Function at 0x100b5cf0
Capabilities:
Check for unmoving mouse cursor
Create thread
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x128
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x124], eax
push esi
push edi
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x6c]
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 0x5c]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x58]
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 0x50]
mov dword [esp + 0xb0], eax
mov eax, dword [ebp + 0x4c]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x48]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x78], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x54]
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x78]
mov dword [esp + 0x48], edx
mov edx, dword [ebp + 0x38]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 0x68]
mov dword [esp + 0x40], edx
mov edx, dword [ebp + 0x3c]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x70]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x6c], eax
mov edi, dword [ebp + 8]
mov dword [esp + 0xc], edi
test esi, esi
jne 0x100b5df3
mov esi, dword [0x1016b398]
test esi, esi
cmove esi, esi
test byte [ebp + 0x74], 1
je 0x100b5e41
call fcn.1012e29b
sub eax, dword [0x1016b68c]
cmp eax, 0x12c
jge 0x100b5e41
cmp esi, dword [0x1016b694]
jne 0x100b5e41
mov dword [0x1016b68c], 0
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
mov ecx, dword [esp + 0x4c]
call fcn.100eda90
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.10120a11
mov esp, ebp
pop ebp
ret 0x74
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
cmp dword [ebp + 0x74], 0
mov dword [0x1016b694], esi
je 0x100b62b7
lea eax, [esp + 0xf0]
xorps xmm0, xmm0
push eax
push dword [esi + 0x28]
movaps xmmword [esp + 0xf8], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x104]
mov dword [esp + 0x104], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp + 0x74]
test al, 4
jne 0x100b5feb
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10154570]
movd xmm0, edi
lahf
test ah, 0x44
jp 0x100b5ec8
cvtdq2pd xmm0, xmm0
jmp 0x100b5eec
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101241d0
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10154570]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x10]
mov dword [esp + 0xc], eax
lahf
test ah, 0x44
jp 0x100b5f15
cvtdq2pd xmm0, xmm0
jmp 0x100b5f39
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101241d0
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10154570]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x18]
mov dword [esp + 0x10], eax
lahf
test ah, 0x44
jp 0x100b5f62
cvtdq2pd xmm0, xmm0
jmp 0x100b5f86
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101241d0
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10154570]
cvttsd2si edi, xmm0
movd xmm0, dword [esp + 0x14]
lahf
mov dword [esp + 0x18], edi
test ah, 0x44
jp 0x100b5fba
mov eax, dword [ebp + 0x74]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100b5ff3
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101241d0
mov eax, dword [ebp + 0x74]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100b5ff3
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
test eax, 0x4000
je 0x100b6001
add edi, dword [esi + 0x50]
mov dword [esp + 0x18], edi
test eax, 0x8000
je 0x100b600f
add ecx, dword [esi + 0x54]
mov dword [esp + 0x14], ecx
mov edi, dword [sym.imp.USER32.dll_GetCursorPos]
test al, 0x10
je 0x100b6078
lea eax, [esp + 0xbc]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0xc0], xmm0
