Function at 0x7024eea0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x70311243
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x7034b250]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x30]
mov dword [esp + 0x14], edi
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x24], 0
mov eax, dword [ecx + 0x20]
mov eax, dword [eax]
mov ebx, dword [ecx + 0xc]
mov ebp, eax
mov esi, dword [ecx + 0x20]
mov eax, dword [ecx + 0xc]
test ebx, ebx
je 0x7024eef3
cmp ebx, eax
je 0x7024eef8
call fcn.702e2961
cmp ebp, esi
je 0x7024f0e1
test ebx, ebx
jne 0x7024ef31
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024ef15
call fcn.702e2961
mov eax, dword [ebp + 0x40]
mov esi, dword [edi + 0x1c]
cmp eax, esi
jne 0x7024f0b4
add edi, 8
cmp dword [edi + 0x18], 0x10
jb 0x7024ef35
mov edi, dword [edi + 4]
jmp 0x7024ef38
mov eax, dword [ebx]
jmp 0x7024ef0b
add edi, 4
test ebx, ebx
jne 0x7024ef58
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024ef4d
call fcn.702e2961
cmp dword [ebp + 0x44], 0x10
jb 0x7024ef5c
mov eax, dword [ebp + 0x30]
jmp 0x7024ef5f
mov eax, dword [ebx]
jmp 0x7024ef43
lea eax, [ebp + 0x30]
cmp esi, 4
jb 0x7024ef7c
mov ecx, dword [eax]
cmp ecx, dword [edi]
jne 0x7024f0b0
sub esi, 4
add edi, 4
add eax, 4
cmp esi, 4
jae 0x7024ef64
test esi, esi
je 0x7024efac
mov dl, byte [edi]
cmp dl, byte [eax]
jne 0x7024f0b0
cmp esi, 1
jbe 0x7024efac
mov cl, byte [edi + 1]
cmp cl, byte [eax + 1]
jne 0x7024f0b0
cmp esi, 2
jbe 0x7024efac
mov dl, byte [edi + 2]
cmp dl, byte [eax + 2]
jne 0x7024f0b0
test ebx, ebx
jne 0x7024f059
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024efc5
call fcn.702e2961
cmp dword [ebp + 0x14], 0
je 0x7024f0b0
test ebx, ebx
jne 0x7024f060
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024efe8
call fcn.702e2961
cmp dword [ebp + 0x18], 0
je 0x7024f0b0
test ebx, ebx
jne 0x7024f067
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024f007
call fcn.702e2961
mov eax, dword [ebp + 0x18]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x7024f0b0
push 0x1c
call fcn.702e1f8d
mov esi, eax
add esp, 4
mov dword [esp + 0x18], esi
mov byte [esp + 0x24], 1
test esi, esi
je 0x7024f06b
mov eax, dword [esp + 0x30]
push 0xffffffffffffffff
push 0
add eax, 8
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], 0
push eax
mov ecx, esi
mov byte [esi + 4], 0
call fcn.7020c5f0
jmp 0x7024f06d
mov eax, dword [ebx]
jmp 0x7024efbb
mov eax, dword [ebx]
jmp 0x7024efde
mov eax, dword [ebx]
jmp 0x7024effd
xor esi, esi
mov byte [esp + 0x24], 0
test ebx, ebx
jne 0x7024f0d5
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024f087
call fcn.702e2961
test ebx, ebx
jne 0x7024f0d9
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024f09c
call fcn.702e2961
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x18]
push esi
push ecx
push 0x4cd
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edi, dword [esp + 0x30]
test ebx, ebx
jne 0x7024f0dd
call fcn.702e2961
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x7024f0c9
call fcn.702e2961
mov ebp, dword [ebp]
mov ecx, dword [esp + 0x2c]
jmp 0x7024eee5
mov eax, dword [ebx]
jmp 0x7024f07d
mov eax, dword [ebx]
jmp 0x7024f092
mov eax, dword [ebx]
jmp 0x7024f0bf
test edi, edi
je 0x7024f112
cmp dword [edi + 0x20], 0x10
jb 0x7024f0f7
mov eax, dword [edi + 0xc]
push eax
call fcn.702e1c24
add esp, 4
mov dword [edi + 0x20], 0xf
mov dword [edi + 0x1c], 0
push edi
mov byte [edi + 0xc], 0
call fcn.702e1c24
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 8