Function at 0x1000f6d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100bab48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push ebp
lea ecx, [esp + 0x58]
call fcn.100b5022
lea eax, [ebp + 0x5c]
lea ecx, [esp + 0x54]
push eax
mov dword [esp + 0x74], 0
call fcn.100b491e
push 0x3e9
mov ecx, ebp
call fcn.100b0e0b
mov edx, dword [eax + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f4
mov ecx, ebp
sub edi, edx
mov dword [esp + 0x1c], eax
call fcn.100b0e0b
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f5
mov ecx, ebp
sub esi, edx
mov dword [esp + 0x2c], eax
call fcn.100b0e0b
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
sub eax, ebx
sub ecx, edx
mov dword [esp + 0x24], ecx
cmp esi, eax
mov ecx, esi
jg 0x1000f7a8
mov ecx, eax
cmp edi, ecx
jle 0x1000f7b0
mov eax, edi
jmp 0x1000f7b6
cmp esi, eax
jle 0x1000f7b6
mov eax, esi
mov dword [ebp + 0x118], eax
mov eax, dword [ebp + 0x120]
test eax, eax
mov dword [esp + 0x14], 0
jle 0x1000f8b2
mov eax, dword [esp + 0x78]
lea esi, [eax + 0x14]
mov ecx, dword [ebp + 0x11c]
mov edx, dword [esp + 0x14]
mov eax, dword [ecx + edx*4]
lea ecx, [esp + 0x20]
push eax
call fcn.100b18dd
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
call fcn.100b186f
mov dword [esi - 0xc], ebx
mov ebx, dword [esp + 0x14]
mov dword [esi - 8], edi
mov dword [esi], 1
mov ecx, dword [ebp + 0x11c]
mov eax, dword [ecx + ebx*4]
mov ecx, dword [eax + 0x14]
dec ecx
cmp ecx, 0xb
ja case.default.0x1000f844
jmp dword [ecx*4 + 0x1000fcc4]
mov dword [esp + 0x10], 3
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
push edx
push 0x57
call fcn.100ab5aa
mov eax, dword [eax]
lea edx, [esp + 0x2c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
call fcn.100b186f
mov edx, dword [esp + 0x18]
add edi, edx
mov dword [esi - 4], edi
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
mov dword [esp + 0x14], ebx
jl 0x1000f7d9
mov eax, dword [ebp + 0x118]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jle 0x1000f8c2
mov eax, ecx
push 8
push 0x57
lea ecx, [esp + 0x34]
mov dword [ebp + 0x118], eax
call fcn.100ab5aa
mov eax, dword [eax]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x38], edx
call fcn.100b186f
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
call esi
lea eax, [eax + eax*2]
push 0
cdq
and edx, 3
add eax, edx
sar eax, 2
sub eax, 0x1a
mov dword [esp + 0x2c], eax
call esi
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 0x120]
cdq
and edx, 3
mov ebx, 0x80000000
add eax, edx
mov edi, eax
sar edi, 2
sub edi, 0x1a
test ecx, ecx
mov dword [esp + 0x20], edi
jle 0x1000f96c
mov eax, dword [esp + 0x78]
mov esi, ecx
add eax, 8
mov edx, dword [eax + 8]
mov edi, dword [eax]
lea edx, [edx + edi + 6]
cmp edx, ebx
jle 0x1000f962
mov ebx, edx
add eax, 0x18
dec esi
jne 0x1000f953
mov edi, dword [esp + 0x20]
mov eax, 0x2aaaaaab
imul edi
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ebx
mov esi, edx
cdq
idiv esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
mov eax, ebx
cdq
idiv esi
test edx, edx
je 0x1000f996
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov edx, 6
cmp eax, edx
jle 0x1000f9a7
mov dword [esp + 0x10], edx
mov eax, dword [ebp + 0x118]
add eax, 5
imul eax, ecx
add eax, 0x15
cmp eax, 0xb4
jge 0x1000f9c5
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], 0
cmp eax, edx
jg 0x1000fae8
mov edx, eax
imul edx, esi
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x1000fae8
xor edx, edx
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x14], edx
jle 0x1000fab9
mov esi, dword [esp + 0x78]
lea ecx, [ebx + ebx*2]
lea eax, [esi + ecx*8]
mov dword [eax], 0
mov dword [eax + 4], edx
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x3c]
jg 0x1000fa1e
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax + 0x10]
inc ebx
