Function at 0x1000f0a0
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x23c
push ebx
mov ebx, dword [esp + 0x244]
push ebp
push esi
test ebx, ebx
push edi
mov ebp, ecx
jne 0x1000f0c6
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x23c
ret 4
or edi, 0xffffffff
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x18], eax
xor esi, esi
mov ecx, 0x101fa288
cmp dword [ecx], 0
je 0x1000f102
mov eax, dword [ecx + 0xc]
mov edx, dword [esp + 0x18]
add eax, 0x2710
cmp eax, edx
jae 0x1000f102
mov eax, ecx
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 0xc]
mov eax, dword [esp + 0x1c]
cmp edx, eax
jae 0x1000f113
mov dword [esp + 0x1c], edx
mov edi, esi
mov edx, dword [ecx]
test edx, edx
je 0x1000f121
cmp edx, ebx
je 0x1000f1c0
add ecx, 0x10
inc esi
cmp ecx, 0x101fa2d8
jb 0x1000f0de
mov ecx, dword [esp + 0x18]
xor eax, eax
shl edi, 4
mov esi, edi
mov dword [esp + 0x28], esi
mov dword [esi + 0x101fa288], ebx
mov dword [esi + 0x101fa28c], eax
mov dword [esi + 0x101fa290], eax
mov dword [esi + 0x101fa294], ecx
call fcn.100c50f0
test eax, eax
je 0x1000f221
mov edx, dword [eax]
lea ecx, [esp + 0x10]
push ecx
mov ecx, eax
mov dword [esp + 0x14], ebx
call dword [edx + 0x20]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov eax, dword [0x10274670]
mov dword [esi + 0x101fa28c], ecx
test eax, eax
mov dword [esi + 0x101fa290], ebx
je 0x1000f1ab
push ecx
push ebx
push str.CheckIsChatWnd____d____08x_
push str.IMCD
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
mov ecx, dword [esp + 0x28]
add esp, 0x18
mov eax, ebx
pop edi
neg eax
sbb eax, eax
pop esi
pop ebp
and eax, ecx
pop ebx
add esp, 0x23c
ret 4
mov eax, dword [0x10274670]
test eax, eax
je 0x1000f1fd
mov eax, esi
shl eax, 4
mov ecx, dword [eax + 0x101fa290]
mov edx, dword [eax + 0x101fa28c]
mov eax, dword [eax + 0x101fa288]
push ecx
push edx
push eax
push ebx
push str.CheckIsChatWnd_X___08x____08x____08x____d_
push str.IMCD
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x20
shl esi, 4
mov eax, dword [esi + 0x101fa290]
test eax, eax
je 0x1000f0b7
mov eax, dword [esi + 0x101fa28c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x23c
ret 4
mov eax, dword [ebp + 0x64]
xor esi, esi
cmp eax, 0x1000
mov dword [esp + 0x24], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], esi
ja 0x1000f5eb
je 0x1000f5da
cmp eax, 0x15
ja 0x1000f4dd
je 0x1000f4c6
dec eax
cmp eax, 0x13
ja case.0x1000f270.9
xor edx, edx
mov dl, byte [eax + 0x1000fc7c]
jmp dword [edx*4 + 0x1000fc58]
push ebx
mov ecx, ebp
call fcn.100aa0f0
cmp eax, esi
mov dword [esp + 0x14], eax
je case.0x1000f270.9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x37c]
call fcn.100626f0
jmp 0x1000f93e
lea edi, [ebp + 0x6c]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
mov eax, dword [ebp + 0x78]
test eax, eax
jle case.0x1000f270.9
mov eax, dword [ebp + 0x70]
mov eax, dword [eax + 8]
test eax, eax
je case.0x1000f270.9
mov edx, dword [eax + 0x20]
mov ecx, dword [eax + 0x24]
cmp edx, 0x10005
jne 0x1000f30e
cmp ecx, 1
jne 0x1000f30e
push ebx
mov ecx, edi
call fcn.100627d0
mov esi, eax
mov eax, dword [0x10274670]
test eax, eax
mov dword [esp + 0x24], 1
je case.0x1000f270.9
push esi
push ebx
push str.IsChatWnd_1__08x__x
jmp 0x1000f798
cmp edx, 0x10006
jne 0x1000f33b
cmp ecx, 1
jne 0x1000f33b
mov dword [esp + 0x18], ecx
mov ecx, dword [0x10274670]
test ecx, ecx
mov esi, eax
je case.0x1000f270.9
