Function at 0x1009fd60
Capabilities:
Check for unmoving mouse cursor
Create thread
Find taskbar
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x128
mov eax, dword [0x10158008]
xor eax, esp
mov dword [esp + 0x124], eax
push esi
push edi
mov eax, dword [ebp + 0x44]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x6c]
mov dword [esp + 0xb4], eax
mov eax, dword [ebp + 0x5c]
mov dword [esp + 0xc4], eax
mov eax, dword [ebp + 0x58]
mov dword [esp + 0xb8], eax
mov eax, dword [ebp + 0x50]
mov dword [esp + 0xb0], eax
mov eax, dword [ebp + 0x4c]
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x48]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x28]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x4c], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x7c], eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x78], eax
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 0x30]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x8c], eax
mov eax, dword [ebp + 0x40]
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 0x54]
mov dword [esp + 0x88], eax
mov eax, dword [ebp + 0x60]
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 0x64]
mov esi, dword [ebp + 0x78]
mov dword [esp + 0x48], edx
mov edx, dword [ebp + 0x38]
mov dword [esp + 0x5c], eax
mov eax, dword [ebp + 0x68]
mov dword [esp + 0x40], edx
mov edx, dword [ebp + 0x3c]
mov dword [esp + 0x58], eax
mov eax, dword [ebp + 0x70]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x6c], eax
mov edi, dword [ebp + 8]
mov dword [esp + 0xc], edi
test esi, esi
jne 0x1009fe63
mov esi, dword [0x1015a408]
test esi, esi
cmove esi, esi
test byte [ebp + 0x74], 1
je 0x1009feb1
call fcn.1011cc9a
sub eax, dword [0x1015a6e8]
cmp eax, 0x12c
jge 0x1009feb1
cmp esi, dword [0x1015a6f0]
jne 0x1009feb1
mov dword [0x1015a6e8], 0
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
mov ecx, dword [esp + 0x4c]
call fcn.100d4e50
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x74
call sym.ExuiKrnln_X32.dll_ClouseLiteInputEx
cmp dword [ebp + 0x74], 0
mov dword [0x1015a6f0], esi
je 0x100a0327
lea eax, [esp + 0xf0]
xorps xmm0, xmm0
push eax
push dword [esi + 0x28]
movaps xmmword [esp + 0xf8], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x104]
mov dword [esp + 0x104], 0x28
push eax
push 2
push 0x5f5e100
push 0x5f5e100
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp + 0x74]
test al, 4
jne 0x100a005b
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, dword [0x10142934]
movd xmm0, edi
lahf
test ah, 0x44
jp 0x1009ff38
cvtdq2pd xmm0, xmm0
jmp 0x1009ff5c
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, dword [0x10142934]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x10]
mov dword [esp + 0xc], eax
lahf
test ah, 0x44
jp 0x1009ff85
cvtdq2pd xmm0, xmm0
jmp 0x1009ffa9
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, dword [0x10142934]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x18]
mov dword [esp + 0x10], eax
lahf
test ah, 0x44
jp 0x1009ffd2
cvtdq2pd xmm0, xmm0
jmp 0x1009fff6
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, dword [0x10142934]
cvttsd2si edi, xmm0
