Function at 0x13134930
Capabilities:
Get graphical window text
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x131f6590
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xec8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov eax, dword [0x13233800]
test eax, eax
je 0x13135bf1
mov eax, dword [0x13233828]
test eax, eax
je 0x13135bf1
mov eax, dword [ebp + 8]
test eax, eax
jne 0x13135bf1
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x13135bf1
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x13135bf1
mov ebx, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov dword [ebp - 0x1c], 0
cmp esi, 1
je 0x13134a62
cmp esi, 0xc
je 0x13134a62
cmp esi, 0x14e
je 0x13134a62
cmp esi, 0x104d
je 0x13134a62
cmp esi, 0x1030
je 0x13134a62
cmp esi, 0x1132
je 0x13134a62
cmp esi, 0x449
je 0x13134a62
cmp esi, 0x461
je 0x13134a62
cmp esi, 0xc2
je 0x13134a62
cmp esi, 0x18
je 0x13134a62
cmp esi, 0x47
je 0x13134a62
cmp esi, 0x102
je 0x13134a62
cmp esi, 0xf1
je 0x13134a62
cmp esi, 0x406
je 0x13134a62
cmp esi, 0x402
je 0x13134a62
cmp esi, 5
je 0x13134a62
cmp esi, 0x11f
je 0x13134a62
cmp esi, 2
je 0x13134a62
cmp esi, 6
je 0x13134a62
cmp esi, 0x13
je 0x13134a62
cmp esi, 0x1205
je 0x13134a62
cmp esi, 0xa
je 0x13134a62
cmp esi, 0x10
je 0x13134a62
cmp esi, 0x115
je 0x13134a62
cmp esi, 0x10e
jne 0x13135bf1
lea eax, [ebp - 0x1c]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [0x1323380c]
test eax, eax
je 0x13135bf1
cmp dword [ebp - 0x1c], eax
jne 0x13135bf1
mov word [ebp - 0x22c], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x22a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x104
lea ecx, [ebp - 0x22c]
push ecx
push ebx
call dword [sym.imp.USER32.dll_GetClassNameW]
push 0xfffffffffffffff4
push ebx
mov edi, dword [sym.imp.USER32.dll_GetWindowLongW]
call edi
mov dword [ebp - 0x20], eax
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp esi, 0x102
ja 0x13135d9b
je 0x13135d49
dec esi
cmp esi, 0xf0
ja case.0x13134aea.10
xor edx, edx
mov dl, byte [esi + 0x131363f0]
jmp dword [edx*4 + 0x131363c8]
mov ecx, dword [0x13233800]
cmp ecx, 1
jne 0x13134bb2
cmp dword [0x13233820], 0x10005
jne 0x13134b14
cmp dword [0x13233824], ecx
je 0x13134b59
push str.Static
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
cmp dword [ebp - 0x20], 0x546
jne case.0x13134aea.10
push ebx
push 0
mov ecx, dword [0x13233200]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
push str.TXGuiFoundation
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x23c], eax
test eax, 0x40000
je case.0x13134aea.10
test eax, 0x10000
je case.0x13134aea.10
push ebx
push 0
mov ecx, dword [0x13233214]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 0x800000
jne 0x13134dea
push str.TXGuiFoundation
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne 0x13134ce4
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x240], eax
test eax, 0x40000
je case.0x13134aea.10
test eax, 0x10000
je case.0x13134aea.10
mov word [ebp - 0x44c], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x44a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x103
lea ecx, [ebp - 0x44c]
push ecx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [0x13233a44], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x13233a48], eax
mov ecx, 0x82
xor eax, eax
mov edi, 0x13233a4c
rep stosd dword es:[edi], eax
push 0x103
lea edx, [ebp - 0x44c]
push edx
push 0x13233a4c
call fcn.1314ca89
add esp, 0xc
mov eax, dword [0x13234310]
mov dword [ebp - 0xeb0], eax
test eax, eax
je 0x13134c9a
push 0x13233a4c
mov eax, dword [0x13233a48]
push eax
mov ecx, dword [0x13233a44]
push ecx
push str.IM_EIMQQ_SETTEXT_1__08x__08x__s
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x1c
push str.im_eimqq_setcomcacheuser
call fcn.13130790
add esp, 4
mov esi, eax
mov dword [ebp - 0x244], esi
call fcn.13178200
test eax, eax
je 0x13134cc1
call fcn.131780e0
test eax, eax
jne 0x13134cc9
test esi, esi
je case.0x13134aea.10
push ebx
push 0