call edi
mov eax, dword [ebp + 0x74]
test al, 8
je 0x100b6069
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
add eax, edx
mov ecx, dword [esp + 0xbc]
add eax, ecx
cmp eax, dword [esp + 0x120]
mov eax, dword [ebp + 0x74]
jle 0x100b6061
mov edx, ecx
sub edx, dword [esp + 0x18]
mov dword [esp + 0xc], edx
jmp 0x100b6078
add edx, ecx
mov dword [esp + 0xc], edx
jmp 0x100b6078
mov ecx, dword [esp + 0xc]
add ecx, dword [esp + 0xbc]
mov dword [esp + 0xc], ecx
test al, 0x20
je 0x100b60ca
lea eax, [esp + 0x28]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x2c], xmm0
call edi
mov eax, dword [ebp + 0x74]
test al, 8
je 0x100b60be
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
lea eax, [edx + edi]
add eax, ecx
cmp eax, dword [esp + 0x124]
mov eax, dword [ebp + 0x74]
jle 0x100b60b6
sub ecx, edx
sub ecx, edi
jmp 0x100b60c6
add edi, ecx
mov dword [esp + 0x10], edi
jmp 0x100b60ca
mov ecx, dword [esp + 0x10]
add ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0xc]
test al, 0x40
je 0x100b60e7
mov eax, dword [esi + 0x74]
add eax, edx
add ecx, eax
mov eax, dword [ebp + 0x74]
mov dword [esp + 0xc], ecx
mov edi, dword [esp + 0xf4]
test al, al
jns 0x100b60fe
mov eax, dword [esi + 0x78]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
test eax, 0x100
je 0x100b6121
mov eax, dword [esi + 0x74]
sub eax, dword [esp + 0x18]
add eax, dword [esi + 0x50]
mov edx, dword [esp + 0xf0]
add eax, edx
add ecx, eax
mov eax, dword [ebp + 0x74]
mov dword [esp + 0xc], ecx
test eax, 0x200
je 0x100b613b
mov eax, dword [esi + 0x54]
sub eax, dword [esp + 0x14]
add eax, dword [esi + 0x78]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
test eax, 0x400
je 0x100b619a
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0xf4]
test al, 8
je 0x100b6190
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x18]
add eax, ecx
add eax, edx
jns 0x100b618d
mov eax, dword [esi + 0x50]
add eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
add eax, edx
cmp eax, dword [esp + 0x120]
jge 0x100b618d
mov eax, dword [esp + 0x20]
add eax, edx
add dword [esp + 0xc], eax
mov eax, dword [ebp + 0x74]
jmp 0x100b619a
mov eax, dword [ebp + 0x74]
sub ecx, dword [esp + 0x18]
add ecx, edx
add dword [esp + 0xc], ecx
test eax, 0x800
je 0x100b61f9
mov ecx, dword [esi + 0x78]
test al, 8
je 0x100b61ef
mov eax, dword [esp + 0x10]
sub eax, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
add eax, ecx
add eax, edi
jns 0x100b61ec
mov eax, dword [esi + 0x54]
add eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x14]
add eax, dword [esp + 0x20]
add eax, edi
cmp eax, dword [esp + 0x124]
jge 0x100b61ec
mov eax, dword [esp + 0x20]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
jmp 0x100b61f9
mov eax, dword [ebp + 0x74]
sub ecx, dword [esp + 0x14]
add ecx, edi
add dword [esp + 0x10], ecx
test eax, 0x1000
je 0x100b624d
mov ecx, dword [esi + 0x74]
test al, 8
je 0x100b6242
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x18]
mov edi, dword [esp + 0xf4]
add eax, ecx
add eax, edx
test eax, eax
jle 0x100b6242
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x18]
add eax, dword [esi + 0x50]
add eax, ecx
add eax, edx
cmp eax, dword [esp + 0x120]
jle 0x100b6242
sub ecx, dword [esp + 0x18]
add ecx, edx
add dword [esp + 0xc], ecx
jmp 0x100b624d
mov eax, dword [esi + 0x50]
add eax, ecx
add eax, edx
add dword [esp + 0xc], eax
mov edx, dword [ebp + 0x74]
test edx, 0x2000
je 0x100b636b
mov ecx, dword [esi + 0x78]
test dl, 8
mov edx, dword [esp + 0x10]
je 0x100b62a1
mov eax, edx
