0]
push 0x93
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x20]
push dword [esp + 0x28]
push 0xffffffffffffffff
push ecx
call dword [esp + 0x68]
mov eax, dword [esp + 0x78]
cmp dword [0x101847a8], eax
mov eax, dword [0x101847b4]
jne 0x100cabe7
test eax, eax
je 0x100cabe7
cmp dword [eax + 0x2c], 0
jle 0x100cabe7
cmp dword [eax + 0x1d4], 0
jne 0x100cab93
mov ecx, dword [eax + 0x180]
call fcn.100ff840
jmp 0x100cabb8
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], 9
push ecx
push eax
push 0x3fa
push dword [eax + 0x28]
mov dword [esp + 0x4c], 0
call dword [esp + 0xd8]
mov edx, eax
lea ecx, [esp + 0x30]
call fcn.100ff0d0
mov eax, dword [0x101847b4]
push 0
mov eax, dword [eax + 0x1dc]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax + 0x38]
mov ecx, dword [esp + 0x30]
mov eax, dword [0x101847b4]
mov dword [esp + 0x2c], ecx
jmp 0x100cabeb
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x90]
test edx, edx
je 0x100cac05
push ecx
push 0x3124
push 0
push 0
push 2
push eax
call edx
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100cac20
add eax, 1
mov dword [ecx], eax
jne 0x100cac20
push ecx
call fcn.1013a201
add esp, 4
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100cac3b
add eax, 1
mov dword [ecx], eax
jne 0x100cac3b
push ecx
call fcn.1013a201
add esp, 4
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100cac56
add eax, 1
mov dword [ecx], eax
jne 0x100cac56
push ecx
call fcn.1013a201
add esp, 4
push dword [esp + 0x74]
mov byte [0x101845f1], 0
mov byte [0x101845f3], 0
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
cmp byte [esp + 0x27], 0
je 0x100caccb
mov eax, dword [esp + 0xa0]
cmp eax, dword [0x101847a0]
je 0x100caccb
push 0x1c
call fcn.1013a206
movups xmm0, xmmword [esp + 0xa4]
add esp, 4
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0xb0]
push 0
push 0
push eax
push 0x100c9bd0
movq qword [eax + 0x10], xmm0
mov ecx, dword [esp + 0xc8]
push 0
push 0
mov dword [eax + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [esp + 0x2c]
mov esi, edx
mov edi, esi
test edi, edi
je 0x100cad39
cmp dword [edi + 4], 1
jl 0x100cad39
mov eax, dword [edx]
cmp eax, 1
jge 0x100cacf7
push esi
sub esp, 8
dec eax
mov dword [edx], eax
call fcn.100fee60
add esp, 0xc
mov edx, esi
jmp 0x100cad3f
mov eax, dword [edi + 4]
add eax, 8
push eax
call fcn.1013a244
add esp, 4
mov esi, eax
lea eax, [edi + 8]
push dword [edi + 4]
push eax
lea eax, [esi + 8]
push eax
call fcn.1013d3f0
mov eax, dword [edi + 4]
add esp, 0xc
mov dword [esi + 4], eax
mov dword [esi], 0xffffffff
push esi
sub esp, 8
call fcn.100fee60
mov edx, dword [esp + 0x38]
add esp, 0xc
jmp 0x100cad3f
xor esi, esi
test edi, edi
je 0x100cad56
mov ecx, dword [edx]
cmp ecx, 1
jge 0x100cad56
add ecx, 1
mov dword [edx], ecx
jne 0x100cad56
push edx
call fcn.1013a201
add esp, 4
mov ecx, dword [esp + 0x13c]
mov eax, esi
pop edi
pop esi
xor ecx, esp
call fcn.1013a1f3
mov esp, ebp
pop ebp
ret 0x74