mov edx, dword [0x13233214]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
push str.ChatBox_PreviewWnd
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
xor esi, esi
mov word [ebp - 0x654], si
mov ecx, 0x81
lea edi, [ebp - 0x652]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x103
lea edx, [ebp - 0x654]
push edx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [0x13234310]
mov dword [ebp - 0xeb4], eax
cmp eax, esi
je 0x13134d6d
push 0x13233a4c
mov eax, dword [0x13233a48]
push eax
mov ecx, dword [0x13233a44]
push ecx
lea edx, [ebp - 0x654]
push edx
push ebx
push str.IM_EIMQQ_SETTEXT_2__08x__s__08x__08x__s
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x24
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x13233a48]
add ecx, 0x3e8
cmp ecx, eax
jbe case.0x13134aea.10
lea edx, [ebp - 0x654]
push edx
call fcn.1314cebe
push eax
push 0x13233a4c
lea eax, [ebp - 0x654]
push eax
call fcn.1314cf51
add esp, 0x10
test eax, eax
jne case.0x13134aea.10
mov ecx, dword [0x13233a44]
push ecx
push ebx
mov edx, dword [0x13233214]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x13233a48], esi
mov dword [0x13233a44], esi
mov ecx, 0x82
xor eax, eax
mov edi, 0x13233a4c
rep stosd dword es:[edi], eax
jmp case.0x13134aea.10
cmp ecx, 0x10
jne 0x13134ea4
cmp dword [0x13233820], 0x10010
jne 0x13134e07
cmp dword [0x13233824], ecx
je 0x13134e4c
push ebx
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne case.0x13134aea.10
push str.32770
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov edx, dword [0x13233200]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
push str.TXGuiFoundation
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x658], eax
test eax, 0x40000
je case.0x13134aea.10
test eax, 0x10000
je case.0x13134aea.10
push ebx
push 0
mov edx, dword [0x13233214]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 2
jne 0x13134ef1
cmp eax, 0x44b
je 0x13134ebb
cmp eax, 0x425
jne case.0x13134aea.10
push str.Static
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov edx, dword [0x13233200]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 0x200
jne 0x13134f70
cmp eax, 0xe4
jne case.0x13134aea.10
push str.Static
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov edx, dword [0x13233200]
push edx
mov eax, dword [0x13233828]
push eax
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call esi
push 0xe5
push ebx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x65c], eax
test eax, eax
je case.0x13134aea.10
push eax
push 0
mov ecx, dword [0x13233210]
push ecx
mov edx, dword [0x13233828]
push edx
call esi
jmp case.0x13134aea.10
cmp ecx, 0x400
jne 0x131351ab
cmp dword [0x132337fc], 0x12
push ebx
je 0x13135074
mov edi, dword [sym.imp.USER32.dll_GetParent]
call edi
mov esi, eax
mov dword [ebp - 0x664], esi
push esi
call edi
mov edi, eax
mov dword [ebp - 0x660], edi
mov eax, dword [0x13234310]
mov dword [ebp - 0xeb8], eax
test eax, eax
je 0x13134fd7
lea eax, [ebp - 0x22c]
push eax
push edi
push esi
push ebx
push str.g_msgIM_SETUSERINFO_0x_08x_0x_08x_0x_08x__s
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x20
test esi, esi
jne 0x1313500b
push str.32770
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
je 0x1313502f
push str.StandardFrame
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
je 0x1313502f
test edi, edi
jne case.0x13134aea.10
push str.StandardFrame
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
mov eax, dword [0x13234310]
mov dword [ebp - 0xebc], eax
test eax, eax
je 0x13135058
push ebx
push str.g_msgIM_SETUSERINFO_0x_08x
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x14
push ebx
push 0
mov ecx, dword [0x13233200]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
call dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x668], eax
test eax, eax
jne 0x1313516c
push str.StandardFrame
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne 0x1313516c
xor esi, esi
mov word [ebp - 0x710], si
