Function at 0x1011cc10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10204c72
mov eax, dword fs:[0]
push eax
sub esp, 0x100
mov eax, dword [0x10293044]
xor eax, esp
mov dword [esp + 0xf8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10293044]
xor eax, esp
push eax
lea eax, [esp + 0x114]
mov dword fs:[0], eax
mov esi, dword [esp + 0x12c]
mov eax, dword [esp + 0x128]
mov ebp, dword [esp + 0x124]
mov dword [esp + 0x18], eax
call fcn.101a7380
mov edi, dword [eax + 0x24]
test edi, edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x8c], edi
je 0x1011cc83
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
call eax
mov dword [esp + 0x11c], 0
cmp dword [ebp + 0x8c], 0
je 0x1011dde6
test edi, edi
je 0x1011dde6
cmp esi, 0x27d8
je 0x1011dde6
call fcn.101a7380
mov ecx, dword [eax + 0x1c]
test ecx, ecx
mov dword [esp + 0x20], ecx
je 0x1011ddd9
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
mov dword [esp + 0x14], eax
je 0x1011ddd9
lea ecx, [esp + 0xac]
push ecx
call fcn.1006bd00
mov byte [esp + 0x11c], 1
lea edx, [esp + 0x84]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [esp + 0x3c]
push eax
xor ecx, ecx
call fcn.101aa7f0
mov byte [esp + 0x11c], 2
mov eax, esi
cdq
lea ecx, [esp + 0x44]
lea esi, [ebp + 0xb4]
push ecx
lea ebx, [esp + 0x50]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
mov dword [esp + 0x44], esi
call fcn.10122f10
mov eax, dword [esp + 0x44]
test eax, eax
mov ebx, dword [esi + 4]
je 0x1011cd47
cmp eax, esi
je 0x1011cd4d
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
cmp dword [esp + 0x48], ebx
je 0x1011dda7
lea esi, [esp + 0x44]
call fcn.101231b0
mov edi, eax
add edi, 8
lea esi, [esp + 0xac]
call fcn.100b69c0
lea esi, [esp + 0x44]
call fcn.101231b0
cmp dword [eax + 8], 1
push ecx
mov dword [esp + 0x20], esp
mov eax, esp
jne 0x1011cd94
lea edx, [esp + 0x40]
mov dword [eax], 0x2a0
push edx
jmp 0x1011cd9f
mov dword [eax], 0x2a1
lea eax, [esp + 0x40]
push eax
call fcn.10050240
mov eax, dword [esp + 0x3c]
xor ebx, ebx
cmp eax, ebx
jne 0x1011cdf5
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov eax, dword [esp + 0x14]
mov edx, dword [edx + 0x14]
push eax
call edx
mov byte [esp + 0x11c], 1
call fcn.101aa830
mov byte [esp + 0x11c], bl
lea eax, [esp + 0xac]
push eax
call fcn.10007e40
mov dword [esp + 0x11c], 0xffffffff
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
jmp 0x1011ddf9
mov dword [esp + 0x5c], eax
mov byte [esp + 0x11c], 3
push ebx
lea esi, [esp + 0x20]
lea ecx, [esp + 0x40]
call fcn.10050290
mov byte [esp + 0x11c], 4
mov eax, dword [eax]
lea ecx, [esp + 0x80]
push ecx
mov ecx, eax
call fcn.101aa7f0
mov byte [esp + 0x11c], 6
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x11c], 7
mov esi, dword [esp + 0x80]
push 1
lea edx, [esp + 0x64]
push edx
push esi
call fcn.101a9fd0
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
call fcn.100f1f50
add esp, 4
test al, al
jne 0x1011ce7a
push 1
push 0x9c9c
push esi
call dword [sym.imp.USER32.dll_EnableMenuItem]
call fcn.10191fb0
mov edi, eax
call fcn.10192680
test al, al
je 0x1011ce98
push 1
push 0x9c9f
push esi
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov edi, dword [esp + 0x14]
mov edx, dword [edi]
mov eax, dword [edx]
push esi
mov ecx, edi
call eax
test al, al
jne 0x1011cf14
lea esi, [esp + 0x3c]
call fcn.10050270
lea esi, [esp + 0x60]
call fcn.100ec840
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
push edi
call eax
mov byte [esp + 0x11c], 6
call fcn.100a0ee0
mov byte [esp + 0x11c], 3
call fcn.101aa830
mov byte [esp + 0x11c], 2
lea esi, [esp + 0x5c]
call fcn.10112490
mov byte [esp + 0x11c], 1
call fcn.101aa830
mov byte [esp + 0x11c], 0
lea ecx, [esp + 0xac]
push ecx
jmp 0x1011cdda
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov esi, dword [eax]
cmp esi, ebx
