Function at 0x401170
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54
mov eax, dword fs:[0x30]
mov ecx, str.GetProcAddress
push ebx
push esi
push edi
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
mov ebx, dword [eax + 0x10]
mov eax, dword [ebx + 0x3c]
mov eax, dword [eax + ebx + 0x78]
add eax, ebx
mov dword [esp + 0x10], eax
mov esi, dword [eax + 0x20]
mov edi, dword [eax + 0x24]
add esi, ebx
add edi, ebx
mov eax, dword [esi]
add eax, ebx
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4011d0
test dl, dl
je 0x4011cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4011d0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4011b0
xor eax, eax
jmp 0x4011d5
sbb eax, eax
or eax, 1
test eax, eax
je 0x401219
nop dword [eax]
mov eax, dword [esi + 4]
lea esi, [esi + 4]
add edi, 2
mov ecx, str.GetProcAddress
add eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401210
test dl, dl
je 0x40120c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401210
add eax, 2
add ecx, 2
test dl, dl
jne 0x4011f0
xor eax, eax
jmp 0x401215
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4011e0
mov eax, dword [esp + 0x10]
movzx ecx, word [edi]
push str.LoadLibraryA
push ebx
mov eax, dword [eax + 0x1c]
lea eax, [eax + ecx*4]
mov edi, dword [eax + ebx]
add edi, ebx
call edi
push str.GetStdHandle
push ebx
mov dword [0x403030], eax
call edi
push str.WriteConsoleA
push ebx
mov dword [0x403010], eax
call edi
push str.lstrlenA
push ebx
mov dword [0x403014], eax
call edi
push str.lstrcmp
push ebx
mov dword [0x403040], eax
call edi
push str.user32.dll
mov dword [0x403034], eax
call dword [0x403030]
mov esi, eax
push str.RegisterClassExA
push esi
call edi
push str.CreateWindowExA
push esi
mov dword [0x40301c], eax
call edi
push str.ShowWindow
push esi
mov dword [0x403008], eax
call edi
push str.UpdateWindow
push esi
mov dword [section..data], eax
call edi
push str.GetMessageA
push esi
mov dword [0x40300c], eax
call edi
push str.TranslateMessage
push esi
mov dword [0x40302c], eax
call edi
push str.DispatchMessageA
push esi
mov dword [0x40303c], eax
call edi
push str.UnregisterClassA
push esi
mov dword [0x403028], eax
call edi
push str.PostQuitMessage
push esi
mov dword [0x403004], eax
call edi
push str.DestroyWindow
push esi
mov dword [0x403038], eax
call edi
push str.SendMessageA
push esi
mov dword [0x403018], eax
call edi
push str.DefWindowProcA
push esi
mov dword [0x403020], eax
call edi
push 0xfffffffffffffff5
mov dword [0x403024], eax
call dword [0x403010]
mov esi, eax
push 0
lea eax, [esp + 0x14]
push eax
push str.Yoo__n
call dword [0x403040]
push eax
push str.Yoo__n
push esi
call dword [0x403014]
lea eax, [esp + 0x30]
mov dword [esp + 0x30], 0x30
xorps xmm0, xmm0
mov dword [esp + 0x38], 0x401000
push eax
mov dword [esp + 0x5c], str.CrackMePlesWindowClass
mov dword [esp + 0x38], 3
movups xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0x10
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], 0
call dword [0x40301c]
test ax, ax
jne 0x4013c9
push 0xfffffffffffffff5
call dword [0x403010]
mov esi, eax
lea eax, [esp + 0x10]
push 0
push eax
push str.Failed_to_register_class__n
call dword [0x403040]
push eax
push str.Failed_to_register_class__n
push esi
call dword [0x403014]
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
push dword [esp + 0x48]
push 0
push 0
push 0x96
push 0x12c
push 0x80000000
push 0x80000000
push 0xca0000
push str.Crack_me_
push dword [esp + 0x80]
push 0
call dword [0x403008]
mov esi, eax
test esi, esi
jne 0x40143b
push 0xfffffffffffffff5
call dword [0x403010]
mov esi, eax
lea eax, [esp + 0x10]
push 0
push eax
push str.Failed_to_create_window__n
call dword [0x403040]
push eax
push str.Failed_to_create_window__n
push esi
call dword [0x403014]
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0xa
push esi
call dword [section..data]
push esi
call dword [0x40300c]
push 0
push 0
push 0
lea eax, [esp + 0x20]
push eax
call dword [0x40302c]
test eax, eax
je 0x40148b
lea eax, [esp + 0x14]
push eax
call dword [0x40303c]
lea eax, [esp + 0x14]
push eax
call dword [0x403028]
push 0
push 0
push 0
lea eax, [esp + 0x20]
push eax
call dword [0x40302c]
test eax, eax
jne 0x401460
push dword [esp + 0x44]
push dword [esp + 0x5c]
call dword [0x403004]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret