Function at 0x10011520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x100f9028
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
push esi
mov ebp, ecx
push edi
push ebp
lea ecx, [esp + 0x58]
call fcn.100ebeb4
lea eax, [ebp + 0x5c]
lea ecx, [esp + 0x54]
push eax
mov dword [esp + 0x74], 0
call fcn.100eb6bd
push 0x3e9
mov ecx, ebp
call fcn.100e7a2c
mov edx, dword [eax + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f4
mov ecx, ebp
sub edi, edx
mov dword [esp + 0x1c], eax
call fcn.100e7a2c
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x50]
mov edx, dword [esp + 0x48]
sub eax, ecx
push 0x3f5
mov ecx, ebp
sub esi, edx
mov dword [esp + 0x2c], eax
call fcn.100e7a2c
mov edx, dword [eax + 0x1c]
lea ecx, [esp + 0x44]
push ecx
push edx
call ebx
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x44]
sub eax, ebx
sub ecx, edx
mov dword [esp + 0x24], ecx
cmp esi, eax
mov ecx, esi
jg 0x100115f8
mov ecx, eax
cmp edi, ecx
jle 0x10011600
mov eax, edi
jmp 0x10011606
cmp esi, eax
jle 0x10011606
mov eax, esi
mov dword [ebp + 0x118], eax
mov eax, dword [ebp + 0x120]
test eax, eax
mov dword [esp + 0x14], 0
jle 0x10011702
mov eax, dword [esp + 0x78]
lea esi, [eax + 0x14]
mov ecx, dword [ebp + 0x11c]
mov edx, dword [esp + 0x14]
mov eax, dword [ecx + edx*4]
lea ecx, [esp + 0x20]
push eax
call fcn.100e858b
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
call fcn.100e851d
mov dword [esi - 0xc], ebx
mov ebx, dword [esp + 0x14]
mov dword [esi - 8], edi
mov dword [esi], 1
mov ecx, dword [ebp + 0x11c]
mov eax, dword [ecx + ebx*4]
mov ecx, dword [eax + 0x14]
dec ecx
cmp ecx, 0xb
ja case.default.0x10011694
jmp dword [ecx*4 + 0x10011b14]
mov dword [esp + 0x10], 3
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c]
push edx
push 0x57
call fcn.100e151b
mov eax, dword [eax]
lea edx, [esp + 0x2c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
call fcn.100e851d
mov edx, dword [esp + 0x18]
add edi, edx
mov dword [esi - 4], edi
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
mov dword [esp + 0x14], ebx
jl 0x10011629
mov eax, dword [ebp + 0x118]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
jle 0x10011712
mov eax, ecx
push 8
push 0x57
lea ecx, [esp + 0x34]
mov dword [ebp + 0x118], eax
call fcn.100e151b
mov eax, dword [eax]
lea edx, [esp + 0x3c]
push edx
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x68]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x38], edx
call fcn.100e851d
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
call esi
lea eax, [eax + eax*2]
push 0
cdq
and edx, 3
add eax, edx
sar eax, 2
sub eax, 0x1a
mov dword [esp + 0x2c], eax
call esi
lea eax, [eax + eax*2]
mov ecx, dword [ebp + 0x120]
cdq
and edx, 3
mov ebx, SysReAllocString
add eax, edx
mov edi, eax
sar edi, 2
sub edi, 0x1a
test ecx, ecx
mov dword [esp + 0x20], edi
jle 0x100117bc
mov eax, dword [esp + 0x78]
mov esi, ecx
add eax, 8
mov edx, dword [eax + 8]
mov edi, dword [eax]
lea edx, [edx + edi + 6]
cmp edx, ebx
jle 0x100117b2
mov ebx, edx
add eax, 0x18
dec esi
jne 0x100117a3
mov edi, dword [esp + 0x20]
mov eax, 0x2aaaaaab
imul edi
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ebx
mov esi, edx
cdq
idiv esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
mov eax, ebx
cdq
idiv esi
test edx, edx
je 0x100117e6
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov edx, 6
cmp eax, edx
jle 0x100117f7
mov dword [esp + 0x10], edx
mov eax, dword [ebp + 0x118]
add eax, 5
imul eax, ecx
add eax, 0x15
cmp eax, 0xb4
jge 0x10011815
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], 0
cmp eax, edx
jg 0x10011938
mov edx, eax
imul edx, esi
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x24]
test edx, edx
jne 0x10011938
xor edx, edx
xor ebx, ebx
test ecx, ecx
mov dword [esp + 0x14], edx
jle 0x10011909
mov esi, dword [esp + 0x78]
lea ecx, [ebx + ebx*2]
lea eax, [esi + ecx*8]
mov dword [eax], 0
mov dword [eax + 4], edx
mov ecx, dword [eax + 8]
cmp ecx, dword [esp + 0x3c]
jg 0x1001186e
