Function at 0x11131044
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1fc
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push 0x1e8
lea eax, [ebp - 0x1ec]
push 0
push eax
mov esi, ecx
call fcn.11162be0
mov ecx, dword [0x111ee160]
add esp, 0xc
mov dword [ebp - 0x1ec], 0x1e8
mov dword [ebp - 0x1e8], ecx
mov dword [ebp - 0x1e4], 2
mov bl, 1
cmp edi, 7
ja case.0x11130f78.6
jmp dword [edi*4 + 0x111312ec]
xor bl, bl
cmp dword [0x111f1b74], 0
jne case.0x11130f78.6
push 0
push 1
push 5
mov dword [ebp - 0x1dc], 0x5fd
mov dword [ebp - 0x1e0], 7
call fcn.11145c70
add esp, 0xc
test eax, eax
je 0x11130fbb
push 0x47d
jmp 0x11130fc0
push 0x455
call fcn.110963b0
push eax
call dword [sym.imp.uSEr32.dll_LoadIconA]
push 0x80
push 0x453
mov dword [ebp - 0x1d8], eax
call fcn.11146710
add esp, 4
push eax
lea edx, [ebp - 0x1d4]
push edx
call fcn.11164ed0
add esp, 0xc
lea eax, [ebp - 0x1ec]
push eax
push 0
call dword [sym.imp.ShELL32.dll_Shell_NotifyIconA]
push 0
mov ecx, esi
mov dword [0x111f1b74], esi
call fcn.1103dc70
push eax
call fcn.11142e60
add esp, 8
mov dword [0x111f1b78], eax
test bl, bl
je case.0x11130f78.6
push 0
push 1
call fcn.11130de0
add esp, 8
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
mov eax, dword [0x111f1b78]
test eax, eax
jne 0x11131052
mov eax, 0x111a2c08
mov ecx, dword [0x111f1b74]
push eax
push ecx
push 0x111bb21c
call fcn.11147060
add esp, 0xc
push 0x11197c80
push 0
push 0x1f0001
call dword [sym.imp.KeRneL32.DLl_OpenMutexA]
mov esi, eax
test esi, esi
je 0x111310a3
push 0
push 0x11197c80
call dword [sym.imp.uSEr32.dll_FindWindowA]
push esi
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
call fcn.11130dc0
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov eax, dword [edx + 0x90]
push 0
push 0xffffffffffffffff
call eax
push 0x111bb20c
push 0
push 1
lea ecx, [ebp - 0x1f8]
push ecx
mov dword [ebp - 0x1f8], 0xc
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 1
call dword [sym.imp.KeRneL32.DLl_CreateEventA]
mov ecx, dword [0x111ee308]
mov dword [0x111f1b7c], eax
mov edx, dword [ecx]
mov eax, dword [edx + 0x90]
push 0
push 0
call eax
lea ecx, [ebp - 0x1fc]
push ecx
push 0
push 0
push 0x11130c80
push 0
push 0
call fcn.11166745
add esp, 0x18
push eax
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
xor ebx, ebx
cmp esi, ebx
je 0x1113114e
cmp dword [0x111f1b74], esi
jne case.0x11130f78.6
call fcn.11130dc0
cmp dword [0x111f1b74], ebx
je 0x1113116d
cmp esi, ebx
je 0x1113116d
push 0x454
push ebx
call fcn.11130de0
add esp, 8
mov eax, dword [0x111f1b7c]
cmp eax, ebx
je 0x1113117d
push eax
call dword [sym.imp.KeRneL32.DLl_SetEvent]
mov dword [0x111f1b7c], ebx
cmp edi, 2
je case.0x11130f78.6
lea edx, [ebp - 0x1ec]
push edx
push 2
call dword [sym.imp.ShELL32.dll_Shell_NotifyIconA]
mov eax, dword [0x111f1b78]
push eax
mov dword [0x111f1b74], ebx
call fcn.11162777
add esp, 4
pop esi
mov dword [0x111f1b78], ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
cmp dword [0x111f1b74], 0
je 0x111311dd
push 0x457
push 0
call fcn.11130de0
add esp, 8
mov eax, dword [0x111f1b7c]
test eax, eax
je 0x111311ed
push eax
call dword [sym.imp.KeRneL32.DLl_SetEvent]
push 0
push 1
push 5
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1e0], 7
call fcn.11145c70
add esp, 0xc
test eax, eax
je 0x1113121a
push 0x47e
jmp 0x1113121f
push 0x458
call fcn.110963b0
push eax
call dword [sym.imp.uSEr32.dll_LoadIconA]
push 0x80
push 0x457
mov dword [ebp - 0x1d8], eax
call fcn.11146710
add esp, 4
push eax
lea ecx, [ebp - 0x1d4]
push ecx
call fcn.11164ed0
add esp, 0xc
lea edx, [ebp - 0x1ec]
push edx
jmp 0x111312d2
push 0
push 1
call fcn.11130de0
push 0
push 1
push 5
mov dword [ebp - 0x1dc], 0x5fd
mov dword [ebp - 0x1e0], 7
call fcn.11145c70
add esp, 0x14
test eax, eax
je 0x11131292
push 0x47d
jmp 0x11131297
push 0x455
call fcn.110963b0
push eax
call dword [sym.imp.uSEr32.dll_LoadIconA]
push 0x80
push 0x453
mov dword [ebp - 0x1d8], eax
call fcn.11146710
add esp, 4
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.11164ed0
add esp, 0xc
lea ecx, [ebp - 0x1ec]
push ecx
push 1
call dword [sym.imp.ShELL32.dll_Shell_NotifyIconA]
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.11162bb7
mov esp, ebp
pop ebp
ret