movd xmm0, dword [esp + 0x14]
lahf
mov dword [esp + 0x18], edi
test ah, 0x44
jp 0x100a002a
mov eax, dword [ebp + 0x74]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100a0063
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
mov eax, dword [ebp + 0x74]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100a0063
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
test eax, 0x4000
je 0x100a0071
add edi, dword [esi + 0x50]
mov dword [esp + 0x18], edi
test eax, 0x8000
je 0x100a007f
add ecx, dword [esi + 0x54]
mov dword [esp + 0x14], ecx
mov edi, dword [sym.imp.USER32.dll_GetCursorPos]
test al, 0x10
je 0x100a00e8
lea eax, [esp + 0xbc]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0xc0], xmm0
call edi
mov eax, dword [ebp + 0x74]
test al, 8
je 0x100a00d9
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
add eax, edx
mov ecx, dword [esp + 0xbc]
add eax, ecx
cmp eax, dword [esp + 0x120]
mov eax, dword [ebp + 0x74]
jle 0x100a00d1
mov edx, ecx
sub edx, dword [esp + 0x18]
mov dword [esp + 0xc], edx
jmp 0x100a00e8
add edx, ecx
mov dword [esp + 0xc], edx
jmp 0x100a00e8
mov ecx, dword [esp + 0xc]
add ecx, dword [esp + 0xbc]
mov dword [esp + 0xc], ecx
test al, 0x20
je 0x100a013a
lea eax, [esp + 0x28]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x2c], xmm0
call edi
mov eax, dword [ebp + 0x74]
test al, 8
je 0x100a012e
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
lea eax, [edx + edi]
add eax, ecx
cmp eax, dword [esp + 0x124]
mov eax, dword [ebp + 0x74]
jle 0x100a0126
sub ecx, edx
sub ecx, edi
jmp 0x100a0136
add edi, ecx
mov dword [esp + 0x10], edi
jmp 0x100a013a
mov ecx, dword [esp + 0x10]
add ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0xf0]
mov ecx, dword [esp + 0xc]
test al, 0x40
je 0x100a0157
mov eax, dword [esi + 0x74]
add eax, edx
add ecx, eax
mov eax, dword [ebp + 0x74]
mov dword [esp + 0xc], ecx
mov edi, dword [esp + 0xf4]
test al, al
jns 0x100a016e
mov eax, dword [esi + 0x78]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
test eax, 0x100
je 0x100a0191
mov eax, dword [esi + 0x74]
sub eax, dword [esp + 0x18]
add eax, dword [esi + 0x50]
mov edx, dword [esp + 0xf0]
add eax, edx
add ecx, eax
mov eax, dword [ebp + 0x74]
mov dword [esp + 0xc], ecx
test eax, 0x200
je 0x100a01ab
mov eax, dword [esi + 0x54]
sub eax, dword [esp + 0x14]
add eax, dword [esi + 0x78]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
test eax, 0x400
je 0x100a020a
mov ecx, dword [esi + 0x74]
mov edi, dword [esp + 0xf4]
test al, 8
je 0x100a0200
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x18]
add eax, ecx
add eax, edx
jns 0x100a01fd
mov eax, dword [esi + 0x50]
add eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
add eax, edx
cmp eax, dword [esp + 0x120]
jge 0x100a01fd
mov eax, dword [esp + 0x20]
add eax, edx
add dword [esp + 0xc], eax
mov eax, dword [ebp + 0x74]
jmp 0x100a020a
mov eax, dword [ebp + 0x74]
sub ecx, dword [esp + 0x18]
add ecx, edx
add dword [esp + 0xc], ecx
test eax, 0x800
je 0x100a0269
mov ecx, dword [esi + 0x78]
test al, 8
je 0x100a025f
mov eax, dword [esp + 0x10]
sub eax, dword [esp + 0x14]
mov edx, dword [esp + 0xf0]