sub eax, dword [esp + 0x14]
add eax, ecx
add eax, edi
test eax, eax
jle 0x100b62a1
mov eax, dword [esp + 0x14]
add eax, edx
add eax, ecx
add eax, edi
add eax, dword [esi + 0x54]
cmp eax, dword [esp + 0x124]
jle 0x100b62a1
sub ecx, dword [esp + 0x14]
add ecx, edi
mov edi, dword [esp + 0xc]
add edx, ecx
mov dword [esp + 0x10], edx
jmp 0x100b6373
mov eax, dword [esi + 0x54]
add eax, ecx
add eax, edi
mov edi, dword [esp + 0xc]
add edx, eax
mov dword [esp + 0x10], edx
jmp 0x100b6373
test esi, esi
je 0x100b636f
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10154570]
movd xmm0, dword [esp + 0x18]
lahf
test ah, 0x44
jp 0x100b62e0
cvtdq2pd xmm0, xmm0
jmp 0x100b6304
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101241d0
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x10c]
ucomiss xmm1, dword [0x10154570]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x14]
mov dword [esp + 0x18], eax
lahf
test ah, 0x44
jp 0x100b6339
mov edx, dword [esp + 0x10]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100b6377
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.101241d0
mov edx, dword [esp + 0x18]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100b6377
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov eax, dword [0x1016b680]
test eax, eax
je 0x100b6395
push 0x90
push ecx
push dword [esp + 0x20]
push edx
push edi
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [esp + 0x4c]
xor edi, edi
mov dword [esp + 0x20], edi
test edx, edx
je 0x100b63ea
mov ecx, dword [edx + 4]
cmp ecx, 4
jl 0x100b63ea
mov eax, dword [edx]
cmp eax, 1
jge 0x100b63bd
dec eax
mov edi, edx
mov dword [edx], eax
mov dword [esp + 0x20], edi
jmp 0x100b63ea
lea eax, [ecx + 8]
push eax
call fcn.10120a62
mov ecx, dword [esp + 0x50]
mov edi, eax
add esp, 4
mov dword [esp + 0x20], edi
mov eax, dword [ecx + 4]
add eax, 8
push eax
push ecx
push edi
call fcn.10123c10
add esp, 0xc
mov dword [edi], 0xffffffff
mov edx, dword [esp + 0x40]
xor eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x24], eax
test edx, edx
je 0x100b6455
mov ecx, dword [edx + 4]
cmp ecx, 1
jl 0x100b644f
mov eax, dword [edx]
cmp eax, 1
jge 0x100b6418
dec eax
mov dword [esp + 0x34], edx
mov dword [edx], eax
jmp 0x100b6455
lea eax, [ecx + 8]
push eax
call fcn.10120a62
mov edx, dword [esp + 0x44]
add esp, 4
mov dword [esp + 0x34], eax
mov dword [eax], 0xffffffff
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100b6455
push ecx
lea ecx, [edx + 8]
add eax, 8
push ecx
push eax
call fcn.10123c10
add esp, 0xc
jmp 0x100b6455
xor eax, eax
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x44]
test edx, edx
je 0x100b64b2
mov ecx, dword [edx + 4]
cmp ecx, 1
jl 0x100b64ac
mov eax, dword [edx]
cmp eax, 1
jge 0x100b6475
dec eax
mov dword [esp + 0x38], edx
mov dword [edx], eax
jmp 0x100b64b2
lea eax, [ecx + 8]
push eax
call fcn.10120a62
mov edx, dword [esp + 0x48]
add esp, 4
mov dword [esp + 0x38], eax
mov dword [eax], 0xffffffff
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100b64b2
push ecx
lea ecx, [edx + 8]
add eax, 8
push ecx
push eax
call fcn.10123c10
add esp, 0xc
jmp 0x100b64b2
xor eax, eax
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x48]
test edx, edx
je 0x100b6509
mov ecx, dword [edx + 4]
cmp ecx, 4
jl 0x100b6503
mov eax, dword [edx]
cmp eax, 1
jge 0x100b64d2
dec eax
mov dword [esp + 0x24], edx
mov dword [edx], eax
jmp 0x100b6509
lea eax, [ecx + 8]
push eax
call fcn.10120a62
mov edx, dword [esp + 0x4c]
add esp, 4
mov dword [esp + 0x24], eax
mov ecx, dword [edx + 4]
add ecx, 8