je 0x1011cfe0
mov eax, dword [esp + 0x12c]
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x264]
lea edx, [esp + 0x14]
push edx
push eax
push esi
mov dword [esp + 0x20], ebx
call ecx
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x1011cfe0
mov edx, dword [eax]
mov edx, dword [edx + 0x3c]
lea ecx, [esp + 0x90]
push ecx
push eax
call edx
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x98]
mov eax, dword [esp + 0x90]
mov ebx, dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [esp + 0x74], ecx
lea ecx, [esp + 0x70]
mov dword [esp + 0x78], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x9c]
push ecx
push edx
mov dword [esp + 0x84], eax
call ebx
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x78]
push eax
push ecx
call ebx
mov eax, esi
call fcn.10017b30
mov esi, eax
test esi, esi
je 0x1011cfde
call fcn.1001a870
mov ebx, eax
mov eax, esi
call fcn.1001a830
push ebx
push eax
lea edx, [esp + 0x78]
push edx
call dword [sym.imp.USER32.dll_OffsetRect]
xor ebx, ebx
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov eax, dword [edi]
push ebx
push 5
push ecx
mov ecx, dword [esp + 0x24]
push edx
mov edx, dword [eax + 0x10]
push ecx
mov ecx, edi
call edx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
push edi
call edx
lea esi, [esp + 0x3c]
call fcn.10050270
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp eax, ebx
je 0x1011d06a
mov ecx, dword [eax]
lea edx, [esp + 0x20]
push edx
mov edx, dword [esp + 0x130]
push edx
push eax
mov eax, dword [ecx + 0x264]
mov dword [esp + 0x2c], ebx
call eax
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x1011d06a
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
cmp dword [esp + 0x14], 2
jne 0x1011d06a
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x64]
push 0xffffffffffffffff
push ebx
push eax
call edx
xor edi, edi
lea esp, [esp]
mov ecx, dword [esp + 0x64]
cmp ecx, ebx
je 0x1011d0a7
mov eax, dword [esp + 0x68]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011d0a7
lea esi, [esp + 0x60]
call fcn.100ead40
cmp dword [eax], ebx
je 0x1011d0a2
call fcn.100ead40
mov esi, dword [eax]
cmp esi, ebx
je 0x1011d0a2
call fcn.10022130
add edi, 1
jmp 0x1011d070
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jne 0x1011d11d
mov byte [esp + 0x11c], 6
lea esi, [esp + 0x60]
call fcn.100a0ee0
mov byte [esp + 0x11c], 3
call fcn.101aa830
mov byte [esp + 0x11c], 2
lea esi, [esp + 0x5c]
call fcn.10112490
mov byte [esp + 0x11c], 1
call fcn.101aa830
mov byte [esp + 0x11c], 0
lea eax, [esp + 0xac]
push eax
call fcn.10007e40
mov dword [esp + 0x11c], 0xffffffff
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x1011de03
add eax, 0xffff6373
cmp eax, 0x2d
ja case.0x1011d132.40088
movzx ecx, byte [eax + 0x1011de74]
jmp dword [ecx*4 + 0x1011de30]
mov ebp, dword [ebp + 0x8c]
cmp ebp, ebx
push ecx
mov eax, esp
mov dword [esp + 0x44], esp
mov dword [eax], ebp
je 0x1011d155
mov edx, dword [ebp]
mov eax, dword [edx]
mov ecx, ebp
call eax
mov byte [esp + 0x120], 8
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x34]
call eax
cmp eax, ebx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
mov dword [ecx], eax
je 0x1011d17d
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx]
call eax
mov byte [esp + 0x124], 9
mov byte [esp + 0x124], 7
mov edx, dword [esp + 0xb8]
call fcn.100ee630
add esp, 8
jmp case.0x1011d132.40088
mov dword [esp + 0x20], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], bx
mov byte [esp + 0x11c], 0xa
lea ecx, [esp + 0x90]
mov edx, ebp
call fcn.1011fed0
sub esp, 0x1c
lea ecx, [esp + 0xac]
mov esi, esp
mov dword [esp + 0x5c], esp
push ecx
call fcn.100076d0
mov byte [esp + 0x138], 0xb
mov ecx, dword [esp + 0xcc]
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x40]
push eax
push ecx
push ecx