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax + 0x10]
inc ebx
lea ecx, [eax + ecx + 6]
mov eax, dword [ebp + 0x120]
cmp ebx, eax
jge 0x100118e5
lea edx, [ebx + ebx*2]
lea esi, [esi + edx*8 + 8]
add ecx, 0xc
mov eax, ecx
cdq
idiv dword [esp + 0x18]
mov edi, eax
mov eax, ecx
mov ecx, dword [esp + 0x18]
cdq
idiv ecx
test edx, edx
je 0x100118a1
inc edi
imul edi, ecx
mov ecx, dword [esi]
mov edx, dword [esp + 0x3c]
cmp ecx, edx
mov eax, edi
jg 0x100118b2
mov ecx, edx
mov edx, dword [esi + 8]
lea ecx, [edx + ecx + 6]
mov edx, dword [esp + 0x1c]
sub edx, eax
cmp ecx, edx
jg 0x100118dd
mov edx, dword [esp + 0x14]
mov dword [esi - 8], eax
mov dword [esi - 4], edx
add ecx, eax
mov eax, dword [ebp + 0x120]
inc ebx
add esi, 0x18
cmp ebx, eax
jl 0x10011887
mov edx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov eax, dword [ebp + 0x118]
lea ecx, [edx + eax + 5]
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp + 0x120]
mov edx, dword [esp + 0x14]
cmp ebx, ecx
jl 0x1001184e
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
sub edx, 5
cmp edx, eax
jg 0x1001191c
mov dword [esp + 0x24], 1
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
inc eax
add ebx, esi
cmp eax, 6
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ebx
jle 0x10011832
lea ecx, [eax - 1]
mov dword [esp + 0x14], 0
test ecx, ecx
mov dword [esp + 0x24], ecx
jle 0x100119ca
mov eax, dword [ebp + 0x120]
mov esi, SysReAllocString
test eax, eax
jle 0x100119bd
mov edx, dword [esp + 0x78]
mov ecx, eax
lea edi, [edx + 8]
mov ebx, edi
mov eax, dword [ebx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x1001197b
mov eax, dword [ebx]
cmp eax, esi
jle 0x1001197b
mov esi, eax
add ebx, 0x18
dec ecx
jne 0x10011965
test esi, esi
jle 0x100119b5
mov eax, dword [esp + 0x3c]
cmp esi, eax
jle 0x1001198f
mov esi, eax
xor ebx, ebx
mov ecx, edi
mov eax, dword [ecx - 8]
cdq
idiv dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jne 0x100119a7
cmp dword [ecx], esi
jge 0x100119a7
mov dword [ecx], esi
mov eax, dword [ebp + 0x120]
inc ebx
add ecx, 0x18
cmp ebx, eax
jl 0x10011993
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x1001194b
mov ecx, dword [ebp + 0x120]
xor eax, eax
cmp ecx, eax
mov dword [esp + 0x34], SysReAllocString
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
jle 0x10011a5d
mov eax, dword [esp + 0x78]
lea ecx, [eax + 8]
mov edx, dword [ecx - 8]
mov eax, dword [ecx + 8]
mov esi, dword [ecx]
add eax, edx
lea ebx, [eax + esi + 6]
cmp ebx, edi
jle 0x10011a27
cmp dword [ecx + 0xc], 1
jne 0x10011a27
mov eax, edi
sub eax, edx
sub eax, esi
mov esi, dword [esp + 0x3c]
sub eax, 6
add esi, 0x1e
cmp eax, esi
jle 0x10011a27
mov dword [ecx + 8], eax
mov edx, dword [ecx - 8]
mov esi, dword [ecx]
add esi, edx
lea ebx, [esi + eax + 6]
cmp ebx, dword [esp + 0x34]
jle 0x10011a31
mov dword [esp + 0x34], ebx
test edx, edx
jne 0x10011a47
mov edx, dword [ebp + 0x118]
mov eax, dword [esp + 0x38]
lea edx, [eax + edx + 5]
mov dword [esp + 0x38], edx
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x120]
inc eax
add ecx, 0x18
cmp eax, edx
mov dword [esp + 0x14], eax
jl 0x100119ed
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
push 0x11
mov dword [eax], edi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x3c]
mov dword [eax], edx
mov dword [eax + 4], ecx
lea ecx, [esp + 0x58]
call fcn.100eb681
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 0xffffffff
call fcn.100ebf26
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret 0xc
mov dword [esp + 0x10], 6
jmp case.default.0x10011694
mov dword [esp + 0x10], 0xb
jmp case.default.0x10011694
mov dword [esp + 0x10], 0x15
jmp case.default.0x10011694
mov edx, dword [esp + 0x28]
mov dword [esi], 2
mov dword [esi - 4], edx
jmp 0x100116ec
mov dword [esp + 0x10], 0x1a
jmp case.default.0x10011694
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x10], eax
jmp case.default.0x10011694
mov ecx, dword [esp + 0x24]
mov dword [esi], 3
mov dword [esi - 4], ecx
jmp 0x100116ec