Function at 0x10001660
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push esi
mov esi, str.JX3Client.exe
push esi
push 0x10090884
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x100018d1
push 0x100901f0
push 1
push 0x100902e0
push 0x10090988
call fcn.10004606
push 0x10090c60
call fcn.10004ccd
add esp, 0x14
call fcn.10004be8
test eax, eax
je 0x100016b6
push 1
pop eax
jmp 0x100018d3
push edi
call dword [sym.imp.MSVCRT.dll__getpid]
push eax
push 0x10001472
call dword [sym.imp.USER32.dll_EnumWindows]
call fcn.10001e06
mov dword [ebp - 8], eax
call fcn.10003ec1
push 0x100014d4
call fcn.100032fe
pop ecx
mov edi, str.KGUI.dll
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
jne 0x100016fb
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100016e6
mov ecx, dword [ebp - 8]
push ebx
push 1
push 0xfffffffffffffffa
lea eax, [ebp - 0x14]
push 8
push eax
push esi
mov byte [ebp - 0x14], 0x8b
mov byte [ebp - 0x13], 0xf1
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0x11], 0x20
mov byte [ebp - 0x10], 0x50
mov byte [ebp - 0xf], 0x8d
mov byte [ebp - 0xe], 0x4e
mov byte [ebp - 0xd], 0x2c
call fcn.10001ba8
xor ebx, ebx
cmp eax, ebx
jbe 0x10001743
mov ecx, dword [ebp - 8]
push 0x10001155
push eax
call fcn.10001a2b
mov ecx, dword [ebp - 8]
push 1
push 0xd
lea eax, [ebp - 0x14]
push 0xb
push eax
push edi
mov byte [ebp - 0x14], 0x8d
mov byte [ebp - 0x13], 0x84
mov byte [ebp - 0x12], 0x24
mov byte [ebp - 0x11], 0xac
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], bl
mov byte [ebp - 0xd], 0x8b
mov byte [ebp - 0xc], 0x54
mov byte [ebp - 0xb], 0x24
mov byte [ebp - 0xa], 0x18
call fcn.10001ba8
cmp eax, ebx
jbe 0x10001791
mov ecx, dword [ebp - 8]
push 0x100011be
push eax
call fcn.10001a2b
push 1
push 0xa
lea eax, [ebp - 0x14]
push 0xa
push eax
push edi
mov edi, dword [ebp - 8]
mov byte [ebp - 0x14], 0x8d
mov ecx, edi
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0x12], 0x24
mov byte [ebp - 0x11], 0x38
mov byte [ebp - 0x10], 0x68
mov byte [ebp - 0xf], 4
mov byte [ebp - 0xe], 1
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 0x50
call fcn.10001ba8
cmp eax, ebx
jbe 0x100017dd
push 0x10001126
push eax
mov ecx, edi
call fcn.10001a2b
push 1
push 0x28
lea eax, [ebp - 8]
push 6
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x81
mov byte [ebp - 7], 0xf9
mov byte [ebp - 6], 0x6c
mov byte [ebp - 5], 7
mov byte [ebp - 4], bl
mov byte [ebp - 3], bl
call fcn.10001ba8
cmp eax, ebx
jbe 0x10001816
push 0x100012ef
push eax
mov ecx, edi
call fcn.10001a2b
push 3
push 0xd
lea eax, [ebp - 0x14]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0x14], 0x83
mov byte [ebp - 0x13], 0xc4
mov byte [ebp - 0x12], 0x14
mov byte [ebp - 0x11], 0x33
mov byte [ebp - 0x10], 0xc0
mov byte [ebp - 0xf], 0x5e
mov byte [ebp - 0xe], 0xc3
mov byte [ebp - 0xd], 0x50
call fcn.10001ba8
cmp eax, ebx
jbe 0x10001859
push 0x10001343
push eax
mov ecx, edi
call fcn.10001925
push 1
push 0x31
lea eax, [ebp - 8]
push 5
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x68
mov byte [ebp - 7], 0x77
mov byte [ebp - 6], 7
mov byte [ebp - 5], bl
mov byte [ebp - 4], bl
call fcn.10001ba8
cmp eax, ebx
jbe 0x1000188e
push 0x10001254
push eax
mov ecx, edi
call fcn.10001925
push 1
push 7
lea eax, [ebp - 8]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x8d
mov byte [ebp - 7], 0x8e
mov byte [ebp - 6], 0xac
mov byte [ebp - 5], bl
mov byte [ebp - 4], bl
mov byte [ebp - 3], bl
mov byte [ebp - 2], 0x51
call fcn.10001ba8
cmp eax, ebx
pop ebx
jbe 0x100018cb
push 0x10001416
push eax
mov ecx, edi
call fcn.10001a2b
push 1
pop eax
pop edi
jmp 0x100018d3
xor eax, eax
pop esi
leave
ret