push eax
push ebx
push str.IsChatWnd_2__08x__x
jmp 0x1000f798
and edx, 0x10000
and ecx, 0x11
cmp edx, 0x10000
jne 0x1000f355
cmp ecx, 0x11
je 0x1000f781
push ebx
mov ecx, edi
call fcn.10062770
mov esi, eax
mov eax, dword [0x10274670]
test eax, eax
je case.0x1000f270.9
push esi
push ebx
push str.IsChatWnd_4__08x__x
jmp 0x1000f798
lea edi, [ebp + 0x88]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
mov eax, dword [ebp + 0x94]
test eax, eax
jle case.0x1000f270.9
mov ecx, dword [ebp + 0x8c]
mov eax, dword [ecx + 8]
test eax, eax
je case.0x1000f270.9
mov edx, dword [eax + 0x20]
mov ecx, dword [eax + 0x24]
cmp edx, 0x10010
jne 0x1000f3d9
cmp ecx, 0x10
jne 0x1000f3d9
push ebx
mov ecx, edi
call fcn.100627d0
mov esi, eax
mov dword [esp + 0x2c], 1
jmp case.0x1000f270.9
cmp edx, 0x10020
jne 0x1000f893
cmp ecx, 0x10
jne 0x1000f893
mov esi, eax
mov dword [esp + 0x30], 1
jmp case.0x1000f270.9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0xc0]
call fcn.100626f0
jmp 0x1000f93e
lea edi, [ebp + 0xa4]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.10062770
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push eax
push ebx
mov ecx, edi
call fcn.100629a0
jmp 0x1000f93e
lea edi, [ebp + 0x398]
push ebx
mov ecx, edi
call fcn.10062650
push ebx
mov esi, eax
call fcn.1008e5c0
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
je case.0x1000f270.9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, edi
call fcn.100626f0
jmp 0x1000f93e
push ebx
mov ecx, ebp
call fcn.10079860
cmp eax, esi
mov dword [esp + 0x14], eax
je case.0x1000f270.9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x3b4]
call fcn.100626f0
jmp 0x1000f93e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x3ec]
call fcn.100626f0
jmp 0x1000f93e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x408]
call fcn.100626f0
jmp 0x1000f93e
cmp eax, 0x100
ja 0x1000f561
je 0x1000f556
sub eax, 0x20
je 0x1000f53f
sub eax, 0x20
je 0x1000f51e
sub eax, 0x40
jne case.0x1000f270.9
lea edi, [ebp + 0x114]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.10062770
jmp 0x1000f8bf
mov eax, dword [ebp + 0x440]
push ebx
lea edx, [eax*8]
sub edx, eax
lea ecx, [ebp + edx*4 + 0xdc]
call fcn.10062650
jmp 0x1000f93e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x424]
call fcn.100626f0
jmp 0x1000f93e
lea edi, [ebp + 0x130]
jmp 0x1000f881
cmp eax, 0x200
je 0x1000f5cf
cmp eax, 0x400
je 0x1000f585
cmp eax, 0x800
jne case.0x1000f270.9
lea edi, [ebp + 0x184]
jmp 0x1000f881
lea edi, [ebp + 0x168]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.10062770
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push eax
push ebx
mov ecx, edi
call fcn.100629a0
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.10062a90
jmp 0x1000f93e
lea edi, [ebp + 0x14c]
jmp 0x1000f881
push ebx
lea ecx, [ebp + 0x1a0]
call fcn.10062650
jmp 0x1000f93e
cmp eax, 0x800000
ja 0x1000f7b1
je 0x1000f72f
cmp eax, 0x20000
ja 0x1000f699
je 0x1000f686
cmp eax, 0x2000
je 0x1000f67b
cmp eax, 0x4000
je 0x1000f670
cmp eax, 0x8000
jne case.0x1000f270.9
lea edi, [ebp + 0x1f4]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.10062770
mov esi, eax
test esi, esi
jne case.0x1000f270.9
mov eax, dword [ebp + 0x200]
test eax, eax
jle case.0x1000f270.9
mov eax, dword [ebp + 0x1f8]
mov dword [esp + 0x20], 1
mov esi, dword [eax + 8]
jmp case.0x1000f270.9
lea edi, [ebp + 0x1d8]
jmp 0x1000f881
lea edi, [ebp + 0x1bc]