push ecx
push edx
push eax
call fcn.10123c10
mov eax, dword [esp + 0x30]
add esp, 0xc
mov dword [eax], 0xffffffff
jmp 0x100b6509
xor eax, eax
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x34]
test edx, edx
je 0x100b652e
cmp dword [edx + 4], 0
jne 0x100b6559
mov eax, dword [edx]
cmp eax, 1
jge 0x100b652e
add eax, 1
mov dword [edx], eax
jne 0x100b652e
push edx
call fcn.10120a1f
add esp, 4
push 0x10
call fcn.10120a62
mov edx, eax
add esp, 4
mov dword [esp + 0x34], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 8
mov dword [edx + 8], 0x9c4
mov dword [edx + 0xc], 0x7e3
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x100b657e
cmp dword [ecx + 4], 4
jge 0x100b65a9
mov eax, dword [ecx]
cmp eax, 1
jge 0x100b657e
add eax, 1
mov dword [ecx], eax
jne 0x100b657e
push ecx
call fcn.10120a1f
add esp, 4
push 0x10
call fcn.10120a62
mov ecx, eax
add esp, 4
mov dword [esp + 0x38], ecx
mov dword [ecx], 0xffffffff
mov dword [ecx + 4], 8
mov dword [ecx + 8], 0xa27
mov dword [ecx + 0xc], 0x7e3
mov edx, dword [esp + 0x24]
test edx, edx
je 0x100b65d2
cmp dword [edx + 4], 0
jne 0x100b65f7
mov eax, dword [edx]
test eax, eax
jns 0x100b65d2
add eax, 1
mov dword [edx], eax
jne 0x100b65d2
push 0xac
push edx
call fcn.10120a54
add esp, 8
push 0xc
call fcn.10120a62
mov edx, eax
add esp, 4
mov dword [esp + 0x24], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 4
mov eax, dword [0x1014c3fc]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x54]
or eax, 0xffffffff
mov edx, dword [esp + 0xb0]
test ecx, ecx
cmovne eax, ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x68], eax
test ecx, ecx
mov eax, 0xe60088ff
cmovne eax, ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x64], eax
test ecx, ecx
mov eax, 0x64
cmovne eax, ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x40], eax
test ecx, ecx
mov eax, 0x23
cmovne eax, ecx
test edx, edx
mov dword [esp + 0x44], eax
mov ecx, 0xfe000000
mov eax, ecx
cmovne eax, edx
cmp dword [esp + 0x5c], 0
mov edx, 0xe60088ff
cmove eax, edx
cmp dword [esp + 0x58], 0
mov edx, dword [esp + 0xb4]
cmove eax, ecx
test edx, edx
mov dword [esp + 0x54], eax
mov eax, 0xff
cmovne eax, edx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x60]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x1016b680]
mov dword [esp + 0x50], ecx
test eax, eax
je 0x100b674a
push 0x90
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push dword [esp + 0x6c]
mov eax, dword [esp + 0x28]
push dword [esp + 0x4c]
mov edx, dword [esp + 0x40]
push dword [esp + 0x60]
mov ecx, dword [0x1016b690]
push dword [esp + 0x68]
push dword [esp + 0x84]
push dword [esp + 0x58]
push dword [esp + 0x58]
push dword [esp + 0xa4]
push dword [esp + 0xac]
push dword [esp + 0x60]
push dword [esp + 0x8c]
push dword [esp + 0x94]
push dword [esp + 0x80]
push dword [esp + 0xa4]
push dword [esp + 0x8c]
push eax
push dword [esp + 0xb8]
mov eax, dword [esp + 0x78]
push dword [esp + 0xc0]
push dword [esp + 0xc8]
push edi
push eax
call fcn.10065750
mov ecx, dword [0x1016b690]
jmp 0x100b692e
cmp dword [0x1016c2f8], 0
jne 0x100b67fb
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x1016c2f8], eax
mov dword [esp + 0xd0], 0xb
mov dword [esp + 0xd4], 0x100b6e10
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0xe4], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0xe0], eax
lea eax, [esp + 0xc8]
push eax
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], str.LiteInputEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x100b67fb
mov ecx, dword [esp + 0x4c]
