Function at 0x100156c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14c
mov eax, dword [0x100a60a4]
xor eax, esp
mov dword [esp + 0x148], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov dword [esp + 0x30], 0
mov esi, dword [ebx]
mov edx, dword [ebx + 4]
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x34], 0
mov dword [esp + 0x18], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
cmp dword [esi + 0x11a0], edi
je 0x1001572f
test byte [ebx + 0xd4], 1
je 0x1001572f
cmp dword [edx + 0x38], edi
jge 0x1001572f
lea eax, [edi + 1]
jmp 0x10015731
xor eax, eax
test byte [esi + 0x8c], 2
mov dword [esp + 0x28], eax
jne 0x100162fa
and dword [esi + 0x118], 0xfffeffff
test dword [ebx + 0x2c], 0x400
je 0x10015825
test eax, eax
jne 0x10015825
mov eax, dword [edx]
mov dword [esp + 0xc0], eax
mov eax, dword [edx + 4]
mov dword [esp + 0xc4], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0xc8], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0xcc], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0xd0], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0xd4], eax
mov eax, dword [ebx + 0x84]
mov dword [esp + 0xd8], eax
lea eax, [esp + 0xc0]
push eax
push dword [esi + 0x684]
mov dword [esp + 0xe4], edi
mov edi, dword [esi + 0x76c]
mov ecx, edi
call dword [0x100ac510]
call edi
cmp dword [0x100a7550], 0
mov dword [ebx + 0xd8], eax
jne 0x100157fb
cmp eax, 0x88760870
je 0x100157fb
test eax, eax
jns 0x1001631c
test byte [esi + 0x8c], 2
je 0x1001631c
jmp 0x10015802
mov ecx, esi
call fcn.10016e30
lea eax, [esp + 0xc0]
push eax
push dword [esi + 0x684]
mov esi, dword [esi + 0x76c]
mov ecx, esi
call dword [0x100ac510]
call esi
jmp 0x10016316
cmp dword [ebx + 0x98], edi
je 0x10016206
cmp edx, dword [esi + 0xb8]
je 0x10015841
test eax, eax
je 0x10016206
mov ecx, dword [ecx + 0x20]
mov dword [ebx + 0xd8], 0x80004005
cmp dword [esi + 0xb20], 0
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x10], 1
je 0x10015879
test byte [ebx + 0x2c], 1
jne 0x10015881
test eax, eax
je 0x10015a7a
xor eax, eax
cmp dword [eax*8 + 0x10005184], ecx
je 0x10015896
inc eax
cmp eax, 0x5f
jb 0x10015883
xor eax, eax
jmp 0x1001589d
mov eax, dword [eax*8 + 0x10005180]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x28]
mov dword [esi + 0x1158], 0
push eax
lea eax, [esp + 0x48]
mov dword [esi + 0x115c], 0
push eax
mov eax, dword [ebx + 0x2c]
and eax, 2
or eax, 0x20
shr eax, 1
push eax
push 0
push dword [esi + 0xb38]
push dword [esi + 0xb34]
push dword [ebx + 0x98]
call dword [sym.imp.dwmapi.dll_Ordinal_100]
mov edx, eax
mov dword [esp + 0x20], edx
test edx, edx
jns 0x100159c4
mov edi, dword [esi + 0xb24]
mov dword [esi + 0xb20], 0
mov dword [esi + 0xb28], 0
test edi, edi
je 0x10015930
mov edx, edi
mov ecx, esi
call fcn.10013ad0
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [esi + 0xb24], 0
lea edi, [esi + 0x54]
lea ecx, [esi + 0xc]
mov edx, edi
call fcn.1001ee30
test eax, eax
jns 0x1001595e
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetRect]
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
cmp edx, 0x263005
je 0x1001597a
cmp edx, 0x263008
jne 0x10015a76
mov eax, dword [esp + 0x30]
mov edi, 1
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], edi
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
cmp edx, 0x263008
jne 0x10015a7a
mov dword [esp + 0x3c], edi
mov dword [esp + 0x24], 0
jmp 0x10015a7a
mov ecx, dword [esp + 0x40]
xor eax, eax
lea ebx, [ebx]
cmp dword [eax*8 + 0x10005180], ecx
je 0x100159e9
inc eax
cmp eax, 0x5f
jb 0x100159d0
mov dword [esp + 0x1c], 0
jmp 0x100159f4
mov eax, dword [eax*8 + 0x10005184]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x24], 0
jne 0x10015966
cmp edx, 0x263008
je 0x10015966