add eax, ecx
add eax, edi
jns 0x100a025c
mov eax, dword [esi + 0x54]
add eax, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
add eax, dword [esp + 0x14]
add eax, dword [esp + 0x20]
add eax, edi
cmp eax, dword [esp + 0x124]
jge 0x100a025c
mov eax, dword [esp + 0x20]
add eax, edi
add dword [esp + 0x10], eax
mov eax, dword [ebp + 0x74]
jmp 0x100a0269
mov eax, dword [ebp + 0x74]
sub ecx, dword [esp + 0x14]
add ecx, edi
add dword [esp + 0x10], ecx
test eax, 0x1000
je 0x100a02bd
mov ecx, dword [esi + 0x74]
test al, 8
je 0x100a02b2
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 0x18]
mov edi, dword [esp + 0xf4]
add eax, ecx
add eax, edx
test eax, eax
jle 0x100a02b2
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x18]
add eax, dword [esi + 0x50]
add eax, ecx
add eax, edx
cmp eax, dword [esp + 0x120]
jle 0x100a02b2
sub ecx, dword [esp + 0x18]
add ecx, edx
add dword [esp + 0xc], ecx
jmp 0x100a02bd
mov eax, dword [esi + 0x50]
add eax, ecx
add eax, edx
add dword [esp + 0xc], eax
mov edx, dword [ebp + 0x74]
test edx, 0x2000
je 0x100a03db
mov ecx, dword [esi + 0x78]
test dl, 8
mov edx, dword [esp + 0x10]
je 0x100a0311
mov eax, edx
sub eax, dword [esp + 0x14]
add eax, ecx
add eax, edi
test eax, eax
jle 0x100a0311
mov eax, dword [esp + 0x14]
add eax, edx
add eax, ecx
add eax, edi
add eax, dword [esi + 0x54]
cmp eax, dword [esp + 0x124]
jle 0x100a0311
sub ecx, dword [esp + 0x14]
add ecx, edi
mov edi, dword [esp + 0xc]
add edx, ecx
mov dword [esp + 0x10], edx
jmp 0x100a03e3
mov eax, dword [esi + 0x54]
add eax, ecx
add eax, edi
mov edi, dword [esp + 0xc]
add edx, eax
mov dword [esp + 0x10], edx
jmp 0x100a03e3
test esi, esi
je 0x100a03df
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, dword [0x10142934]
movd xmm0, dword [esp + 0x18]
lahf
test ah, 0x44
jp 0x100a0350
cvtdq2pd xmm0, xmm0
jmp 0x100a0374
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
fstp qword [esp + 0x30]
movsd xmm0, qword [esp + 0x30]
add esp, 8
movss xmm1, dword [esi + 0x11c]
ucomiss xmm1, dword [0x10142934]
cvttsd2si eax, xmm0
movd xmm0, dword [esp + 0x14]
mov dword [esp + 0x18], eax
lahf
test ah, 0x44
jp 0x100a03a9
mov edx, dword [esp + 0x10]
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100a03e7
cvtdq2ps xmm0, xmm0
sub esp, 8
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10114750
mov edx, dword [esp + 0x18]
add esp, 8
fstp qword [esp + 0x28]
movsd xmm0, qword [esp + 0x28]
cvttsd2si ecx, xmm0
mov dword [esp + 0x14], ecx
jmp 0x100a03e7
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov eax, dword [0x1015a6dc]
test eax, eax
je 0x100a0405
push 0x90
push ecx
push dword [esp + 0x20]
push edx
push edi
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [esp + 0x4c]
xor edi, edi
mov dword [esp + 0x20], edi
test edx, edx
je 0x100a045a
mov ecx, dword [edx + 4]
cmp ecx, 4
jl 0x100a045a
mov eax, dword [edx]
cmp eax, 1
jge 0x100a042d
dec eax
mov edi, edx
mov dword [edx], eax
mov dword [esp + 0x20], edi
jmp 0x100a045a
lea eax, [ecx + 8]
push eax
call fcn.10110e62
mov ecx, dword [esp + 0x50]
mov edi, eax
add esp, 4
mov dword [esp + 0x20], edi
