Function at 0x10017634
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
mov eax, dword [ebp + 0x1c]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
xor esi, esi
sub eax, esi
push edi
mov edi, ecx
mov dword [esp + 0xc], ebx
je 0x10017664
dec eax
jne 0x10017659
cmp dword [ebp + 0xc], 7
je 0x10017692
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
mov eax, dword [ebp + 0xc]
cmp eax, 0x1a
jne 0x10017699
call fcn.1003cc20
test eax, eax
je 0x1001767e
call fcn.1003cc4c
test eax, eax
jne 0x10017692
push 0x1a0000
push esi
push 0x41f
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebx], esi
xor eax, eax
inc eax
jmp 0x1001765b
cmp eax, 2
jne 0x100176a8
push edi
call fcn.10019565
mov dword [ebx], eax
jmp 0x10017694
cmp eax, 5
jne 0x100176b4
call fcn.1001a05a
jmp 0x100176a4
cmp eax, 0x4e
jne 0x100176c3
mov edx, dword [ebp + 0x14]
call fcn.1001b0a8
jmp 0x100176a4
cmp eax, 0x113
je 0x10017692
cmp eax, 0x111
jne 0x100176db
push dword [ebp + 0x10]
call fcn.1001a675
jmp 0x100176a4
mov ecx, 0x84
cmp eax, ecx
jne 0x100176f4
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push ecx
mov eax, edi
call fcn.10007381
jmp 0x100176a4
cmp eax, 0x20
jne 0x10017709
push dword [ebp + 0x14]
mov esi, edi
push dword [ebp + 0x10]
push eax
call fcn.1001a09c
jmp 0x100176a4
mov ecx, 0x201
cmp eax, ecx
jne 0x10017722
push dword [ebp + 0x14]
mov esi, edi
push dword [ebp + 0x10]
push ecx
call fcn.1001a105
jmp 0x100176a4
mov esi, 0x203
cmp eax, esi
jne 0x1001773b
mov eax, edi
call fcn.1001a2a9
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push esi
jmp 0x100176eb
mov esi, 0x202
cmp eax, esi
je 0x1001772b
cmp eax, 0x1f
jne 0x1001775a
mov eax, edi
call fcn.1001a2a9
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x1f
jmp 0x100176eb
cmp eax, 6
jne 0x10017773
mov eax, edi
call fcn.1001a2a9
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 6
jmp 0x100176eb
mov esi, 0x100
cmp eax, esi
je 0x1001772b
mov ecx, 0x200
cmp eax, ecx
jne 0x10017798
push dword [ebp + 0x14]
mov esi, edi
push dword [ebp + 0x10]
push ecx
call fcn.1001a1ca
jmp 0x100176a4
cmp eax, 0xbd1
jne 0x100177ad
mov ecx, dword [ebp + 0x14]
push edi
call fcn.10024875
jmp 0x100176a4
cmp eax, 0xbd2
jne 0x100177c3
mov eax, dword [ebp + 0x14]
mov ecx, edi
call fcn.1002116b
jmp 0x100176a4
cmp eax, 0xbd3
jne 0x100177da
push dword [edi + 4]
call fcn.1004a658
and dword [ebx], 0
jmp 0x10017694
cmp eax, 0xbd4
jne 0x100177ef
mov eax, dword [ebp + 0x10]
push edi
call fcn.10025352
jmp 0x100176a4
cmp eax, 0x4a
jne 0x10017815
mov edx, dword [ebp + 0x14]
mov eax, dword [edx]
mov ecx, dword [edx + 8]
sub eax, 3
cmp eax, 7
ja 0x10017aeb
push edx
mov edx, edi
call fcn.10019713
jmp 0x100176a4
lea ecx, [eax - 0xc000]
cmp ecx, 0x3fff
ja 0x10017847
cmp eax, dword [0x10136528]
jne 0x100177d2
mov eax, dword [ebp + 0x10]
dec eax
je 0x10017840
dec eax
jne 0x100177d2
mov ecx, dword [ebp + 0x14]
mov edx, edi
call fcn.10021071
jmp 0x100177d2
call fcn.100196d8
jmp 0x100177d2
cmp eax, 0xbda
jne 0x10017860
push dword [ebp + 0x14]
mov eax, edi
push dword [ebp + 0x10]
call fcn.100197df
jmp 0x100177d2
cmp eax, 0xbdb
jne 0x1001786b
xor ecx, ecx
jmp 0x10017837
cmp eax, 0xbdc
jne 0x100178a0
push 0xffffffffffffffff
push dword [ebp + 0x14]
call fcn.100a3a7c
test eax, eax
je 0x100177d2
mov ebx, dword [ebp + 0x10]
mov edi, dword [edi + 0x1b8]
push 0
push dword [ebp + 0x14]
call fcn.10013ad4
mov ebx, dword [esp + 0xc]
jmp 0x100177d2
cmp eax, 0xbdd
jne 0x100178d6
push 0xffffffffffffffff
push dword [ebp + 0x14]
call fcn.100a3a7c
test eax, eax
mov eax, dword [ebp + 0x14]
jne 0x100178bd
mov eax, 0x10102458
push eax
mov eax, dword [ebp + 0x10]
push 0x10
mov ebx, edi
call fcn.1001a3d4
mov eax, dword [esp + 0xc]
and dword [eax], 0
jmp 0x10017694
cmp eax, 0xbde
jne 0x100178ec
push dword [ebp + 0x10]
mov esi, edi
call fcn.10027315
jmp 0x100176a4
cmp eax, 0xbdf
jne 0x1001790a
xor esi, esi
push esi
push esi