mov ecx, dword [ebp + 0x104]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0x48], esp
mov dword [eax], ecx
je 0x1011d222
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
mov byte [esp + 0x148], 0xc
push ecx
mov ecx, dword [ebp + 0xa4]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0x7c], esp
mov dword [eax], ecx
je 0x1011d243
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
mov byte [esp + 0x14c], 0xd
push ecx
mov ecx, dword [ebp + 0x9c]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0x78], esp
mov dword [eax], ecx
je 0x1011d264
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
mov byte [esp + 0x150], 0xe
mov ecx, dword [esp + 0x4c]
push ecx
mov byte [esp + 0x154], 0xa
call fcn.100ee890
add esp, 0x38
test al, al
je 0x1011d32c
cmp dword [ebp + 0x104], ebx
je 0x1011d32c
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x11c], 0xf
mov ebp, dword [ebp + 0x104]
mov edx, dword [ebp]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x24]
push eax
mov ecx, ebp
call edx
xor edi, edi
mov ecx, dword [esp + 0x28]
cmp ecx, ebx
je 0x1011d31b
mov eax, dword [esp + 0x2c]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011d31b
lea esi, [esp + 0x24]
call fcn.100ead40
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax]
je 0x1011d316
push 8
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
mov edx, dword [esp + 0x18]
mov ebp, eax
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [ebp], edx
mov dword [ebp + 4], eax
call fcn.100ead40
mov ecx, dword [eax]
push ebp
push 7
push 0x813
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
add edi, 1
jmp 0x1011d2c0
mov byte [esp + 0x11c], 0xa
lea esi, [esp + 0x24]
call fcn.100a0ee0
mov byte [esp + 0x11c], 7
lea ecx, [esp + 0x90]
call fcn.10001dd0
jmp case.0x1011d132.40088
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x11c], 0x10
sub esp, 0x1c
mov edx, 0x1022fcf8
mov eax, esp
mov dword [esp + 0x60], esp
call fcn.10007690
mov byte [esp + 0x138], 0x11
mov edx, dword [esp + 0xcc]
push edx
push ecx
mov ecx, dword [ebp + 0x104]
cmp ecx, ebx
mov eax, esp
lea esi, [esp + 0x40]
lea edi, [esp + 0xb4]
mov dword [esp + 0x70], esp
mov dword [eax], ecx
je 0x1011d3a9
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov byte [esp + 0x140], 0x12
push ecx
mov ecx, dword [ebp + 0xa4]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0x68], esp
mov dword [eax], ecx
je 0x1011d3ca
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov byte [esp + 0x144], 0x13
push ecx
mov ecx, dword [ebp + 0x9c]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0x48], esp
mov dword [eax], ecx
je 0x1011d3eb
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov byte [esp + 0x148], 0x14
mov eax, dword [esp + 0x44]
push eax
mov byte [esp + 0x14c], 0x10
mov edx, esi
mov ecx, edi
call fcn.100ef4f0
add esp, 0x30
test al, al
je 0x1011d4a3
cmp dword [ebp + 0x104], ebx
je 0x1011d4a3
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x11c], 0x15
mov ebp, dword [ebp + 0x104]
mov edx, dword [ebp]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x24]
push eax
mov ecx, ebp
call edx
mov ebp, dword [sym.imp.USER32.dll_PostMessageW]
xor edi, edi
mov ecx, dword [esp + 0x28]
cmp ecx, ebx
je 0x1011d492
mov eax, dword [esp + 0x2c]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011d492
lea esi, [esp + 0x24]
call fcn.100ead40
mov ecx, dword [esp + 0x18]
cmp ecx, dword [eax]
je 0x1011d48d
call fcn.100ead40
mov edx, dword [esp + 0x1c]
mov eax, dword [eax]
push edx
push 8
push 0x813
push eax
call ebp
add edi, 1
jmp 0x1011d451
mov byte [esp + 0x11c], 0x10
lea esi, [esp + 0x24]
call fcn.100a0ee0
mov byte [esp + 0x11c], 7
lea esi, [esp + 0x90]
call fcn.100a0ee0
jmp case.0x1011d132.40088
mov edx, dword [esp + 0xb0]
lea ecx, [esp + 0x14]
push ecx
push edx
push ecx