mov eax, dword [ecx + 4]
add eax, 8
push eax
push ecx
push edi
call fcn.10112e60
add esp, 0xc
mov dword [edi], 0xffffffff
mov edx, dword [esp + 0x40]
xor eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x24], eax
test edx, edx
je 0x100a04c5
mov ecx, dword [edx + 4]
cmp ecx, 1
jl 0x100a04bf
mov eax, dword [edx]
cmp eax, 1
jge 0x100a0488
dec eax
mov dword [esp + 0x34], edx
mov dword [edx], eax
jmp 0x100a04c5
lea eax, [ecx + 8]
push eax
call fcn.10110e62
mov edx, dword [esp + 0x44]
add esp, 4
mov dword [esp + 0x34], eax
mov dword [eax], 0xffffffff
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100a04c5
push ecx
lea ecx, [edx + 8]
add eax, 8
push ecx
push eax
call fcn.10112e60
add esp, 0xc
jmp 0x100a04c5
xor eax, eax
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x44]
test edx, edx
je 0x100a0522
mov ecx, dword [edx + 4]
cmp ecx, 1
jl 0x100a051c
mov eax, dword [edx]
cmp eax, 1
jge 0x100a04e5
dec eax
mov dword [esp + 0x38], edx
mov dword [edx], eax
jmp 0x100a0522
lea eax, [ecx + 8]
push eax
call fcn.10110e62
mov edx, dword [esp + 0x48]
add esp, 4
mov dword [esp + 0x38], eax
mov dword [eax], 0xffffffff
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
test ecx, ecx
jle 0x100a0522
push ecx
lea ecx, [edx + 8]
add eax, 8
push ecx
push eax
call fcn.10112e60
add esp, 0xc
jmp 0x100a0522
xor eax, eax
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x48]
test edx, edx
je 0x100a0579
mov ecx, dword [edx + 4]
cmp ecx, 4
jl 0x100a0573
mov eax, dword [edx]
cmp eax, 1
jge 0x100a0542
dec eax
mov dword [esp + 0x24], edx
mov dword [edx], eax
jmp 0x100a0579
lea eax, [ecx + 8]
push eax
call fcn.10110e62
mov edx, dword [esp + 0x4c]
add esp, 4
mov dword [esp + 0x24], eax
mov ecx, dword [edx + 4]
add ecx, 8
push ecx
push edx
push eax
call fcn.10112e60
mov eax, dword [esp + 0x30]
add esp, 0xc
mov dword [eax], 0xffffffff
jmp 0x100a0579
xor eax, eax
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x34]
test edx, edx
je 0x100a059e
cmp dword [edx + 4], 0
jne 0x100a05c9
mov eax, dword [edx]
cmp eax, 1
jge 0x100a059e
add eax, 1
mov dword [edx], eax
jne 0x100a059e
push edx
call fcn.10110e1f
add esp, 4
push 0x10
call fcn.10110e62
mov edx, eax
add esp, 4
mov dword [esp + 0x34], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 8
mov dword [edx + 8], 0x9c4
mov dword [edx + 0xc], 0x7e3
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x100a05ee
cmp dword [ecx + 4], 4
jge 0x100a0619
mov eax, dword [ecx]
cmp eax, 1
jge 0x100a05ee
add eax, 1
mov dword [ecx], eax
jne 0x100a05ee
push ecx
call fcn.10110e1f
add esp, 4
push 0x10
call fcn.10110e62
mov ecx, eax
add esp, 4
mov dword [esp + 0x38], ecx
mov dword [ecx], 0xffffffff
mov dword [ecx + 4], 8
mov dword [ecx + 8], 0xa27
mov dword [ecx + 0xc], 0x7e3
mov edx, dword [esp + 0x24]
test edx, edx
je 0x100a0642
cmp dword [edx + 4], 0
jne 0x100a0667
mov eax, dword [edx]
test eax, eax
jns 0x100a0642
add eax, 1
mov dword [edx], eax
jne 0x100a0642
push 0xac
push edx
call fcn.10110e54
add esp, 8
push 0xc
call fcn.10110e62
mov edx, eax
add esp, 4
mov dword [esp + 0x24], edx
mov dword [edx], 0xffffffff
mov dword [edx + 4], 4