jmp 0x1000f881
lea edi, [ebp + 0x3d0]
push ebx
mov ecx, edi
call fcn.10062650
jmp 0x1000f8bf
cmp eax, 0x40000
je 0x1000f724
cmp eax, 0x100000
je 0x1000f6c1
cmp eax, 0x400000
jne case.0x1000f270.9
lea edi, [ebp + 0x280]
jmp 0x1000f881
lea edi, [ebp + 0x264]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
mov eax, dword [ebp + 0x270]
test eax, eax
jle case.0x1000f270.9
mov ecx, dword [ebp + 0x268]
mov eax, dword [ecx + 8]
test eax, eax
je case.0x1000f270.9
mov ecx, dword [eax + 0x20]
add eax, 0x20
cmp ecx, 0x10001
jne case.0x1000f270.9
cmp dword [eax + 4], 0x100000
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.100627d0
jmp 0x1000f93e
lea edi, [ebp + 0x22c]
jmp 0x1000f881
lea edi, [ebp + 0x6c]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
mov eax, dword [ebp + 0x78]
test eax, eax
jle case.0x1000f270.9
mov edx, dword [ebp + 0x70]
mov eax, dword [edx + 8]
test eax, eax
je case.0x1000f270.9
mov ecx, dword [eax + 0x20]
mov edx, dword [eax + 0x24]
and ecx, 0x10000
and edx, 0x21
cmp ecx, 0x10000
jne 0x1000f355
cmp edx, 0x21
jne 0x1000f355
mov ecx, dword [0x10274670]
mov esi, eax
test ecx, ecx
je case.0x1000f270.9
push eax
push ebx
push str.IsChatWnd_3__08x__x
push 0x101c1744
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x18
jmp case.0x1000f270.9
cmp eax, 0x10000000
ja 0x1000f8d5
je 0x1000f8b1
cmp eax, 0x1000000
je 0x1000f8a0
cmp eax, 0x2000000
je 0x1000f87b
cmp eax, 0x4000000
jne case.0x1000f270.9
lea edi, [ebp + 0x2f0]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.10062770
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.100627d0
mov esi, eax
test esi, esi
jne case.0x1000f270.9
mov ecx, 0x81
lea edi, [esp + 0x46]
mov word [esp + 0x44], ax
push 0x103
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x48]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetClassNameW]
lea ecx, [esp + 0x44]
push str.IMWindowClass
push ecx
call fcn.100ca4ff
add esp, 8
test eax, eax
jne case.0x1000f270.9
mov dword [esp + 0x14], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x2f0]
call fcn.100626f0
jmp 0x1000f93e
lea edi, [ebp + 0x2d4]
push ebx
mov ecx, edi
call fcn.10062650
mov esi, eax
test esi, esi
jne case.0x1000f270.9
push ebx
mov ecx, edi
call fcn.10062770
jmp 0x1000f93e
push ebx
lea ecx, [ebp + 0x2b8]
call fcn.10062650
jmp 0x1000f93e
lea edi, [ebp + 0x30c]
push ebx
mov ecx, edi
call fcn.100626b0
mov esi, eax
test esi, esi
jne case.0x1000f270.9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, edi
call fcn.100626f0
jmp 0x1000f93e
cmp eax, 0x20000000
je 0x1000f932
cmp eax, 0x40000000
je 0x1000f90e
cmp eax, 0x80000000
jne case.0x1000f270.9
push ebx
mov ecx, ebp
call fcn.100b7f60
cmp eax, esi
mov dword [esp + 0x14], eax
je case.0x1000f270.9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x360]
call fcn.100626f0
jmp 0x1000f93e
push ebx
mov ecx, ebp
call fcn.10037160
cmp eax, esi
mov dword [esp + 0x14], eax
je case.0x1000f270.9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x344]
call fcn.100626f0
jmp 0x1000f93e
push ebx
lea ecx, [ebp + 0x328]
call fcn.100626b0
mov esi, eax
mov eax, dword [0x10274670]
xor edi, edi
cmp eax, edi
je 0x1000f965
push esi
push str.CheckIsChatWnd_1___08x_
push str.IMCD
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp esi, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x10], edi
je 0x1000fc07
mov edi, dword [esp + 0x30]
test edi, edi