mov dword [ebx + 0xd8], 0
mov edi, dword [esp + 0x10]
cmp dword [0x100a7550], 0
jne 0x10015a2e
cmp dword [ebx + 0xd8], 0x88760870
jne 0x10015a35
mov ecx, esi
call fcn.10016e30
mov eax, dword [esi + 0x8c]
test al, 2
jne 0x100162f6
test edi, edi
je 0x10015a67
cmp dword [ebx + 0xd8], 0
jne 0x10015a67
or eax, 8
mov ecx, esi
mov dword [esi + 0x8c], eax
call fcn.1000f450
and dword [esi + 0x8c], 0xfffffff7
mov dword [esi + 0x118], 0
jmp 0x1001631c
mov eax, dword [esp + 0x28]
cmp dword [esi + 0xb20], 0
je 0x10015a89
test byte [ebx + 0x2c], 1
jne 0x10015a91
test eax, eax
je 0x10015e77
push 0x38
lea eax, [esp + 0xe4]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [esp + 0x118], 0x3c
lea eax, [esp + 0x118]
push eax
push dword [ebx + 0x98]
call dword [sym.imp.USER32.dll_GetWindowInfo]
test eax, eax
je 0x100161e2
mov eax, dword [esp + 0x24]
cmp eax, dword [esi + 0xb28]
je 0x10015b0a
mov edi, dword [esi + 0xb24]
test edi, edi
je 0x10015b00
mov edx, edi
mov ecx, esi
call fcn.10013ad0
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x24]
mov dword [esi + 0xb24], 0
mov edi, dword [esp + 0x14]
mov dword [esi + 0xb28], eax
cmp dword [esp + 0x3c], 0
je 0x10015b1e
mov dword [esp + 0x18], 0
jmp 0x10015c2e
mov edi, dword [esi + 0xb24]
test edi, edi
jne 0x10015c26
push 0x5c
push 0x40
mov dword [esp + 0x98], edi
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], edi
mov dword [esp + 0xac], edi
mov dword [esp + 0xb0], edi
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0xc4], edi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
test edi, edi
je 0x100161d3
mov eax, dword [esp + 0x20]
mov edx, edi
mov ecx, dword [esi + 0xb28]
or eax, 0x10881
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x1c]
push 0
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x8c]
mov dword [edi + 0x10], ecx
mov ecx, esi
push 1
push eax
mov dword [esp + 0xc0], edi
mov dword [esp + 0xac], 1
mov dword [esp + 0xa8], 1
mov dword [esp + 0x98], 2
call fcn.10014170
add esp, 0xc
mov dword [ebx + 0xd8], eax
cmp eax, 0x80070057
je 0x100161bd
test eax, eax
js 0x100161c7
mov eax, dword [esp + 0xb4]
mov dword [edi], eax
mov eax, dword [esp + 0xb8]
mov dword [edi + 0x18], eax
mov eax, dword [esp + 0x8c]
mov dword [edi + 4], 0
mov dword [edi + 0x3c], esi
mov dword [edi + 0x1c], eax
mov dword [esi + 0xb24], edi
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x14]
test edi, edi
jne 0x10015e77
mov eax, dword [ebx + 0x1c]
mov edi, dword [esp + 0x134]
sub edi, dword [esp + 0x12c]
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0xe8], eax
mov eax, dword [ebx + 0x20]
mov dword [esp + 0xec], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 0xf0], eax
mov eax, dword [ebx + 0x28]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x138]
sub eax, dword [esp + 0x130]
mov dword [esp + 0x44], 1
mov dword [esp + 0x20], eax
cmp edi, ecx
jle 0x10015c8f
mov edi, ecx
mov ecx, dword [ebx + 0x14]
cmp eax, ecx
jle 0x10015c9a
mov dword [esp + 0x20], ecx
mov eax, dword [ebx + 8]
xor ecx, ecx
mov edx, dword [ebx + 0xc]
test eax, eax
setle cl
sub edi, dword [esp + 0x11c]
add edi, dword [esp + 0x12c]
dec ecx
and ecx, eax
mov eax, dword [esp + 0x18]
sub ecx, dword [esp + 0x11c]
add ecx, dword [esp + 0x12c]
mov dword [esp + 0x1c], ecx
xor ecx, ecx
mov eax, dword [eax + 0x28]
test edx, edx
setle cl
dec ecx
and ecx, edx
mov edx, dword [esp + 0x20]
sub ecx, dword [esp + 0x120]
sub edx, dword [esp + 0x120]
add ecx, dword [esp + 0x130]
add edx, dword [esp + 0x130]
cmp dword [esp + 0x1c], eax
jb 0x10015d05
mov dword [esp + 0x1c], eax
cmp edi, eax
jb 0x10015d0b
mov edi, eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x2c]
cmp ecx, eax
jb 0x10015d18
mov ecx, eax
cmp edx, eax
jb 0x10015d1e