mov ecx, dword [ebp + 0x94]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0x20], ebx
mov dword [esp + 0x50], esp
mov dword [eax], ecx
je 0x1011d4e6
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov byte [esp + 0x128], 0x16
mov eax, dword [esp + 0x24]
push eax
mov byte [esp + 0x12c], 7
call fcn.100efcd0
add esp, 0x10
test al, al
je case.0x1011d132.40088
cmp dword [ebp + 0x104], ebx
je case.0x1011d132.40088
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x11c], 0x17
mov ebp, dword [ebp + 0x104]
mov edx, dword [ebp]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x90]
push eax
mov ecx, ebp
call edx
xor edi, edi
mov edi, edi
mov ecx, dword [esp + 0x94]
cmp ecx, ebx
je 0x1011dd12
mov eax, dword [esp + 0x98]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011dd12
push 8
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [esp + 0x18]
mov ebp, eax
mov eax, dword [esp + 0xb4]
add esp, 4
lea esi, [esp + 0x90]
mov dword [ebp], eax
mov dword [ebp + 4], ecx
call fcn.100ead40
mov edx, dword [eax]
push ebp
push 1
push 0x813
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
add edi, 1
jmp 0x1011d550
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x18]
push eax
push 1
push 0x80e
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp case.0x1011d132.40088
cmp dword [ebp + 0x104], ebx
je case.0x1011d132.40088
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x11c], 0x18
mov ebp, dword [ebp + 0x104]
mov edx, dword [ebp]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x90]
push eax
mov ecx, ebp
call edx
mov ebx, dword [sym.imp.USER32.dll_PostMessageW]
xor edi, edi
lea ebx, [ebx]
mov ecx, dword [esp + 0x94]
test ecx, ecx
je 0x1011dd12
mov eax, dword [esp + 0x98]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011dd12
push 0xc
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
mov ebp, eax
mov eax, dword [esp + 0xb4]
add esp, 4
lea esi, [esp + 0x90]
mov dword [ebp + 4], eax
mov dword [ebp + 8], 0
call fcn.100ead40
mov ecx, dword [eax]
push ebp
push 2
push 0x80e
push ecx
call ebx
add edi, 1
jmp 0x1011d620
cmp dword [ebp + 0x104], ebx
je case.0x1011d132.40088
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x11c], 0x19
mov ebp, dword [ebp + 0x104]
mov edx, dword [ebp]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x90]
push eax
mov ecx, ebp
call edx
xor edi, edi
mov ecx, dword [esp + 0x94]
cmp ecx, ebx
je 0x1011dd12
mov eax, dword [esp + 0x98]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011dd12
push 0xc
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
mov ebp, eax
mov eax, dword [esp + 0xb4]
add esp, 4
lea esi, [esp + 0x90]
mov dword [ebp + 4], eax
mov dword [ebp + 8], 1
call fcn.100ead40
mov ecx, dword [eax]
push ebp
push 2
push 0x80e
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
add edi, 1
jmp 0x1011d6c1
cmp dword [ebp + 0x104], ebx
je case.0x1011d132.40088
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x11c], 0x1a
mov ebp, dword [ebp + 0x104]
mov edx, dword [ebp]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x90]
push eax
mov ecx, ebp
call edx
xor edi, edi
jmp 0x1011d770
mov ecx, dword [esp + 0x94]
cmp ecx, ebx
je 0x1011dd12
mov eax, dword [esp + 0x98]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011dd12
push 0xc
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
mov ebp, eax
mov eax, dword [esp + 0xb4]
add esp, 4
lea esi, [esp + 0x90]
mov dword [ebp + 4], eax
mov dword [ebp + 8], 2
call fcn.100ead40
mov ecx, dword [eax]
push ebp
push 2
push 0x80e
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
add edi, 1
jmp 0x1011d770
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
push ebx
push edx
push eax
lea edx, [esp + 0xb8]
mov ecx, ebp
call fcn.1011c240
test al, al
je case.0x1011d132.40088
cmp dword [ebp + 0x104], ebx
je case.0x1011d132.40088