call fcn.100eda90
push 0
push dword [0x1016c2f8]
push 0
push 0
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x28]
push dword [esp + 0x28]
push 0x80400000
push str.LiteInputEx
push str.LiteInputEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 1
push str.Isunicode
push eax
mov dword [0x1016b680], eax
call dword [sym.imp.USER32.dll_SetPropW]
push 0x93
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push dword [0x1016b680]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
push 0
push dword [esp + 0x74]
cmp dword [esp + 0x98], 0
push dword [esp + 0x54]
setne al
cmp dword [esp + 0x4c], 0
push dword [esp + 0x68]
movzx eax, al
push dword [esp + 0x70]
push dword [esp + 0x8c]
push dword [esp + 0x60]
push dword [esp + 0x60]
push dword [esp + 0xac]
push eax
setne al
movzx eax, al
push eax
push 0
push 0
push dword [esp + 0x9c]
mov eax, dword [esp + 0x60]
push dword [esp + 0xa4]
push dword [esp + 0x90]
push dword [esp + 0xb4]
push dword [esp + 0x9c]
push eax
push dword [esp + 0xc8]
mov eax, dword [esp + 0x88]
push dword [esp + 0xd0]
push dword [esp + 0xd8]
push edi
push eax
mov eax, dword [esp + 0x9c]
push 0
push eax
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push dword [0x1016b680]
push 0
call sym.ExuiKrnln_X32.dll_CreateControl_EditboxEx
mov ecx, eax
mov dword [0x1016b690], ecx
test byte [ebp + 0x74], 2
jne 0x100b694f
test esi, esi
je 0x100b694f
movss xmm0, dword [esi + 0x10c]
mulss xmm0, dword [0x10154760]
cvttss2si eax, xmm0
push eax
jmp 0x100b6951
push 0x64
push ecx
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
mov eax, dword [0x1016b39c]
push dword [0x1016b690]
mov dword [esp + 0x64], eax
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
push 0x50
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push dword [0x1016b680]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0x84]
test eax, eax
je 0x100b69ab
push edi
push dword [0x1016b678]
push 0
push 0
push 1
push dword [0x1016b690]
call eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0
push str.Shell_TrayWnd
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x100b69d8
test esi, esi
je 0x100b69ed
push str.Tab_Control
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100b69ed
push dword [0x1016b680]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [sym.imp.USER32.dll_GetForegroundWindow]
call eax
mov esi, eax
mov byte [0x1016b4d5], 1
mov byte [0x1016b4d7], 1
mov byte [esp + 0x1f], 0
call fcn.1012e29b
push 0
push 0
mov dword [0x1016b68c], eax
xorps xmm0, xmm0
push 0
lea eax, [esp + 0x9c]
movaps xmmword [esp + 0x9c], xmm0
push eax
movq qword [esp + 0xb0], xmm0
mov dword [esp + 0xb8], 0
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x100b6ba5
cmp eax, 0xffffffff
je 0x100b6ba5
cmp byte [0x1016b4d5], 0
je 0x100b6ba0
cmp dword [esp + 0x94], 0x3124
jne 0x100b6a79
cmp dword [esp + 0x98], 0x3125
je 0x100b6ba5
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x1016b680]
cmp eax, esi
je 0x100b6a91
cmp eax, ecx
jne 0x100b6b88
mov eax, dword [esp + 0x94]
cmp eax, 0x20a
jne 0x100b6adf
cmp dword [esp + 0x3c], 0
je 0x100b6b88
cmp ecx, dword [esp + 0x90]
je 0x100b6b4e
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0x98]
mov edx, dword [0x1016b690]
push ecx
push eax
push ecx
push eax
mov eax, dword [edx + 0x44]
push 0x29e
push edx
call eax
jmp 0x100b6b6a
cmp eax, 0x201
je 0x100b6b0e
cmp eax, 0x204
je 0x100b6b0e
cmp eax, 0xa1
je 0x100b6b0e
cmp eax, 0xa4
je 0x100b6b0e
cmp eax, 0x7b
je 0x100b6b0e
cmp eax, 0x206
je 0x100b6b0e
cmp eax, 0x203
jne 0x100b6b17