mov ecx, 0x28
lea edi, [ebp - 0x70e]
rep stosd dword es:[edi], eax
push 0x50
lea ecx, [ebp - 0x710]
push ecx
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [ebp - 0x66c], eax
cmp eax, esi
jle 0x1313513c
push 0x1321d37c
lea edx, [ebp - 0x710]
push edx
call fcn.1314cf10
add esp, 8
mov dword [ebp - 0x714], eax
cmp eax, esi
je 0x1313513c
mov dword [ebp - 0x720], 0x10000
mov dword [ebp - 0x71c], 0x12
mov dword [0x13233808], ebx
mov dword [ebp - 0x718], esi
push 0x12
push 0x10000
call fcn.13128f40
add esp, 8
mov dword [ebp - 0x718], eax
push ebx
push eax
mov eax, dword [0x132331a4]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x13234310]
mov dword [ebp - 0xec0], eax
cmp eax, esi
je 0x1313516c
lea edx, [ebp - 0x710]
push edx
push ebx
push str.QN_g_msgIM_WND_CREATED_1__0x_08x____s_
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x18
mov eax, dword [0x13234310]
mov dword [ebp - 0xec4], eax
test eax, eax
je case.0x13134aea.10
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x668]
push ecx
push str.QN_g_msgIM_WND_CREATED_2__0x_08x____s_
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x18
jmp case.0x13134aea.10
cmp ecx, 0x2000
jne 0x131351e9
push str.BaseGui
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov eax, dword [0x13233204]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 0x2000000
jne case.0x13134aea.10
push ebx
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
jne case.0x13134aea.10
push str.32770
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
mov word [ebp - 0x928], ax
mov ecx, 0x81
lea edi, [ebp - 0x926]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x104
lea eax, [ebp - 0x928]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0x1321d2d0
call fcn.1314cebe
push eax
push 0x1321d2d0
lea ecx, [ebp - 0x928]
push ecx
call fcn.1314cf51
add esp, 0x10
test eax, eax
je 0x13135293
push 0x1321d2c0
call fcn.1314cebe
push eax
push 0x1321d2c0
lea edx, [ebp - 0x928]
push edx
call fcn.1314cf51
add esp, 0x10
test eax, eax
jne case.0x13134aea.10
push ebx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [0x132331f4]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp dword [0x13233800], ecx
je case.0x13134aea.10
mov dword [ebp - 0x938], ecx
mov edx, dword [ebp + 0x10]
mov esi, dword [edx + 4]
mov dword [ebp - 0x938], esi
cmp esi, ecx
je case.0x13134aea.10
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_IsBadStringPtrW]
test eax, eax
jne case.0x13134aea.10
mov eax, dword [0x13233800]
cmp eax, 1
jne 0x1313531b
cmp dword [ebp - 0x20], 0x380
jne case.0x13134aea.10
push ebx
push esi
mov eax, dword [0x132331b4]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x100
jne 0x13135346
cmp dword [ebp - 0x20], 2
jne case.0x13134aea.10
push ebx
push esi
mov edx, dword [0x132331b4]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x200
jne 0x13135390
cmp dword [ebp - 0x20], 0xd9
jne case.0x13134aea.10
push str.RichEdit20A
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push esi
mov edx, dword [0x132331b4]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x400
jne 0x13135409
cmp dword [0x132337fc], 0x12
je case.0x13134aea.10
mov eax, dword [ebp - 0x20]
cmp eax, 0x3eb
jne 0x131353c8
push str.RICHEDIT
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
je 0x131353ef
jmp 0x131353d3
cmp eax, 0x3e6
jne case.0x13134aea.10
push str.RichEdit20A
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push esi
mov eax, dword [0x132331b4]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x800
jne 0x131354c6
push 0xfffffffffffffff0
push ebx
call edi
mov edi, eax
mov dword [ebp - 0x93c], edi
push str.WindowsForms10.RichEdit20W.app.0.
call fcn.1314cebe
push eax
push str.WindowsForms10.RichEdit20W.app.0.
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cf89
add esp, 0x10
test eax, eax
je 0x131354a9
push str.WindowsForms10.RichEdit50W.app.0.
call fcn.1314cebe
push eax
push str.WindowsForms10.RichEdit50W.app.0.