mov edx, eax
cmp edi, dword [esp + 0x1c]
jle 0x10015a0b
cmp edx, ecx
jle 0x10015a0b
cmp dword [esi + 0x1188], 0
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 4]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x100], eax
mov eax, dword [esi + 0x684]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], edi
mov dword [esp + 0x10c], edx
je 0x10015daa
mov edi, dword [esi + 0x89c]
mov ecx, edi
push 0
push eax
call dword [0x100ac510]
call edi
jmp 0x10015dbb
mov edi, dword [esi + 0x730]
mov ecx, edi
push eax
call dword [0x100ac510]
call edi
mov dword [ebx + 0xd8], eax
test eax, eax
js 0x10015e58
or dword [esi + 0x8c], 8
mov eax, dword [esp + 0x30]
mov edi, dword [esi + 0x768]
mov ecx, edi
or dword [esp + 0x114], 0x500
mov dword [esi + 0x1158], eax
mov eax, dword [esp + 0x34]
mov dword [esi + 0x115c], eax
lea eax, [esp + 0xe0]
push eax
push dword [esi + 0x684]
call dword [0x100ac510]
call edi
mov dword [ebx + 0xd8], eax
test eax, eax
js 0x10015e58
cmp dword [esi + 0x1188], 0
mov eax, dword [esi + 0x684]
je 0x10015e3b
mov edi, dword [esi + 0x89c]
mov ecx, edi
push 0
push eax
call dword [0x100ac510]
call edi
jmp 0x10015e4c
mov edi, dword [esi + 0x730]
mov ecx, edi
push eax
call dword [0x100ac510]
call edi
xor edx, edx
mov dword [ebx + 0xd8], eax
mov dword [esp + 0x10], edx
and dword [esi + 0x8c], 0xfffffff7
mov edi, dword [esp + 0x14]
mov dword [esi + 0x1158], 0
mov dword [esi + 0x115c], 0
cmp dword [esi + 0xb20], 0
je 0x10015e8e
test byte [ebx + 0x2c], 1
je 0x10015e8e
test edi, edi
je 0x10015a15
cmp dword [esp + 0x44], 0
jne 0x10015a15
cmp dword [esi + 0x1188], 0
mov eax, dword [esi + 0x684]
je 0x10015ebd
mov edi, dword [esi + 0x89c]
mov ecx, edi
push 0
push eax
call dword [0x100ac510]
call edi
jmp 0x10015ece
mov edi, dword [esi + 0x730]
mov ecx, edi
push eax
call dword [0x100ac510]
call edi
xor edi, edi
mov dword [ebx + 0xd8], eax
mov dword [esp + 0x10], edi
test eax, eax
js 0x10015a19
mov edx, dword [esp + 0x2c]
xor ecx, ecx
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], ecx
mov eax, dword [edx]
mov dword [esp + 0x80], eax
mov eax, dword [edx + 4]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], 1
cmp dword [esp + 0x3c], ecx
jne 0x10015f45
mov edx, dword [esp + 0x18]
test byte [edx + 0x44], 1
jne 0x10015f45
mov eax, dword [edx]
mov dword [esp + 0x60], eax
mov eax, dword [edx + 4]
mov dword [esp + 0x64], eax
jmp 0x10015f4d
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ecx
mov eax, dword [esi + 0x118]
or eax, 1
mov dword [esi + 0x118], eax
cmp dword [esp + 0x14], ecx
jne 0x10015f6d
or eax, 0x2000
mov dword [esi + 0x118], eax
test byte [ebx + 0x2c], 1
jne 0x10015f7d
cmp dword [esp + 0x28], ecx
jne 0x10015f7d
xor eax, eax
jmp 0x10015f83
mov eax, dword [ebx + 0x98]
mov dword [esi + 0xd4], eax
lea edi, [ebx + 0x1c]
mov eax, dword [edi]
mov dword [esi + 0xf8], eax
mov eax, dword [edi + 4]
mov dword [esi + 0xfc], eax
mov eax, dword [edi + 8]
mov dword [esi + 0x100], eax
mov eax, dword [edi + 0xc]
or dword [esi + 0x118], 0x80
mov edx, dword [esi + 0x118]
mov dword [esi + 0x104], eax
or edx, 0x40
mov eax, dword [ebx + 8]
mov dword [esi + 0xe8], eax
mov eax, dword [ebx + 0xc]
mov dword [esi + 0xec], eax
mov eax, dword [ebx + 0x10]
mov dword [esi + 0xf0], eax
mov eax, dword [ebx + 0x14]
mov dword [esi + 0xf4], eax
mov dword [esi + 0x118], edx
cmp dword [esi + 0xd4], ecx
je 0x10015ff8
xor eax, eax
jmp 0x1001600a
mov eax, dword [esi + 0xb3c]
or edx, 0x100
mov dword [esi + 0x118], edx
mov dword [esi + 0xd8], eax
mov dword [esi + 0x10c], edi
mov edi, dword [esp + 0x14]
mov dword [esi + 0x108], 1
test edi, edi
jne 0x100160b7
mov eax, dword [ebx + 0x2c]
test al, 2
je 0x100160b7
test al, 1
je 0x1001609d
lea eax, [esp + 0xc0]
