Function at 0x10001a22
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, str.DragonNest.exe
push esi
push 0x100908d0
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x10001c83
call fcn.10004efa
test eax, eax
je 0x10001a55
push 1
pop eax
jmp 0x10001c85
push ebx
push edi
call dword [sym.imp.MSVCRT.dll__getpid]
push eax
push section..text
call dword [sym.imp.USER32.dll_EnumWindows]
push str.gwCore.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
test edi, edi
ja 0x10001a84
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10001a69
call fcn.10004237
push 0x100018d6
call fcn.10003732
pop ecx
call fcn.1000223d
mov ebx, eax
mov ecx, ebx
call fcn.100021bd
lea eax, [edi + 0x17b9e7]
push 0x10001424
push eax
mov ecx, ebx
call fcn.10001d0c
lea eax, [edi + 0x17b9f5]
push 0x10001479
push eax
mov ecx, ebx
call fcn.10001d0c
lea eax, [edi + 0x17bfb9]
push 0x100014bb
push eax
mov ecx, ebx
call fcn.10001d0c
add edi, 0x17afbb
push 0x1000152d
push edi
mov ecx, ebx
call fcn.10001d0c
push 1
and byte [ebp - 8], 0
and byte [ebp - 7], 0
pop edi
push edi
push 0xfffffffffffffffb
lea eax, [ebp - 0xc]
push 0xb
push eax
push esi
mov ecx, ebx
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0x8b
mov byte [ebp - 0xa], 0x80
mov byte [ebp - 9], 0xb
mov byte [ebp - 6], 0x8b
mov byte [ebp - 5], 0x11
mov byte [ebp - 4], 0x8b
mov byte [ebp - 3], 0x42
mov byte [ebp - 2], 0x20
call fcn.10001fed
test eax, eax
jbe 0x10001b37
mov dword [0x10009a88], eax
and byte [ebp - 6], 0
and byte [ebp - 5], 0
and byte [ebp - 4], 0
push edi
push 0xfffffffffffffffb
lea eax, [ebp - 0xc]
push 9
push eax
push esi
mov ecx, ebx
mov byte [ebp - 0xc], 0xd8
mov byte [ebp - 0xb], 3
mov byte [ebp - 0xa], 0x80
mov byte [ebp - 9], 0xbf
mov byte [ebp - 8], 0xe2
mov byte [ebp - 7], 2
call fcn.10001fed
test eax, eax
jbe 0x10001b75
mov dword [0x10009a8c], eax
and byte [ebp - 9], 0
and byte [ebp - 8], 0
and byte [ebp - 7], 0
push edi
push 0
lea eax, [ebp - 0xc]
push 0xb
push eax
push esi
mov ecx, ebx
mov byte [ebp - 0xc], 0x89
mov byte [ebp - 0xb], 0x82
mov byte [ebp - 0xa], 0x80
mov byte [ebp - 6], 0x83
mov byte [ebp - 5], 0x7c
mov byte [ebp - 4], 0x24
mov byte [ebp - 3], 0x44
mov byte [ebp - 2], 0x10
call fcn.10001fed
test eax, eax
jbe 0x10001bbb
mov dword [0x10009a90], eax
push edi
push 0
lea eax, [ebp - 0xc]
push 0xa
push eax
push esi
mov ecx, ebx
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0x48
mov byte [ebp - 0xa], 0x6c
mov byte [ebp - 9], 0x8b
mov byte [ebp - 8], 0x70
mov byte [ebp - 7], 0x68
mov byte [ebp - 6], 0x8b
mov byte [ebp - 5], 0x44
mov byte [ebp - 4], 0x24
mov byte [ebp - 3], 0x10
call fcn.10001fed
test eax, eax
jbe 0x10001bfd
mov dword [0x10009a94], eax
and byte [ebp - 6], 0
or byte [ebp - 3], 0xff
push edi
push 0x11
lea eax, [ebp - 0xc]
push 0xb
push eax
push esi
mov ecx, ebx
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0x42
mov byte [ebp - 0xa], 0x6c
mov byte [ebp - 9], 0x6a
mov byte [ebp - 8], 2
mov byte [ebp - 7], 0x6a
mov byte [ebp - 5], 0x8b
mov byte [ebp - 4], 0xcd
mov byte [ebp - 2], 0xd0
call fcn.10001fed
test eax, eax
jbe 0x10001c4d
mov dword [0x10009a98], eax
add eax, 0x190
mov dword [0x10009a9c], eax
call fcn.1000115d
push str.SDOA4ClientCom.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
ja 0x10001c6b
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10001c52
add eax, 0x20d3b
push 0x100014d4
push eax
mov ecx, ebx
call fcn.10001d0c
mov eax, edi
pop edi
pop ebx
jmp 0x10001c85
xor eax, eax
pop esi
leave
ret