jne 0x1000f9a9
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x1000f9a9
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x1000f9a9
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x1000f9a9
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x1000f9a9
mov eax, dword [ebp + 0x64]
cmp eax, 0x100000
mov eax, ebx
jne 0x1000f9ac
mov eax, dword [esi + 8]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x10], eax
mov dword [edx + 0x101fa28c], eax
mov eax, dword [0x10274670]
test eax, eax
je 0x1000f9e0
mov eax, dword [ebp + 0x64]
push eax
push str.CheckIsChatWnd_2___08x_
push str.IMCD
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
mov eax, dword [ebp + 0x64]
cmp eax, 1
je 0x1000f9f4
cmp eax, 0x10
je 0x1000f9f4
cmp eax, 0x800000
jne 0x1000fa62
xor ecx, ecx
lea edx, [esp + 0x34]
mov dword [esp + 0x38], ecx
push edx
mov dword [esp + 0x40], ecx
push ebx
mov dword [esp + 0x3c], 0
mov dword [esp + 0x48], ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x38]
mov edx, eax
sub edx, ecx
cmp edx, 0xbe
jl 0x1000fb88
push 0xfffffffffffffff0
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongW]
test edi, edi
jne 0x1000fa62
cmp dword [ebp + 0x64], 1
je 0x1000fa62
test eax, 0x10000
je 0x1000fbb9
test eax, 0x40000
je 0x1000fbb9
test eax, 0x20000
je 0x1000fbb9
mov ebp, dword [ebp + 0x64]
cmp ebp, 0x8000
je 0x1000fbdd
cmp ebp, 0x100000
je 0x1000fbdd
cmp ebp, 1
je 0x1000fbdd
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x1000fbdd
test edi, edi
jne 0x1000fbdd
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x1000fbdd
cmp dword [0x101fa260], 0x80000
jae 0x1000fbdd
mov eax, dword [0x101fa268]
cmp ebp, 0x800
jne 0x1000face
cmp eax, 0x60000
jae 0x1000fbdd
cmp ebp, 0x14
je 0x1000fbdd
cmp ebp, 0x12
jne 0x1000fae7
cmp eax, 0x70000
jae 0x1000fbdd
cmp ebp, 0x1000000
je 0x1000fbdd
cmp ebp, 4
je 0x1000fbdd
cmp ebp, 0x800000
je 0x1000fbdd
cmp ebp, 0x20000
je 0x1000fbdd
cmp ebp, 8
je 0x1000fbdd
cmp ebp, 0x15
je 0x1000fbdd
cmp ebp, 0x20
je 0x1000fbdd
cmp ebp, 0x80
je 0x1000fbdd
cmp ebp, 0x10000000
jne 0x1000fb4e
cmp eax, 0x70000
jae 0x1000fbdd
mov eax, dword [0x10274670]
test eax, eax
je 0x1000fb78
mov eax, dword [esi + 0xc70]
push eax
push esi
push str.CheckIsChatWnd_4___08x____08x_
push str.IMCD
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x18
mov eax, dword [esi + 0xc70]
test eax, eax
je 0x1000fc07
jmp 0x1000fbff
mov edx, dword [0x10274670]
test edx, edx
je 0x1000fc07
mov edx, dword [esp + 0x34]
push eax
push ecx
mov ecx, dword [esp + 0x44]
push ecx
push edx
push str.IsChatWnd_4___d__d__d__d_
push 0x101c1744
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x20
jmp 0x1000fc07
mov eax, dword [0x10274670]
test eax, eax
je 0x1000fc07
push str.IsChatWnd_5
push 0x101c1744
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
jmp 0x1000fc07
mov eax, dword [0x10274670]
test eax, eax
je 0x1000fbff
push str.CheckIsChatWnd_3
push str.IMCD
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov dword [esp + 0x1c], 1
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov dword [eax + 0x101fa290], esi
mov eax, dword [0x10274670]
test eax, eax
je 0x1000fc3d
mov ecx, dword [esp + 0x10]
push ecx
push esi
push 0x101c15cc
push str.IMCD
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x18
mov ecx, dword [esp + 0x10]
mov eax, esi
neg eax
pop edi
pop esi
sbb eax, eax
pop ebp
and eax, ecx
pop ebx
add esp, 0x23c
ret 4