push eax
push dword [ebx + 0x98]
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x100160a0
mov eax, dword [esi + 0x54]
neg eax
mov dword [esp + 0x50], eax
mov eax, dword [esi + 0x58]
neg eax
mov dword [esp + 0x54], eax
lea eax, [esp + 0x50]
push eax
push dword [ebx + 0x98]
call dword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x100160a0
push dword [esp + 0x54]
lea eax, [esp + 0xc4]
push dword [esp + 0x54]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
test eax, eax
je 0x100160a0
lea edi, [esp + 0xc0]
jmp 0x100160a0
lea edi, [ebx + 8]
mov edx, edi
mov ecx, ebx
call fcn.10017f10
mov ecx, dword [esp + 0x68]
mov edi, dword [esp + 0x14]
mov dword [ebx + 0xcc], eax
mov edx, dword [esi + 0x118]
mov eax, edx
xor eax, ecx
and eax, 7
xor ecx, eax
mov dword [esp + 0x68], ecx
test edi, edi
je 0x1001611d
mov eax, dword [esp + 0x24]
or edx, 0x10000
cmp dword [esi + 0x1184], 0x2000
mov dword [esi + 0x118], edx
cdq
mov dword [esi + 0x240], eax
mov eax, dword [esp + 0x48]
mov dword [esi + 0x248], eax
mov eax, dword [esp + 0x4c]
mov dword [esi + 0x228], 3
mov dword [esi + 0x244], edx
mov dword [esi + 0x24c], eax
jae 0x1001611d
mov dword [esp + 0x6c], 1
lea edx, [esp + 0x58]
mov ecx, esi
call fcn.1000f490
mov dword [ebx + 0xd8], eax
mov dword [esi + 0x10c], 0
cmp dword [ebx + 0xd8], 0
jl 0x10015a15
cmp dword [esi + 0xb20], 0
je 0x10015a15
test byte [ebx + 0x2c], 1
je 0x10015a15
test byte [esi + 0x8c], 1
jne 0x10015a15
test edi, edi
jne 0x10015a15
lea edi, [esi + 0x54]
lea ecx, [esi + 0xc]
mov edx, edi
call fcn.1001ee30
test eax, eax
jns 0x1001619f
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0
push 0
push edi
call dword [sym.imp.USER32.dll_SetRect]
cmp dword [ebx + 0x98], 0
mov edx, dword [esp + 0x18]
je 0x10016206
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
jmp 0x10015831
mov dword [ebx + 0xd8], 0
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10015a15
mov dword [ebx + 0xd8], 0x8007000e
jmp 0x10015a15
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, dword [esp + 0x10]
cmp eax, 0x578
jne 0x10015a19
mov dword [ebx + 0xd8], 0x80070578
jmp 0x10015a19
mov edi, dword [esp + 0x2c]
xor ecx, ecx
test dword [ebx + 0x2c], 0x10000
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], ecx
mov eax, dword [edi]
mov dword [esp + 0x88], eax
mov eax, dword [edx]
mov dword [esp + 0xa0], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x90], eax
mov eax, dword [ebx + 0x20]
mov dword [esp + 0x94], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 0x98], eax
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x9c], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x8c], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0xa8], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0xac], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0xb0], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0xb4], eax
mov eax, dword [edx + 4]
mov dword [esp + 0xa4], eax
je 0x100162b4
mov eax, dword [ebx + 0x90]
or ecx, 4
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xb8], eax
mov eax, dword [edi + 0x44]
xor eax, dword [edx + 0x44]
test al, 0x10
je 0x100162cb
or ecx, 0x80
mov dword [esp + 0xbc], ecx
mov edi, dword [esi + 0x768]
lea eax, [esp + 0x88]
push eax
push dword [esi + 0x684]
mov ecx, edi
call dword [0x100ac510]
call edi
mov dword [ebx + 0xd8], eax
xor edi, edi
jmp 0x10015a19
mov edx, dword [esp + 0x18]
cmp dword [ebx + 0x98], 0
jne 0x10016311
test edx, edx
je 0x10016311
cmp dword [edx + 0x1c], 1
je 0x10016311
xor eax, eax
jmp 0x10016316
mov eax, 0x88760868
mov dword [ebx + 0xd8], eax
mov ecx, dword [esp + 0x154]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1009ebb0
mov esp, ebp
pop ebp
ret 4