Function at 0x10017607
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1005718f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x80
push ebx
mov dword [esp + 0x18], 0x615f
cmp dword [esp + 0x18], 0x6263
push esi
push edi
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], ecx
jle 0x100176be
xor esi, esi
mov dword [esp + 0x1c], esi
xor edi, edi
mov ecx, edi
mov dword [esp + 0x24], esi
xor ebx, ebx
shl esi, cl
mov ecx, ebx
mov eax, esi
shl eax, cl
lea ecx, [esp + 0x40]
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10017673
mov eax, dword [eax]
push eax
call fcn.1003e6f6
pop ecx
push 0
push 1
lea ecx, [esp + 0x48]
call fcn.10002003
inc ebx
cmp ebx, 0x1508
jl 0x10017657
mov esi, dword [esp + 0x1c]
inc edi
cmp edi, 0x2934
jl 0x1001764d
inc esi
mov dword [esp + 0x1c], esi
cmp esi, 0x47d4
jl 0x1001764b
push 0
push 0x1b40
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
cmp dword [esp + 0x20], 0x6122
jge 0x100176d3
push str.hmwdjte_dduh_plh_vxgpihn_kkrvk_bzjqm_dtxfjc_sot_slrncxqrd_fnlcoxu_map_sak_rxmekcq_mdmz
call fcn.1003e6f6
pop ecx
or dword [esp + 0x94], 0xffffffff
cmp byte [ebp + 0x14], 0
je 0x100177ad
mov dword [esp + 0x20], 0x11a0
cmp dword [esp + 0x20], 0x1267
jle 0x1001773b
xor esi, esi
xor edi, edi
mov eax, edi
lea ecx, [esp + 0x58]
and eax, esi
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10017715
mov eax, dword [eax]
push eax
call fcn.1003e6f6
pop ecx
push 0
push 1
lea ecx, [esp + 0x60]
call fcn.10002003
inc edi
cmp edi, 0x2999
jl 0x100176fb
inc esi
cmp esi, 0x4f5
jl 0x100176f9
cmp dword [esp + 0x20], 0xe57
jge 0x10017750
push str.zkuzkieh_nknhrur_njgfe_usz_nunfnj_kcfzcao_bktdnrzjz_apdky_lthza
call fcn.1003e6f6
pop ecx
mov ebx, dword [ebp + 8]
xor edx, edx
mov edi, dword [ebp + 0x20]
mov esi, dword [ebp + 0x1c]
mov eax, dword [ebx]
mov eax, dword [edi]
mov eax, dword [ebx]
mov eax, dword [edi]
imul ecx, eax, 6
mov eax, dword [edi]
cmp ecx, eax
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 0xc]
setge dl
mov dword [eax], edx
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ecx]
xor ecx, ecx
mov eax, dword [edi]
mov eax, dword [ebx]
mov eax, dword [esi]
mov eax, dword [ebx]
mov eax, dword [ebx]
mov eax, dword [edi]
cmp eax, 2
mov eax, dword [ebx]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esi]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x2c]
setne cl
mov dword [eax], ecx
jmp 0x10017999
mov byte [esp + 0x13], 0
cmp byte [esp + 0x13], 0
je 0x10017999
mov dword [esp + 0x24], 0x45cc
cmp dword [esp + 0x24], 0x47d8
jle 0x10017975
mov dword [esp + 0x2c], 0x14e8
cmp dword [esp + 0x2c], 0xee7
jge 0x100178c7
lea eax, [esp + 0x18]
push eax
push 0x1005ea74
call fcn.1003e952
pop ecx
jmp 0x100178ba
dec eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x14]
push eax
push 0x1005ea74
call fcn.1003e952
pop ecx
pop ecx
push dword [esp + 0x14]
lea ecx, [esp + 0x38]
call fcn.100153b8
mov dword [esp + 0x94], 4
xor ebx, ebx
mov esi, dword [esp + 0x34]
cmp dword [esp + 0x14], ebx
jle 0x10017851
mov edi, esi
push edi
push 0x1005ea74
call fcn.1003e952
inc ebx
add edi, 4
pop ecx
pop ecx
cmp ebx, dword [esp + 0x14]
jl 0x1001783a
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x30], 0
sub ecx, esi
push dword [esp + 0x30]
sar ecx, 2
push esi
push dword [esp + 0x40]
call fcn.1001c4b6
xor edi, edi
add esp, 0xc
cmp dword [esp + 0x14], edi
jle 0x1001788e
push dword [esi + edi*4]
push str._ld
call fcn.1003e6f6
inc edi
pop ecx
pop ecx
cmp edi, dword [esp + 0x14]
jl 0x10017878
push 0x1005e929
call fcn.1003f2a6
or dword [esp + 0x98], 0xffffffff
pop ecx
test esi, esi
je 0x100178bb
push esi
call fcn.1003e867
and dword [esp + 0x38], 0
and dword [esp + 0x3c], 0
and dword [esp + 0x40], 0
pop ecx
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x100177fe
xor esi, esi
mov dword [esp + 0x1c], esi
xor eax, eax
mov dword [esp + 0x20], 0x3254
mov dword [esp + 0x14], eax
mov esi, dword [esp + 0x14]
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x30], esi
and esi, edi
mov eax, esi
lea ecx, [esp + 0x70]
or eax, ebx
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10017903
mov eax, dword [eax]
push eax
call fcn.1003e6f6
pop ecx
push 0
push 1
lea ecx, [esp + 0x78]
call fcn.10002003
inc ebx
cmp ebx, 0x34c
jl 0x100178e9
mov esi, dword [esp + 0x14]
inc edi
cmp edi, 0x545f
jl 0x100178e1
mov esi, dword [esp + 0x1c]
add dword [esp + 0x14], esi
dec dword [esp + 0x20]
jne 0x100178db
inc esi
mov dword [esp + 0x1c], esi
cmp esi, 0x1e70
jl 0x100178cd
push 0x8a5
push 0xc76
push 0x617
push 0xde4
push 0x10bb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
push 0
push 0x127f
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
cmp dword [esp + 0x24], 0x4467
jge 0x10017999
push str.snfod_ytycb_dbwx_knnmjez_oywmseaov_hyaw_gdopknlt_rtvy_azhhmqm
call fcn.1003e6f6
pop ecx
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret