Function at 0x11e4ef10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fbdd5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x478
push ebx
push ebp
push esi
push edi
mov edi, ecx
push 0xffffffffffffffdd
lea ecx, [esp + 0x4c]
call fcn.11e15fa0
xor esi, esi
push 0x12119948
lea ecx, [esp + 0x1c]
mov dword [esp + 0x494], esi
call fcn.11e797a0
mov eax, dword [esp + 0x4a0]
mov ecx, 0x1212b5c0
mov byte [esp + 0x490], 1
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], esi
call fcn.11d89370
mov ebp, dword [esp + 0x4c4]
mov ebx, dword [esp + 0x4bc]
mov esi, dword [esp + 0x498]
test eax, eax
je 0x11e4f534
push 0
push 0
push 0
mov ecx, 0x1212b5c0
call fcn.11d60760
test eax, eax
je 0x11e4f534
push 2
lea ecx, [esp + 0x40]
call fcn.11e15fa0
mov eax, dword [esp + 0x4a0]
mov byte [esp + 0x490], 2
test eax, eax
je 0x11e4f135
push eax
call fcn.11e4e9c0
add esp, 4
test eax, eax
jne 0x11e4f135
mov ecx, dword [esp + 0x4a0]
push ecx
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov eax, dword [0x12133f80]
mov byte [esp + 0x490], 3
test eax, eax
je 0x11e4f065
mov edx, dword [esp + 0x4a4]
lea ecx, [esp + 0x10]
push edx
call fcn.11e7e980
mov edx, dword [esp + 0x4c0]
mov eax, dword [eax]
mov ecx, dword [0x12126854]
push ebp
push edx
mov edx, dword [esp + 0x4b0]
push ebx
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x4b0]
push edx
push eax
push ecx
push str.__s__OnCreateWindowExA..._dwExStyle_0x_x__lpClassName__s__lpWindowName__s__style_0x_x__hWndParent_0x_x__hMenu_0x_x__hInstance_0x_x_
push str.SafeWindow
push 1
mov byte [esp + 0x4bc], 4
call fcn.11ca5810
add esp, 0x2c
lea ecx, [esp + 0x10]
mov byte [esp + 0x490], 3
call fcn.11e7f280
lea ecx, [edi + 4]
push 1
push ecx
lea ecx, [esp + 0x68]
mov dword [esp + 0x18], 0
call fcn.11e8c590
mov ecx, dword [edi + 0x10]
xor eax, eax
cmp ecx, eax
mov byte [esp + 0x490], 5
mov dword [esp + 0x24], eax
jle 0x11e4f0fb
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1c]
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x30]
push edx
lea edx, [ecx + eax + 0xc]
push edx
call fcn.11e67d22
add esp, 8
test eax, eax
mov eax, dword [esp + 0x24]
je 0x11e4f0d2
mov edx, dword [esp + 0x30]
mov ecx, dword [edi + 0x10]
inc eax
add edx, 0x82c
cmp eax, ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], edx
jl 0x11e4f095
jmp 0x11e4f0fb
mov ecx, eax
shl ecx, 6
add ecx, eax
lea edx, [eax + ecx*4]
mov ecx, dword [edi + 0xc]
lea eax, [eax + edx*2]
lea edx, [ecx + eax*4 + 0x41c]
lea ecx, [esp + 0x18]
push edx
call fcn.11e7a240
mov dword [esp + 0x10], 1
lea ecx, [esp + 0x60]
mov byte [esp + 0x490], 3
call fcn.11e8c5f0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x11e4f124
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], 1
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x490], 2
call fcn.11e7f280
lea ecx, [esp + 0x3c]
mov byte [esp + 0x490], 1
call fcn.11e15fd0
mov edi, dword [esp + 0x4a4]
push 0x12119948
lea ecx, [esp + 0x38]
call fcn.11e797a0
push 2
lea ecx, [esp + 0x40]
mov byte [esp + 0x494], 6
call fcn.11e15fa0
mov eax, edi
mov byte [esp + 0x490], 7
test eax, eax
je 0x11e4f209
push eax
lea ecx, [esp + 0x14]
call fcn.11e7e980
mov eax, dword [eax]
mov ecx, 0x1212ab38
push eax
mov byte [esp + 0x494], 8
call fcn.11e586f0
test eax, eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x490], 7
sete byte [esp + 0x2f]
call fcn.11e7f280
mov al, byte [esp + 0x2f]
test al, al
jne 0x11e4f209
mov ecx, edi
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.11e4e9d0
add esp, 8
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x494], 9
call fcn.11e7a080
lea ecx, [esp + 0x14]