cmp ecx, dword [esp + 0x90]
jne 0x100b6b88
cmp eax, 0x100
jne 0x100b6b4e
mov eax, dword [esp + 0x98]
cmp eax, 0xd
jne 0x100b6b31
cmp dword [esp + 0x3c], 0
jmp 0x100b6b4c
cmp eax, 0x26
jne 0x100b6b3d
cmp dword [esp + 0x3c], 0
jmp 0x100b6b4c
cmp eax, 0x28
jne 0x100b6b49
cmp dword [esp + 0x3c], 0
jmp 0x100b6b4c
cmp eax, 9
je 0x100b6b8f
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x100b6a45
jmp 0x100b6ba5
mov byte [esp + 0x1f], 1
jmp 0x100b6bab
cmp esi, ecx
je 0x100b6bab
test esi, esi
je 0x100b6bab
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x100b6ba5
mov byte [esp + 0x1f], 1
mov ecx, dword [0x1016b680]
push 0x93
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x1016b690]
test eax, eax
je 0x100b6c25
cmp dword [eax + 0x2c], 0
jle 0x100b6c25
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 9
push ecx
push eax
push 0x3fa
push dword [eax + 0x28]
mov dword [esp + 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, eax
lea ecx, [esp + 0x20]
call fcn.100ed990
mov eax, dword [0x1016b690]
push 0
mov eax, dword [eax + 0x1bc]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax + 0x38]
mov eax, dword [0x1016b690]
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x100b6c3f
push edi
push 0x3124
push 0
push 0
push 2
push eax
call ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100b6c5a
add eax, 1
mov dword [ecx], eax
jne 0x100b6c5a
push ecx
call fcn.10120a1f
add esp, 4
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100b6c75
add eax, 1
mov dword [ecx], eax
jne 0x100b6c75
push ecx
call fcn.10120a1f
add esp, 4
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100b6c90
add eax, 1
mov dword [ecx], eax
jne 0x100b6c90
push ecx
call fcn.10120a1f
add esp, 4
cmp byte [esp + 0x1f], 0
mov byte [0x1016b4d5], 0
mov byte [0x1016b4d7], 0
je 0x100b6cfc
mov eax, dword [esp + 0x90]
cmp eax, dword [0x1016b680]
je 0x100b6cfc
push 0x1c
call fcn.10120a24
movups xmm0, xmmword [esp + 0x94]
add esp, 4
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0xa0]
push 0
push 0
push eax
push 0x100b5c70
movq qword [eax + 0x10], xmm0
mov ecx, dword [esp + 0xb8]
push 0
push 0
mov dword [eax + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esp + 0x60]
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
test edi, edi
je 0x100b6df5
cmp dword [edi + 4], 1
jl 0x100b6df5
mov edx, dword [0x1016be1c]
cmp edx, 0x9600000
jle 0x100b6d84
mov ecx, dword [0x1016bbb0]
nop dword [eax + eax]
mov eax, dword [ecx*4 + 0x1016b950]
test eax, eax
je 0x100b6d69
sub edx, dword [eax + 4]
add dword [eax], 1
mov dword [0x1016be1c], edx
jne 0x100b6d5e
push eax
call fcn.10120a1f
mov edx, dword [0x1016be1c]
add esp, 4
mov ecx, dword [0x1016bbb0]
mov dword [ecx*4 + 0x1016b950], 0
inc ecx
xor esi, esi
mov eax, ecx
cmp eax, 0x96
cmovg ecx, esi
mov dword [0x1016bbb0], ecx
cmp edx, 0x9600000
jg 0x100b6d30
mov esi, dword [0x1016b94c]
inc esi
mov dword [0x1016b94c], esi
cmp esi, 0x96
jle 0x100b6da5
mov dword [0x1016b94c], 0
xor esi, esi
mov eax, dword [esi*4 + 0x1016b950]
test eax, eax
je 0x100b6dcd
sub edx, dword [eax + 4]
add dword [eax], 1
mov dword [0x1016be1c], edx
jne 0x100b6dcd
push eax
call fcn.10120a1f
mov edx, dword [0x1016be1c]
add esp, 4
add edx, dword [edi + 4]
mov eax, edi
mov dword [esi*4 + 0x1016b950], edi
mov dword [0x1016be1c], edx
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.10120a11
mov esp, ebp
pop ebp
ret 0x74
mov ecx, dword [esp + 0x12c]
xor edi, edi
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.10120a11
mov esp, ebp
pop ebp
ret 0x74