Function at 0x11d79640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x11fad238
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
mov ebx, dword [esp + 0x68]
push ebp
push esi
push edi
xor edi, edi
cmp ebx, edi
je 0x11d798fc
push ebx
call fcn.11e67d05
add esp, 4
test eax, eax
je 0x11d798fc
push 0x12119948
lea ecx, [esp + 0x18]
call fcn.11e7eae0
mov ecx, 0x12130390
mov dword [esp + 0x6c], edi
mov dword [esp + 0x20], 0x11fcabec
call fcn.11e141d0
mov esi, eax
mov dword [esp + 0x24], esi
cmp esi, edi
mov byte [esp + 0x6c], 1
je 0x11d79705
mov ecx, esi
call fcn.11cb5650
mov ecx, dword [esi + 0x134]
mov edx, dword [esi + 0x150]
mov ebp, dword [esi + 0x148]
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esi + 0x14c]
add edx, ecx
mov ecx, dword [esi + 0x144]
add edx, ebp
mov ebp, dword [esi + 0x140]
add edx, ecx
mov ecx, dword [esi + 0x13c]
add edx, ebp
mov ebp, dword [esi + 0x138]
add edx, ecx
lea ecx, [esp + 0x14]
add edx, ebp
lea eax, [eax + edx*2 + 0xe]
push eax
call fcn.11e7f500
jmp 0x11d79748
push 1
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x11fcb870
call fcn.11e7eae0
lea ecx, [esp + 0x48]
mov byte [esp + 0x78], 1
call fcn.11dfcbd0
lea ecx, [esp + 0x14]
mov byte [esp + 0x6c], 3
push ecx
lea ecx, [esp + 0x40]
call fcn.11dfd270
lea ecx, [esp + 0x3c]
mov byte [esp + 0x6c], 1
call fcn.11dfcc90
cmp esi, edi
mov byte [esp + 0x6c], 0
je 0x11d7975c
push 0x121303a0
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
mov edx, dword [esp + 0x14]
xor esi, esi
mov dword [esp + 0x1c], esi
cmp dword [edx - 8], edi
je 0x11d798bb
lea ecx, [esp + 0x2c]
call fcn.11e84ba0
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x2c]
push eax
push ecx
mov byte [esp + 0x74], 4
call fcn.11d6f710
push ebx
call fcn.11dbbda0
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x3c]
add esp, 0xc
cmp eax, edi
mov ebp, eax
jle 0x11d798a9
mov bl, 6
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x10]
lea eax, [edx + edi*4]
push eax
call fcn.11e7e880
lea ecx, [esp + 0x10]
mov byte [esp + 0x6c], 5
push ecx
lea ecx, [esp + 0x1c]
call fcn.11e7e880
push 0x7c
lea ecx, [esp + 0x14]
mov byte [esp + 0x70], bl
call fcn.11e80380
mov esi, eax
cmp esi, 0xffffffff
je 0x11d7980e
lea edx, [esp + 0x20]
push esi
push edx
lea ecx, [esp + 0x18]
call fcn.11e819c0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x70], 7
call fcn.11e7f410
lea ecx, [esp + 0x20]
mov byte [esp + 0x6c], bl
call fcn.11e7f280
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x74]
push eax
push ecx
push edx
call fcn.11d68a90
add esp, 0xc
test eax, eax
jne 0x11d79850
lea ecx, [esp + 0x18]
mov byte [esp + 0x6c], 5
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x6c], 4
call fcn.11e7f280
inc edi
cmp edi, ebp
jl 0x11d797a9
jmp 0x11d798a5
cmp esi, 0xffffffff
je 0x11d79881
inc esi
lea eax, [esp + 0x28]
push esi
push eax
lea ecx, [esp + 0x18]
call fcn.11e81570
mov ecx, dword [esp + 0x78]
push eax
mov byte [esp + 0x70], 8
call fcn.11e7f410
lea ecx, [esp + 0x28]
mov byte [esp + 0x6c], bl
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov dword [esp + 0x1c], 1
mov byte [esp + 0x6c], 5
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x6c], 4
call fcn.11e7f280
mov ebx, dword [esp + 0x74]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], 0
call fcn.11e84bb0
mov esi, dword [esp + 0x1c]
mov eax, dword [0x12133f80]
test eax, eax
je 0x11d798e7
mov ecx, dword [esp + 0x78]
mov eax, dword [0x12126854]
push esi
mov edx, dword [ecx]
push edx
push ebx
push eax
push str.__s__CSDConfig::IsSmartProcessMessageBox___lpProcPath__s___strExtraPath__s___bRet__d__n
push str.Sparate
push 4
call fcn.11ca5810
add esp, 0x1c
lea ecx, [esp + 0x14]
mov dword [esp + 0x6c], 0xffffffff
call fcn.11e7f280
mov eax, esi
jmp 0x11d798fe
xor eax, eax
mov ecx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x60
ret 8