push 0xbe0
push dword [edi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x10017692
cmp eax, 0xbe0
jne 0x1001791c
push edi
call fcn.1002157b
jmp 0x100176a4
cmp eax, 0xbe2
jne 0x1001794f
mov edi, dword [edi + 0x248]
mov ecx, dword [ebp + 0x14]
xor eax, eax
test edi, edi
setne al
push eax
mov eax, dword [ebp + 0x10]
shr eax, 0x10
push 1
push eax
movzx eax, word [ebp + 0x10]
push eax
call fcn.10023ad0
add esp, 0x10
jmp 0x100176a4
cmp eax, 0xbe3
jne 0x10017968
push dword [ebp + 0x14]
mov ecx, edi
push dword [ebp + 0x10]
call fcn.10021cf1
jmp 0x100176a4
cmp eax, 0xbe4
jne 0x1001798b
cmp dword [ebp + 0x10], 0
jbe 0x100177d2
push dword [ebp + 0x10]
push dword [edi + 4]
call fcn.1004b3cc
pop ecx
pop ecx
jmp 0x100177d2
cmp eax, 0xbe5
jne 0x100179a2
lea ecx, [edi + 0x300]
call fcn.1003a4f4
jmp 0x100177d2
cmp eax, 0xbf0
jne 0x100179b6
mov edx, dword [ebp + 0x10]
call fcn.1001c218
jmp 0x100176a4
cmp eax, 0xbe9
jne 0x100179d0
push dword [ebp + 0x14]
mov esi, dword [edi + 0x1b8]
call fcn.10016376
jmp 0x100177d2
cmp eax, 0xbf1
jne 0x100179e7
push dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
call fcn.10027b78
jmp 0x100176a4
cmp eax, 0xbf2
jne 0x10017a0e
cmp dword [ebp + 0x14], 0
jne 0x100179fc
xor eax, eax
inc eax
jmp 0x100176a4
push dword [ebp + 0x14]
mov eax, edi
push dword [ebp + 0x10]
call fcn.10027c74
jmp 0x100176a4
cmp eax, 0xbf3
jne 0x10017a2b
cmp dword [ebp + 0x14], 0
je 0x100179f4
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.10027d3f
jmp 0x100176a4
cmp eax, 0xbf4
jne 0x10017a4f
xor eax, eax
cmp dword [ebp + 0x14], eax
je 0x100176a4
push dword [ebp + 0x14]
mov eax, edi
push dword [ebp + 0x10]
call fcn.10027dcf
jmp 0x100176a4
cmp eax, 0xbf5
jne 0x10017a66
push dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
call fcn.10027e22
jmp 0x100176a4
cmp eax, 0xbf6
jne 0x10017a85
push dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
mov ebx, edi
call fcn.10027f01
mov ecx, dword [esp + 0xc]
mov dword [ecx], eax
jmp 0x10017694
cmp eax, 0xbf7
jne 0x10017aac
cmp dword [ebp + 0x14], 0
je 0x100179f4
push dword [ebp + 0x10]
mov ebx, dword [ebp + 0x14]
mov eax, edi
call fcn.10027fe9
mov ebx, dword [esp + 0xc]
jmp 0x100176a4
cmp eax, 0xbfb
jne 0x10017af2
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x100179f4
sub esp, 0x1c
add eax, 0x18
mov esi, esp
mov dword [esp + 0x28], esp
push eax
call fcn.1000e554
add edi, 0x3f8
call fcn.10041743
cmp dword [ebp + 0x10], 0
je 0x10017aeb
mov edi, dword [ebp + 0x14]
push 1
call fcn.10028031
xor eax, eax
jmp 0x100176a4
cmp eax, 0xbf8
jne 0x10017b14
cmp dword [ebp + 0x14], 0
je 0x100179f4
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push edi
call fcn.1002805e
jmp 0x100176a4
cmp eax, 0xbf9
jne 0x10017b41
cmp dword [ebp + 0x10], 0
jne 0x10017b35
push dword [edi + 4]
push 0
push 0x100280e7
call fcn.100c272a
add esp, 0xc
jmp 0x10017aeb
mov ecx, edi
call fcn.1002810a
jmp 0x100176a4
cmp eax, 0xbfa
jne 0x10017b58
mov ecx, dword [edi + 0x1b8]
call fcn.1000fd94
jmp 0x100177d2
cmp eax, 0xf
jne 0x10017b75
xor eax, eax
cmp dword [edi + 0x160], eax
jne 0x10017b6e
mov esi, edi
call fcn.10019464
mov dword [ebx], eax
jmp 0x10017659
cmp eax, 0xbfd
jne 0x10017bbb
cmp dword [0x1012f0bc], 7
jge 0x100177d2
xor eax, eax
cmp dword [ebp + 0x10], eax
je 0x10017b99
mov dword [edi + 0x2c], 3
jmp 0x10017b9c
mov dword [edi + 0x2c], eax
cmp dword [edi + 0x2c], eax
mov eax, str.visible
jne 0x10017bab
mov eax, str.invisible
push eax
push esi
xor eax, eax
mov ebx, edi
call fcn.1001a3d4
jmp 0x10017897
cmp eax, 0xbfe
jne 0x10017bf7
mov eax, edi
call fcn.100256c6
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x100177d2
push dword [edi + 4]
xor eax, eax
cmp dword [0x1012f0bc], 6
push 1
setle al
push eax
call fcn.10050583
add esp, 0xc
jmp 0x100177d2
cmp eax, 0x31a
jne 0x10017659
push dword [edi + 4]
call fcn.100a6700
mov edi, eax
xor eax, eax
inc eax
call fcn.1002ced1
jmp 0x100177d2