mov eax, dword [0x10139a84]
mov dword [edx + 8], eax
mov ecx, dword [esp + 0x54]
or eax, 0xffffffff
mov edx, dword [esp + 0xb0]
test ecx, ecx
cmovne eax, ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x68], eax
test ecx, ecx
mov eax, 0xe60088ff
cmovne eax, ecx
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x64], eax
test ecx, ecx
mov eax, 0x64
cmovne eax, ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x40], eax
test ecx, ecx
mov eax, 0x23
cmovne eax, ecx
test edx, edx
mov dword [esp + 0x44], eax
mov ecx, 0xfe000000
mov eax, ecx
cmovne eax, edx
cmp dword [esp + 0x5c], 0
mov edx, 0xe60088ff
cmove eax, edx
cmp dword [esp + 0x58], 0
mov edx, dword [esp + 0xb4]
cmove eax, ecx
test edx, edx
mov dword [esp + 0x54], eax
mov eax, 0xff
cmovne eax, edx
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x60]
test eax, eax
cmovne ecx, eax
mov eax, dword [0x1015a6dc]
mov dword [esp + 0x50], ecx
test eax, eax
je 0x100a07ba
push 0x90
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push dword [esp + 0x6c]
mov eax, dword [esp + 0x28]
push dword [esp + 0x4c]
mov edx, dword [esp + 0x40]
push dword [esp + 0x60]
mov ecx, dword [0x1015a6ec]
push dword [esp + 0x68]
push dword [esp + 0x84]
push dword [esp + 0x58]
push dword [esp + 0x58]
push dword [esp + 0xa4]
push dword [esp + 0xac]
push dword [esp + 0x60]
push dword [esp + 0x8c]
push dword [esp + 0x94]
push dword [esp + 0x80]
push dword [esp + 0xa4]
push dword [esp + 0x8c]
push eax
push dword [esp + 0xb8]
mov eax, dword [esp + 0x78]
push dword [esp + 0xc0]
push dword [esp + 0xc8]
push edi
push eax
call fcn.10054da0
mov ecx, dword [0x1015a6ec]
jmp 0x100a099e
cmp dword [0x1015c484], 0
jne 0x100a086b
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.ICON_1
push eax
mov dword [0x1015c484], eax
mov dword [esp + 0xd0], 0xb
mov dword [esp + 0xd4], 0x100a0e80
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x7f00
push 0
mov dword [esp + 0xe4], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0xe0], eax
lea eax, [esp + 0xc8]
push eax
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], str.LiteInputEx
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
jne 0x100a086b
mov ecx, dword [esp + 0x4c]
call fcn.100d4e50
push 0
push dword [0x1015c484]
push 0
push 0
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x28]
push dword [esp + 0x28]
push 0x80400000
push str.LiteInputEx
push str.LiteInputEx
push 0x88
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 1
push str.Isunicode
push eax
mov dword [0x1015a6dc], eax
call dword [sym.imp.USER32.dll_SetPropW]
push 0x93
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push dword [0x1015a6dc]
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
push 0
push dword [esp + 0x74]
cmp dword [esp + 0x98], 0
push dword [esp + 0x54]
setne al
cmp dword [esp + 0x4c], 0
push dword [esp + 0x68]
movzx eax, al
push dword [esp + 0x70]
push dword [esp + 0x8c]
push dword [esp + 0x60]
push dword [esp + 0x60]
push dword [esp + 0xac]
push eax
setne al
movzx eax, al
push eax
push 0
push 0
push dword [esp + 0x9c]
mov eax, dword [esp + 0x60]
push dword [esp + 0xa4]