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cf89
add esp, 0x10
test eax, eax
je 0x131354a9
push str.FxRichEdit
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
test edi, 0x800
je case.0x13134aea.10
push ebx
push esi
mov edx, dword [0x132331b4]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
test edi, 0x10000000
je case.0x13134aea.10
test edi, 0x10000
jne case.0x13134aea.10
jmp 0x13136144
cmp eax, 0x4000
jne 0x131354f9
push str.RichEdit20W
lea eax, [ebp - 0x22c]
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x940], eax
jmp 0x1313613b
cmp eax, 0x8000
jne 0x13135562
push str.RichEdit20A
lea eax, [ebp - 0x22c]
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
je 0x13135534
push str.RichEdit20W
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x944], eax
test ah, 8
je case.0x13134aea.10
push ebx
push esi
mov edx, dword [0x132331b4]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x40000
jne 0x13135592
push str.RichEdit20A
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x948], eax
jmp 0x1313553f
cmp eax, 0x80000
jne case.0x13134aea.10
push str.RichEdit20W
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x94c], eax
jmp 0x1313553f
mov ecx, dword [0x13233800]
cmp ecx, 1
jne 0x1313566f
cmp eax, 0x380
jne 0x1313561c
push str.RichEdit20A
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [0x132331c0]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x405
jne 0x1313564e
push str.Button
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
test eax, eax
je 0x131356b0
jmp case.0x13134aea.10
cmp eax, 0xe5
jne case.0x13134aea.10
push str.SysListView32
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
jmp 0x131356a8
cmp ecx, 0x10
jne 0x13135712
cmp eax, 0x380
je 0x131356d6
cmp eax, 0x405
jne 0x131356cb
push str.Button
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 8]
test eax, eax
jne case.0x13134aea.10
push ebx
push 2
mov eax, dword [0x132331c0]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x1004
jne case.0x13134aea.10
push str.RichEdit20A
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [0x132331c0]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 2
jne 0x1313575d
cmp eax, 0x6a
jne case.0x13134aea.10
push str.Button
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [0x132331c0]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 0x400
jne case.0x13134aea.10
cmp dword [0x132337fc], 0x12
je case.0x13134aea.10
push str.SimpleBrowser
lea eax, [ebp - 0x22c]
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
mov dword [ebp - 0xc14], ebx
mov dword [ebp - 0xc10], str.Internet_Explorer_Server
xor edx, edx
mov dword [ebp - 0xc0c], edx
mov dword [ebp - 0xc08], edx
mov dword [ebp - 0xc04], edx
mov dword [ebp - 0xc00], 2
mov dword [ebp - 0xbfc], edx
mov dword [ebp - 0xbf8], edx
mov dword [ebp - 0xbf4], edx
mov ecx, 0xa9
lea edi, [ebp - 0xbf0]
rep stosd dword es:[edi], eax
push edx
push edx
push edx
push edx
push 1
lea ecx, [ebp - 0xc14]
push ecx
push ebx
lea edx, [ebp - 0xbf4]
push edx
call fcn.1313c1e0
add esp, 0x20
jmp case.0x13134aea.10
cmp dword [0x13233800], 0x80
jne case.0x13134aea.10
mov dword [ebp - 0xc18], ecx
push str.TChatTopicControl
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
je 0x13135861
push str.TGradientPanel
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push eax
push str.TRichView
push eax
push ebx
call dword [sym.imp.USER32.dll_FindWindowExW]
test eax, eax
je case.0x13134aea.10
mov dword [ebp - 0xc18], 1
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
mov dword [ebp - 0xc1c], eax
test eax, eax
je case.0x13134aea.10
test byte [eax + 0x18], 0x40
je case.0x13134aea.10
push ebx
push 0
mov eax, dword [0x132331c0]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp dword [0x13233800], 2
jne case.0x13134aea.10
cmp eax, 0x6a
je 0x131358c1
cmp eax, 0x51b
