Function at 0x1000f540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100b9b88
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push ebp
lea ecx, [esp + 0x58]
call fcn.100b4052
lea eax, [ebp + 0x5c]
lea ecx, [esp + 0x54]
push eax
mov dword [esp + 0x74], 0
call fcn.100b394e
push 0x3e9
mov ecx, ebp
call fcn.100afe30
mov edx, dword [eax + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f4
mov ecx, ebp
sub edi, edx
mov dword [esp + 0x1c], eax
call fcn.100afe30
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f5
mov ecx, ebp
sub esi, edx
mov dword [esp + 0x2c], eax
call fcn.100afe30
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
sub eax, ebx
sub ecx, edx
mov dword [esp + 0x24], ecx
cmp esi, eax
mov ecx, esi
jg 0x1000f618
mov ecx, eax
cmp edi, ecx
jle 0x1000f620
mov eax, edi
jmp 0x1000f626
cmp esi, eax
jle 0x1000f626
mov eax, esi
mov dword [ebp + 0x118], eax
mov eax, dword [ebp + 0x120]
test eax, eax
mov dword [esp + 0x14], 0
jle 0x1000f722
mov eax, dword [esp + 0x78]
lea esi, [eax + 0x14]
mov ecx, dword [ebp + 0x11c]
mov edx, dword [esp + 0x14]
mov eax, dword [ecx + edx*4]
lea ecx, [esp + 0x20]
push eax
call fcn.100b090b
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
call fcn.100b089d
mov dword [esi - 0xc], ebx
mov ebx, dword [esp + 0x14]
mov dword [esi - 8], edi
mov dword [esi], 1
mov ecx, dword [ebp + 0x11c]
mov eax, dword [ecx + ebx*4]
mov ecx, dword [eax + 0x14]
dec ecx
cmp ecx, 0xb
ja case.default.0x1000f6b4
jmp dword [ecx*4 + 0x1000fb34]
mov dword [esp + 0x10], 3
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
push edx
push 0x57
call fcn.100aa5da
mov eax, dword [eax]
lea edx, [esp + 0x2c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
call fcn.100b089d
mov edx, dword [esp + 0x18]
add edi, edx
mov dword [esi - 4], edi
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
mov dword [esp + 0x14], ebx
jl 0x1000f649
mov eax, dword [ebp + 0x118]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jle 0x1000f732
mov eax, ecx
push 8
push 0x57
lea ecx, [esp + 0x34]
mov dword [ebp + 0x118], eax
call fcn.100aa5da
mov eax, dword [eax]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x38], edx
call fcn.100b089d
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
call esi
lea eax, [eax + eax*2]
push 0
cdq
and edx, 3
add eax, edx
sar eax, 2
sub eax, 0x1a
mov dword [esp + 0x2c], eax
call esi
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 0x120]
cdq
and edx, 3
mov ebx, SysReAllocString
add eax, edx
mov edi, eax
sar edi, 2
sub edi, 0x1a
test ecx, ecx
mov dword [esp + 0x20], edi
jle 0x1000f7dc
mov eax, dword [esp + 0x78]
mov esi, ecx
add eax, 8
mov edx, dword [eax + 8]
mov edi, dword [eax]
lea edx, [edx + edi + 6]
cmp edx, ebx
jle 0x1000f7d2
mov ebx, edx
add eax, 0x18
dec esi
jne 0x1000f7c3
mov edi, dword [esp + 0x20]
mov eax, 0x2aaaaaab
imul edi
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ebx
mov esi, edx
cdq
idiv esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
mov eax, ebx
cdq
idiv esi
test edx, edx
je 0x1000f806
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov edx, 6
cmp eax, edx
jle 0x1000f817
mov dword [esp + 0x10], edx
mov eax, dword [ebp + 0x118]
add eax, 5
imul eax, ecx
add eax, 0x15
cmp eax, 0xb4
jge 0x1000f835
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], 0
cmp eax, edx
jg 0x1000f958
mov edx, eax
imul edx, esi
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x1000f958
xor edx, edx
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x14], edx
jle 0x1000f929
mov esi, dword [esp + 0x78]
lea ecx, [ebx + ebx*2]
lea eax, [esi + ecx*8]
mov dword [eax], 0
mov dword [eax + 4], edx
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x3c]
jg 0x1000f88e
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax + 0x10]
inc ebx
lea ecx, [eax + ecx + 6]