push dword [esp + 0x90]
push dword [esp + 0xb4]
push dword [esp + 0x9c]
push eax
push dword [esp + 0xc8]
mov eax, dword [esp + 0x88]
push dword [esp + 0xd0]
push dword [esp + 0xd8]
push edi
push eax
mov eax, dword [esp + 0x9c]
push 0
push eax
push 0
push 0
push 0xff
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push dword [0x1015a6dc]
push 0
call sym.ExuiKrnln_X32.dll_CreateControl_EditboxEx
mov ecx, eax
mov dword [0x1015a6ec], ecx
test byte [ebp + 0x74], 2
jne 0x100a09bf
test esi, esi
je 0x100a09bf
movss xmm0, dword [esi + 0x11c]
mulss xmm0, dword [0x10142aec]
cvttss2si eax, xmm0
push eax
jmp 0x100a09c1
push 0x64
push ecx
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
mov eax, dword [0x1015a40c]
push dword [0x1015a6ec]
mov dword [esp + 0x64], eax
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
push 0x50
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push dword [0x1015a6dc]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esp + 0x84]
test eax, eax
je 0x100a0a1b
push edi
push dword [0x1015a6d4]
push 0
push 0
push 1
push dword [0x1015a6ec]
call eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0
push str.Shell_TrayWnd
mov esi, eax
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, esi
je 0x100a0a48
test esi, esi
je 0x100a0a5d
push str.Tab_Control
push esi
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x100a0a5d
push dword [0x1015a6dc]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov eax, dword [sym.imp.USER32.dll_GetForegroundWindow]
call eax
mov esi, eax
mov byte [0x1015a685], 1
mov byte [0x1015a687], 1
mov byte [esp + 0x1f], 0
call fcn.1011cc9a
push 0
push 0
mov dword [0x1015a6e8], eax
xorps xmm0, xmm0
push 0
lea eax, [esp + 0x9c]
movaps xmmword [esp + 0x9c], xmm0
push eax
movq qword [esp + 0xb0], xmm0
mov dword [esp + 0xb8], 0
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x100a0c15
cmp eax, 0xffffffff
je 0x100a0c15
cmp byte [0x1015a685], 0
je 0x100a0c10
cmp dword [esp + 0x94], 0x3124
jne 0x100a0ae9
cmp dword [esp + 0x98], 0x3125
je 0x100a0c15
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [0x1015a6dc]
cmp eax, esi
je 0x100a0b01
cmp eax, ecx
jne 0x100a0bf8
mov eax, dword [esp + 0x94]
cmp eax, 0x20a
jne 0x100a0b4f
cmp dword [esp + 0x3c], 0
je 0x100a0bf8
cmp ecx, dword [esp + 0x90]
je 0x100a0bbe
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0x98]
mov edx, dword [0x1015a6ec]
push ecx
push eax
push ecx
push eax
mov eax, dword [edx + 0x44]
push 0x29e
push edx
call eax
jmp 0x100a0bda
cmp eax, 0x201
je 0x100a0b7e
cmp eax, 0x204
je 0x100a0b7e
cmp eax, 0xa1
je 0x100a0b7e
cmp eax, 0xa4
je 0x100a0b7e
cmp eax, 0x7b
je 0x100a0b7e
cmp eax, 0x206
je 0x100a0b7e
cmp eax, 0x203
jne 0x100a0b87
cmp ecx, dword [esp + 0x90]
jne 0x100a0bf8
cmp eax, 0x100
jne 0x100a0bbe
mov eax, dword [esp + 0x98]
cmp eax, 0xd
jne 0x100a0ba1
cmp dword [esp + 0x3c], 0
jmp 0x100a0bbc
cmp eax, 0x26
jne 0x100a0bad
cmp dword [esp + 0x3c], 0
jmp 0x100a0bbc
cmp eax, 0x28
jne 0x100a0bb9
cmp dword [esp + 0x3c], 0
jmp 0x100a0bbc
cmp eax, 9
je 0x100a0bff
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
jne 0x100a0ab5
jmp 0x100a0c15