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov byte [esp + 0x11c], 0x1b
mov ecx, dword [ebp + 0x104]
mov edx, dword [ecx]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x4c]
push eax
call edx
xor edi, edi
jmp 0x1011d830
mov ecx, dword [esp + 0x50]
cmp ecx, ebx
je 0x1011d8e0
mov eax, dword [esp + 0x54]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011d8e0
lea esi, [esp + 0x4c]
call fcn.100ead40
mov ecx, dword [esp + 0xb0]
mov edx, dword [eax]
push ecx
push 5
push 0x813
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
call fcn.100ead40
mov ecx, dword [ebp + 0xf0]
cmp ecx, dword [eax]
je 0x1011d8d8
push 0x10
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x44], eax
mov byte [esp + 0x11c], 0x1c
cmp eax, ebx
je 0x1011d8a5
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov ebx, eax
jmp 0x1011d8a7
xor ebx, ebx
mov byte [esp + 0x11c], 0x1b
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
lea esi, [esp + 0x4c]
mov dword [ebx], edx
mov dword [ebx + 4], eax
call fcn.100ead40
mov ecx, dword [eax]
push ebx
push 0x11
push 0x811
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
xor ebx, ebx
add edi, 1
jmp 0x1011d830
mov byte [esp + 0x11c], 7
lea esi, [esp + 0x4c]
call fcn.100a0ee0
jmp case.0x1011d132.40088
mov edx, dword [esp + 0xb0]
mov eax, dword [esp + 0x18]
push edx
push ebx
push eax
call fcn.100f06e0
add esp, 0xc
jmp case.0x1011d132.40088
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x18]
push ecx
push 1
push edx
call fcn.100f06e0
add esp, 0xc
jmp case.0x1011d132.40088
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push 1
lea eax, [esp + 0xb0]
push eax
push ecx
push edx
push ebp
call fcn.1011be80
test al, al
je case.0x1011d132.40088
cmp dword [ebp + 0x104], ebx
je case.0x1011d132.40088
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x11c], 0x1d
mov ecx, dword [ebp + 0x104]
mov eax, dword [ecx]
mov eax, dword [eax + 0x4c]
lea edx, [esp + 0x24]
push edx
call eax
mov ebx, dword [sym.imp.USER32.dll_PostMessageW]
xor edi, edi
lea esp, [esp]
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x1011d9ef
mov eax, dword [esp + 0x2c]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011d9ef
lea esi, [esp + 0x24]
call fcn.100ead40
mov ecx, dword [esp + 0xb0]
mov edx, dword [eax]
push ecx
push 3
push 0x813
push edx
call ebx
call fcn.100ead40
mov ecx, dword [ebp + 0xf0]
cmp ecx, dword [eax]
je 0x1011d9ea
call fcn.100ead40
mov edx, dword [esp + 0x12c]
mov eax, dword [eax]
push edx
push 0x12
push 0x811
push eax
call ebx
add edi, 1
jmp 0x1011d990
mov byte [esp + 0x11c], 7
lea esi, [esp + 0x24]
call fcn.100a0ee0
jmp case.0x1011d132.40088
mov ebp, dword [ebp + 0x8c]
cmp ebp, ebx
push ecx
mov eax, esp
mov dword [esp + 0x48], esp
mov dword [eax], ebp
je 0x1011da21
mov edx, dword [ebp]
mov eax, dword [edx]
mov ecx, ebp
call eax
mov byte [esp + 0x120], 0x1e
lea ecx, [esp + 0xb0]
push ecx
mov byte [esp + 0x124], 7
call fcn.100f2330
add esp, 8
jmp case.0x1011d132.40088
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], bx
mov byte [esp + 0x11c], 0x1f
lea ecx, [esp + 0x90]
mov edx, ebp
call fcn.1011fed0
sub esp, 0x60
mov edx, esp
mov dword [esp + 0xa4], esp
push edx
lea edi, [esp + 0x110]
call fcn.100ed510
mov byte [esp + 0x17c], 0x20
sub esp, 0x1c
lea eax, [esp + 0x10c]
mov esi, esp
mov dword [esp + 0xc8], esp
push eax
call fcn.100076d0
mov byte [esp + 0x198], 0x21
push ecx
mov ecx, dword [ebp + 0x104]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0xc0], esp
mov dword [eax], ecx
je 0x1011dad4
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
mov byte [esp + 0x19c], 0x22
push ecx
mov ecx, dword [ebp + 0x94]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0xa0], esp
mov dword [eax], ecx
je 0x1011daf8
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