mov byte [esp + 0x490], 7
call fcn.11e79f00
mov edi, dword [esp + 0x34]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x490], 6
call fcn.11e15fd0
jmp 0x11e4f226
lea ecx, [esp + 0x3c]
mov byte [esp + 0x490], 6
call fcn.11e15fd0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x11e4f523
lea ecx, [esp + 0x48]
call fcn.11e16060
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x1c], ecx
xor ecx, ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x18]
lea ecx, [esp + 0x14]
push edx
push ecx
push eax
mov dword [esp + 0x40], eax
call fcn.11e15b00
mov eax, dword [esp + 0x24]
add esp, 0x10
test eax, eax
je 0x11e4f2fa
mov edx, dword [esi + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x24]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x4c8]
mov dword [esi + 0x24], edx
mov edx, dword [esp + 0x4c0]
push ecx
mov ecx, dword [esp + 0x4bc]
push ebp
push edx
mov edx, dword [esp + 0x4c0]
push ebx
push ecx
mov ecx, dword [esp + 0x4c4]
push edx
mov edx, dword [esp + 0x4c4]
push ecx
mov ecx, dword [esp + 0x4c4]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x4c0]
push edi
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x28]
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], edx
jmp 0x11e4f37a
mov eax, dword [esi + 0x18]
test eax, eax
mov dword [esp + 0x28], eax
je 0x11e4f37a
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x4c8]
mov ecx, dword [esp + 0x4c0]
mov edx, dword [esp + 0x4b8]
push eax
mov eax, dword [esp + 0x4b8]
push ebp
push ecx
mov ecx, dword [esp + 0x4bc]
push ebx
push edx
mov edx, dword [esp + 0x4c0]
push eax
mov eax, dword [esp + 0x4c0]
push ecx
mov ecx, dword [esp + 0x3c]
push edx
mov edx, dword [esp + 0x4bc]
push eax
push edi
push ecx
push edx
call dword [esp + 0x58]
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11e4f37a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov ecx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x14], eax
call fcn.11e16040
push 2
lea ecx, [esp + 0x58]
call fcn.11e15fa0
mov dx, word [0x12119948]
mov byte [esp + 0x490], 0xa
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x282]
mov word [esp + 0x280], dx
rep stosd dword es:[edi], eax
test ebp, ebp
stosw word es:[edi], ax
je 0x11e4f3fa
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e4f506
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x280]
push 0x103
rep stosd dword es:[edi], eax
lea eax, [esp + 0x284]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e4f506
mov ecx, dword [esp + 0x34]
push ecx
lea ecx, [esp + 0x20]
call fcn.11e7e980
mov edi, eax
mov edx, dword [esp + 0x4a4]
lea ecx, [esp + 0x30]
push edx
mov byte [esp + 0x494], 0xb
call fcn.11e7e980
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x24]
push eax
mov byte [esp + 0x494], 0xc
call fcn.11e7e980
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x4a0]
mov byte [esp + 0x490], 0xd
push ecx
lea ecx, [esp + 0x24]
call fcn.11e7e980
mov edx, dword [esp + 0x28]
mov eax, dword [eax]
push edx
mov edx, dword [esp + 0x18]
push edx
lea edx, [esp + 0x288]
push edx
mov edx, dword [esp + 0x4a8]
push ebp
push ebx
push edx
mov edx, dword [esp + 0x4c0]
push edx
mov edx, dword [edi]
push edx
mov edx, dword [esp + 0x58]
mov ecx, dword [0x12126854]
mov byte [esp + 0x4b0], 0xe
mov edx, dword [edx]
push edx
mov edx, dword [esp + 0x34]
mov edx, dword [edx]
push edx
push eax
push ecx
push str.__s__OnCreateWindowExA_Dispatch.___s___s____s___s__style_0x_x__dwExStyle_0x_x__hWndParent_0x_x__hInstance_0x_x___s__ret_0x_x__Err__d_
push str.SafeWindow
push 4
call fcn.11ca5810
add esp, 0x3c
lea ecx, [esp + 0x20]
mov byte [esp + 0x490], 0xd
call fcn.11e7f280
lea ecx, [esp + 0x24]
mov byte [esp + 0x490], 0xc
call fcn.11e7f280
lea ecx, [esp + 0x30]
mov byte [esp + 0x490], 0xb
call fcn.11e7f280
lea ecx, [esp + 0x1c]
mov byte [esp + 0x490], 0xa
call fcn.11e7f280
mov edi, dword [esp + 0x14]
test edi, edi
jne 0x11e4f9b3
lea ecx, [esp + 0x54]
mov byte [esp + 0x490], 6
call fcn.11e15fd0
lea ecx, [esp + 0x34]
mov byte [esp + 0x490], 1
call fcn.11e79f00
lea ecx, [esp + 0x18]
mov byte [esp + 0x490], 0
call fcn.11e79f00
lea ecx, [esp + 0x48]
call fcn.11e16060
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x20]
mov dword [esp + 0x24], edx
push ecx
lea edx, [esp + 0x18]
lea ecx, [esp + 0x14]
push edx
xor edi, edi
push ecx
push eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edi
call fcn.11e15b00
mov eax, dword [esp + 0x24]
add esp, 0x10
cmp eax, edi
je 0x11e4f61b
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x4c8]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x4c0]
push edx
mov edx, dword [esp + 0x4bc]
push ebp
push ecx
mov ecx, dword [esp + 0x4c0]
push ebx
push edx
mov edx, dword [esp + 0x4c4]
push ecx
mov ecx, dword [esp + 0x4c4]
push edx
mov edx, dword [esp + 0x4c4]
mov edi, dword [esi + 0xc]
push ecx
mov ecx, dword [esp + 0x4c4]
push edx
mov edx, dword [esp + 0x4c4]
push ecx
mov ecx, dword [esp + 0x4c4]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x1c], edx
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ecx
mov dword [esi + 0xc], edi
jmp 0x11e4f69f
mov edi, dword [esi + 0x18]
test edi, edi
je 0x11e4f69f
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [esp + 0x4c8]
mov eax, dword [esp + 0x4c0]
mov ecx, dword [esp + 0x4b8]
push edx
mov edx, dword [esp + 0x4b8]
push ebp
push eax
mov eax, dword [esp + 0x4bc]
push ebx
push ecx
mov ecx, dword [esp + 0x4c0]
push edx
mov edx, dword [esp + 0x4c0]
push eax
mov eax, dword [esp + 0x4c0]
push ecx
mov ecx, dword [esp + 0x4c0]
push edx
mov edx, dword [esp + 0x4c0]
push eax
push ecx
push edx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11e4f69f
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x14]
lea ecx, [esp + 0x48]
mov dword [esp + 0x1c], eax
call fcn.11e16040
push 2
lea ecx, [esp + 0x70]
call fcn.11e15fa0
mov eax, dword [esp + 0x4a0]
mov byte [esp + 0x490], 0x12
test eax, eax
je 0x11e4f985
mov cx, word [0x12119948]
xor eax, eax
mov word [esp + 0x280], cx
mov ecx, 0x81
lea edi, [esp + 0x282]
rep stosd dword es:[edi], eax
test ebp, ebp
stosw word es:[edi], ax
je 0x11e4f723
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e4f723
lea edx, [esp + 0x280]
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x280]
push 0x103
push edx
rep stosd dword es:[edi], eax
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [esp + 0x4a0]
push esi
call fcn.11e4e9c0
add esp, 4
test eax, eax
je 0x11e4f7af
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x7a]
mov word [esp + 0x78], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x78]
push 0x103
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalGetAtomNameW]
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e4f818
mov ecx, dword [esp + 0x1c]
mov eax, dword [0x12126854]
lea edx, [esp + 0x280]
push ecx
mov ecx, dword [esp + 0x4a0]
push edx
mov edx, dword [esp + 0x4b0]
push ebp
push ebx
push ecx
lea ecx, [esp + 0x8c]
push edx
push ecx
push esi
push eax
push str.__s__OnCreateWindowExA_Orgin.__Atom:0x_x___s__style_0x_x__dwExStyle_0x_x__hWndParent_0x_x__hInstance_0x_x___s__ret_0x_x_
push str.SafeWindow
push 1
call fcn.11ca5810
add esp, 0x30
jmp 0x11e4f818
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e4f818