mov byte [esp + 0x1f], 1
jmp 0x100a0c1b
cmp esi, ecx
je 0x100a0c1b
test esi, esi
je 0x100a0c1b
push esi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x100a0c15
mov byte [esp + 0x1f], 1
mov ecx, dword [0x1015a6dc]
push 0x93
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x1015a6ec]
test eax, eax
je 0x100a0c95
cmp dword [eax + 0x2c], 0
jle 0x100a0c95
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], 9
push ecx
push eax
push 0x3fa
push dword [eax + 0x28]
mov dword [esp + 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, eax
lea ecx, [esp + 0x20]
call fcn.100d4d50
mov eax, dword [0x1015a6ec]
push 0
mov eax, dword [eax + 0x1c8]
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
call dword [eax + 0x38]
mov eax, dword [0x1015a6ec]
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x100a0caf
push edi
push 0x3124
push 0
push 0
push 2
push eax
call ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100a0cca
add eax, 1
mov dword [ecx], eax
jne 0x100a0cca
push ecx
call fcn.10110e1f
add esp, 4
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100a0ce5
add eax, 1
mov dword [ecx], eax
jne 0x100a0ce5
push ecx
call fcn.10110e1f
add esp, 4
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
cmp eax, 1
jge 0x100a0d00
add eax, 1
mov dword [ecx], eax
jne 0x100a0d00
push ecx
call fcn.10110e1f
add esp, 4
cmp byte [esp + 0x1f], 0
mov byte [0x1015a685], 0
mov byte [0x1015a687], 0
je 0x100a0d6c
mov eax, dword [esp + 0x90]
cmp eax, dword [0x1015a6dc]
je 0x100a0d6c
push 0x1c
call fcn.10110e24
movups xmm0, xmmword [esp + 0x94]
add esp, 4
movups xmmword [eax], xmm0
movq xmm0, qword [esp + 0xa0]
push 0
push 0
push eax
push 0x1009fce0
movq qword [eax + 0x10], xmm0
mov ecx, dword [esp + 0xb8]
push 0
push 0
mov dword [eax + 0x18], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esp + 0x60]
call sym.ExuiKrnln_X32.dll_ControlSetFocusControl
test edi, edi
je 0x100a0e65
cmp dword [edi + 4], 1
jl 0x100a0e65
mov edx, dword [0x1015b768]
cmp edx, 0x9600000
jle 0x100a0df4
mov ecx, dword [0x1015b758]
nop dword [eax + eax]
mov eax, dword [ecx*4 + 0x1015af50]
test eax, eax
je 0x100a0dd9
sub edx, dword [eax + 4]
add dword [eax], 1
mov dword [0x1015b768], edx
jne 0x100a0dce
push eax
call fcn.10110e1f
mov edx, dword [0x1015b768]
add esp, 4
mov ecx, dword [0x1015b758]
mov dword [ecx*4 + 0x1015af50], 0
inc ecx
xor esi, esi
mov eax, ecx
cmp eax, 0x200
cmovg ecx, esi
mov dword [0x1015b758], ecx
cmp edx, 0x9600000
jg 0x100a0da0
mov esi, dword [0x1015af4c]
inc esi
mov dword [0x1015af4c], esi
cmp esi, 0x200
jle 0x100a0e15
mov dword [0x1015af4c], 0
xor esi, esi
mov eax, dword [esi*4 + 0x1015af50]
test eax, eax
je 0x100a0e3d
sub edx, dword [eax + 4]
add dword [eax], 1
mov dword [0x1015b768], edx
jne 0x100a0e3d
push eax
call fcn.10110e1f
mov edx, dword [0x1015b768]
add esp, 4
add edx, dword [edi + 4]
mov eax, edi
mov dword [esi*4 + 0x1015af50], edi
mov dword [0x1015b768], edx
pop edi
pop esi
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x74
mov ecx, dword [esp + 0x12c]
xor edi, edi
mov eax, edi
pop edi
pop esi
xor ecx, esp
call fcn.10110e11
mov esp, ebp
pop ebp
ret 0x74