lea ecx, [eax + ecx + 6]
mov eax, dword [ebp + 0x120]
cmp ebx, eax
jge 0x1000fa95
lea edx, [ebx + ebx*2]
lea esi, [esi + edx*8 + 8]
add ecx, 0xc
mov eax, ecx
cdq
idiv dword [esp + 0x18]
mov edi, eax
mov eax, ecx
mov ecx, dword [esp + 0x18]
cdq
idiv ecx
test edx, edx
je 0x1000fa51
inc edi
imul edi, ecx
mov ecx, dword [esi]
mov edx, dword [esp + 0x3c]
cmp ecx, edx
mov eax, edi
jg 0x1000fa62
mov ecx, edx
mov edx, dword [esi + 8]
lea ecx, [edx + ecx + 6]
mov edx, dword [esp + 0x1c]
sub edx, eax
cmp ecx, edx
jg 0x1000fa8d
mov edx, dword [esp + 0x14]
mov dword [esi - 8], eax
mov dword [esi - 4], edx
add ecx, eax
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
jl 0x1000fa37
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov eax, dword [ebp + 0x118]
lea ecx, [edx + eax + 5]
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp + 0x120]
mov edx, dword [esp + 0x14]
cmp ebx, ecx
jl 0x1000f9fe
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
sub edx, 5
cmp edx, eax
jg 0x1000facc
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
inc eax
add ebx, esi
cmp eax, 6
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
jle 0x1000f9e2
lea ecx, [eax - 1]
mov dword [esp + 0x14], 0
test ecx, ecx
mov dword [esp + 0x24], ecx
jle 0x1000fb7a
mov eax, dword [ebp + 0x120]
mov esi, 0x80000000
test eax, eax
jle 0x1000fb6d
mov edx, dword [esp + 0x78]
mov ecx, eax
lea edi, [edx + 8]
mov ebx, edi
mov eax, dword [ebx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x1000fb2b
mov eax, dword [ebx]
cmp eax, esi
jle 0x1000fb2b
mov esi, eax
add ebx, 0x18
dec ecx
jne 0x1000fb15
test esi, esi
jle 0x1000fb65
mov eax, dword [esp + 0x3c]
cmp esi, eax
jle 0x1000fb3f
mov esi, eax
xor ebx, ebx
mov ecx, edi
mov eax, dword [ecx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x1000fb57
cmp dword [ecx], esi
jge 0x1000fb57
mov dword [ecx], esi
mov eax, dword [ebp + 0x120]
inc ebx
add ecx, 0x18
cmp ebx, eax
jl 0x1000fb43
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x1000fafb
mov ecx, dword [ebp + 0x120]
xor eax, eax
cmp ecx, eax
mov dword [esp + 0x34], 0x80000000
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
jle 0x1000fc0d
mov eax, dword [esp + 0x78]
lea ecx, [eax + 8]
mov edx, dword [ecx - 8]
mov eax, dword [ecx + 8]
mov esi, dword [ecx]
add eax, edx
lea ebx, [eax + esi + 6]
cmp ebx, edi
jle 0x1000fbd7
cmp dword [ecx + 0xc], 1
jne 0x1000fbd7
mov eax, edi
sub eax, edx
sub eax, esi
mov esi, dword [esp + 0x3c]
sub eax, 6
add esi, 0x1e
cmp eax, esi
jle 0x1000fbd7
mov dword [ecx + 8], eax
mov edx, dword [ecx - 8]
mov esi, dword [ecx]
add esi, edx
lea ebx, [esi + eax + 6]
cmp ebx, dword [esp + 0x34]
jle 0x1000fbe1
mov dword [esp + 0x34], ebx
test edx, edx
jne 0x1000fbf7
mov edx, dword [ebp + 0x118]
mov eax, dword [esp + 0x38]
lea edx, [eax + edx + 5]
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x120]
inc eax
add ecx, 0x18
cmp eax, edx
mov dword [esp + 0x14], eax
jl 0x1000fb9d
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
push 0x11
mov dword [eax], edi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x3c]
mov dword [eax], edx
mov dword [eax + 4], ecx
lea ecx, [esp + 0x58]
call fcn.100b48e2
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 0xffffffff
call fcn.100b5094
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret 0xc
mov dword [esp + 0x10], 6
jmp case.default.0x1000f844
mov dword [esp + 0x10], 0xb
jmp case.default.0x1000f844
mov dword [esp + 0x10], 0x15
jmp case.default.0x1000f844
mov edx, dword [esp + 0x28]
mov dword [esi], 2
mov dword [esi - 4], edx
jmp 0x1000f89c
mov dword [esp + 0x10], 0x1a
jmp case.default.0x1000f844
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x10], eax
jmp case.default.0x1000f844
mov ecx, dword [esp + 0x24]
mov dword [esi], 3
mov dword [esi - 4], ecx
jmp 0x1000f89c