Function at 0x1002cf40
Capabilities:
Set global application hook

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101e2746
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x10271304]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x34], 8
lea eax, [esi + 0x20]
jb 0x1002cf73
mov eax, dword [eax]
cmp dword [esi + 0x4c], 8
lea ecx, [esi + 0x38]
jb 0x1002cf7e
mov ecx, dword [ecx]
push 0
push dword [0x10296654]
push 0
push 0
push 0
push SysReAllocString
push 0
push SysReAllocString
push 0x82000000
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, eax
mov dword [esi + 4], edi
test edi, edi
jne 0x1002cfc4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [esi + 0x1b8]
mov eax, dword [esi + 0x1c0]
mov ecx, dword [esi + 0x1b4]
sub eax, edx
push 0x40
push eax
mov eax, dword [esi + 0x1bc]
sub eax, ecx
mov dword [esi + 0xc0], edi
push eax
push edx
push ecx
push 0
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
push 0x80
push 0x40008
push dword [esi + 4]
call fcn.10047d2e
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push dword [0x10296654]
push 0x1002cac0
push 3
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
mov dword [0x10296470], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [esi + 4]
mov dword [esi + 0x18c], eax
mov eax, dword [esi + 0x1c4]
mov dword [esi + 0x188], eax
mov eax, dword [0x1029671c]
test eax, eax
jne 0x1002d081
push 0x45c
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x1002d073
mov ecx, eax
call fcn.10026dc0
jmp 0x1002d075
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x1029671c], eax
push 0
push 0
push 0
push 0
push 0x180
push 0x82000000
push dword [esi + 4]
mov ecx, eax
call fcn.1005ed72
mov edi, dword [0x1029671c]
test edi, edi
jne 0x1002d0dc
push 0x45c
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x1002d0cd
mov ecx, eax
call fcn.10026dc0
mov edi, eax
jmp 0x1002d0cf
xor edi, edi
mov dword [ebp - 4], 0xffffffff
mov dword [0x1029671c], edi
push dword [edi + 0x2f0]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1002d103
push 0x15a
push str.E:GitWorkingCodeScreenshot_PM_screencaptureThirdParty_soui_souiincludecore_SNativeWnd.h
push str.::IsWindow_m_hWnd_
call fcn.100b2275
add esp, 0xc
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x110
push dword [edi + 0x2f0]
call ebx
mov eax, dword [0x1029671c]
test eax, eax
jne 0x1002d155
push 0x45c
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x1002d147
mov ecx, eax
call fcn.10026dc0
jmp 0x1002d149
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x1029671c], eax
lea ecx, [eax + 0x2e4]
mov eax, dword [ecx]
push 0
call dword [eax + 0xc]
mov eax, dword [0x10296718]
test eax, eax
jne 0x1002d19d
push 0x468
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x1002d18f
mov ecx, eax
call fcn.10034640
jmp 0x1002d191
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x10296718], eax
push 0
push 0
push 0
push 0
push 0x180
push 0x82000000
push dword [esi + 4]
mov ecx, eax
call fcn.1005ed72
mov edi, dword [0x10296718]
test edi, edi
jne 0x1002d1f8
push 0x468
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x1002d1e9
mov ecx, eax
call fcn.10034640
mov edi, eax
jmp 0x1002d1eb
xor edi, edi
mov dword [ebp - 4], 0xffffffff
mov dword [0x10296718], edi
push dword [edi + 0x2f0]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1002d21f
push 0x15a
push str.E:GitWorkingCodeScreenshot_PM_screencaptureThirdParty_soui_souiincludecore_SNativeWnd.h
push str.::IsWindow_m_hWnd_
call fcn.100b2275
add esp, 0xc
push 0
push 0
push 0x110
push dword [edi + 0x2f0]
call ebx
mov eax, dword [0x10296718]
test eax, eax
jne 0x1002d26b
push 0x468
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 5
test eax, eax
je 0x1002d25d
mov ecx, eax
call fcn.10034640
jmp 0x1002d25f
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x10296718], eax
lea ecx, [eax + 0x2e4]
mov eax, dword [ecx]
push 0
call dword [eax + 0xc]
mov eax, dword [0x10296720]
test eax, eax
jne 0x1002d2b3
push 0x470
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x1002d2a5
mov ecx, eax
call fcn.10033440
jmp 0x1002d2a7
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x10296720], eax
push 0
push 0
push 0
push 0
push 0x180
push 0x82000000
push dword [esi + 4]
mov ecx, eax
call fcn.1005ed72
mov edi, dword [0x10296720]
test edi, edi
jne 0x1002d30e
push 0x470
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 7
test eax, eax
je 0x1002d2ff
mov ecx, eax
call fcn.10033440
mov edi, eax
jmp 0x1002d301
xor edi, edi
mov dword [ebp - 4], 0xffffffff
mov dword [0x10296720], edi
push dword [edi + 0x2f0]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1002d335
push 0x15a
push str.E:GitWorkingCodeScreenshot_PM_screencaptureThirdParty_soui_souiincludecore_SNativeWnd.h
push str.::IsWindow_m_hWnd_
call fcn.100b2275
add esp, 0xc
push 0
push 0
push 0x110
push dword [edi + 0x2f0]
call ebx
mov eax, dword [0x10296720]
test eax, eax
jne 0x1002d381
push 0x470
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 8
test eax, eax
je 0x1002d373
mov ecx, eax
call fcn.10033440
jmp 0x1002d375
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x10296720], eax
lea ecx, [eax + 0x2e4]
mov eax, dword [ecx]
push 0
call dword [eax + 0xc]
mov eax, dword [0x1029671c]
test eax, eax
jne 0x1002d3c9
push 0x45c
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 9
test eax, eax
je 0x1002d3bb
mov ecx, eax
call fcn.10026dc0
jmp 0x1002d3bd
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x1029671c], eax
lea edi, [esi + 0x54]
mov dword [eax + 0x450], edi
neg edi
mov dword [eax + 0x454], esi
lea eax, [esi + 0x58]
sbb edi, edi
and edi, eax
mov eax, dword [0x10296718]
test eax, eax
jne 0x1002d415
push 0x468
call fcn.10043366
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x1002d40e
mov ecx, eax
call fcn.10034640
jmp 0x1002d410
xor eax, eax
mov dword [0x10296718], eax
mov dword [eax + 0x444], edi
movups xmm0, xmmword [esi + 0x1b4]
push dword [esi + 4]
movups xmmword [esi + 0xc4], xmm0
call dword [sym.imp.USER32.dll_SetActiveWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4