push esi
lea ecx, [esp + 0x2c]
call fcn.11e7e980
mov edx, dword [esp + 0x1c]
mov eax, dword [eax]
push edx
mov ecx, dword [0x12126854]
lea edx, [esp + 0x284]
mov byte [esp + 0x494], 0x13
push edx
mov edx, dword [esp + 0x4a4]
push ebp
push ebx
push edx
mov edx, dword [esp + 0x4bc]
push edx
push eax
push ecx
push str.__s__OnCreateWindowExA_Orgin.___s__style_0x_x__dwExStyle_0x_x__hWndParent_0x_x__hInstance_0x_x___s__ret_0x_x_
push str.SafeWindow
push 1
call fcn.11ca5810
add esp, 0x2c
lea ecx, [esp + 0x28]
mov byte [esp + 0x490], 0x12
call fcn.11e7f280
push 0x12119948
lea ecx, [esp + 0x1c]
call fcn.11e7eae0
push esi
mov byte [esp + 0x494], 0x14
call fcn.11e4e9c0
add esp, 4
test eax, eax
je 0x11e4f8c6
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x7a]
mov word [esp + 0x78], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x11e4f86e
lea ecx, [esp + 0x78]
push 0x103
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
lea edx, [esp + 0x78]
push edx
call fcn.11e67d05
add esp, 4
test eax, eax
jbe 0x11e4f890
lea eax, [esp + 0x78]
push 0x103
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalGetAtomNameW]
lea ecx, [esp + 0x78]
push ecx
call fcn.11e67d05
add esp, 4
test eax, eax
jbe 0x11e4f8b1
lea edx, [esp + 0x78]
lea ecx, [esp + 0x18]
push edx
call fcn.11e7f500
jmp 0x11e4f8d0
push esi
lea eax, [esp + 0x1c]
push str.atom:0x_x
push eax
call fcn.11e82200
add esp, 0xc
jmp 0x11e4f8d0
push esi
lea ecx, [esp + 0x1c]
call fcn.11e7f5e0
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, 0x1212ab38
call fcn.11e58650
test eax, eax
jne 0x11e4f974
mov edx, dword [esp + 0x18]
mov ecx, 0x1212ab38
push edx
call fcn.11e58760
test eax, eax
jne 0x11e4f974
push 0x120eee10
lea ecx, [esp + 0x14]
call fcn.11e7eae0
mov bl, 0x15
push str.Create
lea ecx, [esp + 0x18]
mov byte [esp + 0x494], bl
call fcn.11e7eae0
mov eax, dword [0x12133f80]
mov byte [esp + 0x490], 0x16
test eax, eax
je 0x11e4f953
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
push eax
push ecx
push edx
push str.__s____s____s_
push str.SOWatch
push 1
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x14]
mov byte [esp + 0x490], bl
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x490], 0x14
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0x490], 0x12
call fcn.11e7f280
lea ecx, [esp + 0x6c]
mov byte [esp + 0x490], 0
call fcn.11e15fd0
lea ecx, [esp + 0x48]
mov dword [esp + 0x490], 0xffffffff
call fcn.11e15fd0
mov eax, dword [esp + 0x1c]
jmp 0x11e4fa9d
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x20]
push eax
call fcn.11e7e980
push 0x120eee10
lea ecx, [esp + 0x14]
mov byte [esp + 0x494], 0xf
call fcn.11e7eae0
mov bl, 0x10
push str.Create
lea ecx, [esp + 0x18]
mov byte [esp + 0x494], bl
call fcn.11e7eae0
mov eax, dword [0x12133f80]
mov byte [esp + 0x490], 0x11
test eax, eax
je 0x11e4fa22
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
push ecx
push edx
push eax
push str.__s____s____s_
push str.SOWatch
push 4
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x14]
mov byte [esp + 0x490], bl
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x490], 0xf
call fcn.11e7f280
lea ecx, [esp + 0x20]
mov byte [esp + 0x490], 0xa
call fcn.11e7f280
lea ecx, [esp + 0x54]
mov byte [esp + 0x490], 6
call fcn.11e15fd0
lea ecx, [esp + 0x34]
mov byte [esp + 0x490], 1
call fcn.11e79f00
lea ecx, [esp + 0x18]
mov byte [esp + 0x490], 0
call fcn.11e79f00
lea ecx, [esp + 0x48]
mov dword [esp + 0x490], 0xffffffff
call fcn.11e15fd0
mov eax, edi
mov ecx, dword [esp + 0x488]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x484
ret 0x34