mov byte [esp + 0x1a0], 0x23
push ecx
mov ecx, dword [ebp + 0x9c]
cmp ecx, ebx
mov eax, esp
mov dword [esp + 0x9c], esp
mov dword [eax], ecx
je 0x1011db1c
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
mov byte [esp + 0x1a4], 0x24
mov ecx, dword [esp + 0xa0]
push ecx
mov byte [esp + 0x1a8], 0x1f
call fcn.100f23d0
add esp, 0x8c
test al, al
je 0x1011db7b
mov edx, dword [ebp + 0xf0]
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
push ebx
push ebx
push 0x811
push edx
call esi
mov eax, dword [ebp + 0xf0]
push ebx
push 2
push 0x813
push eax
call esi
mov ecx, dword [ebp + 0xf0]
push ebx
push 0xb
push 0x815
push ecx
call esi
mov byte [esp + 0x11c], 7
lea ecx, [esp + 0x90]
call fcn.10001dd0
jmp case.0x1011d132.40088
cmp dword [ebp + 0x104], ebx
je case.0x1011d132.40088
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x11c], 0x25
mov ecx, dword [ebp + 0x104]
mov edx, dword [ecx]
mov edx, dword [edx + 0x4c]
lea eax, [esp + 0x90]
push eax
call edx
mov eax, dword [esp + 0xb0]
mov ecx, dword [ebp + 0xf0]
push eax
push 3
push 0x80e
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
mov eax, dword [edx + 0x34]
call eax
mov esi, eax
cmp esi, ebx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x44], esi
je 0x1011dc0f
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
mov byte [esp + 0x11c], 0x26
cmp esi, ebx
je 0x1011dc34
mov ecx, dword [esp + 0xb0]
mov edx, dword [esi]
mov edx, dword [edx + 0x30]
lea eax, [esp + 0xac]
push eax
push ecx
mov ecx, esi
call edx
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x50], ecx
push edx
lea ecx, [esp + 0x50]
mov dword [esp + 0x50], eax
call fcn.10122af0
lea edi, [esp + 0xac]
mov esi, eax
call fcn.100b69c0
mov ebx, dword [sym.imp.USER32.dll_PostMessageW]
xor edi, edi
jmp 0x1011dc70
mov ecx, dword [esp + 0x94]
xor ebp, ebp
cmp ecx, ebp
je 0x1011dcfb
mov eax, dword [esp + 0x98]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x1011dcfb
push 0x10
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x4c], eax
mov byte [esp + 0x11c], 0x27
cmp eax, ebp
je 0x1011dcb1
mov dword [eax], ebp
mov dword [eax + 4], ebp
mov dword [eax + 8], ebp
mov ebp, eax
mov byte [esp + 0x11c], 0x26
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
lea esi, [esp + 0x90]
mov dword [ebp], eax
mov dword [ebp + 4], ecx
call fcn.100ead40
mov edx, dword [eax]
push ebp
push 0x11
push 0x811
push edx
call ebx
call fcn.100ead40
mov eax, dword [eax]
push 0
push 2
push 0x813
push eax
call ebx
add edi, 1
jmp 0x1011dc70
mov byte [esp + 0x11c], 0x25
mov ecx, dword [esp + 0x1c]
cmp ecx, ebp
je 0x1011dd12
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x11c], 7
lea esi, [esp + 0x90]
call fcn.100a0ee0
jmp case.0x1011d132.40088
mov ecx, dword [esp + 0x18]
push ecx
lea ecx, [esp + 0xbc]
call fcn.101cbd20
add esp, 4
mov byte [esp + 0x11c], 6
lea esi, [esp + 0x60]
call fcn.100a0ee0
mov byte [esp + 0x11c], 3
call fcn.101aa830
mov byte [esp + 0x11c], 2
lea esi, [esp + 0x5c]
call fcn.10112490
mov byte [esp + 0x11c], 1
call fcn.101aa830
mov byte [esp + 0x11c], 0
lea edx, [esp + 0xac]
push edx
call fcn.10007e40
mov dword [esp + 0x11c], 0xffffffff
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
xor eax, eax
jmp 0x1011de03
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov edx, dword [esp + 0x14]
mov eax, dword [eax + 0x14]
push edx
call eax
mov byte [esp + 0x11c], 1
call fcn.101aa830
mov byte [esp + 0x11c], 0
lea ecx, [esp + 0xac]
push ecx
call fcn.10007e40
mov dword [esp + 0x11c], 0xffffffff
jmp 0x1011ddf5
mov dword [esp + 0x11c], 0xffffffff
test edi, edi
je 0x1011ddfe
mov edx, dword [edi]
mov ecx, edi
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0x114]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xf8]
xor ecx, esp
call fcn.101d19cc
add esp, 0x10c
ret 0xc