jne case.0x13134aea.10
push str.Button
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
xor ecx, ecx
mov dword [ebp - 0xc20], ecx
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 8]
cmp eax, 1
jne 0x131358f7
mov ecx, 2
jmp 0x13135900
test eax, eax
jne 0x13135906
mov ecx, 3
mov dword [ebp - 0xc20], ecx
push ebx
push ecx
mov ecx, dword [0x132331c0]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
mov edx, dword [0x13233800]
cmp edx, 1
je 0x13135935
cmp edx, 0x10
jne case.0x13134aea.10
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 8]
cmp eax, ecx
je 0x13135948
cmp eax, 2
jne case.0x13134aea.10
cmp edx, 1
jne 0x13135974
push str.RichEdit20A
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne 0x1313596e
cmp dword [ebp - 0x20], 0x380
je 0x131359dd
mov edx, dword [0x13233800]
cmp edx, 0x10
jne case.0x13134aea.10
push str.RICHEDIT
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
mov esi, dword [ebp - 0x20]
jne 0x131359a0
cmp esi, 0x380
je 0x131359dd
cmp dword [0x13233800], 0x10
jne case.0x13134aea.10
push str.RichEdit20A
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
cmp esi, 0x380
je 0x131359dd
cmp esi, 0x1004
jne case.0x13134aea.10
push ebx
push 0
mov ecx, dword [0x132331bc]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp dword [0x13233800], ecx
je case.0x13134aea.10
mov eax, dword [0x13234310]
mov dword [ebp - 0xec8], eax
cmp eax, ecx
je 0x13135a3d
mov eax, dword [0x13233814]
push eax
mov ecx, dword [0x13233808]
push ecx
push ebx
push str.destroy_1___08x__x__08x
push 0x1321d224
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x1c
xor ecx, ecx
cmp ebx, dword [0x13233808]
je 0x13135c04
push ebx
call dword [sym.imp.USER32.dll_GetParent]
test eax, eax
je 0x13135c02
mov eax, dword [0x13233800]
cmp eax, 1
je 0x13135bbd
cmp eax, 0x10
je 0x13135bbd
cmp eax, 2
jne 0x13135aaa
push str.RichEdit20A
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov eax, dword [0x132331a8]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x100
jne 0x13135af1
push str.Tencent_QQBar
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
call fcn.1313c310
add esp, 4
push eax
push 0
mov eax, dword [0x132331a8]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x200
jne 0x13135b5b
push str.32770
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xe1
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0xe58], eax
test eax, eax
je 0x13135b40
push eax
push 0
mov eax, dword [0x13233210]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push 0
mov edx, dword [0x132331a8]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x10000000
jne case.0x13134aea.10
push str.imwnd
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov edx, dword [0x132331a8]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x13234310]
mov dword [ebp - 0xed4], eax
test eax, eax
je case.0x13134aea.10
push str.destroy_4_
push 0x1321c068
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x10
jmp case.0x13134aea.10
push str.TXGFLayerMask
lea ecx, [ebp - 0x22c]
push ecx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov edx, dword [0x132331a8]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
push ebx
push ecx
mov ecx, dword [0x132331a8]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
cmp ebx, dword [0x13233808]
jne case.0x13134aea.10
mov eax, dword [0x13233814]
cmp eax, 0x400
je 0x13135c43
cmp eax, 0x2000000
je 0x13135c43
cmp eax, 0x800
je 0x13135c4a
cmp eax, 0x40000000
jne case.0x13134aea.10
cmp eax, 0x800
jne 0x13135c86
mov dword [0x132341b0], 0
mov eax, dword [0x13234310]
mov dword [ebp - 0xecc], eax
test eax, eax
je 0x13135d06
push ebx
push str.destroy__08x
push str.fetion
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x14
mov eax, dword [0x13233814]
cmp eax, 0x400
jne 0x13135ce0
cmp dword [0x132337fc], 0x12
je 0x13135cf7
mov ecx, dword [0x132335b0]
