Function at 0x1313b070
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe0
push ebx
push ebp
push esi
push edi
xor edi, edi
mov dword [esp + 0x10], edi
call fcn.1312db50
mov ebx, eax
mov dword [esp + 0x1c], ebx
call fcn.1312dad0
mov esi, eax
mov dword [esp + 0x14], esi
call fcn.1312db30
mov ebp, eax
mov eax, dword [0x13234310]
cmp eax, edi
mov dword [esp + 0x18], ebp
je 0x1313b0e7
cmp ebp, edi
mov edx, str.NULL
je 0x1313b0b5
mov edx, ebp
cmp esi, edi
mov ecx, str.NULL
je 0x1313b0c0
mov ecx, esi
cmp ebx, edi
mov eax, str.NULL
je 0x1313b0cb
mov eax, ebx
push edx
push ecx
push eax
push str.CIMHookCThread::CheckIMInternalInfo_1__Inter:__s___Original:__s___Product:__s_
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x1c
cmp ebx, edi
jne 0x1313b0f9
cmp esi, edi
jne 0x1313b12c
cmp ebp, edi
je 0x1313b396
jmp 0x1313b12c
push ebx
call fcn.1314cebe
add esp, 4
test eax, eax
jne 0x1313b12c
cmp esi, edi
je 0x1313b12c
push esi
call fcn.1314cebe
add esp, 4
test eax, eax
jne 0x1313b12c
cmp ebp, edi
je 0x1313b12c
push ebp
call fcn.1314cebe
add esp, 4
test eax, eax
je 0x1313b396
mov eax, str.wxwork.exe
xor ebp, ebp
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, str.DingTalk.exe
mov dword [esp + 0x20], 0x8000000
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov eax, str.Skype.exe
mov dword [esp + 0x24], edi
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov eax, 0x13218678
mov dword [esp + 0x28], edi
mov dword [esp + 0xa4], eax
mov dword [esp + 0xac], eax
mov eax, str.Zalo
mov dword [esp + 0x2c], str.wechat
mov dword [esp + 0xb4], eax
mov dword [esp + 0xbc], eax
mov eax, str.Lark
mov dword [esp + 0x30], SysFreeString
mov dword [esp + 0xc4], eax
mov dword [esp + 0xcc], eax
mov eax, str.WhatsApp
mov dword [esp + 0x3c], str.WeChat_Work
mov dword [esp + 0x40], 0x40000000
mov dword [esp + 0x4c], str.DingTalk
mov dword [esp + 0x50], 0x80
mov dword [esp + 0x5c], str.Skype
mov dword [esp + 0x60], 0x400
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], str.AliIm.exe
mov dword [esp + 0x6c], str.AliWangWang
mov dword [esp + 0x70], 0x12
mov dword [esp + 0x74], str.AliWorkbench
mov dword [esp + 0x78], str.AliWorkbench.exe
mov dword [esp + 0x7c], 0x1321eed8
mov dword [esp + 0x80], 0x800
mov dword [esp + 0x84], str.electron.exe
mov dword [esp + 0x88], 0x1321eea0
mov dword [esp + 0x8c], 0x1321ee94
mov dword [esp + 0x90], 4
mov dword [esp + 0x94], edi
mov dword [esp + 0x98], str.MideaConnect.exe
mov dword [esp + 0x9c], 0x1321ee64
mov dword [esp + 0xa0], 0x20000
mov dword [esp + 0xa8], edi
mov dword [esp + 0xb0], 8
mov dword [esp + 0xb8], edi
mov dword [esp + 0xc0], 0x15
mov dword [esp + 0xc8], edi
mov dword [esp + 0xd0], 0x20
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], 0x4000000
mov dword [esp + 0xe4], str.communicator.exe
mov dword [esp + 0xe8], str.commnuicator.exe
mov dword [esp + 0xec], str.Microsoft_Lync_2010
xor ebx, ebx
lea esi, [esp + 0x28]
mov eax, dword [esi - 4]
cmp eax, edi
je 0x1313b310
mov ecx, dword [esp + 0x1c]
cmp ecx, edi
je 0x1313b310
push ecx
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
je 0x1313b354
mov eax, dword [esi]
cmp eax, edi
je 0x1313b32c
mov ecx, dword [esp + 0x14]
cmp ecx, edi
je 0x1313b32c
push ecx
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
je 0x1313b354
mov eax, dword [esi + 4]
cmp eax, edi
je 0x1313b349
mov ecx, dword [esp + 0x18]
cmp ecx, edi
je 0x1313b349
push ecx
push eax
call fcn.1314d0bf
add esp, 8
test eax, eax
je 0x1313b354
inc ebx
add esi, 0x10
cmp ebx, 0xd
jae 0x1313b362
jmp 0x1313b2f3
shl ebx, 4
mov ebp, 1
mov ebx, dword [esp + ebx + 0x20]
jmp 0x1313b366
mov ebx, dword [esp + 0x10]
cmp dword [0x13234310], edi
je 0x1313b389
push ebx
push ebp
push str.CIMHookCThread::CheckIMInternalInfo_2__Find:__d___Type:__08x_
push 0x132185f8
push 0xffffffffffffffff
push 0x132342a4
call fcn.131403d0
add esp, 0x18
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0xe0
ret
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xe0
ret