Function at 0x10001951
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push esi
mov esi, str.elementclient.exe
push esi
push 0x10090830
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x10001cb3
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.MSVCRT.dll__getpid]
push eax
push 0x10001788
call dword [sym.imp.USER32.dll_EnumWindows]
cmp dword [0x10090a3c], 0
je 0x10001cb3
call fcn.10004dee
test eax, eax
je 0x100019ae
push 1
pop eax
jmp 0x10001cb5
push ebx
push edi
call fcn.100021da
mov edi, eax
call fcn.1000412b
push 0x10001802
call fcn.1000363c
pop ecx
mov ecx, edi
call fcn.1000215a
push 1
lea eax, [ebp - 0x10]
pop ebx
mov ecx, edi
push ebx
push 8
push 8
push eax
push esi
mov byte [ebp - 0x10], 0x8d
mov byte [ebp - 0xf], 0x4c
mov byte [ebp - 0xe], 0x24
mov byte [ebp - 0xd], 0x64
mov byte [ebp - 0xc], 0x88
mov byte [ebp - 0xb], 0x54
mov byte [ebp - 0xa], 0x24
mov byte [ebp - 9], 0x61
call fcn.10001f8a
test eax, eax
jbe 0x10001a13
push 0x1000137a
push eax
mov ecx, edi
call fcn.10001d07
push ebx
push 0x26
lea eax, [ebp - 0x10]
push 6
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x42
mov byte [ebp - 0xf], 0x83
mov byte [ebp - 0xe], 0xc1
mov byte [ebp - 0xd], 0x41
mov byte [ebp - 0xc], 0x52
mov byte [ebp - 0xb], 0x51
call fcn.10001f8a
test eax, eax
mov dword [ebp - 4], eax
jbe 0x10001a76
push 0x100013d2
push eax
mov ecx, edi
call fcn.10001e0d
mov eax, dword [ebp - 4]
push 0x10001442
add eax, 0x38
mov ecx, edi
push eax
call fcn.10001e0d
mov eax, dword [ebp - 4]
push 0x100014a6
add eax, 0x70
mov ecx, edi
push eax
call fcn.10001e0d
and byte [ebp - 0xa], 0
push ebx
push 0xffffffffffffffd0
lea eax, [ebp - 0x10]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8d
mov byte [ebp - 0xf], 0xc
mov byte [ebp - 0xe], 0x89
mov byte [ebp - 0xd], 0x8d
mov byte [ebp - 0xc], 0x4c
mov byte [ebp - 0xb], 0x8d
call fcn.10001f8a
test eax, eax
mov dword [ebp - 4], eax
jbe 0x10001add
push 0x100016be
push eax
mov ecx, edi
call fcn.10001d07
mov eax, dword [ebp - 4]
push 0x100016e2
add eax, 0x1b
mov ecx, edi
push eax
call fcn.10001d07
mov eax, dword [ebp - 4]
push 0x10001706
add eax, 0x39
mov ecx, edi
push eax
call fcn.10001e0d
push ebx
push 8
lea eax, [ebp - 0x10]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8d
mov byte [ebp - 0xf], 0x4c
mov byte [ebp - 0xe], 0x24
mov byte [ebp - 0xd], 0x3c
mov byte [ebp - 0xc], 0x6a
mov byte [ebp - 0xb], bl
mov byte [ebp - 0xa], 0x51
mov byte [ebp - 9], 0x50
call fcn.10001f8a
test eax, eax
jbe 0x10001b1e
push 0x1000150a
push eax
mov ecx, edi
call fcn.10001d07
push ebx
push 8
lea eax, [ebp - 0x10]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8d
mov byte [ebp - 0xf], 0x54
mov byte [ebp - 0xe], 0x24
mov byte [ebp - 0xd], 0x38
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0xce
mov byte [ebp - 0xa], 0x52
mov byte [ebp - 9], 0x57
call fcn.10001f8a
test eax, eax
jbe 0x10001b60
push 0x10001576
push eax
mov ecx, edi
call fcn.10001d07
and byte [ebp - 0x13], 0
push ebx
push 0xfffffffffffffffa
lea eax, [ebp - 0x14]
push 0xa
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x14], 0x6a
mov byte [ebp - 0x12], 0x50
mov byte [ebp - 0x11], 0x8d
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xf], 0x24
mov byte [ebp - 0xe], 0x18
mov byte [ebp - 0xd], 0x50
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0xce
call fcn.10001f8a
test eax, eax
jbe 0x10001baa
push 0x10001614
push eax
mov ecx, edi
call fcn.10001e0d
and byte [ebp - 9], 0
and byte [ebp - 8], 0
push ebx
push 3
lea eax, [ebp - 0x10]
push 9
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x10], 0x8b
mov byte [ebp - 0xf], 0x41
mov byte [ebp - 0xe], 4
mov byte [ebp - 0xd], 0x8b
mov byte [ebp - 0xc], 0x80
mov byte [ebp - 0xb], 0x44
mov byte [ebp - 0xa], 5
call fcn.10001f8a
test eax, eax
jbe 0x10001bf0
push 0x100015ca
push eax
mov ecx, edi
call fcn.10001e0d
and byte [ebp - 8], 0
push ebx
push 0x15
lea eax, [ebp - 0x14]
push 0xd
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x14], 0x83
mov byte [ebp - 0x13], 0xc4
mov byte [ebp - 0x12], 8
mov byte [ebp - 0x11], 0x8b
mov byte [ebp - 0x10], 0x38
mov byte [ebp - 0xf], 0x8b
mov byte [ebp - 0xe], 0xce
mov byte [ebp - 0xd], 0xc7
mov byte [ebp - 0xc], 0x44
mov byte [ebp - 0xb], 0x24
mov byte [ebp - 0xa], 0x18
mov byte [ebp - 9], bl
call fcn.10001f8a
test eax, eax
mov dword [ebp - 4], eax
jbe 0x10001c5b
push 0x1000165e
push eax
mov ecx, edi
call fcn.10001d07
mov eax, dword [ebp - 4]
push 0x1000165e
add eax, 0xffffffb2
mov ecx, edi
push eax
call fcn.10001d07
or byte [ebp - 0x10], 0xff
and byte [ebp - 0xb], 0
push ebx
push 0xc
lea eax, [ebp - 0x14]
push 0xc
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x14], 0x8b
mov byte [ebp - 0x13], 0x10
mov byte [ebp - 0x12], 0x8b
mov byte [ebp - 0x11], 0xc8
mov byte [ebp - 0xf], 0x52
mov byte [ebp - 0xe], 0x40
mov byte [ebp - 0xd], 0x50
mov byte [ebp - 0xc], 0x6a
mov byte [ebp - 0xa], 0x8b
mov byte [ebp - 9], 0xce
call fcn.10001f8a
test eax, eax
jbe 0x10001cad
push 0x10001689
push eax
mov ecx, edi
call fcn.10001d07
mov eax, ebx
pop edi
pop ebx
jmp 0x10001cb5
xor eax, eax
pop esi
leave
ret