test ecx, ecx
je 0x13135cac
push 0
call fcn.13138690
mov eax, dword [0x13233814]
mov ecx, dword [0x13234310]
mov dword [ebp - 0xed0], ecx
test ecx, ecx
je 0x13135ce0
mov eax, dword [0x132335b0]
push eax
push str.destroy_2____x_
push 0x1321d224
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x14
mov eax, dword [0x13233814]
cmp eax, 0x40000000
je 0x13135cf7
cmp eax, 0x400
jne 0x13135d06
cmp dword [0x132337fc], 0x12
jne 0x13135d06
mov ecx, dword [0x132335b0]
test ecx, ecx
je 0x13135d06
call fcn.131386a0
mov dword [0x13233814], 0
jmp case.0x13134aea.10
cmp dword [0x13233340], ecx
je case.0x13134aea.10
mov eax, dword [0x13233800]
cmp eax, 1
je 0x13135d34
cmp eax, 0x10
jne case.0x13134aea.10
push ebx
push ecx
mov ecx, dword [0x13233188]
push ecx
mov edx, dword [0x13233828]
push edx
jmp 0x13135be4
cmp dword [0x13233800], 0x1000000
jne case.0x13134aea.10
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx eax, ax
mov dword [ebp - 0x238], eax
test eax, eax
jne case.0x13134aea.10
mov eax, dword [ebp + 0x10]
cmp dword [eax + 8], 0xd
jne case.0x13134aea.10
push ebx
push 3
mov ecx, dword [0x1323318c]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp esi, 0x1030
ja 0x13136194
je 0x1313615f
cmp esi, 0x449
ja 0x131360c1
je 0x13135fbc
sub esi, 0x10e
je 0x13135fa2
sub esi, 7
jne case.0x13134aea.10
mov ecx, dword [0x13233800]
cmp ecx, 0x10000000
jne 0x13135e5d
cmp dword [0x13233820], 0x10001
jne case.0x13134aea.10
cmp dword [0x13233824], ecx
jne case.0x13134aea.10
push ebx
call fcn.1313c310
add esp, 4
mov esi, eax
mov dword [ebp - 0x234], esi
push ebx
push esi
mov eax, dword [0x13233244]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x13234310]
mov dword [ebp - 0xeac], eax
test eax, eax
je case.0x13134aea.10
push ebx
push esi
push str.wm_vscroll___0x_x_0x_x_
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x18
jmp case.0x13134aea.10
mov ecx, dword [0x13233800]
cmp ecx, 0x1000000
je case.0x13134aea.10
cmp ecx, 0x80
je case.0x13134aea.10
cmp ecx, 0x200
jne 0x13135ee4
cmp eax, 0xd9
jne 0x13135ea1
push str.RichEdit20A
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
je 0x13135ec8
jmp case.0x13134aea.10
cmp eax, 0xc9
jne case.0x13134aea.10
push str.SysListView32
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push 0
mov ecx, dword [0x132331c0]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 2
jne 0x13135f20
push str.__oxFrame.class__
lea eax, [ebp - 0x22c]
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov ecx, dword [0x13233204]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 0x40000
jne 0x13135f5f
push str.SysTreeView32
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov ecx, dword [0x132331c0]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp ecx, 0x80000
jne case.0x13134aea.10
push str.SysListView32
lea eax, [ebp - 0x22c]
push eax
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov ecx, dword [0x132331c0]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
push ecx
push ecx
mov eax, dword [0x13233190]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
mov edx, dword [0x13233800]
cmp edx, 1
jne 0x13135fec
cmp eax, 0x380
jne case.0x13134aea.10
push ebx
push ecx
mov edx, dword [0x132331b8]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp edx, 0x10
jne 0x1313601e
cmp eax, 0x380
je 0x13136003
cmp eax, 0x1004
jne case.0x13134aea.10
push ebx
push ecx
mov ecx, dword [0x132331b8]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp edx, 2
jne 0x13136075
cmp eax, 0xfa
jne 0x13136044
push ebx
push eax
mov eax, dword [0x13233200]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x19c6
je 0x1313605b
cmp eax, 0x19ed
je 0x1313605b
cmp eax, 0x65
jne case.0x13134aea.10
push ebx
push ecx
mov edx, dword [0x132331b8]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp edx, 0x100
jne case.0x13134aea.10
cmp eax, 0x1f41