mov eax, dword [ebp + 0x120]
cmp ebx, eax
jge 0x1000f905
lea edx, [ebx + ebx*2]
lea esi, [esi + edx*8 + 8]
add ecx, 0xc
mov eax, ecx
cdq
idiv dword [esp + 0x18]
mov edi, eax
mov eax, ecx
mov ecx, dword [esp + 0x18]
cdq
idiv ecx
test edx, edx
je 0x1000f8c1
inc edi
imul edi, ecx
mov ecx, dword [esi]
mov edx, dword [esp + 0x3c]
cmp ecx, edx
mov eax, edi
jg 0x1000f8d2
mov ecx, edx
mov edx, dword [esi + 8]
lea ecx, [edx + ecx + 6]
mov edx, dword [esp + 0x1c]
sub edx, eax
cmp ecx, edx
jg 0x1000f8fd
mov edx, dword [esp + 0x14]
mov dword [esi - 8], eax
mov dword [esi - 4], edx
add ecx, eax
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
jl 0x1000f8a7
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov eax, dword [ebp + 0x118]
lea ecx, [edx + eax + 5]
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp + 0x120]
mov edx, dword [esp + 0x14]
cmp ebx, ecx
jl 0x1000f86e
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
sub edx, 5
cmp edx, eax
jg 0x1000f93c
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
inc eax
add ebx, esi
cmp eax, 6
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
jle 0x1000f852
lea ecx, [eax - 1]
mov dword [esp + 0x14], 0
test ecx, ecx
mov dword [esp + 0x24], ecx
jle 0x1000f9ea
mov eax, dword [ebp + 0x120]
mov esi, SysReAllocString
test eax, eax
jle 0x1000f9dd
mov edx, dword [esp + 0x78]
mov ecx, eax
lea edi, [edx + 8]
mov ebx, edi
mov eax, dword [ebx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x1000f99b
mov eax, dword [ebx]
cmp eax, esi
jle 0x1000f99b
mov esi, eax
add ebx, 0x18
dec ecx
jne 0x1000f985
test esi, esi
jle 0x1000f9d5
mov eax, dword [esp + 0x3c]
cmp esi, eax
jle 0x1000f9af
mov esi, eax
xor ebx, ebx
mov ecx, edi
mov eax, dword [ecx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x1000f9c7
cmp dword [ecx], esi
jge 0x1000f9c7
mov dword [ecx], esi
mov eax, dword [ebp + 0x120]
inc ebx
add ecx, 0x18
cmp ebx, eax
jl 0x1000f9b3
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x1000f96b
mov ecx, dword [ebp + 0x120]
xor eax, eax
cmp ecx, eax
mov dword [esp + 0x34], SysReAllocString
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
jle 0x1000fa7d
mov eax, dword [esp + 0x78]
lea ecx, [eax + 8]
mov edx, dword [ecx - 8]
mov eax, dword [ecx + 8]
mov esi, dword [ecx]
add eax, edx
lea ebx, [eax + esi + 6]
cmp ebx, edi
jle 0x1000fa47
cmp dword [ecx + 0xc], 1
jne 0x1000fa47
mov eax, edi
sub eax, edx
sub eax, esi
mov esi, dword [esp + 0x3c]
sub eax, 6
add esi, 0x1e
cmp eax, esi
jle 0x1000fa47
mov dword [ecx + 8], eax
mov edx, dword [ecx - 8]
mov esi, dword [ecx]
add esi, edx
lea ebx, [esi + eax + 6]
cmp ebx, dword [esp + 0x34]
jle 0x1000fa51
mov dword [esp + 0x34], ebx
test edx, edx
jne 0x1000fa67
mov edx, dword [ebp + 0x118]
mov eax, dword [esp + 0x38]
lea edx, [eax + edx + 5]
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x120]
inc eax
add ecx, 0x18
cmp eax, edx
mov dword [esp + 0x14], eax
jl 0x1000fa0d
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
push 0x11
mov dword [eax], edi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x3c]
mov dword [eax], edx
mov dword [eax + 4], ecx
lea ecx, [esp + 0x58]
call fcn.100b3912
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 0xffffffff
call fcn.100b40c4
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret 0xc
mov dword [esp + 0x10], 6
jmp case.default.0x1000f6b4
mov dword [esp + 0x10], 0xb
jmp case.default.0x1000f6b4
mov dword [esp + 0x10], 0x15
jmp case.default.0x1000f6b4
mov edx, dword [esp + 0x28]
mov dword [esi], 2
mov dword [esi - 4], edx
jmp 0x1000f70c
mov dword [esp + 0x10], 0x1a
jmp case.default.0x1000f6b4
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x10], eax
jmp case.default.0x1000f6b4
mov ecx, dword [esp + 0x24]
mov dword [esi], 3
mov dword [esi - 4], ecx
jmp 0x1000f70c