Function at 0x100017c0
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000e883
mov eax, dword fs:[0]
push eax
sub esp, 0x7a0
mov eax, dword [0x10016008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov ebx, ecx
mov dword [ebp - 0x1c], ebx
and esi, 0xfff0
mov dword [ebp - 0x18], ebx
cmp esi, 0x2550
ja 0x10001ad2
je 0x10001ab3
cmp esi, 0x2510
ja 0x10001a9c
je 0x10001ab3
sub esi, 0x2410
je 0x10001a69
sub esi, 0x10
je 0x10001843
sub esi, 0x10
je 0x10001bef
xor eax, eax
jmp 0x10001bf4
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10002390
mov eax, dword [eax + 8]
cmp byte [eax + 0xd], 0
jne 0x1000187c
cmp ebx, dword [eax + 0x10]
jb 0x1000187c
lea eax, [ebp - 0x18]
push eax
call fcn.10001d10
push 5
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x10001bef
push 0x3b8
lea eax, [ebp - 0x3ec]
push 0
push eax
call fcn.100040f0
mov eax, dword [0x10017384]
add esp, 0xc
mov dword [ebp - 0x3ec], 0x3b8
mov dword [ebp - 0x3e8], ebx
test eax, eax
je 0x100018b9
inc eax
mov dword [0x10017384], eax
mov dword [ebp - 0x3e4], eax
jmp 0x100018cd
mov dword [0x10017384], 1
mov dword [ebp - 0x3e4], 1
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x7f
push ebx
mov dword [ebp - 0x3e0], 7
mov dword [ebp - 0x3dc], 0x610
call esi
test eax, eax
jne 0x10001914
mov edi, dword [sym.imp.USER32.dll_GetClassLongW]
push 0xffffffffffffffde
push ebx
call edi
test eax, eax
jne 0x10001914
push eax
push 1
push 0x7f
push ebx
call esi
test eax, eax
jne 0x10001914
push 0xfffffffffffffff2
push ebx
call edi
mov dword [ebp - 0x3d8], eax
lea eax, [ebp - 0x3d4]
push 0x80
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [ebp - 0xcc], 3
mov dword [ebp - 4], 0
lea esi, [ebp - 0x3ec]
mov ecx, 0xee
mov dword [ebp - 0x7ac], ebx
lea edi, [ebp - 0x7a8]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x7ac]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.10002390
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x28], xmm0
cmp byte [eax + 0xd], 0
jne 0x10001982
cmp ebx, dword [eax + 0x10]
jae 0x100019f2
cmp dword [0x1001738c], 0x436c82
je 0x10001c10
mov ebx, dword [0x10017388]
mov dword [ebp - 0x30], 0x10017388
mov byte [ebp - 4], 2
push 0x3cc
mov dword [ebp - 0x2c], 0
call fcn.10002a51
mov edx, dword [ebp - 0x7ac]
lea esi, [ebp - 0x7a8]
add esp, 4
mov ecx, 0xee
mov dword [eax + 0x10], edx
lea edi, [eax + 0x14]
rep movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0x24]
mov dword [eax], ebx
mov ecx, 0x10017388
push dword [ebp - 0x28]
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov word [eax + 0xc], 0
call fcn.10002440
mov ebx, dword [ebp - 0x1c]
mov esi, dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
lea eax, [ebp - 0x7a8]
push eax
push 2
call esi
lea eax, [ebp - 0x3ec]
mov dword [ebp - 4], 0xffffffff
push eax
push 2
call esi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10002390
mov eax, dword [ebp - 0x20]
cmp byte [eax + 0xd], 0
jne 0x10001c15
cmp ebx, dword [eax + 0x10]
jb 0x10001c15
add eax, 0x14
push eax
push 0
call esi
test eax, eax
je 0x10001a5b
cmp dword [0x10017384], 0
je 0x10001a5b
push 0
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x10001bef
lea eax, [ebp - 0x18]
push eax
call fcn.10001d10
jmp 0x10001bef
push 0xffffffffffffffec
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 3
push 0
push 0
push 0
push 0
test al, 8
jne 0x10001a8e
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x10001bef
push 0xfffffffffffffffe
push ebx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x10001bef
mov eax, esi
sub eax, 0x2520
je 0x10001ab3
sub eax, 0x10
je 0x10001ab3
sub eax, 0x10
jne 0x10001b63
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
add esi, 0xffffdaf0
cmp esi, 0x50
ja case.0x10001acb.9489
movzx ecx, byte [esi + 0x10001c3c]
jmp dword [ecx*4 + 0x10001c20]
cmp esi, 0x2630
ja 0x10001b50
je 0x10001b6a
mov eax, esi
sub eax, 0x2560
je 0x10001ab3
sub eax, 0xb0
jmp 0x10001b5c
push 0x100
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x10001bef
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x10001bef
push 0x8000
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x10001bef
push 0x4000
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x10001bef
push 0x40
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x10001bef
push 0x20
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x10001bef
mov eax, esi
sub eax, 0x2640
je 0x10001b6a
sub eax, 0x10
je 0x10001b6a
sub eax, 0x10
je 0x10001b6a
xor eax, eax
jmp 0x10001bf4
add esi, 0xffffd9f0
cmp esi, 0x50
ja case.0x10001b7c.9744
movzx eax, byte [esi + 0x10001cac]
jmp dword [eax*4 + 0x10001c90]
mov byte [ebp - 0x18], 0xe5
jmp 0x10001b9f
mov byte [ebp - 0x18], 0xcc
jmp 0x10001b9f
mov byte [ebp - 0x18], 0xb2
jmp 0x10001b9f
mov byte [ebp - 0x18], 0x99
jmp 0x10001b9f
mov byte [ebp - 0x18], 0x7f
push 0xffffffffffffffec
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 2
push dword [ebp - 0x18]
push 0
push ebx
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
jmp 0x10001bef
push 0xffffffffffffffec
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xfff7ffff
push eax
push 0xffffffffffffffec
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x485
push 0
push 0
push ebx
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10002a12
mov esp, ebp
pop ebp
ret
call fcn.10001170
push str.invalid_map_K__T__key
call fcn.1000381d
nop
invalid