je 0x131360b9
cmp eax, 0x4e23
jne case.0x13134aea.10
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
mov dword [ebp - 0x92c], eax
push ebx
push eax
mov eax, dword [0x132331b8]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
jmp 0x13136099
cmp esi, 0x461
jne case.0x13134aea.10
cmp dword [0x13233800], ecx
je case.0x13134aea.10
mov dword [ebp - 0x930], ecx
mov edx, dword [ebp + 0x10]
mov esi, dword [edx + 4]
mov dword [ebp - 0x930], esi
cmp esi, ecx
je case.0x13134aea.10
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_IsBadStringPtrW]
test eax, eax
jne case.0x13134aea.10
cmp dword [0x13233800], 0x40000
jne case.0x13134aea.10
push str.RichEdit20A
lea eax, [ebp - 0x22c]
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
jne case.0x13134aea.10
push 0xfffffffffffffff0
push ebx
call edi
mov dword [ebp - 0x934], eax
test ah, 8
je case.0x13134aea.10
push ebx
push esi
mov ecx, dword [0x132331b4]
push ecx
mov edx, dword [0x13233828]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp dword [0x13233800], 0x100
jne case.0x13134aea.10
cmp eax, 0x4e26
jne case.0x13134aea.10
push ebx
push ecx
mov eax, dword [0x132331cc]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp esi, 0x104d
je 0x1313632d
cmp esi, 0x1132
je 0x131361fa
cmp esi, 0x1205
jne case.0x13134aea.10
cmp dword [0x13233800], 0x4000
jne case.0x13134aea.10
push str.SysHeader32
lea edx, [ebp - 0x22c]
push edx
call fcn.1314cedb
add esp, 8
test eax, eax
jne case.0x13134aea.10
push ebx
push eax
mov eax, dword [0x132331e8]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
mov eax, dword [0x13233800]
cmp eax, 0x40000
jne 0x13136296
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 4]
add eax, 8
mov ecx, 0xa
mov esi, eax
lea edi, [ebp - 0xe80]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0xa
mov esi, eax
lea edi, [ebp - 0xd8c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0xd7c]
test edx, edx
je case.0x13134aea.10
cmp edx, 0xffffffff
je case.0x13134aea.10
mov word [ebp - 0xd64], 0
mov ecx, 0x27
xor eax, eax
lea edi, [ebp - 0xd62]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x50
lea eax, [ebp - 0xd64]
push eax
push 0xffffffffffffffff
push edx
call fcn.1312a310
add esp, 0x10
push ebx
lea ecx, [ebp - 0xd64]
push ecx
mov edx, dword [0x132331e0]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp eax, 0x400000
jne case.0x13134aea.10
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 4]
add eax, 8
mov ecx, 0xa
mov esi, eax
lea edi, [ebp - 0xea8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0xa
mov esi, eax
lea edi, [ebp - 0xe54]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0xe44]
test edx, edx
je case.0x13134aea.10
cmp edx, 0xffffffff
je case.0x13134aea.10
mov word [ebp - 0xe2c], 0
mov ecx, 0x27
xor eax, eax
lea edi, [ebp - 0xe2a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x50
lea eax, [ebp - 0xe2c]
push eax
push 0xffffffffffffffff
push edx
call fcn.1312a310
add esp, 0x10
push ebx
lea ecx, [ebp - 0xe2c]
push ecx
mov edx, dword [0x132331e0]
push edx
mov eax, dword [0x13233828]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10
cmp dword [0x13233800], 0x200
jne case.0x13134aea.10
cmp eax, 0xe6
je 0x1313634f
cmp eax, 0xc9
jne case.0x13134aea.10
mov edx, dword [ebp + 0x10]
mov edx, dword [edx + 4]
mov dword [ebp - 0xc24], edx
mov eax, dword [edx + 0x14]
cmp eax, ecx
je case.0x13134aea.10
cmp eax, 0xffffff
je case.0x13134aea.10
mov word [ebp - 0xcc4], 0
mov ecx, 0x27
xor eax, eax
lea edi, [ebp - 0xcc2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x50
lea eax, [ebp - 0xcc4]
push eax
push 0xffffffffffffffff
mov ecx, dword [edx + 0x14]
push ecx
call fcn.1312a310
add esp, 0x10
push ebx
lea edx, [ebp - 0xcc4]
push edx
mov eax, dword [0x132331fc]
push eax
mov ecx, dword [0x13233828]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x13134aea.10